io.github.zyli5313/dochost-mcp

Est-ce que io.github.zyli5313/dochost-mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.zyli5313/dochost-mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• delete_page≈ 164 tokens

  Permanently delete one of your pages by slug. The link stops working immediately and the slug is freed. Deleting an already-deleted page is a safe no-op.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis

  Exemple d'appel

  {"name": "delete_page", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "slug": "texte", "alreadyDeleted": true}}

• get_account≈ 441 tokens

  Get your plan, page-quota usage, entitlement flags (size cap, custom slug, password, branding, subdomain, custom domain), and the primary host new links publish on. Call when you need plan limits, domain details or paid-option availability; a basic publish can use defaults without this extra call. The primary host is chosen in the dashboard (manageDomainsUrl), not through this API.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_account", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "plan": "free", "password": true, "analytics": "none", "pageQuota": 1, "pagesUsed": 1, "sizeCapMb": 1, "customSlug": true, "noBranding": true, "primaryHost": "texte", "customDomain": true, "pagesRemaining": 1}}

• get_page≈ 352 tokens

  Get one of your pages by slug: title, format, status, view/like counts, expiry, whether it is password-protected, and its current visibility / indexing / branding state. Never returns the page body or the password — call get_page_content when you need the source itself, and set_page_options to change any of the settings it reports.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis

  Exemple d'appel

  {"name": "get_page", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "url": "texte", "slug": "texte", "likes": 1, "title": "texte", "views": 1, "format": "markdown", "public": true, "status": "texte", "createdAt": "texte", "expiresAt": "texte", "permanent": true}}

• get_page_content≈ 434 tokens

  Read back the CURRENT Markdown or HTML of one of your pages. Call this before update_page whenever you did not write the live content yourself in this same conversation — update_page replaces the body wholesale, so editing from memory silently discards anything you cannot see, including edits the user made in the browser. Returns `version` and `sha256`; pass them to update_page as ifVersion / ifSha so the write is refused instead of overwriting a change you did not read. Expired pages are readable, and updating one republishes it on the same URL.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis

  Exemple d'appel

  {"name": "get_page_content", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "body": "texte", "note": "texte", "slug": "texte", "bytes": 1, "title": "texte", "format": "markdown", "sha256": "texte", "status": "texte", "version": 1, "editable": true}}

• list_my_pages≈ 286 tokens

  List the pages you have published to dochost, newest first. Paginated; returns compact records (no page bodies).

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
  • offset · integer · optionnel

  Exemple d'appel

  {"name": "list_my_pages", "arguments": {"limit": 1, "offset": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"limit": 1, "pages": [], "total": 1, "offset": 1, "hasMore": true}}

• publish≈ 862 tokens

  Publish HTML or Markdown as a hosted web page and return a shareable URL. Use when the user asks to share an HTML quiz, calculator, report or Markdown document as a link. HTML JavaScript runs in a sandbox. Free links expire after seven days; paid link lifetime and options follow account entitlements. For revisions of an existing page, use update_page to keep the same link. Results report expiry and any ignored options; relay ignoredOptions/ignoredNote instead of claiming all requested settings were applied. New links use the account primary host; get_account reports it.

  Paramètres, retour & exemple (6)

  Paramètres

  • body · string · requis
    Complete HTML or Markdown source to publish, preserving scripts and styles. Pass the content itself, not a summary, file path, URL or surrounding Markdown code fence. Single-file HTML must inline assets or use publicly accessible asset URLs.
  • format · string · optionnel · markdown | html
    Use html for HTML source and markdown for Markdown. Omit only when you want automatic format detection.
  • public · boolean · optionnel
    Whether the page is discoverable on Explore (default true). False does not password-protect the link; readers with its URL can still access an unprotected page.
  • password · string · optionnel
    Requested reader password, subject to plan entitlement. Omit unless requested; check ignoredOptions/ignoredNote before claiming password protection.
  • customSlug · string · optionnel
    Requested custom URL slug, subject to plan entitlement and availability. Omit unless the user requests one.
  • noBranding · boolean · optionnel
    Omit to use the plan default: paid plans hide branding, free plans keep it. Set false if the user wants to keep the dochost mark.

  Exemple d'appel

  {"name": "publish", "arguments": {"body": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "note": "texte", "slug": "texte", "format": "markdown", "expiresAt": "texte", "permanent": true, "ignoredNote": "texte", "iterateHint": "texte", "ignoredOptions": [], "firstPublishWelcome": "texte"}}

• set_page_options≈ 482 tokens

  Change a published page's visibility, search-engine indexing or password WITHOUT republishing it — the URL, view count and content all stay the same. Use this instead of deleting and publishing again, which changes the link the user already shared. Send only the fields you want to change. Turning a paid capability off never needs an entitlement; turning one on is checked against the current plan. A password always forces the page private, so asking for both `public: true` and a password is refused rather than silently resolved. dochost branding is NOT settable here: it is resolved from the account's live plan at render time, so there is nothing per-page to flip — read `brandingHidden` from get_page for the rendered answer.

  Paramètres, retour & exemple (5)

  Paramètres

  • slug · string · requis
  • public · boolean · optionnel
    Discoverable on Explore. Cannot be true while a password is set.
  • password · string · optionnel
    Set or replace the page password (paid plans).
  • searchable · boolean · optionnel
    Opt in to search-engine indexing. Turning it on requires a permanent page.
  • removePassword · boolean · optionnel
    Clear the password. Always allowed, on any plan.

  Exemple d'appel

  {"name": "set_page_options", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "url": "texte", "slug": "texte", "public": true, "changed": true, "searchable": true, "hasPassword": true}}

• update_page≈ 424 tokens

  Replace the content of one of your pages in place. The URL, view/like counts, and expiry stay the same; only the body, format, and title change. Resending identical content is a no-op. Prefer this over publishing again whenever the user is revising something you already published for them — a second publish creates a second link and strands the one they already shared. This replaces the WHOLE body, so unless you wrote the live content yourself in this conversation, call get_page_content first and pass its version/sha256 back as ifVersion/ifSha — the write is then refused with the current version instead of overwriting an edit you never saw.

  Paramètres, retour & exemple (6)

  Paramètres

  • body · string · requis
  • slug · string · requis
  • ifSha · string · optionnel
    Write only if the live body still hashes to this (from get_page_content).
  • title · string · optionnel
  • format · string · optionnel · markdown | html
  • ifVersion · integer · optionnel
    Write only if the page is still at this version (from get_page_content). Omit and the write always wins.

  Exemple d'appel

  {"name": "update_page", "arguments": {"body": "texte", "slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "slug": "texte", "title": "texte", "format": "markdown", "version": 1}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://dochost.io/api/mcp