uk.qart/qart

Est-ce que uk.qart/qart est sûr ?

Au dernier audit MCP Hub, le serveur MCP « uk.qart/qart » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• browse_free_pool≈ 158 tokens

  List the QR artwork currently claimable for free on qart.uk, one per style, with a preview image URL for each. This is the ANONYMOUS shelf — the same selection every signed-out visitor sees, and these codes are what a guest can claim. Use it to show someone what is available or to describe the styles on offer. If you are acting for a signed-in account and want codes THAT account can actually claim, use browse_my_pool instead — the two storefronts differ, and a code from here may 403 on a claim.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "browse_free_pool", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• buy_qr_outright≈ 339 tokens

  How to buy ONE finished QR artwork with no account at all, paying from your own wallet over x402. Returns the live price and the exact request to make. This is the right tool when you have a wallet but no qart.uk account: get_credit_packs buys CREDITS, which still need an account to spend, and the Studio tools all require an OAuth token. This path requires neither — you GET https://qart.uk/api/v1/qr?url=..., it answers 402, you retry with a PAYMENT-SIGNATURE header, and the PNG comes back in the response body. You are charged ONLY if a real QR detector decodes the image: settlement runs after the scan verdict, so a request that produces nothing scannable is never settled and costs you nothing. Pay in USDC on Base — you do not need ETH, because the facilitator submits the transaction. Cannot be performed through MCP itself: a payment rides in an HTTP header and there is nowhere to put one here. This tool tells you the call; you make it.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · optionnel
    The https destination you want the QR to encode. Optional — without it you get the price and the call shape.
  • size · integer · optionnel · 768 | 1024
    Pixel size. 1024 costs more. Defaults to 768.

  Exemple d'appel

  {"name": "buy_qr_outright", "arguments": {"url": "texte", "size": 768}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• explain_qart≈ 149 tokens

  Explain how qart.uk works: scan verification, retargeting a printed code, the free claim pool and its daily allowances, Studio pricing, and what happens to credits when a run is stopped or fails. Use this before guessing at product details — pricing and allowances change and this returns the current text.

  Paramètres, retour & exemple (1)

  Paramètres

  • topic · string · optionnel · overview | free-pool | studio | pricing | retargeting
    Which aspect to explain. Defaults to overview.

  Exemple d'appel

  {"name": "explain_qart", "arguments": {"topic": "overview"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_credit_packs≈ 167 tokens

  What Studio credits cost: the packs on sale, their price in USD, and roughly how many images each buys. Anonymous — this is a price list. Read it rather than quoting a price from memory; packs change. An agent that runs out mid-task can top up WITHOUT a human, paying from its OWN wallet: POST /api/qart/x402/credits?pack=... with a qart:purchase bearer token. The money comes from the application's wallet, never the user's card. Stripe checkout (POST /api/qart/checkout) remains human-only; hand the user the purchase URL for that.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_credit_packs", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_dither_qr_parameters≈ 274 tokens

  The complete parameter contract for qart.uk's dithered photo QR recipe — an error-diffused technique (after andrew-t) that dithers a photograph into the space around each QR module, so the finished 1-bit image reads as a picture and still scans. THIS TOOL GENERATES NOTHING. There is no API for the technique and no endpoint that will run it for you: it is a browser-side generator, and this tool returns the parameters, ranges, defaults and algorithm order so that YOU can implement it or instruct someone who will. Pair it with get_qr_matrix, which supplies the module grid and the function-pattern map the algorithm needs. It also returns the honest limits, which matter before anyone prints anything: no scan verdict is computed anywhere in this path, error correction wants to stay at H, and stricter detectors (zbar) reject output that phone-grade detectors accept. Treat a dithered code as untested until someone scans the actual printed sheet.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_dither_qr_parameters", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_qr_matrix≈ 1120 tokens

  Return the actual QR MODULE GRID for a payload — the black/white matrix, plus a per-module map of which modules are function patterns (finder, separator, timing, alignment, format info, version info, dark module) and which carry data. Both come back as one row string per row. Costs nothing, mints nothing, stores nothing. Use this when you are going to RENDER or transform a QR yourself: dithering a photo into it, drawing it as an SVG, laying it out for print, or reasoning about which modules are safe to alter. The function-pattern map is the point — any technique that paints over a QR has to know which modules a scanner uses to FIND the code (finder, timing, alignment) versus which merely carry bits. Do NOT use it to check whether a payload fits — preview_qr_encoding is smaller and answers that. Do NOT use it to get a qart.uk product: this is a plain standards QR, with no artwork, no scan verdict and no alias behind it. The matrix is canonical and untransformed: invert, rotation, mirror and any subpixel scaling are yours to apply afterwards.

  Paramètres, retour & exemple (29)

  Paramètres

  • ecc · string · optionnel · L | M | Q | H
    Error correction level. Defaults to H, which is what any paint-over-the-code technique needs.
  • end · string · optionnel
    For 'event': end datetime.
  • lat · number · optionnel
    For 'geo': latitude.
  • lng · number · optionnel
    For 'geo': longitude.
  • org · string · optionnel
    For 'vcard': organization.
  • url · string · optionnel
    For 'url': the destination. For 'vcard'/'mecard': the website.
  • auth · string · optionnel · WPA | WEP | nopass
    For 'wifi': security type. Defaults to WPA.
  • body · string · optionnel
    For 'mailto': message body.
  • mask · string · optionnel · auto | 0 | 1 | 2 | 3 | 4 | 5 | 6
    Which of the 8 standard mask patterns to apply. 'auto' (default) picks the lowest-penalty one, exactly as the encoder in the browser does. All 8 are legal and scan identically; they differ only in how the light and dark modules are laid out, which is worth pinning when you are fitting a picture to the grid.
  • name · string · optionnel
    For 'vcard'/'mecard': full name.
  • ssid · string · optionnel
    For 'wifi': network name.
  • text · string · optionnel
    For 'text': the literal text.
  • email · string · optionnel
    Email address, for 'vcard'/'mecard'/'mailto'.
  • phone · string · optionnel
    Phone number, for 'vcard'/'mecard'/'tel'/'sms'/'whatsapp'.
  • start · string · optionnel
    For 'event': start datetime (YYYY-MM-DDTHH:MM).
  • title · string · optionnel
    For 'vcard': job title. For 'event': event title.
  • allDay · boolean · optionnel
    For 'event': all-day (DATE values).
  • amount · string · optionnel
    For 'paypal': optional amount.
  • handle · string · optionnel
    For social kinds (instagram, twitter, youtube, facebook, tiktok, linkedin, paypal): handle or profile URL.
  • hidden · boolean · optionnel
    For 'wifi': hidden network.
  • address · string · optionnel
    For 'vcard': postal address.
  • message · string · optionnel
    For 'sms'/'whatsapp': message text.
  • subject · string · optionnel
    For 'mailto': subject line.
  • version · integer · optionnel
    Force a QR version (1-40, size 21-177 modules). Omit for the smallest that fits. Pinning BELOW the fit is impossible and is raised to the fit, matching the Studio.
  • location · string · optionnel
    For 'event': location.
  • password · string · optionnel
    For 'wifi': network password.
  • username · string · optionnel
    For 'telegram': username or t.me URL.
  • description · string · optionnel
    For 'event': description.
  • payloadKind · string · optionnel · url | qart_code | text | wifi | vcard | mecard | mailto | tel
    What the code should contain. Defaults to url.

  Exemple d'appel

  {"name": "get_qr_matrix", "arguments": {"ecc": "L", "end": "texte", "lat": 1, "lng": 1, "org": "texte", "url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• preview_qr_encoding≈ 864 tokens

  Work out how a payload will encode as a QR code, without creating anything. Returns the exact string the pixels would carry, its byte length, the QR version and module count required, the capacity remaining at that version, and any warnings. Costs nothing and mints nothing. Use this to answer questions like "will this URL fit at error correction level H" or "how much does a long Wi-Fi password cost me in QR density". Higher ECC survives damage better but needs more modules for the same data; more modules print smaller and get harder to scan. payloadKind 'qart_code' sizes the RETARGETABLE variant instead: the pixels carry a 16-byte qart.uk/_ link rather than your data, which is usually several versions smaller. Compare the two before committing to a print. This returns metadata only, never the module grid. For the actual black/white matrix, call get_qr_matrix.

  Paramètres, retour & exemple (21)

  Paramètres

  • ecc · string · optionnel · L | M | Q | H
    Error correction level, lowest to highest. Defaults to the Studio default if omitted.
  • end · string · optionnel
    For 'event': end datetime.
  • url · string · optionnel
    For payloadKind 'url': the destination.
  • name · string · optionnel
    For payloadKind 'vcard': full name.
  • ssid · string · optionnel
    For payloadKind 'wifi': network name.
  • text · string · optionnel
    For payloadKind 'text': the literal text.
  • email · string · optionnel
    For payloadKind 'vcard': email address.
  • phone · string · optionnel
    Phone, for vcard/mecard/tel/sms/whatsapp.
  • start · string · optionnel
    For 'event': start datetime (YYYY-MM-DDTHH:MM).
  • title · string · optionnel
    For 'event': title. For 'vcard': job title.
  • allDay · boolean · optionnel
    For 'event': all-day (DATE values).
  • amount · string · optionnel
    For 'paypal': optional amount.
  • fields · object · optionnel
    Payload fields for the kind. Flat sibling properties (url, phone, handle, …) are also accepted, matching get_qr_matrix.
  • handle · string · optionnel
    For social kinds: handle or profile URL.
  • message · string · optionnel
    For 'sms'/'whatsapp': message text.
  • version · integer · optionnel
    Force a QR version (size). Omit to use the smallest that fits.
  • location · string · optionnel
    For 'event': location.
  • password · string · optionnel
    For payloadKind 'wifi': network password.
  • username · string · optionnel
    For 'telegram': username or t.me URL.
  • description · string · optionnel
    For 'event': description.
  • payloadKind · string · requis · url | qart_code | text | wifi | vcard | mecard | mailto | tel
    What the code should contain. 'qart_code' sizes the retargetable variant — a 16-byte qart.uk/_ link instead of your data. whatsapp/telegram/event/social kinds assemble a standard URL or VCALENDAR; they are verbatim, not retargetable.

  Exemple d'appel

  {"name": "preview_qr_encoding", "arguments": {"payloadKind": "url"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• resolve_qart_code≈ 162 tokens

  Resolve a scanned qart.uk code to the URL it currently points at. Accepts the alias ('_ab12cde'), or a full qart.uk URL to pull it out of. Returns targetUrl, or disabledReason if the owner retired it. This does not count as a scan and will not affect the owner's statistics. Only the '_' code class resolves here; older qart.uk links of other shapes are not in this pool.

  Paramètres, retour & exemple (1)

  Paramètres

  • code · string · requis
    The code to resolve — '_ab12cde', '/_ab12cde', or 'https://qart.uk/_ab12cde'.

  Exemple d'appel

  {"name": "resolve_qart_code", "arguments": {"code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://qart.uk/api/mcp