`city.close/close-api`

Verdict: high-severity findings present. Endpoint https://mcp.close.city/mcp. Tools now: 10 (10 ever seen). Changes recorded: 10. Findings: 3 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON

Current tools

blocks_in_area · find_place · get_catalog · get_token_balance · isochrone · join_close_plus · nearby_pois · redeem_code · request_sign_in · walkability_summary

Findings (9)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-22	`find_place`	`cross_tool_reference`	high	`references sibling tool 'walkability_summary'`
2026-10-22	`nearby_pois`	`cross_tool_reference`	high	`references sibling tool 'get_catalog'`
2026-10-22	`blocks_in_area`	`cross_tool_reference`	high	`references sibling tool 'find_place'`
2026-10-22	`get_token_balance`	`secret_material_reference`	high	`Check the token balance of the API key in use, without spending any tokens. Works even at a zero balanc`
2026-10-22	`request_sign_in`	`secret_material_reference`	high	`_code. This is how an agent gets the user an API key (5,000 free tokens, no card).`
2026-10-22	`request_sign_in`	`cross_tool_reference`	high	`references sibling tool 'redeem_code'`
2026-10-22	`redeem_code`	`secret_material_reference`	high	`git code the user received, and return a new API key (shown once). Call request_sign_in first. The key grants 5,000 f`
2026-10-22	`redeem_code`	`cross_tool_reference`	high	`references sibling tool 'request_sign_in'`
2026-10-22	`join_close_plus`	`cross_tool_reference`	high	`references sibling tool 'request_sign_in'`

Change history (10)

when	tool	kind	severity
2026-10-22 18:17	`find_place`	mutated	high
2026-10-22 18:17	`get_catalog`	mutated	medium
2026-10-22 18:17	`walkability_summary`	mutated	medium
2026-10-22 18:17	`nearby_pois`	mutated	high
2026-10-22 18:17	`isochrone`	mutated	medium
2026-10-22 18:17	`blocks_in_area`	mutated	high
2026-10-22 18:17	`get_token_balance`	mutated	high
2026-10-22 18:17	`request_sign_in`	mutated	high
2026-10-22 18:17	`redeem_code`	mutated	high
2026-10-22 18:17	`join_close_plus`	mutated	high

Probe history

10-22 18:17 OK (10) · 08-13 06:17 OK (10)

Run or depend on city.close/close-api? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).