← MCP Registry Integrity Report
ai.verticalmarketplace/vertical-marketplace
Verdict: high-severity findings present. Endpoint https://verticalmarketplace.ai/api/mcp. Tools now: 55 (55 ever seen). Changes recorded: 55. Findings: 46 high, 2 low. Last probe: OK at 2026-10-24T00:17 UTC. JSON
Current tools
about_marketplace · accept_space_charter · agent_inbox · agent_lookup · agent_send_message · agent_whoami · answer_knock · ask_vermarco · become_seller · browse_marketplace · bulk_purchase · buy_data · claim_workspace · close_space · configure_auto_recharge · contact_marketplace · create_space · deactivate_listing · flag_space_message · fund_wallet · get_platform_stats · get_purchase · get_wallet_balance · invite_to_space · knock_on_space · list_health_data · list_knocks · list_my_spaces · list_public_spaces · list_verticals · listing_history · marketplace_stats · offboard_agent · open_private_room · preview_listing · rate_listing · read_space · read_space_charter · register_agent · remove_from_space · request_seat · say_in_space · search_health_data · search_public_spaces · sell_data · seller_dashboard · set_delivery_endpoint · set_space_charter · set_space_visibility · setup_payment_method · space_events · space_members · submit_idea · update_listing · wallet_transactions
Findings (67)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | ask_vermarco | cross_tool_reference | high | references sibling tool 'agent_inbox' |
| 2026-10-22 | agent_whoami | secret_material_reference | high | th or a privately configured headless Bearer API key; no key arguments. |
| 2026-10-22 | create_space | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | create_space | url_in_description | low | https://vermarco.com/docs/verspace |
| 2026-10-22 | list_my_spaces | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | invite_to_space | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | invite_to_space | cross_tool_reference | high | references sibling tool 'remove_from_space' |
| 2026-10-22 | say_in_space | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | read_space | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | read_space | cross_tool_reference | high | references sibling tool 'read_space_charter' |
| 2026-10-22 | space_members | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | remove_from_space | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | offboard_agent | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | offboard_agent | cross_tool_reference | high | references sibling tool 'remove_from_space' |
| 2026-10-22 | close_space | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | open_private_room | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | open_private_room | cross_tool_reference | high | references sibling tool 'set_space_charter' |
| 2026-10-22 | set_space_charter | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | read_space_charter | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | read_space_charter | cross_tool_reference | high | references sibling tool 'read_space' |
| 2026-10-22 | accept_space_charter | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | accept_space_charter | cross_tool_reference | high | references sibling tool 'read_space' |
| 2026-10-22 | set_space_visibility | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | search_public_spaces | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | list_public_spaces | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | list_public_spaces | cross_tool_reference | high | references sibling tool 'search_public_spaces' |
| 2026-10-22 | knock_on_space | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | list_knocks | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | answer_knock | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | request_seat | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | request_seat | cross_tool_reference | high | references sibling tool 'invite_to_space' |
| 2026-10-22 | flag_space_message | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | space_events | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | claim_workspace | secret_material_reference | high | arco connector sign-in (OAuth) or your agent API key in the connector Authorization: Bearer header; never pass keys a |
| 2026-10-22 | about_marketplace | secret_material_reference | high | — see https://vermarco.com/patent-notice. No API key required. |
| 2026-10-22 | about_marketplace | url_in_description | low | https://vermarco.com/patent-notice. |
| 2026-10-22 | register_agent | secret_material_reference | high | plicitly set auth_mode=headless for one-time API-key registration outside chat. Registration is not messaging verific |
| 2026-10-22 | register_agent | cross_tool_reference | high | references sibling tool 'agent_whoami' |
| 2026-10-22 | submit_idea | secret_material_reference | high | w vertical, data source, feature, or fix. No API key required. |
| 2026-10-22 | contact_marketplace | secret_material_reference | high | l Marketplace on behalf of your operator. No API key required. Include an email if you want a reply. |
| 2026-10-22 | become_seller | secret_material_reference | high | don't own or lack the right to sell, stolen credentials/secrets, and any health data that is not your own (patient reco |
| 2026-10-22 | become_seller | cross_tool_reference | high | references sibling tool 'list_health_data' |
| 2026-10-22 | sell_data | secret_material_reference | high | Your vm_live_ API key (registered seller; a verified delivery endpoint is NOT required |
| 2026-10-22 | sell_data | cross_tool_reference | high | references sibling tool 'list_health_data' |
| 2026-10-22 | buy_data | secret_material_reference | high | Your vm_live_ API key (recommended so the purchase is tied to your agent and the data |
| 2026-10-22 | buy_data | cross_tool_reference | high | references sibling tool 'get_purchase' |
| 2026-10-22 | get_purchase | secret_material_reference | high | the delivered content. Requires the buyer's api_key to unlock the delivery. |
| 2026-10-22 | rate_listing | model_directed_instruction | high | The listing to rate (you must have purchased it). |
| 2026-10-22 | rate_listing | secret_material_reference | high | the seller's reputation. Requires your buyer api_key and the purchase_id of your purchase. |
| 2026-10-22 | rate_listing | cross_tool_reference | high | references sibling tool 'browse_marketplace' |
| 2026-10-22 | update_listing | secret_material_reference | high | d modification receipt. Requires your seller api_key. |
| 2026-10-22 | update_listing | cross_tool_reference | high | references sibling tool 'set_delivery_endpoint' |
| 2026-10-22 | deactivate_listing | secret_material_reference | high | s modification history. Requires your seller api_key. |
| 2026-10-22 | listing_history | secret_material_reference | high | ingerprints only — never the raw content. No API key required. |
| 2026-10-22 | seller_dashboard | secret_material_reference | high | tus, and notifications. Requires your seller api_key. Each listing includes its current version, lastModified timesta |
| 2026-10-22 | seller_dashboard | cross_tool_reference | high | references sibling tool 'update_listing' |
| 2026-10-22 | list_health_data | secret_material_reference | high | Your vm_live_ seller API key |
| 2026-10-22 | search_health_data | cross_tool_reference | high | references sibling tool 'buy_data' |
| 2026-10-22 | set_delivery_endpoint | secret_material_reference | high | signed verification nonce. Requires a seller API key. |
| 2026-10-22 | get_wallet_balance | secret_material_reference | high | ng or the 95/5 split. Requires your vm_live_ API key. |
| 2026-10-22 | fund_wallet | secret_material_reference | high | Your vm_live_ API key |
| 2026-10-22 | setup_payment_method | secret_material_reference | high | Your vm_live_ API key |
| 2026-10-22 | configure_auto_recharge | secret_material_reference | high | Your vm_live_ API key |
| 2026-10-22 | configure_auto_recharge | cross_tool_reference | high | references sibling tool 'setup_payment_method' |
| 2026-10-22 | bulk_purchase | secret_material_reference | high | Your vm_live_ API key |
| 2026-10-22 | bulk_purchase | cross_tool_reference | high | references sibling tool 'get_purchase' |
| 2026-10-22 | wallet_transactions | secret_material_reference | high | est first, paginated. Requires your vm_live_ API key. |
Change history (55)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 12:17 | ask_vermarco | added | high |
| 2026-10-22 12:17 | agent_whoami | added | high |
| 2026-10-22 12:17 | agent_lookup | added | info |
| 2026-10-22 12:17 | agent_inbox | added | info |
| 2026-10-22 12:17 | agent_send_message | added | info |
| 2026-10-22 12:17 | create_space | added | high |
| 2026-10-22 12:17 | list_my_spaces | added | high |
| 2026-10-22 12:17 | invite_to_space | added | high |
| 2026-10-22 12:17 | say_in_space | added | high |
| 2026-10-22 12:17 | read_space | added | high |
| 2026-10-22 12:17 | space_members | added | high |
| 2026-10-22 12:17 | remove_from_space | added | high |
| 2026-10-22 12:17 | offboard_agent | added | high |
| 2026-10-22 12:17 | close_space | added | high |
| 2026-10-22 12:17 | open_private_room | added | high |
| 2026-10-22 12:17 | set_space_charter | added | high |
| 2026-10-22 12:17 | read_space_charter | added | high |
| 2026-10-22 12:17 | accept_space_charter | added | high |
| 2026-10-22 12:17 | set_space_visibility | added | high |
| 2026-10-22 12:17 | search_public_spaces | added | high |
| 2026-10-22 12:17 | list_public_spaces | added | high |
| 2026-10-22 12:17 | knock_on_space | added | high |
| 2026-10-22 12:17 | list_knocks | added | high |
| 2026-10-22 12:17 | answer_knock | added | high |
| 2026-10-22 12:17 | request_seat | added | high |
| 2026-10-22 12:17 | flag_space_message | added | high |
| 2026-10-22 12:17 | space_events | added | high |
| 2026-10-22 12:17 | claim_workspace | added | high |
| 2026-10-22 12:17 | about_marketplace | mutated | high |
| 2026-10-22 12:17 | list_verticals | mutated | medium |
| 2026-10-22 12:17 | register_agent | mutated | high |
| 2026-10-22 12:17 | get_platform_stats | mutated | medium |
| 2026-10-22 12:17 | submit_idea | mutated | high |
| 2026-10-22 12:17 | contact_marketplace | mutated | high |
| 2026-10-22 12:17 | become_seller | mutated | high |
| 2026-10-22 12:17 | sell_data | mutated | high |
| 2026-10-22 12:17 | browse_marketplace | mutated | medium |
| 2026-10-22 12:17 | preview_listing | mutated | medium |
| 2026-10-22 12:17 | buy_data | mutated | high |
| 2026-10-22 12:17 | get_purchase | mutated | high |
| 2026-10-22 12:17 | rate_listing | mutated | high |
| 2026-10-22 12:17 | update_listing | mutated | high |
| 2026-10-22 12:17 | deactivate_listing | mutated | high |
| 2026-10-22 12:17 | listing_history | mutated | high |
| 2026-10-22 12:17 | seller_dashboard | mutated | high |
| 2026-10-22 12:17 | marketplace_stats | mutated | medium |
| 2026-10-22 12:17 | list_health_data | mutated | high |
| 2026-10-22 12:17 | search_health_data | mutated | high |
| 2026-10-22 12:17 | set_delivery_endpoint | mutated | high |
| 2026-10-22 12:17 | get_wallet_balance | mutated | high |
| 2026-10-22 12:17 | fund_wallet | mutated | high |
| 2026-10-22 12:17 | setup_payment_method | mutated | high |
| 2026-10-22 12:17 | configure_auto_recharge | mutated | high |
| 2026-10-22 12:17 | bulk_purchase | mutated | high |
| 2026-10-22 12:17 | wallet_transactions | mutated | high |
Probe history
10-24 00:17 OK (55) · 10-22 12:17 OK (55) · 08-13 06:17 OK (27)
Run or depend on ai.verticalmarketplace/vertical-marketplace? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).