`com.advisorfinder/mcp`

Verdict: high-severity findings present. Endpoint https://mcp.advisorfinder.com/mcp. Tools now: 7 (7 ever seen). Changes recorded: 7. Findings: 2 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON

Current tools

check_advisor · find_bookable_advisors · get_advisor · get_database_stats · get_firm · search_advisors · search_firms

Findings (2)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-22	`get_advisor`	`secret_material_reference`	high	sorfinder_listing.self_reported` carries the credentials and years of experience from that profile, labeled as such. Eac
2026-10-22	`find_bookable_advisors`	`secret_material_reference`	high	`scription, "in their own words" answers, and credential acronyms and names (case-insensitive substring; e.g. "CFP" finds`

Change history (7)

when	tool	kind	severity
2026-10-22 18:17	`search_advisors`	mutated	medium
2026-10-22 18:17	`get_advisor`	mutated	high
2026-10-22 18:17	`check_advisor`	mutated	medium
2026-10-22 18:17	`find_bookable_advisors`	mutated	high
2026-10-22 18:17	`search_firms`	mutated	medium
2026-10-22 18:17	`get_firm`	mutated	medium
2026-10-22 18:17	`get_database_stats`	mutated	medium

Probe history

10-22 18:17 OK (7) · 08-13 12:17 OK (7)

Run or depend on com.advisorfinder/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).