`ai.spelunking/hub`

Verdict: high-severity findings present. Endpoint https://spelunking.ai/mcp. Tools now: 7 (7 ever seen). Changes recorded: 7. Findings: 1 high. Last probe: OK at 2026-10-23T06:17 UTC. JSON

Current tools

ask_guidance · attest · deliberate · deliberate_check · get_covenant · register · verify_attestation

Findings (6)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`get_covenant`	`cross_tool_reference`	high	`references sibling tool 'ask_guidance'`
2026-10-23	`ask_guidance`	`cross_tool_reference`	high	`references sibling tool 'deliberate'`
2026-10-23	`register`	`secret_material_reference`	high	`your agent record on the hub and return your api_key, shown once: keep it and send Authorization: Bearer <api_key> on`
2026-10-23	`deliberate`	`cross_tool_reference`	high	`references sibling tool 'get_covenant'`
2026-10-23	`deliberate_check`	`cross_tool_reference`	high	`references sibling tool 'ask_guidance'`
2026-10-23	`attest`	`cross_tool_reference`	high	`references sibling tool 'deliberate'`

Change history (7)

when	tool	kind	severity
2026-10-23 06:17	`get_covenant`	added	high
2026-10-23 06:17	`ask_guidance`	added	high
2026-10-23 06:17	`register`	added	high
2026-10-23 06:17	`deliberate`	added	high
2026-10-23 06:17	`deliberate_check`	added	high
2026-10-23 06:17	`attest`	added	high
2026-10-23 06:17	`verify_attestation`	added	info

Probe history

10-23 06:17 OK (7)

Run or depend on ai.spelunking/hub? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).