online.aurinia/connect

Est-ce que online.aurinia/connect est sûr ?

Au dernier audit MCP Hub, le serveur MCP « online.aurinia/connect » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• book≈ 389 tokens

  REAL action: book at a network venue on the user's behalf. provider_id + item (the venue interprets it). Doctor: item={date,time}. Hostel: item={check_in,check_out,guests,promo_code?} — do NOT ask for name/contact: identity comes from a one-time Telegram consent. Spa: item={date,time,procedure}. Hostel: book returns a HOLD with payment_url; the booking is finalized by PAYMENT, not by this call. CONSENT: do NOT ask for approval up front — just call book. ONLY if the call returns consent_url/telegram.consent_url (linked=false = not yet authorized at this venue) do you show that link to the user for a one-tap approval in Telegram, then retry. If consent_url_native (tg://...) is present, try to open it on the user's device (open/xdg-open/Start-Process — launches Telegram directly if installed). BUT tg:// fails SILENTLY without Telegram — so ALWAYS also show the user consent_url (https): t.me opens the app or offers to install it. Open once, then retry. If already authorized (consent given earlier) book succeeds IMMEDIATELY, with no prompts. Never ask for consent when you already have it.

  Paramètres, retour & exemple (2)

  Paramètres

  • item · object · requis
    Doctor/spa: date,time. Hostel: check_in,check_out,guests,promo_code? (no contact needed — identity via Telegram consent).
  • provider_id · string · requis

  Exemple d'appel

  {"name": "book", "arguments": {"item": {}, "provider_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• cancel≈ 166 tokens

  REAL action: cancel a booking at a network venue IMMEDIATELY — no confirmation step. If the user said cancel, cancel; do NOT re-ask (repeated confirmations frustrate users — act decisively). provider_id + item {booking_id} — the booking id from list_current_bookings. Do NOT ask for consent up front (only if the call returns a consent link).

  Paramètres, retour & exemple (2)

  Paramètres

  • item · object · requis
  • provider_id · string · requis

  Exemple d'appel

  {"name": "cancel", "arguments": {"item": {}, "provider_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_providers≈ 211 tokens

  Find a venue in the Aurinia network (doctor, hostel, spa). Optional: query (e.g. 'vertebrologist'), city, type. Returns a providers array; use a provider_id from it for get_availability / book.

  Paramètres, retour & exemple (3)

  Paramètres

  • city · string · optionnel
  • type · string · optionnel
  • query · string · optionnel

  Exemple d'appel

  {"name": "find_providers", "arguments": {"city": "texte", "type": "texte", "query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"providers": []}}

• get_availability≈ 328 tokens

  Availability and price at a venue. provider_id is required. Use EXACTLY these param names: doctor — date (YYYY-MM-DD); hostel — check_in, check_out, guests (with underscores: check_in/check_out, NOT 'checkin'/'checkout'; guests is an integer). There is no room_type param — a dorm bed is the default. Optional promo_code (AI-booking discount). If availability=null it almost always means wrong param names (check check_in/check_out).

  Paramètres, retour & exemple (6)

  Paramètres

  • date · string · optionnel
    Doctor: YYYY-MM-DD
  • guests · integer · optionnel
    Hostel: number of guests
  • check_in · string · optionnel
    Hostel: YYYY-MM-DD
  • check_out · string · optionnel
    Hostel: YYYY-MM-DD
  • promo_code · string · optionnel
  • provider_id · string · requis

  Exemple d'appel

  {"name": "get_availability", "arguments": {"provider_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"provider": "texte", "availability": "texte"}}

• get_provider_info≈ 165 tokens

  Details for one venue by provider_id: id, type (doctor/hostel/spa), name, city, address. Read-only, no auth. Use it to confirm a venue before get_availability / book.

  Paramètres, retour & exemple (1)

  Paramètres

  • provider_id · string · requis

  Exemple d'appel

  {"name": "get_provider_info", "arguments": {"provider_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "city": "texte", "name": "texte", "type": "texte", "address": "texte"}}

• list_current_bookings≈ 114 tokens

  The user's current/upcoming bookings at a network venue (by date, nearest first). Each has a status field (e.g. booked/confirmed/cancelled) — distinguish active vs cancelled. provider_id optional (without it — the first venue). Requires authorization.

  Paramètres, retour & exemple (1)

  Paramètres

  • provider_id · string · optionnel

  Exemple d'appel

  {"name": "list_current_bookings", "arguments": {"provider_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_past_bookings≈ 112 tokens

  The user's past bookings at a network venue (by date, most recent first). Each has a status field. provider_id optional; limit (default 20)/offset for pagination. Requires authorization.

  Paramètres, retour & exemple (3)

  Paramètres

  • limit · integer · optionnel
  • offset · integer · optionnel
  • provider_id · string · optionnel

  Exemple d'appel

  {"name": "list_past_bookings", "arguments": {"limit": 1, "offset": 1, "provider_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• reschedule≈ 210 tokens

  REAL action: reschedule a booking at a network venue. provider_id + item (doctor: {date, from, to} — SAME day, ATOMIC: if the target slot was just taken, the user KEEPS their current slot — never loses the held slot; that guarantee is the point). For a DIFFERENT day just book again (cross-day needs no atomic hold). No confirmation — act on request; do NOT ask for consent up front (only if the call returns a consent link). Not all venues support it: a hostel has NO reschedule — there, cancel and book again.

  Paramètres, retour & exemple (2)

  Paramètres

  • item · object · requis
  • provider_id · string · requis

  Exemple d'appel

  {"name": "reschedule", "arguments": {"item": {}, "provider_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://aurinia.online/mcp