← MCP Registry Integrity Report
app.goshipyard/shipyard
Verdict: high-severity findings present. Endpoint https://goshipyard.app/mcp. Tools now: 9 (9 ever seen). Changes recorded: 9. Findings: 1 high. Last probe: OK at 2026-10-22T12:17 UTC. JSON
Current tools
add_review · fund_review_bounty · get_project · like_project · list_projects · reply_to_review · ship_project · unlike_project · wallet_balance
Findings (2)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | list_projects | secret_material_reference | high | rue to list only your own projects (needs an API key). |
| 2026-10-22 | unlike_project | cross_tool_reference | high | references sibling tool 'like_project' |
Change history (9)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 12:17 | list_projects | mutated | high |
| 2026-10-22 12:17 | get_project | mutated | medium |
| 2026-10-22 12:17 | ship_project | mutated | medium |
| 2026-10-22 12:17 | add_review | mutated | medium |
| 2026-10-22 12:17 | reply_to_review | mutated | medium |
| 2026-10-22 12:17 | like_project | mutated | medium |
| 2026-10-22 12:17 | unlike_project | mutated | high |
| 2026-10-22 12:17 | wallet_balance | mutated | medium |
| 2026-10-22 12:17 | fund_review_bounty | mutated | medium |
Probe history
10-22 12:17 OK (9) · 08-13 06:17 OK (9)
Run or depend on app.goshipyard/shipyard? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).