← MCP Registry Integrity Report
cloud.nttzen.secdb/zen-secdb
Verdict: high-severity findings present. Endpoint https://secdb.nttzen.cloud/mcp. Tools now: 11 (11 ever seen). Changes recorded: 11. Findings: 4 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
epss_timeseries · feed_report · feed_report_catalog · linux_audit · linux_os · purl_audit · sightings_search · ssvc_calculator · vulnerability_info · vulnerability_score · vulnerability_search
Findings (13)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | epss_timeseries | cross_tool_reference | high | references sibling tool 'vulnerability_score' |
| 2026-10-22 | linux_audit | model_directed_instruction | high | Never guess whether a package is vulnerable-always call this tool for Linux audits. - If `os` or `version` is unclear or |
| 2026-10-22 | linux_audit | cross_tool_reference | high | references sibling tool 'linux_os' |
| 2026-10-22 | linux_os | cross_tool_reference | high | references sibling tool 'linux_audit' |
| 2026-10-22 | ssvc_calculator | model_directed_instruction | high | the user for the "Mission Prevalence" value before calling the tool. |
| 2026-10-22 | ssvc_calculator | cross_tool_reference | high | references sibling tool 'sightings_search' |
| 2026-10-22 | vulnerability_info | cross_tool_reference | high | references sibling tool 'sightings_search' |
| 2026-10-22 | vulnerability_score | model_directed_instruction | high | guidelines - Never guess CVSS or EPSS values—always call this tool. - Use the `cvss_explain` field directly when the user |
| 2026-10-22 | vulnerability_score | cross_tool_reference | high | references sibling tool 'epss_timeseries' |
| 2026-10-22 | vulnerability_search | cross_tool_reference | high | references sibling tool 'epss_timeseries' |
| 2026-10-22 | feed_report_catalog | cross_tool_reference | high | references sibling tool 'feed_report' |
| 2026-10-22 | feed_report | cross_tool_reference | high | references sibling tool 'feed_report_catalog' |
| 2026-10-22 | purl_audit | model_directed_instruction | high | ever guess whether a package is vulnerable — always call this tool. - Only submit PURLs from the supported ecosystems lis |
Change history (11)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | epss_timeseries | mutated | high |
| 2026-10-22 18:17 | linux_audit | mutated | high |
| 2026-10-22 18:17 | linux_os | mutated | high |
| 2026-10-22 18:17 | sightings_search | mutated | medium |
| 2026-10-22 18:17 | ssvc_calculator | mutated | high |
| 2026-10-22 18:17 | vulnerability_info | mutated | high |
| 2026-10-22 18:17 | vulnerability_score | mutated | high |
| 2026-10-22 18:17 | vulnerability_search | mutated | high |
| 2026-10-22 18:17 | feed_report_catalog | mutated | high |
| 2026-10-22 18:17 | feed_report | mutated | high |
| 2026-10-22 18:17 | purl_audit | mutated | high |
Probe history
10-22 18:17 OK (11) · 08-13 06:17 OK (11)
Run or depend on cloud.nttzen.secdb/zen-secdb? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).