xyz.botfriendly/botfriendly

Est-ce que xyz.botfriendly/botfriendly est sûr ?

Au dernier audit MCP Hub, le serveur MCP « xyz.botfriendly/botfriendly » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 7 outils

• check_site≈ 254 tokens

  Score how bot-friendly a website is (0-100). Fetches the site the way an agent would — no JavaScript, no cookies — and checks access (reachability, HTTPS, robots.txt, AI crawlers allowed, real 404s), content without JavaScript (H1, 500+ chars of raw text, metadata, JSON-LD), and machine discovery (llms.txt, sitemap, OpenAPI spec or ai-plugin.json), with evidence and fix advice per check. Set format to 'prompt' to instead get a ready-to-paste coding-agent prompt that fixes every failed finding. Rate limited to 6 checks per minute per caller; each check takes a few seconds.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
    Site to check (scheme optional, https assumed; public sites only)
  • format · string · optionnel · json | prompt
    json (default) returns the full scored report; prompt returns a markdown prompt for a coding agent covering every failed or partial finding

  Exemple d'appel

  {"name": "check_site", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_featured≈ 48 tokens

  Get site-wide featured/promoted services (max 3). These are paid placements clearly marked as ads.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_featured", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_protocol_stats≈ 134 tokens

  Get every protocol on botfriendly.xyz/protocols with adoption stats: how agents call a service and prove who sent them (MCP, OpenAPI, A2A, XAA) and the agent payment, authorization, and commerce protocols (x402, mpp, l402, ap2, tap, agent-pay, ace, acp, ucp, actp, icc). Each entry carries its sponsor, layer, spec URL, and count — how many listed services support it, or null for protocols that aren't a listing attribute (A2A, XAA).

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_protocol_stats", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_service≈ 88 tokens

  Get full details for a specific service by its slug, including all protocol support, URLs, auth method, billing, and metadata.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis
    Service slug (e.g. browserbase, anthropic-claude-api, firecrawl)

  Exemple d'appel

  {"name": "get_service", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_categories≈ 66 tokens

  List every BotFriendly category with its id (the search_services category value), human label, aliases (older slugs still accepted), description and service count.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_categories", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_services≈ 861 tokens

  Search the BotFriendly directory for bot-friendly services, APIs, and tools that AI agents can use. Filter by category, payment/commerce protocol support (x402, MPP, L402, AP2, TAP, Agent Pay, ACE, ACP, UCP, ACTP, ICC), auth method, and more. Results may start with up to 3 promoted listings (paid ads) pinned to the top — site-wide ads on unfiltered searches, category ads on category searches — clearly marked with promoted:true and ad:true. Use promoted=false to exclude ads.

  Paramètres, retour & exemple (12)

  Paramètres

  • page · number · optionnel
    Page number (default 1)
  • sort · string · optionnel · score | votes | name | newest
    Sort order (default: score)
  • query · string · optionnel
    Keyword search (Postgres websearch semantics: multiple words are ANDed, so a single distinctive keyword like 'scraping' matches more than a phrase like 'web scraping')
  • has_mcp · boolean · optionnel
    Only services with MCP servers
  • category · string · optionnel · think | see | hear-speak | create | remember | search | browse | communicate
    Category id: think (Models), see (Vision), hear-speak (Speech), create (Media), remember (Memory), search (Search), browse (Browsers), communicate (Messaging), execute (Compute), pay (Payments), shop (Merchants), markets (Markets), platforms (Platforms), identify (Identity), monitor (Observability), other (Other). Merged categories also accept their old slugs (trade, bet, connect, automate, locate, book, sign, hire).
  • no_human · boolean · optionnel
    Only services an agent can start using with no human setting up a key: probe-backed — its own (non-documentation) MCP server lists its tools to an unauthenticated client and the service needs no key (no auth, or a wallet), or one of its interfaces answers HTTP 402 to be paid per request
  • promoted · boolean · optionnel
    Filter by promoted status: true for promoted only, false for organic only
  • protocol · array · optionnel
    Only services supporting ALL of these agent payment/commerce protocols. x402 (x402, Coinbase, x402 Foundation); mpp (Machine Payments Protocol, Stripe, Tempo); l402 (L402, Lightning Labs); ap2 (Agent Payments Protocol, Google); tap (Trusted Agent Protocol, Visa); agent-pay (Mastercard Agent Pay, Mastercard); ace (Agentic Commerce Experiences, American Express); acp (Agentic Commerce Protocol, OpenAI, Stripe); ucp (Universal Commerce Protocol, Google, Shopify); actp (Agentic Commerce Trust Protocol, Alibaba, Ant International); icc (Intelligent Commerce Connect, Visa)
  • min_score · number · optionnel
    Minimum bot-friendly score (1-5)
  • accepts_mpp · boolean · optionnel
    Only services accepting MPP payments
  • auth_method · string · optionnel · api-key | m2m-oauth | bot-token | wallet | x402-none | none
    Filter by auth method
  • accepts_x402 · boolean · optionnel
    Only services accepting x402 payments

  Exemple d'appel

  {"name": "search_services", "arguments": {"page": 1, "sort": "score", "query": "texte", "has_mcp": true, "category": "think", "no_human": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• submit_service≈ 662 tokens

  Submit a service to the BotFriendly directory. There is no review queue: each interface URL must be on the service's own domain, or linked from the service's own site, and is fetched during the call; the listing publishes immediately if its MCP server, OpenAPI spec or API completes a handshake — one of has_mcp_server, has_openapi_spec or has_api is required; llms.txt, skill files and feeds only add badges. The url must be the product, not an article (/blog/, /news/ and similar are rejected), and a domain can add at most 2 listings a day and 3 in total. Every listing needs an icon — pass icon_url, or leave it out and the service's own site is checked for one.

  Paramètres, retour & exemple (18)

  Paramètres

  • url · string · requis
    Service URL
  • name · string · requis
    Service name
  • tags · array · optionnel
  • api_url · string · optionnel
    Required when has_api is true: the API's base URL (api.example.com, or a path under /api or /v1). It must answer in JSON. On the service's own domain, or linked from its site.
  • has_api · boolean · optionnel
  • category · string · requis · think | see | hear-speak | create | remember | search | browse | communicate
    Category id (see list_categories)
  • icon_url · string · optionnel
    Link to the service's icon (PNG, JPEG, SVG or WebP, under 1MB). Fetched and re-hosted, downscaled to 512px. Omit it and the service's site is checked for one.
  • accepts_mpp · boolean · optionnel
  • auth_method · string · optionnel
    Auth method
  • description · string · requis
    Short description (max 120 chars)
  • icon_base64 · string · optionnel
    Alternative to icon_url: the image inline, as a data: URI or bare base64.
  • accepts_x402 · boolean · optionnel
  • billing_model · string · optionnel
  • contact_email · string · optionnel
    Contact email for verification
  • has_mcp_server · boolean · optionnel
  • mcp_server_url · string · optionnel
    Required when has_mcp_server is true. On the service's own domain, or linked from its site.
  • has_openapi_spec · boolean · optionnel
  • openapi_spec_url · string · optionnel
    Required when has_openapi_spec is true. On the service's own domain, or linked from its site.

  Exemple d'appel

  {"name": "submit_service", "arguments": {"url": "texte", "name": "texte", "category": "think", "description": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.botfriendly.xyz