watch.magento/magento-watch

Est-ce que watch.magento/magento-watch est sûr ?

Au dernier audit MCP Hub, le serveur MCP « watch.magento/magento-watch » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 13 outils

• check_compatibility≈ 176 tokens

  Check if a specific PHP, MySQL, or other dependency version is compatible with a Magento version

  Paramètres, retour & exemple (4)

  Paramètres

  • dependency · string · requis
    Dependency name (e.g., "php", "mysql", "elasticsearch", "redis")
  • distribution · string · requis · magento-community | magento-commerce | mage-os
  • magentoVersion · string · requis
    Magento version (e.g., "2.4.8")
  • dependencyVersion · string · requis
    Dependency version to check (e.g., "8.3", "8.0")

  Exemple d'appel

  {"name": "check_compatibility", "arguments": {"dependency": "texte", "distribution": "magento-community", "magentoVersion": "texte", "dependencyVersion": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_version_security≈ 178 tokens

  Check whether a specific Magento/Adobe Commerce version is vulnerable to known security bulletins, and which version fixes it. A version is also vulnerable when the only remedy from Adobe is an isolated patch applied on top of that base release; fixedIn is then null. This is the tool to call when a user asks "is my Magento vulnerable" or "which patch fixes CVE-...".

  Paramètres, retour & exemple (2)

  Paramètres

  • version · string · requis
    Version number (e.g., "2.4.7", "2.4.7-p3")
  • distribution · string · requis · magento-community | magento-commerce | mage-os

  Exemple d'appel

  {"name": "check_version_security", "arguments": {"version": "texte", "distribution": "magento-community"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_patch≈ 399 tokens

  Find Adobe Quality Patches Tool (QPT) patches for a Magento Open Source or Adobe Commerce version. With only distribution and version it lists every applicable patch. Add query (symptoms, error text, feature words or a patch id like ACSD-56760), modules (e.g. "catalog", "module-sales") or categories (QPT names like "Admin", "Catalog/Product") to get a ranked list with a 0-100 relevance score and the signals that matched. Covers quality patches only; for security fixes use check_version_security. List mode can return several hundred hits; pass query, modules or categories to rank and limit. Mage-OS is not a QPT target and always returns status "unknown".

  Paramètres, retour & exemple (7)

  Paramètres

  • limit · integer · optionnel
    Ranked mode only, default 10
  • query · string · optionnel
    Free text: symptoms, error message, feature names, or a patch id
  • modules · array · optionnel
    Module names with or without the magento/module- prefix
  • version · string · requis
    Exact Magento version, e.g. "2.4.7-p3"
  • categories · array · optionnel
    QPT category names
  • distribution · string · requis · magento-community | magento-commerce | mage-os
  • includeInapplicable · boolean · optionnel
    Also rank patches that do not apply to this version; each hit keeps its real applicable flag

  Exemple d'appel

  {"name": "find_patch", "arguments": {"version": "texte", "distribution": "magento-community"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_upstream_fix≈ 479 tokens

  Community fixes merged into magento/magento2 after a release line was cut, with per-version applicability from git apply checks; not Adobe Quality Patches, for those use find_patch. With only distribution and version it lists, newest first, every upstream fix whose code applies cleanly to that version and that the version does not contain yet. Add query (symptoms, error text, feature words or an id like magento2-40867), modules or categories (QPT category names like "GraphQL", "Catalog/Product") to get a ranked list with a 0-100 relevance score and the signals that matched. fixedIn filters by the first release that contains the fix (null for fixes not in any release yet). Mage-OS always returns status "unknown"; a version outside the checked release tags returns status "unknown-version".

  Paramètres, retour & exemple (8)

  Paramètres

  • limit · integer · optionnel
    Ranked mode only, default 10
  • query · string · optionnel
    Free text: symptoms, error message, feature names, or an upstream fix id
  • fixedIn · string|null · optionnel
    Only fixes first released in this version, e.g. "2.4.9"; null for fixes not in any release yet
  • modules · array · optionnel
    Module names with or without the magento/module- prefix
  • version · string · requis
    Exact Magento version, e.g. "2.4.8-p3"
  • categories · array · optionnel
    QPT category names
  • distribution · string · requis · magento-community | magento-commerce | mage-os
  • includeExcluded · boolean · optionnel
    Also return entries excluded as features, refactors or test-only changes; each hit keeps its excluded reason

  Exemple d'appel

  {"name": "find_upstream_fix", "arguments": {"version": "texte", "distribution": "magento-community"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_all_versions≈ 138 tokens

  Get all versions for a distribution with their lifecycle information. Each version carries `securitySummary` { status, requiredPatches, upgradeRequired }: `isSecureVersion` and `statusLabel` describe the support lifecycle only, so a supported version can still have open bulletins. Call check_version_security for the remedies.

  Paramètres, retour & exemple (1)

  Paramètres

  • distribution · string · requis · magento-community | magento-commerce | mage-os

  Exemple d'appel

  {"name": "get_all_versions", "arguments": {"distribution": "magento-community"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_eol_versions≈ 132 tokens

  Get versions that have reached end-of-life. Each version carries `securitySummary` { status, requiredPatches, upgradeRequired }: `isSecureVersion` and `statusLabel` describe the support lifecycle only, so a supported version can still have open bulletins. Call check_version_security for the remedies.

  Paramètres, retour & exemple (1)

  Paramètres

  • distribution · string · requis · magento-community | magento-commerce | mage-os

  Exemple d'appel

  {"name": "get_eol_versions", "arguments": {"distribution": "magento-community"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_latest_version≈ 134 tokens

  Get the latest stable version for a distribution. Each version carries `securitySummary` { status, requiredPatches, upgradeRequired }: `isSecureVersion` and `statusLabel` describe the support lifecycle only, so a supported version can still have open bulletins. Call check_version_security for the remedies.

  Paramètres, retour & exemple (1)

  Paramètres

  • distribution · string · requis · magento-community | magento-commerce | mage-os

  Exemple d'appel

  {"name": "get_latest_version", "arguments": {"distribution": "magento-community"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_patch≈ 226 tokens

  Get one Quality Patches Tool patch by id (e.g. "ACSD-56760") with every file variant, its Composer constraint, resolved applicable versions per distribution, modified files, prerequisites, documentation fields and the raw patch URL.

  Paramètres, retour & exemple (3)

  Paramètres

  • id · string · requis
    Patch id, e.g. "ACSD-56760"
  • version · string · optionnel
    Optional version: includes install instructions and a bundle URL for all applicable non-deprecated files, or composer null when none apply. Without a version, returns the bare entry.
  • distribution · string · optionnel · magento-community | magento-commerce
    Optional distribution for installation. Defaults to magento-commerce when a live Commerce file applies to the version, otherwise magento-community.

  Exemple d'appel

  {"name": "get_patch", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_security_bulletin≈ 106 tokens

  Get one security bulletin by id, including a plain-text summary, its CVEs, severity, and which versions per distribution contain the fix. Use this when the user names a specific bulletin or asks which patch fixes a given CVE.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · requis
    Bulletin id (e.g., "APSB24-40")

  Exemple d'appel

  {"name": "get_security_bulletin", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_security_bulletins≈ 140 tokens

  List Adobe/Magento security bulletins (CVEs), optionally filtered by severity or publish date. Use this to list critical bulletins since a given date, or to survey what has been disclosed.

  Paramètres, retour & exemple (2)

  Paramètres

  • since · string · optionnel
    Only return bulletins published on or after this date (YYYY-MM-DD)
  • severity · string · optionnel · critical | important | moderate
    Only return bulletins of this severity

  Exemple d'appel

  {"name": "get_security_bulletins", "arguments": {"since": "texte", "severity": "critical"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_supported_versions≈ 140 tokens

  Get only currently supported versions (not EOL, not future releases). Each version carries `securitySummary` { status, requiredPatches, upgradeRequired }: `isSecureVersion` and `statusLabel` describe the support lifecycle only, so a supported version can still have open bulletins. Call check_version_security for the remedies.

  Paramètres, retour & exemple (1)

  Paramètres

  • distribution · string · requis · magento-community | magento-commerce | mage-os

  Exemple d'appel

  {"name": "get_supported_versions", "arguments": {"distribution": "magento-community"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_upstream_fix≈ 272 tokens

  Community fixes merged into magento/magento2 after a release line was cut, with per-version applicability from git apply checks; not Adobe Quality Patches, for those use find_patch. Get one upstream fix by id (e.g. "magento2-40867") with its pull request, linked issues, first release containing it, per-tag code match, affected versions, touched packages and files, labels and triage scores. Pass version, and optionally distribution, to get the code match for that version and the Composer bundle URL when the fix applies to it.

  Paramètres, retour & exemple (3)

  Paramètres

  • id · string · requis
    Upstream fix id, e.g. "magento2-40867"
  • version · string · optionnel
    Optional version: adds the code match for that version and the Composer bundle URL, or install null when the fix does not apply to it
  • distribution · string · optionnel · magento-community | magento-commerce
    Optional distribution for installation, default magento-community

  Exemple d'appel

  {"name": "get_upstream_fix", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_version≈ 171 tokens

  Get detailed information about a specific Magento/Adobe Commerce version including release date, EOL date, system requirements, and a security summary: `security.fixedBy` (security fixes already included in this version) and `security.vulnerableTo` (open bulletins that still need an upgrade or an isolated patch)

  Paramètres, retour & exemple (2)

  Paramètres

  • version · string · requis
    Version number (e.g., "2.4.8", "2.4.7-p3")
  • distribution · string · requis · magento-community | magento-commerce | mage-os
    The Magento distribution

  Exemple d'appel

  {"name": "get_version", "arguments": {"version": "texte", "distribution": "magento-community"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://magento.watch/mcp/api