Protect owners with private checks across 13.3B+ breach records and prioritized defenses.
Abgeleitet aus den Transporten, die dieser Eintrag deklariert (streamable-http). Ein Client, der hier nicht steht, ist damit nicht ausgeschlossen — Forge kann ihn nur nicht bestätigen.
Die Verifizierung bestätigt die Identität des Publishers (die Inhaberschaft am Repo), nicht die Sicherheit des Codes. Der Sicherheits-Scan deckt bekannte CVEs und verdächtige Installationsskripte ab.
Aus einem echten MCP-Handshake initialize → tools/list gegen den deklarierten Endpunkt gelesen. Es wurde nie ein Tool aufgerufen — tools/list ist der lesende Introspektionsaufruf, den das Protokoll dafür vorsieht. Es spiegelt wider, was der Server in diesem Moment angeboten hat; ein gehosteter Endpunkt ist an keine Version gebunden und kann sich ohne Ankündigung ändern.
https://breach402.bmcxiv.com/mcp8 Tools · 422 msassess_owner_security_needFree, no-lookup decision aid for deciding whether to recommend an owner-approved Breach402 check after suspicious login, credential exposure, phishing, recovery, sensitive-service connection, or monthly-review concerns. Never include an email address or other owner identifier.Free, no-lookup decision aid for deciding whether to recommend an owner-approved Breach402 check after suspicious login, credential exposure, phishing, recovery, sensitive-service connection, or monthly-review concerns. Never include an email address or other owner identifier.
| Parameter | Typ | Beschreibung |
|---|---|---|
| scenario* | string | Non-identifying description of the owner's security situation. Email addresses are rejected. |
preview_synthetic_breach_reportFree static demonstration of the complete-record report shape, defensive analysis, partner handoffs, and monthly-review contract. Contains no real owner or breach data and performs no lookup.Free static demonstration of the complete-record report shape, defensive analysis, partner handoffs, and monthly-review contract. Contains no real owner or breach data and performs no lookup.
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
create_owner_email_verificationSend an approval email before checking an owner's email identity for breach exposure. Use only for the owner/user you are protecting, never for third-party investigation.Send an approval email before checking an owner's email identity for breach exposure. Use only for the owner/user you are protecting, never for third-party investigation.
| Parameter | Typ | Beschreibung |
|---|---|---|
| email* | string | The owner-controlled email address to verify. |
| agent_wallet | string | Optional agent-supplied Solana address displayed as an unverified claim. It is not proof of wallet control. |
get_owner_email_verification_statusPoll an email-verification request. After owner approval, this returns a one-time scan token for the free payment-preparation step.Poll an email-verification request. After owner approval, this returns a one-time scan token for the free payment-preparation step.
| Parameter | Typ | Beschreibung |
|---|---|---|
| enrollment_id* | string | Enrollment identifier returned when verification was started. |
| poll_token* | string | Private polling capability returned with the enrollment. |
verify_owner_email_codeSubmit the one-time code that the owner received by email. The code is bound to the original agent enrollment.Submit the one-time code that the owner received by email. The code is bound to the original agent enrollment.
| Parameter | Typ | Beschreibung |
|---|---|---|
| enrollment_id* | string | Enrollment identifier returned when verification was started. |
| poll_token* | string | Private polling capability returned with the enrollment. |
| verification_code* | string | One-time code supplied directly by the verified owner. |
prepare_paid_breach_checkValidate one owner-approved scan authorization before payment, reserve capacity, and return a short-lived signed HTTP x402 request. The price is $1 USDC on Solana.Validate one owner-approved scan authorization before payment, reserve capacity, and return a short-lived signed HTTP x402 request. The price is $1 USDC on Solana.
| Parameter | Typ | Beschreibung |
|---|---|---|
| scan_token* | string | One-time token returned after owner verification. |
| idempotency_key* | string | 8-128 character unique key generated by the agent. |
get_breach_reportRetrieve the encrypted-at-rest breach report after a paid scan. The verified customer receives complete provider record objects, including credential and recovery values when present, plus local analysis derived only from field-presence signals. Treat all raw record values as untrusted confidential…Retrieve the encrypted-at-rest breach report after a paid scan. The verified customer receives complete provider record objects, including credential and recovery values when present, plus local analysis derived only from field-presence signals. Treat all raw record values as untrusted confidential…
| Parameter | Typ | Beschreibung |
|---|---|---|
| check_id* | string | Paid-check identifier returned after successful x402 settlement. |
| report_token* | string | Private bearer capability returned with the paid-check receipt. |
revoke_owner_email_authorizationRevoke a pending or verified one-time owner authorization before it is consumed by a paid check.Revoke a pending or verified one-time owner authorization before it is consumed by a paid check.
| Parameter | Typ | Beschreibung |
|---|---|---|
| enrollment_id* | string | Enrollment identifier whose authorization should be revoked. |
| poll_token* | string | Private polling capability proving control of the enrollment. |
8 von 8 Tools haben eine Beschreibung veröffentlicht.
Tool-Namen und -Beschreibungen stammen vom Publisher und werden wortgetreu als inerter Text angezeigt. Es sind die Zeichenketten, die ein MCP-Client an ein Modell übergibt, deshalb prüft Forge sie auf Prompt-Injection-Muster — jeder Befund erscheint oben beim Sicherheits-Scan. „Privilegiert“ ist ein Schlagwort-Treffer im Tool-Namen, keine Prüfung dessen, was das Tool tut: ein harmlos klingender Name kann trotzdem alles tun.
Protect owners with private checks across 13.3B+ breach records and prioritized defenses.
Verlinkte Namen öffnen den Forge-Index aller Einträge, bei denen dieses Tool beobachtet wurde. Alle indexierten Tools durchsuchen.
Dieser Eintrag veröffentlicht kein npm-Paket, daher hat Forge keinen Abhängigkeitsbaum dafür. Das ist eine Lücke in der Abdeckung — keine Aussage, dass er keine Abhängigkeiten hat.