org.nsgoods/nsgoods-workbench-mcp

Est-ce que org.nsgoods/nsgoods-workbench-mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « org.nsgoods/nsgoods-workbench-mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• catalogue_stats≈ 104 tokens

  Size and health of the x402 catalogue as of the latest full scan: resources, hosts, verdict counts, and payable endpoints per network.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "catalogue_stats", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• drift_status≈ 113 tokens

  Verdict changes between the two latest full scans (catalogue wide, or for one host), plus the declared model drift watch.

  Paramètres, retour & exemple (1)

  Paramètres

  • host · string · optionnel

  Exemple d'appel

  {"name": "drift_status", "arguments": {"host": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_endpoints≈ 398 tokens

  Search the catalogue by host or URL substring. Returns up to `limit` endpoints (max 50) with their latest verdict, plus the total match count. Use this first when you do not know the exact resource URL. Rows with in_latest_scan=false were not in the latest full scan; read last_checked_at for when they were last probed. Optional network filter (for example eip155:8453 or solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp) and sort=price for the cheapest first. last_checked_at is the currency claim: the last time any scan or reprobe looked at this resource. in_latest_scan means only that the resource was in the latest full scan; a row reprobed the same day can carry in_latest_scan=false and still be current. verdict_since is when the current verdict was first observed in the unbroken run that leads to it. A scan that did not contain the resource does not break the run, so verdict_since can span weeks nobody measured. How current a row is comes from last_checked_at and in_latest_scan, not from verdict_since alone.

  Paramètres, retour & exemple (4)

  Paramètres

  • sort · string · optionnel
  • limit · integer · optionnel
  • query · string · requis
  • network · string · optionnel

  Exemple d'appel

  {"name": "find_endpoints", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• host_summary≈ 346 tokens

  Summary for a host (no time series): first/last seen, current verdict mix, n_resources, total verdict changes, gone_since if absent from the latest full scan, and a small resources_sample. Sample rows with in_latest_scan=false were not in the latest full scan; read last_checked_at for when they were last probed. n_resources counts every resource ever seen for this host; current_verdict_mix and n_payable_last_full count only the latest full scan. last_checked_at is the currency claim: the last time any scan or reprobe looked at this resource. in_latest_scan means only that the resource was in the latest full scan; a row reprobed the same day can carry in_latest_scan=false and still be current. verdict_since is when the current verdict was first observed in the unbroken run that leads to it. A scan that did not contain the resource does not break the run, so verdict_since can span weeks nobody measured. How current a row is comes from last_checked_at and in_latest_scan, not from verdict_since alone.

  Paramètres, retour & exemple (1)

  Paramètres

  • host · string · requis

  Exemple d'appel

  {"name": "host_summary", "arguments": {"host": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• payability_verdict≈ 281 tokens

  Latest payability observation for one exact resource URL (path and query included), with the meaning of the verdict, remediation if it cannot be paid, and the per-network options seen. last_checked_at is the currency claim: the last time any scan or reprobe looked at this resource. in_latest_scan means only that the resource was in the latest full scan; a row reprobed the same day can carry in_latest_scan=false and still be current. verdict_since is when the current verdict was first observed in the unbroken run that leads to it. A scan that did not contain the resource does not break the run, so verdict_since can span weeks nobody measured. How current a row is comes from last_checked_at and in_latest_scan, not from verdict_since alone.

  Paramètres, retour & exemple (1)

  Paramètres

  • url · string · requis

  Exemple d'appel

  {"name": "payability_verdict", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• reports≈ 80 tokens

  Published weekly payability reports (from the signed manifest).

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "reports", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_signature≈ 462 tokens

  Offline EIP-191 verify of a signed nsgoods response. Identifies the service from the manifest (or the optional `service` arg), strips exactly that service's post-sign fields, canonicalises (JCS, both ASCII modes), recovers the signer and checks it against the published manifest signers. Reproduction-attestation (JCS/byte-length) and envelope (signer/signature, components) shapes are reported as unsupported_shape, not verified here. Refusals carry a distinct status: malformed_signature (signature is not a 65-byte 0x-prefixed hex string), schema_rejected (the body carries a signed_by/signature pair but fails the required field shape for every service the claimed signer covers; recovery was not attempted, checked is false, reasons lists the failed candidates), signature_mismatch (well-formed but recovers a different address than signed_by under every candidate service recipe of this signer), no_flat_recipe (signed_by is a manifest signer but every service it covers uses an envelope shape, so there is no flat recipe to check; recovery was not attempted, checked is false), unknown_signer (signed_by is not a manifest signer; recovery was not attempted, checked is false), unsupported_shape, or the no-signed_by/signature-pair case. checked is true only when EIP-191 recovery actually ran; every other refusal reports checked false.

  Paramètres, retour & exemple (2)

  Paramètres

  • service · string · optionnel
  • response_json · string · requis

  Exemple d'appel

  {"name": "verify_signature", "arguments": {"response_json": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• x401_status≈ 87 tokens

  Current x401 emitter adoption across the scanned catalogue (from the daily watcher).

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "x401_status", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.nsgoods.org/mcp