← MCP Registry Integrity Report
ai.com.mcp/contabo
Verdict: high-severity findings present. Endpoint https://contabo.run.mcp.com.ai/mcp. Tools now: 124 (124 ever seen). Changes recorded: 125. Findings: 12 high, 5 low. Last probe: OK at 2026-10-22T12:17 UTC. JSON
Current tools
CancelObjectStorage · assignInstancePrivateNetwork · assignIp · bulkDeleteDnsZoneRecords · cancelDomain · cancelInstance · confirmDomainTransferOut · createAssignment · createCustomImage · createDnsZone · createDnsZoneRecord · createHandle · createInstance · createObjectStorage · createPrivateNetwork · createPtrRecord · createRole · createSecret · createSnapshot · createTag · createUser · deleteAssignment · deleteDnsZone · deleteDnsZoneRecord · deleteImage · deletePrivateNetwork · deletePtrRecord · deleteRole · deleteSecret · deleteSnapshot · deleteTag · deleteUser · generateClientSecret · getAuthCode · getObjectStorageCredentials · listDomains · listHandles · listObjectStorageCredentials · orderDomain · patchInstance · patchPrivateNetwork · regenerateObjectStorageCredentials · reinstallInstance · removeHandle · rescue · resendEmailVerification · resetPassword · resetPasswordAction · restart · retrieveApiPermissionsList · retrieveAssignment · retrieveAssignmentList · retrieveAssignmentsAuditsList · retrieveCustomImagesStats · retrieveDataCenterList · retrieveDnsZone · retrieveDnsZoneRecordsList · retrieveDnsZonesList · retrieveDomain · retrieveDomainsAuditsList · retrieveHandle · retrieveHandlesAuditsList · retrieveImage · retrieveImageAuditsList · retrieveImageAuditsList1 · retrieveImageList · retrieveInstance · retrieveInstancesActionsAuditsList · retrieveInstancesAuditsList · retrieveInstancesList · retrieveObjectStorage · retrieveObjectStorageAuditsList · retrieveObjectStorageList · retrieveObjectStoragesStats · retrievePrivateNetwork · retrievePrivateNetworkAuditsList · retrievePrivateNetworkList · retrievePtrRecord · retrievePtrRecordsList · retrieveRecordAuditsList · retrieveRole · retrieveRoleAuditsList · retrieveRoleList · retrieveSecret · retrieveSecretAuditsList · retrieveSecretList · retrieveSnapshot · retrieveSnapshotList · retrieveSnapshotsAuditsList · retrieveTag · retrieveTagAuditsList · retrieveTagList · retrieveUser · retrieveUserAuditsList · retrieveUserClient · retrieveUserIsPasswordSet · retrieveUserList · retrieveVip · retrieveVipAuditsList · retrieveVipList · revokeCancelDomain · revokeDomainTransferOut · rollbackSnapshot · setDefaultHandle · shutdown · start · stop · tool_search · unassignInstancePrivateNetwork · unassignIp · updateDnsZoneRecord · updateDomain · updateHandle · updateImage · updateObjectStorage · updatePtrRecord · updateRole · updateSecret · updateSnapshot · updateTag · updateUser · upgradeInstance · upgradeObjectStorage · validateDomainAvailability
Findings (56)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | retrieveTagAuditsList | cross_tool_reference | high | references sibling tool 'retrieveTag' |
| 2026-10-22 | retrieveAssignmentsAuditsList | cross_tool_reference | high | references sibling tool 'retrieveAssignment' |
| 2026-10-22 | retrievePtrRecordsList | cross_tool_reference | high | references sibling tool 'retrievePtrRecord' |
| 2026-10-22 | retrieveDnsZonesList | cross_tool_reference | high | references sibling tool 'retrieveDnsZone' |
| 2026-10-22 | retrieveDnsZoneRecordsList | cross_tool_reference | high | references sibling tool 'retrieveDnsZone' |
| 2026-10-22 | createDnsZoneRecord | cross_tool_reference | high | references sibling tool 'createDnsZone' |
| 2026-10-22 | deleteDnsZoneRecord | cross_tool_reference | high | references sibling tool 'deleteDnsZone' |
| 2026-10-22 | bulkDeleteDnsZoneRecords | cross_tool_reference | high | references sibling tool 'deleteDnsZone' |
| 2026-10-22 | retrieveImageAuditsList | cross_tool_reference | high | references sibling tool 'retrieveImage' |
| 2026-10-22 | retrieveVipList | cross_tool_reference | high | references sibling tool 'retrieveVip' |
| 2026-10-22 | unassignIp | cross_tool_reference | high | references sibling tool 'assignIp' |
| 2026-10-22 | retrieveVipAuditsList | cross_tool_reference | high | references sibling tool 'retrieveVip' |
| 2026-10-22 | retrieveSecretList | cross_tool_reference | high | references sibling tool 'retrieveSecret' |
| 2026-10-22 | createSecret | secret_material_reference | high | name, type and value. Attribute type can be password or ssh. |
| 2026-10-22 | retrieveSecretAuditsList | cross_tool_reference | high | references sibling tool 'retrieveSecret' |
| 2026-10-22 | retrievePrivateNetworkList | cross_tool_reference | high | references sibling tool 'retrievePrivateNetwork' |
| 2026-10-22 | unassignInstancePrivateNetwork | cross_tool_reference | high | references sibling tool 'assignInstancePrivateNetwork' |
| 2026-10-22 | retrievePrivateNetworkAuditsList | cross_tool_reference | high | references sibling tool 'retrievePrivateNetwork' |
| 2026-10-22 | retrieveUserList | cross_tool_reference | high | references sibling tool 'retrieveUser' |
| 2026-10-22 | createUser | secret_material_reference | high | llResources and roles. You can't specify any password / secrets for the user. For security reasons the user will have |
| 2026-10-22 | updateUser | secret_material_reference | high | l of the user to which activation and forgot password links are being sent to. There is a limit of 255 characters per |
| 2026-10-22 | resetPassword | secret_material_reference | high | resetPassword |
| 2026-10-22 | retrieveUserClient | cross_tool_reference | high | references sibling tool 'retrieveUser' |
| 2026-10-22 | retrieveUserIsPasswordSet | secret_material_reference | high | retrieveUserIsPasswordSet |
| 2026-10-22 | retrieveUserIsPasswordSet | cross_tool_reference | high | references sibling tool 'retrieveUser' |
| 2026-10-22 | retrieveRoleList | cross_tool_reference | high | references sibling tool 'retrieveRole' |
| 2026-10-22 | listObjectStorageCredentials | secret_material_reference | high | listObjectStorageCredentials |
| 2026-10-22 | getObjectStorageCredentials | secret_material_reference | high | getObjectStorageCredentials |
| 2026-10-22 | regenerateObjectStorageCredentials | secret_material_reference | high | regenerateObjectStorageCredentials |
| 2026-10-22 | retrieveUserAuditsList | cross_tool_reference | high | references sibling tool 'retrieveUser' |
| 2026-10-22 | retrieveRoleAuditsList | cross_tool_reference | high | references sibling tool 'retrieveRole' |
| 2026-10-22 | rescue | secret_material_reference | high | `secretId` of the password to login into rescue system for the `root` user. |
| 2026-10-22 | rescue | url_in_description | low | https://cloud-init.io/ |
| 2026-10-22 | resetPasswordAction | secret_material_reference | high | resetPasswordAction |
| 2026-10-22 | resetPasswordAction | url_in_description | low | https://cloud-init.io/ |
| 2026-10-22 | resetPasswordAction | cross_tool_reference | high | references sibling tool 'resetPassword' |
| 2026-10-22 | retrieveInstancesList | cross_tool_reference | high | references sibling tool 'retrieveInstance' |
| 2026-10-22 | createInstance | secret_material_reference | high | Array of `secretId`s of public SSH keys for logging into as `defaultUser` with administrator/root privi |
| 2026-10-22 | createInstance | url_in_description | low | https://cloud-init.io/ |
| 2026-10-22 | reinstallInstance | secret_material_reference | high | instance with a new image and optionally add ssh keys, a root password or cloud-init. |
| 2026-10-22 | reinstallInstance | url_in_description | low | https://cloud-init.io/ |
| 2026-10-22 | retrieveInstancesActionsAuditsList | cross_tool_reference | high | references sibling tool 'retrieveInstance' |
| 2026-10-22 | retrieveInstancesAuditsList | cross_tool_reference | high | references sibling tool 'retrieveInstance' |
| 2026-10-22 | retrieveImageList | url_in_description | low | https://contabo.com |
| 2026-10-22 | retrieveImageList | cross_tool_reference | high | references sibling tool 'retrieveImage' |
| 2026-10-22 | retrieveSnapshotList | cross_tool_reference | high | references sibling tool 'retrieveSnapshot' |
| 2026-10-22 | retrieveImageAuditsList1 | cross_tool_reference | high | references sibling tool 'retrieveImageAuditsList' |
| 2026-10-22 | retrieveSnapshotsAuditsList | cross_tool_reference | high | references sibling tool 'retrieveSnapshot' |
| 2026-10-22 | revokeCancelDomain | cross_tool_reference | high | references sibling tool 'cancelDomain' |
| 2026-10-22 | retrieveHandlesAuditsList | cross_tool_reference | high | references sibling tool 'retrieveHandle' |
| 2026-10-22 | retrieveDomainsAuditsList | cross_tool_reference | high | references sibling tool 'retrieveDomain' |
| 2026-10-22 | retrieveObjectStorageList | cross_tool_reference | high | references sibling tool 'retrieveObjectStorage' |
| 2026-10-22 | retrieveObjectStoragesStats | cross_tool_reference | high | references sibling tool 'retrieveObjectStorage' |
| 2026-10-22 | retrieveObjectStorageAuditsList | cross_tool_reference | high | references sibling tool 'retrieveObjectStorage' |
| 2026-10-22 | retrieveTagList | cross_tool_reference | high | references sibling tool 'retrieveTag' |
| 2026-10-22 | retrieveAssignmentList | cross_tool_reference | high | references sibling tool 'retrieveAssignment' |
Change history (125)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 12:17 | deleteAssignment | mutated | medium |
| 2026-10-22 12:17 | retrieveTagAuditsList | mutated | high |
| 2026-10-22 12:17 | retrieveAssignmentsAuditsList | mutated | high |
| 2026-10-22 12:17 | retrievePtrRecord | mutated | medium |
| 2026-10-22 12:17 | updatePtrRecord | mutated | medium |
| 2026-10-22 12:17 | deletePtrRecord | mutated | medium |
| 2026-10-22 12:17 | createPtrRecord | mutated | medium |
| 2026-10-22 12:17 | retrievePtrRecordsList | mutated | high |
| 2026-10-22 12:17 | retrieveDnsZonesList | mutated | high |
| 2026-10-22 12:17 | createDnsZone | mutated | medium |
| 2026-10-22 12:17 | retrieveDnsZone | mutated | medium |
| 2026-10-22 12:17 | deleteDnsZone | mutated | medium |
| 2026-10-22 12:17 | retrieveDnsZoneRecordsList | mutated | high |
| 2026-10-22 12:17 | createDnsZoneRecord | mutated | high |
| 2026-10-22 12:17 | updateDnsZoneRecord | mutated | medium |
| 2026-10-22 12:17 | deleteDnsZoneRecord | mutated | high |
| 2026-10-22 12:17 | bulkDeleteDnsZoneRecords | mutated | high |
| 2026-10-22 12:17 | retrieveImageAuditsList | mutated | high |
| 2026-10-22 12:17 | retrieveRecordAuditsList | mutated | medium |
| 2026-10-22 12:17 | retrieveVipList | mutated | high |
| 2026-10-22 12:17 | retrieveVip | mutated | medium |
| 2026-10-22 12:17 | assignIp | mutated | medium |
| 2026-10-22 12:17 | unassignIp | mutated | high |
| 2026-10-22 12:17 | retrieveVipAuditsList | mutated | high |
| 2026-10-22 12:17 | retrieveSecretList | mutated | high |
| 2026-10-22 12:17 | createSecret | mutated | high |
| 2026-10-22 12:17 | retrieveSecret | mutated | medium |
| 2026-10-22 12:17 | updateSecret | mutated | medium |
| 2026-10-22 12:17 | deleteSecret | mutated | medium |
| 2026-10-22 12:17 | retrieveSecretAuditsList | mutated | high |
| 2026-10-22 12:17 | retrievePrivateNetworkList | mutated | high |
| 2026-10-22 12:17 | createPrivateNetwork | mutated | medium |
| 2026-10-22 12:17 | patchPrivateNetwork | mutated | medium |
| 2026-10-22 12:17 | retrievePrivateNetwork | mutated | medium |
| 2026-10-22 12:17 | deletePrivateNetwork | mutated | medium |
| 2026-10-22 12:17 | assignInstancePrivateNetwork | mutated | medium |
| 2026-10-22 12:17 | unassignInstancePrivateNetwork | mutated | high |
| 2026-10-22 12:17 | retrievePrivateNetworkAuditsList | mutated | high |
| 2026-10-22 12:17 | retrieveUserList | mutated | high |
| 2026-10-22 12:17 | createUser | mutated | high |
| 2026-10-22 12:17 | retrieveUser | mutated | medium |
| 2026-10-22 12:17 | updateUser | mutated | high |
| 2026-10-22 12:17 | deleteUser | mutated | medium |
| 2026-10-22 12:17 | resetPassword | mutated | high |
| 2026-10-22 12:17 | resendEmailVerification | mutated | medium |
| 2026-10-22 12:17 | retrieveUserClient | mutated | high |
| 2026-10-22 12:17 | generateClientSecret | mutated | medium |
| 2026-10-22 12:17 | retrieveUserIsPasswordSet | mutated | high |
| 2026-10-22 12:17 | retrieveRoleList | mutated | high |
| 2026-10-22 12:17 | createRole | mutated | medium |
| 2026-10-22 12:17 | retrieveRole | mutated | medium |
| 2026-10-22 12:17 | updateRole | mutated | medium |
| 2026-10-22 12:17 | deleteRole | mutated | medium |
| 2026-10-22 12:17 | retrieveApiPermissionsList | mutated | medium |
| 2026-10-22 12:17 | listObjectStorageCredentials | mutated | high |
| 2026-10-22 12:17 | getObjectStorageCredentials | mutated | high |
| 2026-10-22 12:17 | regenerateObjectStorageCredentials | mutated | high |
| 2026-10-22 12:17 | retrieveUserAuditsList | mutated | high |
| 2026-10-22 12:17 | retrieveRoleAuditsList | mutated | high |
| 2026-10-22 12:17 | start | mutated | medium |
| 2026-10-22 12:17 | restart | mutated | medium |
| 2026-10-22 12:17 | stop | mutated | medium |
| 2026-10-22 12:17 | shutdown | mutated | medium |
| 2026-10-22 12:17 | rescue | mutated | high |
| 2026-10-22 12:17 | resetPasswordAction | mutated | high |
| 2026-10-22 12:17 | retrieveInstancesList | mutated | high |
| 2026-10-22 12:17 | createInstance | mutated | high |
| 2026-10-22 12:17 | retrieveInstance | mutated | medium |
| 2026-10-22 12:17 | patchInstance | mutated | medium |
| 2026-10-22 12:17 | reinstallInstance | mutated | high |
| 2026-10-22 12:17 | cancelInstance | mutated | medium |
| 2026-10-22 12:17 | upgradeInstance | mutated | medium |
| 2026-10-22 12:17 | retrieveInstancesActionsAuditsList | mutated | high |
| 2026-10-22 12:17 | retrieveInstancesAuditsList | mutated | high |
| 2026-10-22 12:17 | retrieveImageList | mutated | high |
| 2026-10-22 12:17 | createCustomImage | mutated | medium |
| 2026-10-22 12:17 | retrieveImage | mutated | medium |
| 2026-10-22 12:17 | updateImage | mutated | medium |
| 2026-10-22 12:17 | deleteImage | mutated | medium |
| 2026-10-22 12:17 | retrieveCustomImagesStats | mutated | medium |
| 2026-10-22 12:17 | retrieveSnapshotList | mutated | high |
| 2026-10-22 12:17 | createSnapshot | mutated | medium |
| 2026-10-22 12:17 | retrieveSnapshot | mutated | medium |
| 2026-10-22 12:17 | updateSnapshot | mutated | medium |
| 2026-10-22 12:17 | deleteSnapshot | mutated | medium |
| 2026-10-22 12:17 | rollbackSnapshot | mutated | medium |
| 2026-10-22 12:17 | retrieveImageAuditsList1 | mutated | high |
| 2026-10-22 12:17 | retrieveSnapshotsAuditsList | mutated | high |
| 2026-10-22 12:17 | listHandles | mutated | medium |
| 2026-10-22 12:17 | createHandle | mutated | medium |
| 2026-10-22 12:17 | retrieveHandle | mutated | medium |
| 2026-10-22 12:17 | removeHandle | mutated | medium |
| 2026-10-22 12:17 | updateHandle | mutated | medium |
| 2026-10-22 12:17 | setDefaultHandle | mutated | medium |
| 2026-10-22 12:17 | validateDomainAvailability | mutated | medium |
| 2026-10-22 12:17 | listDomains | mutated | medium |
| 2026-10-22 12:17 | orderDomain | mutated | medium |
| 2026-10-22 12:17 | retrieveDomain | mutated | medium |
| 2026-10-22 12:17 | updateDomain | mutated | medium |
| 2026-10-22 12:17 | cancelDomain | mutated | medium |
| 2026-10-22 12:17 | getAuthCode | mutated | medium |
| 2026-10-22 12:17 | revokeCancelDomain | mutated | high |
| 2026-10-22 12:17 | confirmDomainTransferOut | mutated | medium |
| 2026-10-22 12:17 | revokeDomainTransferOut | mutated | medium |
| 2026-10-22 12:17 | retrieveHandlesAuditsList | mutated | high |
| 2026-10-22 12:17 | retrieveDomainsAuditsList | mutated | high |
| 2026-10-22 12:17 | retrieveObjectStorageList | mutated | high |
| 2026-10-22 12:17 | createObjectStorage | mutated | medium |
| 2026-10-22 12:17 | retrieveDataCenterList | mutated | medium |
| 2026-10-22 12:17 | retrieveObjectStorage | mutated | medium |
| 2026-10-22 12:17 | updateObjectStorage | mutated | medium |
| 2026-10-22 12:17 | upgradeObjectStorage | mutated | medium |
| 2026-10-22 12:17 | retrieveObjectStoragesStats | mutated | high |
| 2026-10-22 12:17 | CancelObjectStorage | mutated | medium |
| 2026-10-22 12:17 | retrieveObjectStorageAuditsList | mutated | high |
| 2026-10-22 06:17 | tool_search | mutated | medium |
| 2026-10-22 06:17 | retrieveTagList | mutated | high |
| 2026-10-22 06:17 | createTag | mutated | medium |
| 2026-10-22 06:17 | retrieveTag | mutated | medium |
| 2026-10-22 06:17 | updateTag | mutated | medium |
Probe history
10-22 12:17 OK (124) · 10-22 06:17 OK (124) · 08-13 06:17 OK (124)
Run or depend on ai.com.mcp/contabo? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).