`ai.webmatik/audit`

Verdict: high-severity findings present. Endpoint https://webmatik.ai/mcp. Tools now: 2 (2 ever seen). Changes recorded: 2. Findings: 2 high, 1 low. Last probe: OK at 2026-10-22T12:17 UTC. JSON

Current tools

get_audit · run_audit

Findings (5)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-22	`run_audit`	`secret_material_reference`	high	`et_audit for the result. Requires a Webmatik API key (get one at https://webmatik.ai/account, Starter/Growth plans).`
2026-10-22	`run_audit`	`url_in_description`	low	`https://webmatik.ai/account,`
2026-10-22	`run_audit`	`cross_tool_reference`	high	`references sibling tool 'get_audit'`
2026-10-22	`get_audit`	`secret_material_reference`	high	`Webmatik API key (wmk_...). Optional if sent as Authorization: Bearer header.`
2026-10-22	`get_audit`	`cross_tool_reference`	high	`references sibling tool 'run_audit'`

Change history (2)

when	tool	kind	severity
2026-10-22 12:17	`run_audit`	mutated	high
2026-10-22 12:17	`get_audit`	mutated	high

Probe history

10-22 12:17 OK (2) · 08-13 06:17 OK (2)

Run or depend on ai.webmatik/audit? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).