← MCP Registry Integrity Report
ai.aivikings/registrar
Verdict: high-severity findings present. Endpoint https://mcp.aivikings.ai/mcp. Tools now: 34 (34 ever seen). Changes recorded: 34. Findings: 3 high. Last probe: OK at 2026-10-24T12:17 UTC. JSON
Current tools
add_dns_record · assign_domain_registration_contact_roles · check_domain_availability · check_single_domain_availability · configure_dns_record · create_contact · create_customer · delete_dns_record · domain_transfer · get_contact · get_current_user · get_customer · get_domain_audit_log · get_domain_pricing · get_domain_status · get_prepaid_balance · get_transfer_auth_code · list_contact_countries · list_contact_states · list_contacts · list_dns_records · list_domain_registration_contacts · list_domains · lock_domain · reconcile_domains · reconcile_provider_client · regenerate_transfer_auth_code · register_domain · remove_domain_registration_contact_roles · renew_domain · unlock_domain · update_dns_record · update_nameservers · update_registrant_contact
Findings (13)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-24 | get_current_user | secret_material_reference | high | ed AIvikings customer for the current bearer API key, including name and email when the key belongs to a customer. |
| 2026-10-24 | check_domain_availability | cross_tool_reference | high | references sibling tool 'get_domain_pricing' |
| 2026-10-24 | check_single_domain_availability | cross_tool_reference | high | references sibling tool 'get_domain_pricing' |
| 2026-10-24 | get_prepaid_balance | cross_tool_reference | high | references sibling tool 'register_domain' |
| 2026-10-24 | create_contact | cross_tool_reference | high | references sibling tool 'list_contact_countries' |
| 2026-10-24 | list_domain_registration_contacts | model_directed_instruction | high | , and the handle to pass to register_domain. Always call this before attempting a domain registration. |
| 2026-10-24 | list_domain_registration_contacts | cross_tool_reference | high | references sibling tool 'register_domain' |
| 2026-10-24 | remove_domain_registration_contact_roles | cross_tool_reference | high | references sibling tool 'register_domain' |
| 2026-10-24 | register_domain | cross_tool_reference | high | references sibling tool 'get_domain_pricing' |
| 2026-10-24 | update_dns_record | cross_tool_reference | high | references sibling tool 'list_dns_records' |
| 2026-10-24 | delete_dns_record | cross_tool_reference | high | references sibling tool 'list_dns_records' |
| 2026-10-24 | unlock_domain | cross_tool_reference | high | references sibling tool 'lock_domain' |
| 2026-10-24 | create_customer | secret_material_reference | high | customer without generating or returning an API key. |
Change history (34)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-24 12:17 | get_domain_audit_log | added | info |
| 2026-10-24 12:17 | get_current_user | added | high |
| 2026-10-24 12:17 | check_domain_availability | added | high |
| 2026-10-24 12:17 | check_single_domain_availability | added | high |
| 2026-10-24 12:17 | get_domain_pricing | added | info |
| 2026-10-24 12:17 | get_prepaid_balance | added | high |
| 2026-10-24 12:17 | list_contact_countries | added | info |
| 2026-10-24 12:17 | list_contact_states | added | info |
| 2026-10-24 12:17 | create_contact | added | high |
| 2026-10-24 12:17 | get_contact | added | info |
| 2026-10-24 12:17 | list_contacts | added | info |
| 2026-10-24 12:17 | list_domain_registration_contacts | added | high |
| 2026-10-24 12:17 | assign_domain_registration_contact_roles | added | info |
| 2026-10-24 12:17 | remove_domain_registration_contact_roles | added | high |
| 2026-10-24 12:17 | register_domain | added | high |
| 2026-10-24 12:17 | get_domain_status | added | info |
| 2026-10-24 12:17 | list_domains | added | info |
| 2026-10-24 12:17 | renew_domain | added | info |
| 2026-10-24 12:17 | update_registrant_contact | added | info |
| 2026-10-24 12:17 | update_nameservers | added | info |
| 2026-10-24 12:17 | configure_dns_record | added | info |
| 2026-10-24 12:17 | list_dns_records | added | info |
| 2026-10-24 12:17 | add_dns_record | added | info |
| 2026-10-24 12:17 | update_dns_record | added | high |
| 2026-10-24 12:17 | delete_dns_record | added | high |
| 2026-10-24 12:17 | domain_transfer | added | info |
| 2026-10-24 12:17 | get_transfer_auth_code | added | info |
| 2026-10-24 12:17 | regenerate_transfer_auth_code | added | info |
| 2026-10-24 12:17 | lock_domain | added | info |
| 2026-10-24 12:17 | unlock_domain | added | high |
| 2026-10-24 12:17 | reconcile_domains | added | info |
| 2026-10-24 12:17 | create_customer | added | high |
| 2026-10-24 12:17 | get_customer | added | info |
| 2026-10-24 12:17 | reconcile_provider_client | added | info |
Probe history
10-24 12:17 OK (34)
Run or depend on ai.aivikings/registrar? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).