my.sitey/subdomains

Est-ce que my.sitey/subdomains est sûr ?

Au dernier audit MCP Hub, le serveur MCP « my.sitey/subdomains » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 10 outils

• check_availability≈ 120 tokens

  Check if a specific subdomain name is available for registration under a given domain. Returns true if the name is free to claim.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    Root domain (e.g. 'sitey.my')
  • subdomain · string · requis
    Subdomain name (e.g. 'demo')

  Exemple d'appel

  {"name": "check_availability", "arguments": {"domain": "texte", "subdomain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_subdomain≈ 482 tokens

  Create a new DNS record for a subdomain. Supports A records (IP address), CNAME records (hostname) and REDIRECT records (an https:// URL — visitors to the name are sent there with a 301). Example: create demo.sitey.my pointing to 1.2.3.4. No account, API key or signup is needed. The target does not have to be serving yet: claim the name first and deploy to it second if that is your order. The result carries reachable:false when nothing answered, and the record is created either way. If you send no owner_token, the result carries a new one under 'owner_token' — save it, it is shown once and is the only way to change or delete this record later. Without an API key, a CNAME or REDIRECT may not point at a temporary tunnel (trycloudflare.com, ngrok and the like), names containing words such as login or wallet are refused with ACCOUNT_REQUIRED, and TXT records are not available.

  Paramètres, retour & exemple (5)

  Paramètres

  • type · string · requis · A | CNAME | REDIRECT
    Record type. REDIRECT answers every visit with a 301 to the URL in value.
  • value · string · requis
    Record value: an IPv4 address for A, a hostname for CNAME, an absolute https:// URL for REDIRECT (http:// is refused, and so is a URL under one of this service's own roots).
  • domain · string · requis
    Root domain (e.g. 'sitey.my')
  • subdomain · string · requis
    Subdomain name (e.g. 'demo')
  • owner_token · string · optionnel
    The owner token you were given when you created the record (starts with anon_). Omit it only if you have an API key, or if the record predates tokens and was claimed from this same IP address. Creating without one mints a new one and returns it once.

  Exemple d'appel

  {"name": "create_subdomain", "arguments": {"type": "A", "value": "texte", "domain": "texte", "subdomain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_txt_record≈ 380 tokens

  Create or update a TXT record for domain verification. Used for services like Vercel (_vercel) and Netlify that require DNS-based ownership proof. The record is placed at the root domain under the prefix you give (e.g. _vercel.sitey.my), alongside the other owners' values — that is the name Vercel reads for a subdomain of sitey.my. Needs an account: send an API key from the dashboard (Authorization: Bearer styo_…) on the MCP request. Without one this returns ACCOUNT_REQUIRED.

  Paramètres, retour & exemple (6)

  Paramètres

  • value · string · requis
    TXT record value (the verification token)
  • domain · string · requis
    Root domain (e.g. 'sitey.my')
  • subdomain · string · requis
    Subdomain name (e.g. 'demo')
  • root_level · boolean · optionnel
    No longer supported — TXT records are always written at the root domain. Passing true returns an error.
  • host_prefix · string · requis
    TXT record host prefix (e.g. '_vercel' for Vercel verification)
  • owner_token · string · optionnel
    The owner token you were given when you created the record (starts with anon_). Omit it only if you have an API key, or if the record predates tokens and was claimed from this same IP address. Creating without one mints a new one and returns it once.

  Exemple d'appel

  {"name": "create_txt_record", "arguments": {"value": "texte", "domain": "texte", "subdomain": "texte", "host_prefix": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• delete_subdomain≈ 187 tokens

  Permanently delete a subdomain DNS record you own. The subdomain will stop resolving immediately.

  Paramètres, retour & exemple (3)

  Paramètres

  • domain · string · requis
    Root domain (e.g. 'sitey.my')
  • subdomain · string · requis
    Subdomain name (e.g. 'demo')
  • owner_token · string · optionnel
    The owner token you were given when you created the record (starts with anon_). Omit it only if you have an API key, or if the record predates tokens and was claimed from this same IP address. Creating without one mints a new one and returns it once.

  Exemple d'appel

  {"name": "delete_subdomain", "arguments": {"domain": "texte", "subdomain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• delete_txt_record≈ 204 tokens

  Delete a TXT verification record from a subdomain you own.

  Paramètres, retour & exemple (4)

  Paramètres

  • domain · string · requis
    Root domain (e.g. 'sitey.my')
  • subdomain · string · requis
    Subdomain name (e.g. 'demo')
  • host_prefix · string · requis
    TXT record host prefix (e.g. '_vercel')
  • owner_token · string · optionnel
    The owner token you were given when you created the record (starts with anon_). Omit it only if you have an API key, or if the record predates tokens and was claimed from this same IP address. Creating without one mints a new one and returns it once.

  Exemple d'appel

  {"name": "delete_txt_record", "arguments": {"domain": "texte", "subdomain": "texte", "host_prefix": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• extend_subdomain≈ 234 tokens

  Paying for a year is switched off on this server, so this always answers PAYMENT_DISABLED. Use renew_subdomain, which is free and adds a month.

  Paramètres, retour & exemple (4)

  Paramètres

  • domain · string · requis
    Root domain (e.g. 'sitey.my')
  • payment · string · optionnel
    The x402 payment payload, base64 — the X-PAYMENT header value. Omit to be told what to pay.
  • subdomain · string · requis
    Subdomain name (e.g. 'demo')
  • owner_token · string · optionnel
    The owner token you were given when you created the record (starts with anon_). Omit it only if you have an API key, or if the record predates tokens and was claimed from this same IP address. Creating without one mints a new one and returns it once.

  Exemple d'appel

  {"name": "extend_subdomain", "arguments": {"domain": "texte", "subdomain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_domains≈ 74 tokens

  List available root domains (e.g. sitey.my, sitey.one) that you can create subdomains under. Call this first to know which domains are available.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_domains", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_subdomains≈ 204 tokens

  List all subdomains you own. Returns subdomain name, domain, record type, value, and creation date. A REDIRECT record also carries hits: how many visits it has answered in total, how many this calendar month, and when the last one was. Filtered by your API key, or by the owner_token you pass, or — for records made before tokens existed — by your IP address.

  Paramètres, retour & exemple (1)

  Paramètres

  • owner_token · string · optionnel
    The owner token you were given when you created the record (starts with anon_). Omit it only if you have an API key, or if the record predates tokens and was claimed from this same IP address. Creating without one mints a new one and returns it once.

  Exemple d'appel

  {"name": "list_subdomains", "arguments": {"owner_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• renew_subdomain≈ 264 tokens

  Extend a subdomain you own before it expires. Subdomains are lent for a period, not given: agent-created records last one month and user records three. Nothing emails an agent, so read expires_at from list_subdomains and call this before that date. One call resets the clock from today. Renewal only opens in the last two weeks before expires_at — an earlier call is refused and tells you the date it opens.

  Paramètres, retour & exemple (3)

  Paramètres

  • domain · string · requis
    Root domain (e.g. 'sitey.my')
  • subdomain · string · requis
    Subdomain name (e.g. 'demo')
  • owner_token · string · optionnel
    The owner token you were given when you created the record (starts with anon_). Omit it only if you have an API key, or if the record predates tokens and was claimed from this same IP address. Creating without one mints a new one and returns it once.

  Exemple d'appel

  {"name": "renew_subdomain", "arguments": {"domain": "texte", "subdomain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• update_subdomain≈ 246 tokens

  Update the DNS record value of a subdomain you own. For example, change the IP address that demo.sitey.my points to. The new target does not have to be serving yet; the result carries reachable:false when nothing answered, and the record is moved either way.

  Paramètres, retour & exemple (4)

  Paramètres

  • value · string · requis
    New record value
  • domain · string · requis
    Root domain (e.g. 'sitey.my')
  • subdomain · string · requis
    Subdomain name (e.g. 'demo')
  • owner_token · string · optionnel
    The owner token you were given when you created the record (starts with anon_). Omit it only if you have an API key, or if the record predates tokens and was claimed from this same IP address. Creating without one mints a new one and returns it once.

  Exemple d'appel

  {"name": "update_subdomain", "arguments": {"value": "texte", "domain": "texte", "subdomain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://sitey.my/mcp