`ai.weftly/weftly`

Verdict: CRITICAL findings present. Endpoint https://api.weftly.ai/mcp. Tools now: 9 (14 ever seen). Changes recorded: 14. Findings: 6 high, 1 critical. Last probe: OK at 2026-10-22T12:17 UTC. JSON

Current tools

clips_from_job · clips_from_video · complete_upload · edit_from_transcript · find_clips · get_job_status · mpp_smoke_test · summarize · transcribe

Findings (16)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-22	`transcribe`	`secret_material_reference`	high	via MPP, then call with `job_id` + `payment_credential` to receive {upload_url} (presigned PUT, 1h expiry); (3) PUT the
2026-10-22	`transcribe`	`cross_tool_reference`	high	`references sibling tool 'complete_upload'`
2026-10-22	`summarize`	`secret_material_reference`	high	via MPP, then call with `job_id` + `payment_credential` to receive {upload_url} (presigned PUT, 1h expiry); (3) PUT the
2026-10-22	`summarize`	`cross_tool_reference`	high	`references sibling tool 'transcribe'`
2026-10-22	`find_clips`	`secret_material_reference`	high	via MPP, then call with `job_id` + `payment_credential` to receive {upload_url} (presigned PUT, 1h expiry); (3) PUT the
2026-10-22	`find_clips`	`cross_tool_reference`	high	`references sibling tool 'transcribe'`
2026-10-22	`clips_from_job`	`secret_material_reference`	high	MPP and call again with `job_id` + `payment_credential` to start processing. Price: `output: "reel"` bills a flat $0.50
2026-10-22	`clips_from_job`	`cross_tool_reference`	high	`references sibling tool 'transcribe'`
2026-10-22	`edit_from_transcript`	`secret_material_reference`	high	er, then call again with `job_id` + `payment_credential` to start processing. Flat price: $1.00 — see /.well-known/mpp.j
2026-10-22	`edit_from_transcript`	`cross_tool_reference`	high	`references sibling tool 'transcribe'`
2026-10-22	`complete_upload`	`cross_tool_reference`	high	`references sibling tool 'transcribe'`
2026-10-22	`get_job_status`	`exfiltration_pattern`	critical	`] words..." line per paragraph — edit it and send it to edit_from_transcript to cut a re-timed video from it). Omit for`
2026-10-22	`get_job_status`	`cross_tool_reference`	high	`references sibling tool 'transcribe'`
2026-10-22	`mpp_smoke_test`	`secret_material_reference`	high	(2) pay via MPP and call again with `payment_credential` set to the resulting Authorization header value (e.g. "Payment
2026-10-22	`mpp_smoke_test`	`cross_tool_reference`	high	`references sibling tool 'transcribe'`
2026-10-22	`clips_from_video`	`cross_tool_reference`	high	`references sibling tool 'find_clips'`

Change history (14)

when	tool	kind	severity
2026-10-22 12:17	`transcribe`	mutated	high
2026-10-22 12:17	`summarize`	mutated	high
2026-10-22 12:17	`find_clips`	mutated	high
2026-10-22 12:17	`clips_from_job`	added	high
2026-10-22 12:17	`edit_from_transcript`	added	high
2026-10-22 12:17	`complete_upload`	mutated	high
2026-10-22 12:17	`get_job_status`	mutated	critical
2026-10-22 12:17	`mpp_smoke_test`	mutated	high
2026-10-22 12:17	`clips_from_video`	added	high
2026-10-22 12:17	`extract_clip`	removed	info
2026-10-22 12:17	`extract_vertical_clip`	removed	info
2026-10-22 12:17	`publish_to_youtube`	removed	info
2026-10-22 12:17	`trigger_youtube_publish`	removed	info
2026-10-22 12:17	`get_youtube_publish_status`	removed	info

Probe history

10-22 12:17 OK (9) · 08-13 06:17 OK (11)

Run or depend on ai.weftly/weftly? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).