← MCP Registry Integrity Report
ai.bowmark/bowmark
Verdict: CRITICAL findings present. Endpoint https://api.bowmark.ai/mcp/registry. Tools now: 16 (17 ever seen). Changes recorded: 18. Findings: 2 critical, 3 high. Last probe: OK at 2026-10-22T12:17 UTC. JSON
Current tools
add_connection · delete_connection · get_library · get_secret_link · lease_ip · list_connections · list_secrets · logout_connection · report · request_secret · run · run_view · session_call · session_close · support · wait_for_sign_in
Findings (19)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | get_library | exfiltration_pattern | critical | e a JS script against the `bowmark` global → send it to `run`. The full reference is `get_library({ query: "run guide" } |
| 2026-10-22 | get_library | cross_tool_reference | high | references sibling tool 'support' |
| 2026-10-22 | run | cross_tool_reference | high | references sibling tool 'get_library' |
| 2026-10-22 | session_call | cross_tool_reference | high | references sibling tool 'get_library' |
| 2026-10-22 | session_close | cross_tool_reference | high | references sibling tool 'session_call' |
| 2026-10-22 | report | cross_tool_reference | high | references sibling tool 'get_library' |
| 2026-10-22 | list_secrets | cross_tool_reference | high | references sibling tool 'request_secret' |
| 2026-10-22 | request_secret | secret_material_reference | high | the user the link. Never ask them to type a password, API key or one-time code to you.** A secret in this conversatio |
| 2026-10-22 | request_secret | cross_tool_reference | high | references sibling tool 'list_secrets' |
| 2026-10-22 | get_secret_link | secret_material_reference | high | t holds, so you can answer "where is my Acme password?" with somewhere to go. **It returns a URL, never a value** — op |
| 2026-10-22 | get_secret_link | cross_tool_reference | high | references sibling tool 'list_secrets' |
| 2026-10-22 | list_connections | cross_tool_reference | high | references sibling tool 'add_connection' |
| 2026-10-22 | add_connection | exfiltration_pattern | critical | nnect or link an account on a site** — never send them to the Bowmark Link extension or the dashboard to do it themselves. |
| 2026-10-22 | add_connection | secret_material_reference | high | o not offer a workaround that asks for their password. A public page on that site still works without a login: `get_li |
| 2026-10-22 | add_connection | cross_tool_reference | high | references sibling tool 'get_library' |
| 2026-10-22 | wait_for_sign_in | cross_tool_reference | high | references sibling tool 'add_connection' |
| 2026-10-22 | lease_ip | cross_tool_reference | high | references sibling tool 'get_library' |
| 2026-10-22 | delete_connection | cross_tool_reference | high | references sibling tool 'list_connections' |
| 2026-10-22 | logout_connection | cross_tool_reference | high | references sibling tool 'support' |
Change history (18)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 12:17 | register | removed | info |
| 2026-10-22 06:17 | get_library | mutated | critical |
| 2026-10-22 06:17 | run | mutated | high |
| 2026-10-22 06:17 | run_view | added | info |
| 2026-10-22 06:17 | session_call | added | high |
| 2026-10-22 06:17 | session_close | added | high |
| 2026-10-22 06:17 | report | added | high |
| 2026-10-22 06:17 | support | added | info |
| 2026-10-22 06:17 | list_secrets | added | high |
| 2026-10-22 06:17 | request_secret | added | high |
| 2026-10-22 06:17 | get_secret_link | added | high |
| 2026-10-22 06:17 | list_connections | added | high |
| 2026-10-22 06:17 | add_connection | added | critical |
| 2026-10-22 06:17 | wait_for_sign_in | added | high |
| 2026-10-22 06:17 | lease_ip | added | high |
| 2026-10-22 06:17 | delete_connection | added | high |
| 2026-10-22 06:17 | logout_connection | added | high |
| 2026-10-22 06:17 | register | removed | info |
Probe history
10-22 12:17 OK (16) · 10-22 06:17 OK (16) · 08-13 06:17 OK (3)
Run or depend on ai.bowmark/bowmark? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).