← MCP Registry Integrity Report
app.aiconduit/conduit
Verdict: high-severity findings present. Endpoint https://mcp.aiconduit.app/mcp. Tools now: 25 (25 ever seen). Changes recorded: 25. Findings: 4 high. Last probe: OK at 2026-10-22T12:17 UTC. JSON
Current tools
agent_authenticate · agent_create · agent_notify · agent_organization · agent_outreach · agent_report_issue · agent_update · inventory_levels · inventory_purchase_order · inventory_replenishment · inventory_suppliers · order_dispute · order_events · order_execute · order_feedback · order_list · order_track · order_update_status · payment_mandate · payment_methods · supply_availability · supply_delivery · supply_details · supply_options · supply_search
Findings (29)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | agent_create | secret_material_reference | high | hing private JWK only in ~/.conduit/{handle}.credentials.json. |
| 2026-10-22 | agent_create | cross_tool_reference | high | references sibling tool 'agent_update' |
| 2026-10-22 | agent_authenticate | secret_material_reference | high | ature. Prefer keys from ~/.conduit ({handle}.credentials.json or legacy credentials.json; CONDUIT_CREDENTIALS_PATH pins |
| 2026-10-22 | agent_authenticate | cross_tool_reference | high | references sibling tool 'agent_create' |
| 2026-10-22 | agent_update | secret_material_reference | high | . Tint only for invader. Do not store in the credentials file. |
| 2026-10-22 | agent_update | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | agent_organization | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | agent_notify | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | agent_outreach | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | agent_report_issue | secret_material_reference | high | Agent id from credentials when available (omit placeholders like "agent_id") |
| 2026-10-22 | agent_report_issue | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | payment_methods | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | payment_mandate | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | supply_search | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | supply_details | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | supply_options | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | supply_delivery | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | order_execute | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | order_list | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | order_track | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | order_events | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | order_update_status | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | order_dispute | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | order_feedback | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | inventory_levels | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | inventory_replenishment | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | inventory_suppliers | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | supply_availability | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
| 2026-10-22 | inventory_purchase_order | cross_tool_reference | high | references sibling tool 'agent_authenticate' |
Change history (25)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 12:17 | agent_create | mutated | high |
| 2026-10-22 12:17 | agent_authenticate | mutated | high |
| 2026-10-22 12:17 | agent_update | mutated | high |
| 2026-10-22 12:17 | agent_organization | mutated | high |
| 2026-10-22 12:17 | agent_notify | added | high |
| 2026-10-22 12:17 | agent_outreach | added | high |
| 2026-10-22 12:17 | agent_report_issue | mutated | high |
| 2026-10-22 12:17 | payment_methods | mutated | high |
| 2026-10-22 12:17 | payment_mandate | mutated | high |
| 2026-10-22 12:17 | supply_search | mutated | high |
| 2026-10-22 12:17 | supply_details | mutated | high |
| 2026-10-22 12:17 | supply_options | added | high |
| 2026-10-22 12:17 | supply_delivery | mutated | high |
| 2026-10-22 12:17 | order_execute | mutated | high |
| 2026-10-22 12:17 | order_list | mutated | high |
| 2026-10-22 12:17 | order_track | mutated | high |
| 2026-10-22 12:17 | order_events | mutated | high |
| 2026-10-22 12:17 | order_update_status | mutated | high |
| 2026-10-22 12:17 | order_dispute | mutated | high |
| 2026-10-22 12:17 | order_feedback | mutated | high |
| 2026-10-22 12:17 | inventory_levels | added | high |
| 2026-10-22 12:17 | inventory_replenishment | added | high |
| 2026-10-22 12:17 | inventory_suppliers | added | high |
| 2026-10-22 12:17 | supply_availability | added | high |
| 2026-10-22 12:17 | inventory_purchase_order | added | high |
Probe history
10-22 12:17 OK (25) · 08-13 06:17 OK (17)
Run or depend on app.aiconduit/conduit? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).