Loading…
On-demand VPS provisioning and management for AI agents via EQVPS.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The eqvps MCP server exposes 26 tools, focused primarily on general-purpose capabilities. Its published description reads: "On-demand VPS provisioning and management for AI agents via EQVPS". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates eqvps F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Data-exfiltration parameters". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check eqvps's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add eqvps to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.eqvps.com/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
List all available VPS plans (catalog) with pricing, specs and the OS images each plan can boot. No authentication needed. Use this first to pick a `product` slug and an `os_id` for `order_vps`.
Create a new EQVPS customer account with first_name, last_name, email. Returns a bearer `token` — store it and send it as `Authorization: Bearer <token>` on every following request. No password or hum
Log in with email + password. Returns a bearer `token` to send as `Authorization: Bearer <token>` on subsequent requests.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: list_plans
A tool description tries to alter the model’s use of another tool.
an `os_id` for `order_vps`.RecommendationDescriptions must describe only their own tool.
tool: register_account
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
turns a bearer `token` — store it and send it as `Authorization: BearRecommendationRemove side-channel parameters; constrain tool inputs.
tool: login
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
in with email + password. Returns a bearer `token` to send as `AuthorizaRecommendationRemove side-channel parameters; constrain tool inputs.
tool: login
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "password"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_balance
A tool description tries to alter the model’s use of another tool.
and currency. `order_vps` spends from this balance automatically when itRecommendationDescriptions must describe only their own tool.
tool: order_vps
A tool description tries to alter the model’s use of another tool.
plan slug from list_plans; `os_id` = an OS id from that plan's images. OpRecommendationDescriptions must describe only their own tool.
tool: order_vps
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "ssh_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_vps_status
A tool description tries to alter the model’s use of another tool.
reveal`) after `order_vps` to watch provisioning reach `active`. NAT planRecommendationDescriptions must describe only their own tool.
tool: reset_password
A tool description tries to alter the model’s use of another tool.
hostname (from get_vps_status) or 'DELETE'. Agent must confirm with the humanRecommendationDescriptions must describe only their own tool.
tool: reinstall_vps
A tool description tries to alter the model’s use of another tool.
e (`os_id` from list_plans). Provisioning runs asynchronously; poll `get_vRecommendationDescriptions must describe only their own tool.
tool: cancel_service
A tool description tries to alter the model’s use of another tool.
r hostname (see get_vps_status). Use end_of_period unless you explicitly intenRecommendationDescriptions must describe only their own tool.
tool: revoke_delegation
A tool description tries to alter the model’s use of another tool.
s notified. Use list_delegations / list_delegated_to_me to find the id.RecommendationDescriptions must describe only their own tool.
tool: create_ticket
A tool description tries to alter the model’s use of another tool.
— use that with get_ticket / reply_ticket / close_ticket.RecommendationDescriptions must describe only their own tool.
tool: get_ticket
A tool description tries to alter the model’s use of another tool.
code comes from create_ticket / list_tickets.RecommendationDescriptions must describe only their own tool.
tool: reply_ticket
A tool description tries to alter the model’s use of another tool.
icket code from create_ticket / list_tickets.RecommendationDescriptions must describe only their own tool.
tool: close_ticket
A tool description tries to alter the model’s use of another tool.
icket code from create_ticket / list_tickets.RecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: register_account
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "register_account"RecommendationScope tools to the minimum needed.
tool: login
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "login"RecommendationScope tools to the minimum needed.
tool: topup_balance
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "topup_balance"RecommendationScope tools to the minimum needed.
tool: set_hostname
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "set_hostname"RecommendationScope tools to the minimum needed.
tool: reset_password
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "reset_password"RecommendationScope tools to the minimum needed.
tool: reinstall_vps
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "reinstall_vps"RecommendationScope tools to the minimum needed.
tool: cancel_service
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "cancel_service"RecommendationScope tools to the minimum needed.
tool: delegate_service
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "delegate_service"RecommendationScope tools to the minimum needed.
tool: accept_delegation
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "accept_delegation"RecommendationScope tools to the minimum needed.
tool: reply_ticket
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "reply_ticket"RecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Return the authenticated account profile (id, name, email). Use to verify the bearer token is valid.
Return the account's prepaid credit balance and currency. `order_vps` spends from this balance automatically when it is sufficient.
Create a top-up invoice and return a `checkout_url` (PayRam crypto checkout). The balance is credited automatically once the on-chain payment confirms. `amount` is in account currency (USD); minimum a
Order a VPS. `product` = plan slug from list_plans; `os_id` = an OS id from that plan's images. Optional `hostname` and `ssh_key` (public key — strongly recommended so you get key-based root login). B
Initiate payment for an owned, unpaid invoice. Returns a PayRam `checkout_url`; the invoice settles (and the VPS provisions) automatically once the on-chain payment confirms.
List the account's ACTIVE VPS services — active, provisioning, and suspended servers (deleted/cancelled are excluded). Use the `id` as `service_id` for the management tools. If a server is missing fro
Get full detail for one VPS: status, specs, live VM state/uptime, and SSH access info (host, port, ready-to-paste `command`). ROOT PASSWORD (keyless VPS): call with `reveal: true` to retrieve it. It i
Power-control a VPS: `start`, `stop` or `reboot`.
Set the VPS hostname (valid DNS label; applied on next reboot/rebuild).
Rotate the root password. The new password is applied to the LIVE VM immediately via the guest-agent (no reboot) and works within ~10-30s; the OLD password stops working. REQUIRES confirm = exact host
DESTRUCTIVE — all data is lost. REQUIRES confirm = exact hostname (from get_vps_status) or 'DELETE'. Agent must explicitly confirm with the human before calling. Wipes and reinstalls the VPS with the
Time-series resource metrics (CPU %, memory, network, disk) for a VPS. `timeframe` ∈ hour|day|week|month (default hour).
Cancel a VPS. DEFAULT `end_of_period`: the server stays active until the end of the already-paid period, then is simply not renewed — NO data loss now, safe. `immediate` DESTROYS the VM and ALL data r
Grant OPERATOR access to one of YOUR VPS to another person by email (they can power/reinstall/console/hostname/rdns, but NOT renew, cancel or change billing). Sends them an invitation with an accept l
Accept a delegation invitation using the `token` from the invite link. Creates/links your account and grants operator access. Returns a bearer token for the delegated account.
List outgoing delegations you (the owner) have granted on your services — who has operator access to what, and its status.
List services other owners have delegated operator access to you — the VPS you can operate but don't own.
Revoke a delegation by its id (owner revokes access, or a delegate declines their own). The other side is notified. Use list_delegations / list_delegated_to_me to find the id.
Open a support ticket with EQVPS. `subject` and `message` are required; optional `service_id` ties it to one of your VPS. The response includes the ticket `code` — use that with get_ticket / reply_tic
List your support tickets with status and last-message info. `last_message_author: "staff"` means support has replied since you last looked.
Read one ticket and its full message thread. Each message has an `author`: `you` or `staff` — a `staff` message is a reply from support. Poll this to see new answers. The ticket code comes from create
Post a reply on one of your tickets. Use the ticket code from create_ticket / list_tickets.
Close one of your tickets. `rating` (1-5) and `comment` are OPTIONAL — you can close without rating. Use the ticket code from create_ticket / list_tickets.