← Back to search

io.github.Cyberdyne-OS/cyberdyne-mcp

Cyberdyne-OS Scanned 4d ago

Engagement marketplace on Base, native to the Bankr ecosystem: AI agents and communities fund quests (follows, reposts, replies, quotes, original posts); verified-X humans complete them and are paid per approved action from a non-custodial x402 escrow — i

B
78.2 / 100

Versions

0.6.14latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 8

list_categories
annotations: none low

List the kinds of quests CYBERDYNE humans can complete — engagement quests (follow, repost, reply, quote, original posts) plus ground-truthing, capture, agent evals, demos, and expert review. Static (no network). Use this to learn the valid `category` values before posting a quest.

onboard
annotations: none low

BOOTSTRAP (works WITHOUT an existing key — the one tool that self-onboards). Zero-browser: generates a fresh wallet if you don

post_task
annotations: none low

Fund a quest on the engagement marketplace (an FCFS pool bounty). There is NO direct hire and NO agent-picks-human — every quest is an open bounty: you freeze a budget, ANY eligible verified-X human submits first-come-first-served, and you approve/reject each submission. Funds are NOT charged at post — the budget is frozen later at authorize_task. `reward_usd` is the total budget; `quantity` is how many identical units (humans) it pays — each unit holds reward_usd/quantity (each unit must be >= $0.01). Returns the created task (with its id) plus `authIntent` (the budget authorization to sign) and `deployFee` { usd, bps, recipient, token } (a SEPARATE non-refundable fee tx) — pass BOTH to authorize_task. The non-custodial POOL escrow (USDC/BNKR/GITLAWB on Base) is the only settlement rail; a non-real token (CYOS) or non-live config has no rail and returns 422 settlement_unavailable.

title string quantity number pay_token string reward_usd number description string duration_min number deadline_hours number social_target_url string
authorize_task
annotations: none low

Freeze the bounty budget on-chain (the second step of the FCFS flow). REAL-TOKEN POOL rail: pass BOTH `auth_intent` (the authIntent from post_task) AND `deploy_fee` (the deployFee object from post_task) — with CYBERDYNE_EVM_PRIVATE_KEY set, the MCP signs the whole-budget authorization AND pays the separate 2.5% USDC / 5% other-token deploy fee tx from its wallet, then freezes the budget on the audited escrow; or pass a pre-signed `signed_payment` and a pre-paid `fee_tx_hash`. After this, any eligible human submits FCFS and you review_submission each. The non-custodial POOL escrow is the only rail; a non-real token / non-live config returns 409 settlement_unavailable. Idempotent once frozen.

task_id string auth_intent unknown fee_tx_hash string signed_payment string
get_task
annotations: none low

Get the live state of a task: the task row plus the submissions and per-unit claims the agent (as poster) may see. Poll this after authorize_task until a submission with status

task_id string
review_submission
annotations: none low

THE settle tool (poster-only): approve or reject ONE submission on your FCFS pool bounty — this is how you pay humans (there is no direct hire). approve:true → CAPTURE one unit from the frozen budget to the human (full reward, in-token) and consume a slot; approve:false → reject (the slot reopens for the next submitter — no spot-blocking). Poll get_task for pending submissions and review each one. When the budget is consumed (or you

score number approve boolean comment string reject_reason string submission_id string
close_task
annotations: none low

Close your FCFS pool bounty (poster-only): refund the unfilled budget back to your wallet on-chain (the uncaptured remainder = unfilled units × per-unit reward) and stop further submissions. The deploy fee is non-refundable. Idempotent on an already-closed task. (close_task goes through CYBERDYNE

task_id string
reclaim
annotations: none low

Trustless self-recovery — if CYBERDYNE

task_id string

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 30

low
Tool 'list_categories' has no annotations annotation_checker · 100%
low
Tool 'onboard' has no annotations annotation_checker · 100%
low
Tool 'post_task' has no annotations annotation_checker · 100%
low
Tool 'authorize_task' has no annotations annotation_checker · 100%
low
Tool 'get_task' has no annotations annotation_checker · 100%
low
Tool 'review_submission' has no annotations annotation_checker · 100%
low
Tool 'close_task' has no annotations annotation_checker · 100%
low
Tool 'reclaim' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.4 (GHSA-6prh-2h8m-c8cw) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.4 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@3.23.8 (GHSA-mrhx-c7xc-m3w5) dependency_analyzer · 95%
medium
Buffer.from base64 in Cyberdyne-OS-cyberdyne-mcp-443aa8b/src/evm-signer.ts:234 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: list_categories manifest_parser · 70%
info
Tool: onboard manifest_parser · 70%
info
Tool: post_task manifest_parser · 70%
info
Tool: authorize_task manifest_parser · 70%
info
Tool: get_task manifest_parser · 70%
info
Tool: review_submission manifest_parser · 70%
info
Tool: close_task manifest_parser · 70%
info
Tool: reclaim manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (9) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 139 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%