← MCP Registry Integrity Report
app.govauctions/govauctions
Verdict: high-severity findings present. Endpoint https://govauctions.app/api/mcp. Tools now: 9 (9 ever seen). Changes recorded: 9. Findings: 6 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
get_api_usage · get_comp_coverage · get_flip_score · get_listing · get_price_trend · get_sold_comps · get_sold_comps_batch · get_sold_history · search_listings
Findings (8)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | get_sold_comps | secret_material_reference | high | n it has enough sales). Signed in or with an API key: the 25th/median/75th percentile for this item itself. `liveList |
| 2026-10-22 | get_sold_comps_batch | secret_material_reference | high | the free allowance). Requires sign-in or an API key. |
| 2026-10-22 | get_sold_comps_batch | cross_tool_reference | high | references sibling tool 'get_sold_comps' |
| 2026-10-22 | get_flip_score | secret_material_reference | high | auctions.app lot URL. Requires sign-in or an API key. |
| 2026-10-22 | get_sold_history | secret_material_reference | high | to list the archive. Requires sign-in or an API key. |
| 2026-10-22 | get_price_trend | secret_material_reference | high | the sample threshold. Requires sign-in or an API key. |
| 2026-10-22 | get_price_trend | cross_tool_reference | high | references sibling tool 'get_sold_comps' |
| 2026-10-22 | get_api_usage | secret_material_reference | high | nst either allowance. Requires sign-in or an API key. |
Change history (9)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | search_listings | mutated | medium |
| 2026-10-22 18:17 | get_listing | mutated | medium |
| 2026-10-22 18:17 | get_sold_comps | mutated | high |
| 2026-10-22 18:17 | get_sold_comps_batch | added | high |
| 2026-10-22 18:17 | get_flip_score | mutated | high |
| 2026-10-22 18:17 | get_sold_history | mutated | high |
| 2026-10-22 18:17 | get_price_trend | mutated | high |
| 2026-10-22 18:17 | get_comp_coverage | mutated | medium |
| 2026-10-22 18:17 | get_api_usage | mutated | high |
Probe history
10-22 18:17 OK (9) · 08-13 06:17 OK (8)
Run or depend on app.govauctions/govauctions? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).