← MCP Registry Integrity Report
ai.chronary/mcp
Verdict: CRITICAL findings present. Endpoint https://api.chronary.ai/mcp. Tools now: 54 (54 ever seen). Changes recorded: 54. Findings: 23 high, 1 critical. Last probe: OK at 2026-10-22T12:17 UTC. JSON
Current tools
accept_terms · cancel_connection_link · cancel_event · cancel_proposal · clear_availability_rules · confirm_event · create_agent · create_booking_page · create_calendar · create_connection_link · create_event · create_proposal · create_scoped_key · create_webhook · delete_agent · delete_booking_page · delete_calendar · delete_ical_subscription · delete_webhook · find_meeting_time · get_agent · get_audit_log · get_availability · get_availability_rules · get_booking_page · get_calendar · get_calendar_context · get_connection_link · get_event · get_ical_subscription · get_proposal · get_usage · get_webhook · list_agents · list_booking_pages · list_calendars · list_events · list_ical_subscriptions · list_proposals · list_scoped_keys · list_webhook_deliveries · list_webhooks · release_event · resolve_proposal · respond_to_proposal · revoke_scoped_key · set_availability_rules · subscribe_ical · sync_ical_subscription · update_agent · update_calendar · update_event · update_ical_subscription · update_webhook
Findings (30)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | create_event | cross_tool_reference | high | references sibling tool 'create_calendar' |
| 2026-10-22 | update_event | cross_tool_reference | high | references sibling tool 'confirm_event' |
| 2026-10-22 | cancel_event | cross_tool_reference | high | references sibling tool 'confirm_event' |
| 2026-10-22 | get_calendar_context | cross_tool_reference | high | references sibling tool 'list_events' |
| 2026-10-22 | create_proposal | secret_material_reference | high | ncels if all decline). Requires an org-level API key. Pro plan only. |
| 2026-10-22 | list_proposals | secret_material_reference | high | or organizer_agent_id. Requires an org-level API key. |
| 2026-10-22 | get_proposal | secret_material_reference | high | participant responses. Requires an org-level API key. |
| 2026-10-22 | respond_to_proposal | secret_material_reference | high | ed in the normal flow. Requires an org-level API key. Pro plan only. |
| 2026-10-22 | resolve_proposal | secret_material_reference | high | for every participant. Requires an org-level API key. Pro plan only. |
| 2026-10-22 | cancel_proposal | secret_material_reference | high | "organizer_cancelled". Requires an org-level API key. Pro plan only. |
| 2026-10-22 | get_availability_rules | cross_tool_reference | high | references sibling tool 'get_availability' |
| 2026-10-22 | create_scoped_key | secret_material_reference | high | Create an agent-scoped API key (chr_ak_*) that can only act on behalf of a single agent. Use th |
| 2026-10-22 | list_scoped_keys | secret_material_reference | high | List all live (non-revoked) agent-scoped API keys for this org. Returns key metadata only (id, prefix, agent_id, |
| 2026-10-22 | revoke_scoped_key | secret_material_reference | high | Revoke an agent-scoped API key by ID. Revocation is permanent (cannot be un-revoked); the key s |
| 2026-10-22 | create_webhook | secret_material_reference | high | on delivered payloads. Requires an org-level API key. |
| 2026-10-22 | list_webhooks | secret_material_reference | high | ts are never returned. Requires an org-level API key. |
| 2026-10-22 | get_webhook | secret_material_reference | high | ret is never returned. Requires an org-level API key. |
| 2026-10-22 | update_webhook | secret_material_reference | high | ield must be supplied. Requires an org-level API key. |
| 2026-10-22 | delete_webhook | secret_material_reference | high | inst the per-plan cap. Requires an org-level API key. |
| 2026-10-22 | list_webhook_deliveries | secret_material_reference | high | ug failing deliveries. Requires an org-level API key. |
| 2026-10-22 | get_agent | secret_material_reference | high | resource (e.g. a meeting room). Agent-scoped API keys may only read their own agent. |
| 2026-10-22 | update_agent | secret_material_reference | high | tatus (active/paused). Requires an org-level API key — agent-scoped keys cannot mutate agents. |
| 2026-10-22 | delete_agent | secret_material_reference | high | decommissioned and revokes all of its scoped API keys. Requires an org-level API key — agent-scoped keys cannot delet |
| 2026-10-22 | list_calendars | secret_material_reference | high | List calendars in the org. Org-level API keys see every calendar (agent-owned and shared); agent-scoped keys |
| 2026-10-22 | create_booking_page | cross_tool_reference | high | references sibling tool 'create_calendar' |
| 2026-10-22 | get_usage | secret_material_reference | high | oss-calendar queries). Requires an org-level API key (chr_sk_*); agent-scoped keys cannot read org-wide usage. |
| 2026-10-22 | get_audit_log | user_concealment | critical | Start of the window (ISO 8601). Silently clamped to the plan retention window if older. |
| 2026-10-22 | get_audit_log | secret_material_reference | high | an's retention window. Requires an org-level API key (chr_sk_*); agent-scoped keys cannot read the org-wide audit log |
| 2026-10-22 | accept_terms | secret_material_reference | high | 1/auth/terms/current). Requires an org-level API key (chr_sk_*); agent-scoped keys cannot accept org-wide terms. |
| 2026-10-22 | create_connection_link | secret_material_reference | high | l to a human; the agent never receives OAuth credentials, provider calendar names, or event data. The secret URL is retu |
Change history (54)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 06:17 | create_agent | mutated | medium |
| 2026-10-22 06:17 | list_agents | mutated | medium |
| 2026-10-22 06:17 | create_calendar | mutated | medium |
| 2026-10-22 06:17 | create_event | mutated | high |
| 2026-10-22 06:17 | list_events | mutated | medium |
| 2026-10-22 06:17 | get_event | mutated | medium |
| 2026-10-22 06:17 | update_event | mutated | high |
| 2026-10-22 06:17 | get_availability | mutated | medium |
| 2026-10-22 06:17 | find_meeting_time | mutated | medium |
| 2026-10-22 06:17 | cancel_event | mutated | high |
| 2026-10-22 06:17 | confirm_event | mutated | medium |
| 2026-10-22 06:17 | release_event | mutated | medium |
| 2026-10-22 06:17 | subscribe_ical | mutated | medium |
| 2026-10-22 06:17 | list_ical_subscriptions | mutated | medium |
| 2026-10-22 06:17 | get_ical_subscription | mutated | medium |
| 2026-10-22 06:17 | update_ical_subscription | mutated | medium |
| 2026-10-22 06:17 | delete_ical_subscription | mutated | medium |
| 2026-10-22 06:17 | sync_ical_subscription | mutated | medium |
| 2026-10-22 06:17 | get_calendar_context | mutated | high |
| 2026-10-22 06:17 | create_proposal | mutated | high |
| 2026-10-22 06:17 | list_proposals | mutated | high |
| 2026-10-22 06:17 | get_proposal | mutated | high |
| 2026-10-22 06:17 | respond_to_proposal | mutated | high |
| 2026-10-22 06:17 | resolve_proposal | mutated | high |
| 2026-10-22 06:17 | cancel_proposal | mutated | high |
| 2026-10-22 06:17 | set_availability_rules | mutated | medium |
| 2026-10-22 06:17 | get_availability_rules | mutated | high |
| 2026-10-22 06:17 | clear_availability_rules | mutated | medium |
| 2026-10-22 06:17 | create_scoped_key | mutated | high |
| 2026-10-22 06:17 | list_scoped_keys | mutated | high |
| 2026-10-22 06:17 | revoke_scoped_key | mutated | high |
| 2026-10-22 06:17 | create_webhook | mutated | high |
| 2026-10-22 06:17 | list_webhooks | mutated | high |
| 2026-10-22 06:17 | get_webhook | mutated | high |
| 2026-10-22 06:17 | update_webhook | mutated | high |
| 2026-10-22 06:17 | delete_webhook | mutated | high |
| 2026-10-22 06:17 | list_webhook_deliveries | mutated | high |
| 2026-10-22 06:17 | get_agent | mutated | high |
| 2026-10-22 06:17 | update_agent | mutated | high |
| 2026-10-22 06:17 | delete_agent | mutated | high |
| 2026-10-22 06:17 | list_calendars | mutated | high |
| 2026-10-22 06:17 | get_calendar | mutated | medium |
| 2026-10-22 06:17 | update_calendar | mutated | medium |
| 2026-10-22 06:17 | delete_calendar | mutated | medium |
| 2026-10-22 06:17 | create_booking_page | mutated | high |
| 2026-10-22 06:17 | list_booking_pages | mutated | medium |
| 2026-10-22 06:17 | get_booking_page | mutated | medium |
| 2026-10-22 06:17 | delete_booking_page | mutated | medium |
| 2026-10-22 06:17 | get_usage | mutated | high |
| 2026-10-22 06:17 | get_audit_log | mutated | critical |
| 2026-10-22 06:17 | accept_terms | mutated | high |
| 2026-10-22 06:17 | create_connection_link | mutated | high |
| 2026-10-22 06:17 | get_connection_link | mutated | medium |
| 2026-10-22 06:17 | cancel_connection_link | mutated | medium |
Probe history
10-22 12:17 OK (54) · 10-22 06:17 OK (54) · 08-13 06:17 OK (54)
Run or depend on ai.chronary/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).