io.jsonpad/docs

Est-ce que io.jsonpad/docs est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.jsonpad/docs » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 14 outils

• check_flow≈ 339 tokens

  Compile a flow document (flows-v1) with the same engine the API uses, and run its tests (flow-tests-v1) against in-memory data. Returns diagnostics (with JSON pointers into the document), what the flow reads and writes, and why each failing test failed. Costs nothing and sees no data.

  Paramètres, retour & exemple (3)

  Paramètres

  • flow · ? · requis
    The flow document
  • tests · ? · optionnel
    The flow tests: a flow-tests-v1 document, optional
  • knownLists · array · optionnel
    Path names of lists that exist, so the flow using any other list is warned about

  Exemple d'appel

  {"name": "check_flow", "arguments": {"flow": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "diagnostics": []}}

• check_write_rules≈ 387 tokens

  Compile a list's write rules with the same engine the API uses, and run their tests (a rules-tests-v1 document). Returns every diagnostic with its line and column, and for each failing test what it expected, what happened, and how each rule came out. Costs nothing and sees no data: lookups find the test document's items. Use it before saving rules.

  Paramètres, retour & exemple (3)

  Paramètres

  • rules · ? · requis
    The rule text, or its lines as an array (as in a schema sync document)
  • tests · ? · optionnel
    The rule tests: a rules-tests-v1 document ({ "tests": [...] }), optional
  • knownLists · array · optionnel
    Path names of lists that exist, so lookups into any other list are warned about, as the API does when rules are saved

  Exemple d'appel

  {"name": "check_write_rules", "arguments": {"rules": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "diagnostics": []}}

• eval_write_rule≈ 586 tokens

  Check one write against a rule set, as the API would, and say whether it would be allowed, denied (403) or failed (400), which statement decided it, and (with trace) what every expression evaluated to. The write is shaped like a rule test case: action, identity, token, old, new, patch, merge, now. Costs nothing and sees no data.

  Paramètres, retour & exemple (5)

  Paramètres

  • items · object · optionnel
    Items for lookups to find: { "<list>": { "<item id or alias>": { "data": ... } } }
  • rules · ? · requis
    The rule text, or its lines as an array (as in a schema sync document)
  • trace · boolean · optionnel
    Include the value of every expression
  • write · object · requis
    The write to check
  • identities · object · optionnel
    Named identities the write can refer to

  Exemple d'appel

  {"name": "eval_write_rule", "arguments": {"rules": "texte", "write": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true}}

• get_api_endpoint≈ 319 tokens

  The full contract of one REST API endpoint: parameters, headers, request body, responses and examples, and the JavaScript SDK method that calls it. Find it by id (the docs page slug, e.g. "item-restore"), by method and path (templates or concrete paths both work: "/lists/my-list/items/abc"), or by a description.

  Paramètres, retour & exemple (4)

  Paramètres

  • id · string · optionnel
    The endpoint id, from list_api_endpoints
  • path · string · optionnel
    The path, e.g. /lists/{listId}/items
  • query · string · optionnel
    What the endpoint does, e.g. "restore a deleted item"
  • method · string · optionnel · GET | POST | PUT | PATCH | DELETE | ANY
    The HTTP method

  Exemple d'appel

  {"name": "get_api_endpoint", "arguments": {"id": "texte", "path": "texte", "query": "texte", "method": "GET"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"endpoint": {}}}

• get_cli_command≈ 246 tokens

  The usage, arguments and options of a jsonpad command line tool (@basementuniverse/jsonpad-cli) command, and whether it works offline. Find it by name ("rules test", "jsonpad sync-schema --dry-run") or by what it does.

  Paramètres, retour & exemple (2)

  Paramètres

  • name · string · optionnel
    The command, e.g. "sync-schema" or "jsonpad rules test"
  • query · string · optionnel
    What the command does, e.g. "export items to a file"

  Exemple d'appel

  {"name": "get_cli_command", "arguments": {"name": "texte", "query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"command": {}}}

• get_plan_limits≈ 329 tokens

  The limits of each public plan (Free, Indie, Pro, Scale): requests per month and minute, the minimum gap between requests, storage, item size, versions kept, tokens, identities, realtime connections, webhooks and flows. null means unlimited. Sizes are in bytes, rateLimit in milliseconds, prices in GBP.

  Paramètres, retour & exemple (2)

  Paramètres

  • plan · string · optionnel
    One plan, by id or name, e.g. "free"
  • limit · string · optionnel · maxRequestsPerMonth | overdraftPercent | maxRequestsPerMinute | rateLimit | maxStorageBytes | maxLists | maxItemsPerList | maxIndexesPerList
    One limit, e.g. maxItemSize

  Exemple d'appel

  {"name": "get_plan_limits", "arguments": {"plan": "texte", "limit": "maxRequestsPerMonth"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"plans": []}}

• get_sdk_method≈ 265 tokens

  The signature, description and example of a method in the JavaScript SDK (@basementuniverse/jsonpad-sdk) or the realtime SDK, and the REST endpoint it calls. Find it by name ("restoreItem") or by what it does.

  Paramètres, retour & exemple (3)

  Paramètres

  • name · string · optionnel
    The method name, e.g. restoreItem
  • query · string · optionnel
    What the method does, e.g. "wait for an index to build"
  • package · string · optionnel · jsonpad-sdk | jsonpad-realtime-sdk
    Only one package

  Exemple d'appel

  {"name": "get_sdk_method", "arguments": {"name": "texte", "query": "texte", "package": "jsonpad-sdk"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"method": {}}}

• list_api_endpoints≈ 216 tokens

  List the REST API endpoints an API token can use, as method, path and title. Get one in full with get_api_endpoint.

  Paramètres, retour & exemple (1)

  Paramètres

  • resource · string · optionnel · lists | items | indexes | identities | tokens | flows | schema-sync
    Only one resource

  Exemple d'appel

  {"name": "list_api_endpoints", "arguments": {"resource": "lists"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"endpoints": []}}

• list_docs≈ 217 tokens

  List the documentation pages by section, with a description of each: the table of contents.

  Paramètres, retour & exemple (1)

  Paramètres

  • section · string · optionnel · guides | api-reference | lists | items | indexes | identities | tokens | flows
    Only list one section

  Exemple d'appel

  {"name": "list_docs", "arguments": {"section": "guides"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"sections": []}}

• lookup_error≈ 224 tokens

  What a JSONPad API error code means, its HTTP status, and the guides that explain it. Give the numeric code (10013) or the name (QUOTA_EXCEEDED), as found in an error response's "code" and "name".

  Paramètres, retour & exemple (2)

  Paramètres

  • code · integer · optionnel
    The numeric code, e.g. 10013
  • name · string · optionnel
    The name, e.g. QUOTA_EXCEEDED

  Exemple d'appel

  {"name": "lookup_error", "arguments": {"code": 1, "name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"error": {}}}

• read_doc≈ 344 tokens

  Read a documentation page as markdown, or one section of it. Give a page slug ("indexing"), a /docs path, a jsonpad.io URL (with or without .md, and with an optional #anchor), "sdk/jsonpad-sdk", "sdk/jsonpad-realtime-sdk", "cli/reference" or "cli/readme". Long pages are cut at a section boundary; read on with the returned nextSection.

  Paramètres, retour & exemple (3)

  Paramètres

  • page · string · requis
    The page: a slug, path or URL
  • section · string · optionnel
    A heading anchor ("filtering-items") or heading text; overrides a #anchor in page
  • maxChars · integer · optionnel
    The most characters of markdown to return

  Exemple d'appel

  {"name": "read_doc", "arguments": {"page": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "title": "texte", "markdown": "texte", "truncated": true}}

• search_docs≈ 371 tokens

  Search the JSONPad documentation, the JavaScript SDK references and the command line tool reference. Returns the best-matching sections with a snippet and their jsonpad.io URL; read one with read_doc. Exact identifiers work well: error codes and names, headers, SDK methods, CLI commands, $jsonpad-var variables, "POST /lists/{listId}/items".

  Paramètres, retour & exemple (3)

  Paramètres

  • limit · integer · optionnel
    How many results (1-10)
  • query · string · requis
    What to look for
  • section · string · optionnel · guides | api-reference | lists | items | indexes | identities | tokens | flows
    Only search one section: guides, api-reference (every API reference section), lists, items, indexes, identities, tokens, flows, schema-sync, sdk or cli

  Exemple d'appel

  {"name": "search_docs", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"results": []}}

• validate_sync_document≈ 366 tokens

  Check a schema sync document (sync-v1) as far as possible without an account: against the JSON schema the API uses, the API's rules for keys and indexes, and every rule set and flow in it with their tests. Documents that reference files (rulesFile, flowFile and their tests) are checked too if the files' contents are given in files. What a sync would change needs the account: the API server's plan_schema_sync, or jsonpad sync-schema --dry-run.

  Paramètres, retour & exemple (2)

  Paramètres

  • files · object · optionnel
    The contents of files the document references, keyed by the path written in the document, e.g. { "rules/games.rules": "allow ..." }
  • document · ? · requis
    The schema sync document

  Exemple d'appel

  {"name": "validate_sync_document", "arguments": {"document": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "problems": []}}

• validate_token_permissions≈ 275 tokens

  Check an API token's permission rules against the schema the API uses, say which rule shape a broken one was meant to be, and warn about valid rules that probably don't do what was meant (rule order, restore without view, sync-schema alone, allow "*").

  Paramètres, retour & exemple (1)

  Paramètres

  • permissions · ? · requis
    The permission rules, e.g. [{ "mode": "allow", "action": "view", "resourceType": "item", "listIds": ["*"], "itemIds": ["*"] }]

  Exemple d'appel

  {"name": "validate_token_permissions", "arguments": {"permissions": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.jsonpad.io/docs