← MCP Registry Integrity Report
app.dealermax/public-search
Verdict: high-severity findings present. Endpoint https://mcp.dealermax.app/mcp/. Tools now: 7 (7 ever seen). Changes recorded: 7. Findings: 1 high, 1 low. Last probe: OK at 2026-10-24T00:17 UTC. JSON
Current tools
find_dealer · get_market_intel · get_nlt_offer_details · get_vehicle_details · get_vehicle_specs · search_nlt_offers · search_vehicles
Findings (6)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | search_vehicles | secret_material_reference | high | live, immagini certificate C2PA Content Credentials, targa offuscata (privacy), dealer commerciale di ogni veic |
| 2026-10-22 | get_vehicle_details | cross_tool_reference | high | references sibling tool 'search_vehicles' |
| 2026-10-22 | get_nlt_offer_details | cross_tool_reference | high | references sibling tool 'search_nlt_offers' |
| 2026-10-22 | get_market_intel | url_in_description | low | https://autousatebenissimo.it/guide |
| 2026-10-22 | get_market_intel | cross_tool_reference | high | references sibling tool 'search_vehicles' |
| 2026-10-22 | get_vehicle_specs | cross_tool_reference | high | references sibling tool 'search_vehicles' |
Change history (7)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 12:17 | search_vehicles | mutated | high |
| 2026-10-22 12:17 | search_nlt_offers | mutated | medium |
| 2026-10-22 12:17 | get_vehicle_details | mutated | high |
| 2026-10-22 12:17 | get_nlt_offer_details | mutated | high |
| 2026-10-22 12:17 | find_dealer | mutated | medium |
| 2026-10-22 12:17 | get_market_intel | mutated | high |
| 2026-10-22 12:17 | get_vehicle_specs | mutated | high |
Probe history
10-24 00:17 OK (7) · 10-22 12:17 OK (7) · 08-13 06:17 OK (7)
Run or depend on app.dealermax/public-search? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).