← MCP Registry Integrity Report
club.elron/public-rentals
Verdict: high-severity findings present. Endpoint https://elron.club/api/agent/public/mcp. Tools now: 25 (25 ever seen). Changes recorded: 25. Findings: 1 high. Last probe: OK at 2026-10-24T06:17 UTC. JSON
Current tools
applications.complete_document_upload · applications.create_document_upload · applications.get_status · applications.start · applications.submit · applications.update · applications.upload_document · bookings.get_confirmation · contracts.get_signing_link · help.get · help.search · payments.get_status · quotes.accept · quotes.create · quotes.get · rentals.check_availability · rentals.get · rentals.get_pricing · rentals.search · reservations.get_status · viewings.get_status · viewings.propose_availability · viewings.respond_to_proposal · waitlist.subscribe · waitlist.unsubscribe
Findings (3)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-24 | help.get | secret_material_reference | high | idual signed agreement. Returns no apartment credentials, staff notes or individual case data. |
| 2026-10-22 | rentals.search | cross_tool_reference | high | references sibling tool 'rentals.get' |
| 2026-10-22 | rentals.get_pricing | cross_tool_reference | high | references sibling tool 'rentals.get' |
Change history (25)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-24 06:17 | help.search | added | info |
| 2026-10-24 06:17 | help.get | added | high |
| 2026-10-22 18:17 | waitlist.subscribe | mutated | medium |
| 2026-10-22 18:17 | waitlist.unsubscribe | mutated | medium |
| 2026-10-22 18:17 | rentals.search | mutated | high |
| 2026-10-22 18:17 | rentals.get | mutated | medium |
| 2026-10-22 18:17 | rentals.check_availability | mutated | medium |
| 2026-10-22 18:17 | rentals.get_pricing | mutated | high |
| 2026-10-22 18:17 | applications.start | mutated | medium |
| 2026-10-22 18:17 | applications.get_status | mutated | medium |
| 2026-10-22 18:17 | applications.update | mutated | medium |
| 2026-10-22 18:17 | applications.create_document_upload | mutated | medium |
| 2026-10-22 18:17 | applications.complete_document_upload | mutated | medium |
| 2026-10-22 18:17 | applications.upload_document | mutated | medium |
| 2026-10-22 18:17 | applications.submit | mutated | medium |
| 2026-10-22 18:17 | viewings.get_status | mutated | medium |
| 2026-10-22 18:17 | viewings.propose_availability | mutated | medium |
| 2026-10-22 18:17 | viewings.respond_to_proposal | mutated | medium |
| 2026-10-22 18:17 | quotes.create | mutated | medium |
| 2026-10-22 18:17 | quotes.get | mutated | medium |
| 2026-10-22 18:17 | quotes.accept | mutated | medium |
| 2026-10-22 18:17 | reservations.get_status | mutated | medium |
| 2026-10-22 18:17 | contracts.get_signing_link | mutated | medium |
| 2026-10-22 18:17 | payments.get_status | mutated | medium |
| 2026-10-22 18:17 | bookings.get_confirmation | mutated | medium |
Probe history
10-24 06:17 OK (25) · 10-22 18:17 OK (23) · 08-13 06:17 OK (23)
Run or depend on club.elron/public-rentals? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).