← MCP Registry Integrity Report
ai.vaaya/mcp
Verdict: high-severity findings present. Endpoint https://vaaya.ai/mcp. Tools now: 14 (14 ever seen). Changes recorded: 14. Findings: 4 high, 1 low. Last probe: OK at 2026-10-22T12:17 UTC. JSON
Current tools
buy · close · consult · docs · jobs · llm · result · session · stocks · use · vaaya_account · vaaya_logout · vaaya_onboard · vaaya_test_connection
Findings (9)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | vaaya_onboard | cross_tool_reference | high | references sibling tool 'vaaya_test_connection' |
| 2026-10-22 | use | secret_material_reference | high | ies to the upstream — you never pass URLs or API keys. Call it directly when you know the exact (service, action, par |
| 2026-10-22 | use | cross_tool_reference | high | references sibling tool 'consult' |
| 2026-10-22 | result | model_directed_instruction | high | it never starts new work or double-charges. ALWAYS use this to retrieve an async result instead of re-running `use` (re |
| 2026-10-22 | buy | secret_material_reference | high | se store_connection_id to select an account. Passwords and verification codes belong only on the merchant page, never |
| 2026-10-22 | buy | cross_tool_reference | high | references sibling tool 'session' |
| 2026-10-22 | buy | oversized_description | low | 4408 chars |
| 2026-10-22 | close | model_directed_instruction | high | l metered uptime cost and releases the hold. ALWAYS call this when finished with a session — an open session keeps billin |
| 2026-10-22 | close | cross_tool_reference | high | references sibling tool 'session' |
Change history (14)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 12:17 | stocks | added | info |
| 2026-10-22 12:17 | jobs | added | info |
| 2026-10-22 12:17 | vaaya_test_connection | mutated | medium |
| 2026-10-22 12:17 | vaaya_onboard | mutated | high |
| 2026-10-22 12:17 | vaaya_account | mutated | medium |
| 2026-10-22 12:17 | vaaya_logout | mutated | medium |
| 2026-10-22 12:17 | docs | added | info |
| 2026-10-22 12:17 | consult | mutated | medium |
| 2026-10-22 12:17 | use | mutated | high |
| 2026-10-22 12:17 | result | mutated | high |
| 2026-10-22 12:17 | buy | added | high |
| 2026-10-22 12:17 | session | mutated | medium |
| 2026-10-22 12:17 | close | mutated | high |
| 2026-10-22 12:17 | llm | mutated | medium |
Probe history
10-22 12:17 OK (14) · 08-13 06:17 OK (10)
Run or depend on ai.vaaya/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).