← MCP Registry Integrity Report
co.colossalcapital/obvect
Verdict: high-severity findings present. Endpoint https://mcp.colossalcapital.co/mcp. Tools now: 24 (24 ever seen). Changes recorded: 24. Findings: 4 high. Last probe: OK at 2026-10-23T18:17 UTC. JSON
Current tools
analyze_repo · check_heartbeat_monitors · claim_agent · corpus_domains · corpus_item · corpus_outcome · corpus_route · draft_deployment_plan · fetch_hitl_items · generate_cicd_workflow · get_onboarding_guide · get_public_capabilities · get_research_basis · list_llm_keys · list_llm_providers · read_corpus_item · register_account · register_agent · register_org · remove_llm_key · search_corpus · search_skillfiles · set_llm_key · test_llm_key
Findings (10)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | register_org | secret_material_reference | high | to them, never recreated. Returns the org's API key. |
| 2026-10-23 | register_agent | secret_material_reference | high | e=agent). The Ed25519 public key is the only credential — no password. Gets a prepaid wallet for metered tools. Can late |
| 2026-10-23 | register_agent | cross_tool_reference | high | references sibling tool 'claim_agent' |
| 2026-10-23 | search_corpus | cross_tool_reference | high | references sibling tool 'register_account' |
| 2026-10-23 | read_corpus_item | cross_tool_reference | high | references sibling tool 'corpus_item' |
| 2026-10-23 | corpus_domains | cross_tool_reference | high | references sibling tool 'corpus_route' |
| 2026-10-23 | set_llm_key | secret_material_reference | high | Api Key |
| 2026-10-23 | set_llm_key | cross_tool_reference | high | references sibling tool 'register_account' |
| 2026-10-23 | test_llm_key | secret_material_reference | high | Api Key |
| 2026-10-23 | test_llm_key | cross_tool_reference | high | references sibling tool 'set_llm_key' |
Change history (24)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 18:17 | analyze_repo | added | info |
| 2026-10-23 18:17 | draft_deployment_plan | added | info |
| 2026-10-23 18:17 | generate_cicd_workflow | added | info |
| 2026-10-23 18:17 | check_heartbeat_monitors | added | info |
| 2026-10-23 18:17 | fetch_hitl_items | added | info |
| 2026-10-23 18:17 | search_skillfiles | added | info |
| 2026-10-23 18:17 | get_research_basis | added | info |
| 2026-10-23 18:17 | get_public_capabilities | added | info |
| 2026-10-23 18:17 | register_account | added | info |
| 2026-10-23 18:17 | register_org | added | high |
| 2026-10-23 18:17 | register_agent | added | high |
| 2026-10-23 18:17 | claim_agent | added | info |
| 2026-10-23 18:17 | search_corpus | added | high |
| 2026-10-23 18:17 | read_corpus_item | added | high |
| 2026-10-23 18:17 | corpus_route | added | info |
| 2026-10-23 18:17 | corpus_domains | added | high |
| 2026-10-23 18:17 | corpus_item | added | info |
| 2026-10-23 18:17 | corpus_outcome | added | info |
| 2026-10-23 18:17 | get_onboarding_guide | added | info |
| 2026-10-23 18:17 | list_llm_providers | added | info |
| 2026-10-23 18:17 | set_llm_key | added | high |
| 2026-10-23 18:17 | list_llm_keys | added | info |
| 2026-10-23 18:17 | remove_llm_key | added | info |
| 2026-10-23 18:17 | test_llm_key | added | high |
Probe history
10-23 18:17 OK (24)
Run or depend on co.colossalcapital/obvect? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).