tech.flocore/flocore

Est-ce que tech.flocore/flocore est sûr ?

Au dernier audit MCP Hub, le serveur MCP « tech.flocore/flocore » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• aegis_inspect≈ 266 tokens

  Screen a prompt or text for injection, jailbreak and exfil intent. Free, public, defensive-only: returns a risk score (0..1), the detected intents, and whether it is suspicious. No token needed, no tenant data. A pattern screen: it misses paraphrases, so a clean result is not a guarantee. An anonymous call stores nothing; if you pass an agent name, that name and the score are recorded.

  Paramètres, retour & exemple (3)

  Paramètres

  • text · string · requis
    the prompt or text to screen
  • agent · string · optionnel
    optional: your agent name or a contact; if given, it is recorded with the score
  • referred_by · string · optionnel
    optional: the agent id that referred you, so the referral is attributed to them

  Exemple d'appel

  {"name": "aegis_inspect", "arguments": {"text": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• flocore_onboard_request≈ 590 tokens

  Registers an onboarding request for human review (human-gated approval, Ed25519 signed receipts, EU AI Act Article 12 audit evidence). Public: no token needed. Returns a request id and a sandbox token (fc_test_...) immediately, to rehearse the loop; a live token is issued only after a person approves the application. Set rehearsal_only to true to get a sandbox token without applying.

  Paramètres, retour & exemple (9)

  Paramètres

  • org · string · optionnel
    optional: the organisation the agent acts for
  • agent · string · requis
    your agent name or identifier
  • source · string · optionnel
    optional: where you found us, for example a registry or the pitch (letters, digits, dots and dashes)
  • public_key · string · optionnel
    optional: your agent's own Ed25519 PUBLIC key, raw 32 bytes as base64url or a public JWK as JSON text. Give it and, once a human approves you, your token is bound to it and your key's thumbprint appears on your signed receipts. Never send a private key.
  • referred_by · string · optionnel
    optional: the governed agent or partner that sent you here (recorded as the referral)
  • intended_use · string · optionnel
    optional: what world-affecting actions you want governed
  • jurisdiction · string · optionnel
    optional: the legal jurisdiction that brought you here, a code from the Advatar pitch (eu, coe, za, kr, us, vn, ng, ke, mx, oecd). Recorded so we learn which law matters to builders
  • owner_contact · string · optionnel
    the email address of the person who owns the agent, so a person can approve it and be sent its token (required unless rehearsal_only is true)
  • rehearsal_only · boolean · optionnel
    optional: true to get ONLY a sandbox token to rehearse the approval loop. Nothing is registered, no email is sent and no one is asked to review anything. Limits: 3 per hour per connection. To apply for real, call again without it and give owner_contact

  Exemple d'appel

  {"name": "flocore_onboard_request", "arguments": {"agent": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• flocore_support_ask≈ 243 tokens

  Ask a plain-English support/product question about FLOCORE itself, agent to agent, instead of a helpdesk. Public, no token needed. Answered only from FLOCORE's own real, published, reproducible claims: an answer not supported by them is refused, never invented. Privacy: your question (max 500 characters) is sent to a hosted language model provider, currently Groq in the United States, to choose which published sentences answer it; do not include personal information. See https://humanseal.world/privacy.html.

  Paramètres, retour & exemple (1)

  Paramètres

  • question · string · requis
    your plain-English question about FLOCORE

  Exemple d'appel

  {"name": "flocore_support_ask", "arguments": {"question": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• flocore_verify_counterparty≈ 274 tokens

  Before transacting with another agent, check whether it is FLOCORE-governed (a human-approval gate on its world-affecting actions, Ed25519 signed receipts) and, if it handed you a receipt, verify that receipt independently. Public, no token needed. A sandbox receipt is reported as a rehearsal and never as valid proof.

  Paramètres, retour & exemple (3)

  Paramètres

  • agent_slug · string · requis
    the counterparty's FLOCORE agent/tenant slug
  • receipt_canonical · string · optionnel
    optional: the receipt's `canonical` field, if the counterparty handed you one to check
  • receipt_signature_ed25519 · string · optionnel
    optional: the receipt's `signature_ed25519` field, required together with receipt_canonical to verify it

  Exemple d'appel

  {"name": "flocore_verify_counterparty", "arguments": {"agent_slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://fo.flocore.tech/mcp