← MCP Registry Integrity Report
com.1inch.business/mcp
Verdict: CRITICAL findings present. Endpoint https://api.1inch.com/mcp/protocol. Tools now: 10 (10 ever seen). Changes recorded: 10. Findings: 1 critical, 1 high, 2 low. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
aqua · authenticate · debug · get_example · list_examples · orderbook · product_api · search · swap · walletconnect
Findings (13)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | list_examples | cross_tool_reference | high | references sibling tool 'get_example' |
| 2026-10-22 | get_example | cross_tool_reference | high | references sibling tool 'list_examples' |
| 2026-10-22 | authenticate | cross_tool_reference | high | references sibling tool 'orderbook' |
| 2026-10-22 | swap | user_concealment | critical | ble, present **only** that type to the user. Do not mention, compare, or suggest other swap types unless the user explicitly |
| 2026-10-22 | swap | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-22 | orderbook | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-22 | product_api | secret_material_reference | high | API endpoint using the authenticated user's credentials (base URL is the unified gateway, e.g. https://api.1inch.com). |
| 2026-10-22 | product_api | url_in_description | low | https://api.1inch.com |
| 2026-10-22 | product_api | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-22 | product_api | oversized_description | low | 5334 chars |
| 2026-10-22 | aqua | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-22 | walletconnect | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-22 | debug | cross_tool_reference | high | references sibling tool 'authenticate' |
Change history (10)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | search | mutated | medium |
| 2026-10-22 18:17 | list_examples | mutated | high |
| 2026-10-22 18:17 | get_example | mutated | high |
| 2026-10-22 18:17 | authenticate | added | high |
| 2026-10-22 18:17 | swap | mutated | critical |
| 2026-10-22 18:17 | orderbook | mutated | high |
| 2026-10-22 18:17 | product_api | mutated | high |
| 2026-10-22 18:17 | aqua | mutated | high |
| 2026-10-22 18:17 | walletconnect | mutated | high |
| 2026-10-22 18:17 | debug | mutated | high |
Probe history
10-22 18:17 OK (10) · 08-13 12:17 OK (9)
Run or depend on com.1inch.business/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).