`app.turnale/turnale`

Verdict: CRITICAL findings present. Endpoint https://mcp.turnale.app. Tools now: 30 (30 ever seen). Changes recorded: 30. Findings: 1 critical. Last probe: OK at 2026-10-22T18:17 UTC. JSON

Current tools

add_players · create_tournament · delete_tournament · end_tournament · generate_draw · get_audit_log · get_briefing · get_export · get_pdf · get_pdf_link · get_player_template · get_results · get_schedule · get_standings · list_matches · list_players · ping · promote_player · record_feedback · record_results · remove_player · replace_player · reschedule · set_pairs · suggest_format · swap_partners · undo_last_change · update_player · update_settings · withdraw_player

Findings (10)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-22	`create_tournament`	`cross_tool_reference`	high	`references sibling tool 'add_players'`
2026-10-22	`remove_player`	`cross_tool_reference`	high	`references sibling tool 'replace_player'`
2026-10-22	`promote_player`	`cross_tool_reference`	high	`references sibling tool 'update_settings'`
2026-10-22	`generate_draw`	`cross_tool_reference`	high	`references sibling tool 'record_feedback'`
2026-10-22	`get_briefing`	`cross_tool_reference`	high	`references sibling tool 'update_settings'`
2026-10-22	`get_pdf_link`	`cross_tool_reference`	high	`references sibling tool 'get_pdf'`
2026-10-22	`get_pdf`	`cross_tool_reference`	high	`references sibling tool 'get_pdf_link'`
2026-10-22	`undo_last_change`	`user_concealment`	critical	`ntry) is then listed as discarded instead of silently changing the target. A follow-up plain undo restores what the pr`
2026-10-22	`undo_last_change`	`cross_tool_reference`	high	`references sibling tool 'get_audit_log'`
2026-10-22	`get_player_template`	`cross_tool_reference`	high	`references sibling tool 'add_players'`

Change history (30)

when	tool	kind	severity
2026-10-22 18:17	`ping`	mutated	medium
2026-10-22 18:17	`create_tournament`	mutated	high
2026-10-22 18:17	`add_players`	mutated	medium
2026-10-22 18:17	`update_player`	mutated	medium
2026-10-22 18:17	`remove_player`	mutated	high
2026-10-22 18:17	`set_pairs`	mutated	medium
2026-10-22 18:17	`update_settings`	mutated	medium
2026-10-22 18:17	`promote_player`	mutated	high
2026-10-22 18:17	`generate_draw`	mutated	high
2026-10-22 18:17	`get_briefing`	mutated	high
2026-10-22 18:17	`list_players`	mutated	medium
2026-10-22 18:17	`list_matches`	mutated	medium
2026-10-22 18:17	`get_schedule`	mutated	medium
2026-10-22 18:17	`get_standings`	mutated	medium
2026-10-22 18:17	`get_results`	mutated	medium
2026-10-22 18:17	`get_audit_log`	mutated	medium
2026-10-22 18:17	`get_export`	mutated	medium
2026-10-22 18:17	`get_pdf_link`	mutated	high
2026-10-22 18:17	`get_pdf`	mutated	high
2026-10-22 18:17	`record_results`	mutated	medium
2026-10-22 18:17	`replace_player`	mutated	medium
2026-10-22 18:17	`withdraw_player`	mutated	medium
2026-10-22 18:17	`swap_partners`	mutated	medium
2026-10-22 18:17	`reschedule`	mutated	medium
2026-10-22 18:17	`end_tournament`	mutated	medium
2026-10-22 18:17	`undo_last_change`	mutated	critical
2026-10-22 18:17	`delete_tournament`	mutated	medium
2026-10-22 18:17	`record_feedback`	mutated	medium
2026-10-22 18:17	`suggest_format`	mutated	medium
2026-10-22 18:17	`get_player_template`	mutated	high

Probe history

10-22 18:17 OK (30) · 08-13 06:17 OK (30)

Run or depend on app.turnale/turnale? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).