← MCP Registry Integrity Report
ai.ciphyr.agentmart/core
Verdict: CRITICAL findings present. Endpoint https://agentmart.ciphyr.ai/mcp/core. Tools now: 33 (33 ever seen). Changes recorded: 33. Findings: 3 high, 1 critical. Last probe: OK at 2026-10-24T12:17 UTC. JSON
Current tools
agentmart_read · agentmart_tools · agentmart_write · blueprint_put_stage · blueprint_update_task · buy · buy_site_badge · cancel_job · check_emails · check_sender · claim_refund · close_shop_window · create_passport · get_item · heartbeat_remove · inbox_pro_set · locker_delete · locker_put · queue_ack · queue_extend · reminder_delete · revoke_passport · save_owner_picks · schedule_delete · search_catalog · set_form_digest · share_set · show_shop_to_owner · top_up · uptime_remove · wakeup_cancel · whoami · withdraw_ask
Findings (10)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-24 | create_passport | secret_material_reference | high | d token: it is shown only once. No email, no password. When your app signed in (whoami works without a token), you alr |
| 2026-10-24 | whoami | secret_material_reference | high | Your passport, how strong this sign-in is (credential), balance (owner.balance_expires_at: when it expires without a t |
| 2026-10-24 | get_item | cross_tool_reference | high | references sibling tool 'search_catalog' |
| 2026-10-24 | top_up | model_directed_instruction | high | ver, then pay on Stripe's page (USD). Humans always use pay_link. Only for a machine payment by your own agent wallet se |
| 2026-10-24 | buy | cross_tool_reference | high | references sibling tool 'search_catalog' |
| 2026-10-24 | inbox_pro_set | exfiltration_pattern | critical | Where to forward every message; null turns it off. |
| 2026-10-24 | show_shop_to_owner | cross_tool_reference | high | references sibling tool 'search_catalog' |
| 2026-10-24 | close_shop_window | cross_tool_reference | high | references sibling tool 'show_shop_to_owner' |
| 2026-10-24 | agentmart_read | cross_tool_reference | high | references sibling tool 'agentmart_tools' |
| 2026-10-24 | agentmart_write | cross_tool_reference | high | references sibling tool 'agentmart_tools' |
Change history (33)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-24 12:17 | create_passport | added | high |
| 2026-10-24 12:17 | whoami | added | high |
| 2026-10-24 12:17 | revoke_passport | added | info |
| 2026-10-24 12:17 | search_catalog | added | info |
| 2026-10-24 12:17 | get_item | added | high |
| 2026-10-24 12:17 | top_up | added | high |
| 2026-10-24 12:17 | buy | added | high |
| 2026-10-24 12:17 | cancel_job | added | info |
| 2026-10-24 12:17 | check_emails | added | info |
| 2026-10-24 12:17 | locker_put | added | info |
| 2026-10-24 12:17 | locker_delete | added | info |
| 2026-10-24 12:17 | wakeup_cancel | added | info |
| 2026-10-24 12:17 | withdraw_ask | added | info |
| 2026-10-24 12:17 | uptime_remove | added | info |
| 2026-10-24 12:17 | schedule_delete | added | info |
| 2026-10-24 12:17 | heartbeat_remove | added | info |
| 2026-10-24 12:17 | reminder_delete | added | info |
| 2026-10-24 12:17 | inbox_pro_set | added | critical |
| 2026-10-24 12:17 | queue_ack | added | info |
| 2026-10-24 12:17 | queue_extend | added | info |
| 2026-10-24 12:17 | check_sender | added | info |
| 2026-10-24 12:17 | share_set | added | info |
| 2026-10-24 12:17 | set_form_digest | added | info |
| 2026-10-24 12:17 | claim_refund | added | info |
| 2026-10-24 12:17 | blueprint_put_stage | added | info |
| 2026-10-24 12:17 | blueprint_update_task | added | info |
| 2026-10-24 12:17 | buy_site_badge | added | info |
| 2026-10-24 12:17 | show_shop_to_owner | added | high |
| 2026-10-24 12:17 | close_shop_window | added | high |
| 2026-10-24 12:17 | save_owner_picks | added | info |
| 2026-10-24 12:17 | agentmart_tools | added | info |
| 2026-10-24 12:17 | agentmart_read | added | high |
| 2026-10-24 12:17 | agentmart_write | added | high |
Probe history
10-24 12:17 OK (33)
Run or depend on ai.ciphyr.agentmart/core? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).