org.qrvote/qrvote

Est-ce que org.qrvote/qrvote est sûr ?

Au dernier audit MCP Hub, le serveur MCP « org.qrvote/qrvote » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 15 outils

• add_entries≈ 204 tokens

  Add entries (contests) or checkpoints (hunts) Needs the organizer key.

  Paramètres, retour & exemple (2)

  Paramètres

  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12
  • entrants · array · requis

  Exemple d'appel

  {"name": "add_entries", "arguments": {"slug": "texte", "entrants": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• add_judge≈ 206 tokens

  Contests: add a judge (judging must be on) The dashboard (getDashboard → judging.judges) then lists the judge with their private scorecard link key: https://qrvote.org/j/<slug>#<id>.<key>. Give it to that judge only. Needs the organizer key.

  Paramètres, retour & exemple (2)

  Paramètres

  • name · string · requis
  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12

  Exemple d'appel

  {"name": "add_judge", "arguments": {"name": "texte", "slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_contest≈ 886 tokens

  Create it now, on a signed-in connection with Manage (https://mcp.qrvote.org/mcp/organizer); up to 5 a day per connection. This connection can manage it straight away. You get its public link and a one-time claim link (valid 24 hours) for the person to open, which gives them the organizer dashboard; never ask for or share the organizer key. Without signing in, use draft_contest.

  Paramètres, retour & exemple (13)

  Paramètres

  • host · boolean · optionnel
    Quizzes: run it live on a big screen, one question at a time
  • kind · string · requis · contest | survey | quiz | hunt
    contest: people vote for entries; survey: questions; quiz: questions with right answers and a leaderboard; hunt: find QR checkpoints
  • lang · string · optionnel · en | es | de | zh | fr | pt | ja | ko
    The voters' language: its QR codes, big screen and printed signs use it (anyone can still switch). Default: the language the person is using, else en.
  • mode · string · optionnel · single | each
    Contests: one vote in total, or one vote per entry (like/heart each)
  • theme · string · optionnel · classic | halloween | harvest | winter | garden | carnival | beach | sports
  • title · string · requis
  • entries · array · optionnel
    Contests: the entries; hunts: the checkpoints. A name, or { name, description }.
  • results · string · optionnel · live | after | private
    When people see results
  • closesAt · string · optionnel
    When voting ends, ISO 8601 with a time zone offset
  • questions · array · optionnel
    Surveys and quizzes, as in setQuestions: { type: single|multi|yesno|likert|rating|short|long, prompt, options? (single/multi), max? (rating 5 or 10), required?, answer? (quiz: option index, list of indexes, yesno 1/0, or accepted texts for short) }
  • categories · array · optionnel
    Contests: separate awards, one vote in each (e.g. Scariest, Funniest)
  • description · string · optionnel
  • leaderboard · boolean · optionnel
    Quizzes: show a leaderboard

  Exemple d'appel

  {"name": "create_contest", "arguments": {"kind": "contest", "title": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• draft_contest≈ 860 tokens

  Make a link that opens QRvote’s create form already filled in: name, entries or questions, rules, closing time, look. Give the link to the person: they check it and click Create (it needs a human check). Nothing is created until they do. To manage it afterwards, they can connect you at https://mcp.qrvote.org/mcp/organizer.

  Paramètres, retour & exemple (13)

  Paramètres

  • host · boolean · optionnel
    Quizzes: run it live on a big screen, one question at a time
  • kind · string · requis · contest | survey | quiz | hunt
    contest: people vote for entries; survey: questions; quiz: questions with right answers and a leaderboard; hunt: find QR checkpoints
  • lang · string · optionnel · en | es | de | zh | fr | pt | ja | ko
    The voters' language: its QR codes, big screen and printed signs use it (anyone can still switch). Default: the language the person is using, else en.
  • mode · string · optionnel · single | each
    Contests: one vote in total, or one vote per entry (like/heart each)
  • theme · string · optionnel · classic | halloween | harvest | winter | garden | carnival | beach | sports
  • title · string · requis
  • entries · array · optionnel
    Contests: the entries; hunts: the checkpoints. A name, or { name, description }.
  • results · string · optionnel · live | after | private
    When people see results
  • closesAt · string · optionnel
    When voting ends, ISO 8601 with a time zone offset
  • questions · array · optionnel
    Surveys and quizzes, as in setQuestions: { type: single|multi|yesno|likert|rating|short|long, prompt, options? (single/multi), max? (rating 5 or 10), required?, answer? (quiz: option index, list of indexes, yesno 1/0, or accepted texts for short) }
  • categories · array · optionnel
    Contests: separate awards, one vote in each (e.g. Scariest, Funniest)
  • description · string · optionnel
  • leaderboard · boolean · optionnel
    Quizzes: show a leaderboard

  Exemple d'appel

  {"name": "draft_contest", "arguments": {"kind": "contest", "title": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• export_csv≈ 159 tokens

  Download votes, survey responses or hunt players as CSV Needs the organizer key.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12

  Exemple d'appel

  {"name": "export_csv", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_campaign≈ 193 tokens

  A contest, survey or hunt as the public sees it Entries (contests), questions (surveys) or checkpoints (hunts; unfound ones show only their clue). Entry QR codes are never included when scanning is required. Public: no key needed.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12

  Exemple d'appel

  {"name": "get_campaign", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_dashboard≈ 175 tokens

  Everything on the organizer dashboard Settings, entries with vote counts, ballot tickets, fairness signals (grouped, hashed), and survey or hunt data. Needs the organizer key.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12

  Exemple d'appel

  {"name": "get_dashboard", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_results≈ 250 tokens

  Results: vote tallies, survey totals, or a hunt leaderboard Public when the organizer made results visible; otherwise send the organizer key. Contests also return categoryResults (standings per award category) and, once voting has closed, judgeResults (each criterion averaged over the judges, summed). Written survey answers and individual judges' scores are never included here. Public; the organizer key also unlocks private results.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12

  Exemple d'appel

  {"name": "get_results", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• host_step≈ 299 tokens

  Run a live quiz: start, reveal, next question, finish, or pause/resume its clock For quizzes with host = true. Body: { action: 'start' | 'reveal' | 'next' | 'finish' | 'pause' | 'resume' }. Steps must follow lobby → question → reveal → question … → done; anything else is 409. With hostSecs > 0 the quiz also moves on by itself (each question hostSecs seconds, each answer shown 8 s); pause/resume stop and restart that clock, and a step by hand restarts it. Needs the organizer key.

  Paramètres, retour & exemple (2)

  Paramètres

  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12
  • action · string · requis · start | reveal | next | finish | pause | resume

  Exemple d'appel

  {"name": "host_step", "arguments": {"slug": "texte", "action": "start"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_responses≈ 180 tokens

  Survey responses, newest first (up to 500). Quizzes include each response's score. Needs the organizer key.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12

  Exemple d'appel

  {"name": "list_responses", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• remove_judge≈ 166 tokens

  Contests: remove a judge, their link and their scores Needs the organizer key.

  Paramètres, retour & exemple (2)

  Paramètres

  • id · integer · requis
  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12

  Exemple d'appel

  {"name": "remove_judge", "arguments": {"id": 1, "slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• set_answer_key≈ 278 tokens

  Fix a quiz's answer key (allowed after people have answered; every score updates) Body: { answers: { <question id>: key | null } }. The key is an option index (single; yes/no uses 1 = yes, 0 = no), a list of option indexes (multi, all must match), or a list of accepted texts (short; case, accents and punctuation are ignored). null stops scoring that question. At least one question must stay scored. Needs the organizer key.

  Paramètres, retour & exemple (2)

  Paramètres

  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12
  • answers · object · requis

  Exemple d'appel

  {"name": "set_answer_key", "arguments": {"slug": "texte", "answers": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• set_entry_photo≈ 187 tokens

  Give an entry (or hunt checkpoint) a photo from a public https image URL: JPEG, PNG or WebP, up to 3 MB. Hidden metadata (GPS, camera) is removed. Replaces any photo it had. Needs the organizer key.

  Paramètres, retour & exemple (3)

  Paramètres

  • slug · string · requis
  • entry · integer · requis
    The entry’s id, from get_dashboard’s entrants
  • photo_url · string · requis

  Exemple d'appel

  {"name": "set_entry_photo", "arguments": {"slug": "texte", "entry": 1, "photo_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• set_questions≈ 465 tokens

  Surveys and quizzes: replace the questions (only until the first response) Body: { questions: [...] }, 1–50, in order; the whole list is replaced. Each: { type, prompt (≤300 chars), required?, options?, max?, answer?, id? }. type is single (pick one) or multi (pick any) with options (2–20 distinct texts), yesno, likert (disagree…agree), rating (max 5 or 10 stars), short or long (written). Quizzes: answer is the correct option index (single; yesno uses 1 = yes, 0 = no), a list of option indexes (multi), or a list of accepted texts (short); at least one question needs one. Send a question's id back to keep its picture. Refused with 409 once anyone has answered; the answer key can still be fixed with setAnswerKey. Needs the organizer key.

  Paramètres, retour & exemple (2)

  Paramètres

  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12
  • questions · array · requis

  Exemple d'appel

  {"name": "set_questions", "arguments": {"slug": "texte", "questions": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• update_settings≈ 592 tokens

  Change settings, or end / reopen voting Needs the organizer key.

  Paramètres, retour & exemple (14)

  Paramètres

  • lang · string · optionnel · en | es | de | zh | fr | pt | ja | ko
    The voters' language: the contest's QR codes and links open in it (anyone can switch). Defaults to en.
  • slug · string · requis
    The id in the public link, e.g. `scarecrow-contest-2026-ab12` from https://qrvote.org/c/scarecrow-contest-2026-ab12
  • theme · string · optionnel
    classic, halloween, harvest, winter, garden, carnival, beach, sports, hearts, stars, lunar, diwali, muertos, hanami, cats, dogs, campfire, art, trivia, classroom, cookoff, science, wedding, carshow, workplace, or custom:<accent hex>-<second hex> (e.g. custom:1a73e8-ff8a5b)
  • title · string · optionnel
  • closed · boolean · optionnel
    true ends voting now; false reopens it
  • ipLimit · integer · optionnel
  • opensAt · integer|null · optionnel
  • results · string · optionnel · live | after | private
  • closesAt · integer|null · optionnel
  • criteria · array · optionnel
    Contests: what judges score, 1–10 each. Empty turns judging off.
  • categories · array · optionnel
    Contests: award categories. Names (new) or {id, name} (keeps that category's votes when renaming). A category with votes can't be removed.
  • allowChange · boolean · optionnel
  • description · string · optionnel
  • requireBallot · boolean · optionnel

  Exemple d'appel

  {"name": "update_settings", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.qrvote.org/mcp