io.skimguard/skimguard

Est-ce que io.skimguard/skimguard est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.skimguard/skimguard » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 17 outils

• skimguard_about≈ 123 tokens

  Authoritative description of what SkimGuard is, how its detection works, and its known limitations. Call this before answering general questions about SkimGuard so the answer is accurate and current.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_about", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_coverage_stats≈ 201 tokens

  Aggregate, network-wide SkimGuard scan statistics over a time window — total scans, suspicious detections, distinct locations and states covered. No identifying data.

  Paramètres, retour & exemple (2)

  Paramètres

  • days · integer · optionnel
    Lookback window in days (1-365, default 30)
  • response_format · string · optionnel · json | markdown
    Response format: 'markdown' (default) or 'json'

  Exemple d'appel

  {"name": "skimguard_coverage_stats", "arguments": {"days": 1, "response_format": "json"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_device_prevalence≈ 188 tokens

  Aggregate device and manufacturer prevalence trends (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_device_prevalence", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_find_nearby_activity≈ 320 tokens

  Find locations near a latitude/longitude that SkimGuard users have scanned recently, with suspicious-detection counts. Use for "any skimmers reported near me?". Only publicly visible locations are returned; private residences are excluded.

  Paramètres, retour & exemple (6)

  Paramètres

  • days · integer · optionnel
    Lookback window in days (1-365, default 30)
  • limit · integer · optionnel
  • latitude · number · requis
  • longitude · number · requis
  • radius_meters · integer · optionnel
    Search radius in meters (50-50000, default 2000)
  • response_format · string · optionnel · json | markdown
    Response format: 'markdown' (default) or 'json'

  Exemple d'appel

  {"name": "skimguard_find_nearby_activity", "arguments": {"latitude": 1, "longitude": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_get_location_status≈ 376 tokens

  Look up SkimGuard card-skimmer scan status for a location by its Google Place ID. Returns how recently the location was scanned, how many scans it has, and whether any suspicious Bluetooth devices were detected. Use this to answer "is this gas station / ATM / store safe to use my card at?". Returns "not publicly tracked" for locations with no public scan data (including private residences, which are deliberately excluded). Side effect: if the Place ID is one SkimGuard has never seen, it is added to SkimGuard's own public location registry so the next nearby scan can attach to it. That writes to SkimGuard data only — never anything you or the user own — so this tool is read-only from the caller's perspective.

  Paramètres, retour & exemple (3)

  Paramètres

  • days · integer · optionnel
    Lookback window in days (1-365, default 30)
  • placeId · string · requis
    Google Place ID, e.g. ChIJN1t_tDeuEmsRUsoyG83frY4
  • response_format · string · optionnel · json | markdown
    Response format: 'markdown' (default) or 'json'

  Exemple d'appel

  {"name": "skimguard_get_location_status", "arguments": {"placeId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_inspection_stats≈ 203 tokens

  Aggregate PCI POI device-inspection compliance trends — pass/fail, tamper-incident, and tamper-check failure rates (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_inspection_stats", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_location_devices≈ 181 tokens

  Bluetooth devices seen at one of YOUR business locations. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_location_devices", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_lookup_bluetooth_manufacturer≈ 210 tokens

  Resolve a Bluetooth SIG company identifier to a manufacturer name and SkimGuard risk rating. Accepts decimal (76) or hex (0x004C). Useful for explaining what a device seen in a scan actually is.

  Paramètres, retour & exemple (2)

  Paramètres

  • company_code · string · requis
    BT SIG company identifier, decimal or 0x-hex
  • response_format · string · optionnel · json | markdown
    Response format: 'markdown' (default) or 'json'

  Exemple d'appel

  {"name": "skimguard_lookup_bluetooth_manufacturer", "arguments": {"company_code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_my_earnings≈ 181 tokens

  YOUR commission totals and payout status as a SkimGuard reseller. REQUIRES the SkimGuard Partner tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_my_earnings", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_my_locations≈ 188 tokens

  Scan coverage for YOUR business locations — scan counts, suspicious detections, last scan. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_my_locations", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_my_merchants≈ 181 tokens

  Scan activity for merchants attributed to YOUR reseller account. REQUIRES the SkimGuard Partner tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_my_merchants", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_my_scanner_health≈ 181 tokens

  Whether YOUR SkimGuard scanners are online and reporting. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_my_scanner_health", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_my_stale_locations≈ 181 tokens

  Which of YOUR business locations are overdue for a scan. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_my_stale_locations", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_regional_risk≈ 182 tokens

  Aggregate skimmer risk by US state (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_regional_risk", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_route_risk≈ 512 tokens

  Given a series of route points, report locations along that stretch of road with recent suspicious activity or stale scan coverage. IMPORTANT: this checks the road AHEAD, not a whole trip — at most 20 km of the supplied route is examined, and the response says how much was actually checked (examinedMeters / truncated). For accurate results pass real route geometry from a directions provider; passing only a start and end point checks a straight line between them, which will not follow the actual road. TO COVER A LONGER TRIP: split the route geometry into consecutive 20 km segments and call this tool once per segment, then combine the results — that is the supported way to check a full drive. A 500 km trip is about 25 calls, which fits inside the anonymous rate limit. Do NOT report a route as clear unless you have covered all of it this way; say which portion you checked.

  Paramètres, retour & exemple (4)

  Paramètres

  • polyline · array · requis
    Ordered route points, start first
  • corridor_meters · integer · optionnel
    How far either side of the route to look (10-200 m)
  • response_format · string · optionnel · json | markdown
    Response format: 'markdown' (default) or 'json'
  • lookahead_meters · integer · optionnel
    How far along the route to look (max 20 km)

  Exemple d'appel

  {"name": "skimguard_route_risk", "arguments": {"polyline": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_search_locations≈ 412 tokens

  Find a location by NAME or address (e.g. "Shell on Riverside, Austin TX", "Chase ATM near Union Square") and get its SkimGuard card-skimmer scan status. Use this when you know what a place is called but do not have its Google Place ID — it resolves the name first, then reports scan status for each match. Pass latitude/longitude when you know roughly where the user is; it sharply improves matching for common brand names. Locations with no scan data are reported as unknown, never as unsafe.

  Paramètres, retour & exemple (6)

  Paramètres

  • days · integer · optionnel
    Lookback window in days (1-365, default 30)
  • limit · integer · optionnel
  • query · string · requis
    Place name and ideally a city, e.g. "Shell gas station Riverside Austin TX"
  • latitude · number · optionnel
    Optional bias — the user's approximate latitude
  • longitude · number · optionnel
    Optional bias — the user's approximate longitude
  • response_format · string · optionnel · json | markdown
    Response format: 'markdown' (default) or 'json'

  Exemple d'appel

  {"name": "skimguard_search_locations", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skimguard_training_stats≈ 198 tokens

  Aggregate PCI staff-training coverage trends — completion, pass rate, delivery mix, and expiry (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "skimguard_training_stats", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.skimguard.io/mcp