← MCP Registry Integrity Report
ai.foura/mcp
Verdict: CRITICAL findings present. Endpoint https://mcp.foura.ai/mcp. Tools now: 4 (4 ever seen). Changes recorded: 4. Findings: 1 critical, 4 high, 3 low. Last probe: OK at 2026-10-24T12:17 UTC. JSON
Current tools
foura_auto · foura_browser · foura_proxy · foura_single
Findings (12)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-24 | foura_single | user_concealment | critical | y object or array). On parse failure, `data` silently stays as the original string - no error, no warning. Set false ( |
| 2026-10-24 | foura_single | secret_material_reference | high | er when the page needs JavaScript. One FourA API key authenticates every call, the result reports the credits it spen |
| 2026-10-24 | foura_single | url_in_description | low | https://google.com/ |
| 2026-10-24 | foura_single | cross_tool_reference | high | references sibling tool 'foura_proxy' |
| 2026-10-24 | foura_proxy | secret_material_reference | high | ts several times a single request. One FourA API key authenticates every call, the result reports the credits it spen |
| 2026-10-24 | foura_proxy | url_in_description | low | https://api.foura.ai/api/profiles. |
| 2026-10-24 | foura_proxy | cross_tool_reference | high | references sibling tool 'foura_single' |
| 2026-10-24 | foura_browser | secret_material_reference | high | he content is already in the HTML. One FourA API key authenticates every call, the result reports the credits it spen |
| 2026-10-24 | foura_browser | url_in_description | low | https://google.com/ |
| 2026-10-24 | foura_browser | cross_tool_reference | high | references sibling tool 'foura_single' |
| 2026-10-24 | foura_auto | secret_material_reference | high | se belongs there rather than here. One FourA API key authenticates every call, the result reports the credits it spen |
| 2026-10-24 | foura_auto | cross_tool_reference | high | references sibling tool 'foura_single' |
Change history (4)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-24 12:17 | foura_single | added | critical |
| 2026-10-24 12:17 | foura_proxy | added | high |
| 2026-10-24 12:17 | foura_browser | added | high |
| 2026-10-24 12:17 | foura_auto | added | high |
Probe history
10-24 12:17 OK (4)
Run or depend on ai.foura/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).