← MCP Registry Integrity Report
ai.dataecho/mcp
Verdict: high-severity findings present. Endpoint https://dataecho.ai/mcp. Tools now: 26 (26 ever seen). Changes recorded: 26. Findings: 4 high. Last probe: OK at 2026-10-22T12:17 UTC. JSON
Current tools
app_status · claim_site · create_drive · delete_site · delete_variable · drive_delete_file · drive_history · drive_list_files · drive_move_file · drive_read_file · drive_restore · drive_revoke_token · drive_share · drive_tokens · drive_write_file · get_site · list_drives · list_sites · list_variables · platform_info · publish_site · request_login_code · search_sites · set_variable · update_site_metadata · verify_login_code
Findings (11)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | request_login_code | cross_tool_reference | high | references sibling tool 'verify_login_code' |
| 2026-10-22 | verify_login_code | secret_material_reference | high | e sign-in with the emailed code. Returns the apiKey ONCE — configure it as the `Authorization: Bearer <key>` header |
| 2026-10-22 | verify_login_code | cross_tool_reference | high | references sibling tool 'request_login_code' |
| 2026-10-22 | publish_site | secret_material_reference | high | er-side app (auth required; listen on process.env.PORT; persist under /data; poll app_status). Total payload ≤ 8 M |
| 2026-10-22 | publish_site | cross_tool_reference | high | references sibling tool 'app_status' |
| 2026-10-22 | claim_site | cross_tool_reference | high | references sibling tool 'publish_site' |
| 2026-10-22 | update_site_metadata | secret_material_reference | high | ng: viewer title/description, SPA mode, TTL, password (string sets, null removes). |
| 2026-10-22 | app_status | cross_tool_reference | high | references sibling tool 'publish_site' |
| 2026-10-22 | drive_share | secret_material_reference | high | Mint a scoped drive access token for another agent (perms read|write, optional path prefix + TTL |
| 2026-10-22 | drive_revoke_token | cross_tool_reference | high | references sibling tool 'drive_tokens' |
| 2026-10-22 | drive_restore | cross_tool_reference | high | references sibling tool 'drive_history' |
Change history (26)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 06:17 | platform_info | mutated | medium |
| 2026-10-22 06:17 | request_login_code | mutated | high |
| 2026-10-22 06:17 | verify_login_code | mutated | high |
| 2026-10-22 06:17 | publish_site | mutated | high |
| 2026-10-22 06:17 | claim_site | mutated | high |
| 2026-10-22 06:17 | list_sites | mutated | medium |
| 2026-10-22 06:17 | search_sites | mutated | medium |
| 2026-10-22 06:17 | get_site | mutated | medium |
| 2026-10-22 06:17 | update_site_metadata | mutated | high |
| 2026-10-22 06:17 | delete_site | mutated | medium |
| 2026-10-22 06:17 | app_status | mutated | high |
| 2026-10-22 06:17 | list_drives | mutated | medium |
| 2026-10-22 06:17 | create_drive | mutated | medium |
| 2026-10-22 06:17 | drive_list_files | mutated | medium |
| 2026-10-22 06:17 | drive_read_file | mutated | medium |
| 2026-10-22 06:17 | drive_write_file | mutated | medium |
| 2026-10-22 06:17 | drive_delete_file | mutated | medium |
| 2026-10-22 06:17 | drive_move_file | mutated | medium |
| 2026-10-22 06:17 | drive_share | mutated | high |
| 2026-10-22 06:17 | drive_tokens | mutated | medium |
| 2026-10-22 06:17 | drive_revoke_token | mutated | high |
| 2026-10-22 06:17 | drive_history | mutated | medium |
| 2026-10-22 06:17 | drive_restore | mutated | high |
| 2026-10-22 06:17 | list_variables | mutated | medium |
| 2026-10-22 06:17 | set_variable | mutated | medium |
| 2026-10-22 06:17 | delete_variable | mutated | medium |
Probe history
10-22 12:17 OK (26) · 10-22 06:17 OK (26) · 08-13 06:17 OK (26)
Run or depend on ai.dataecho/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).