← MCP Registry Integrity Report
com.advocatemcp/advocate
Verdict: CRITICAL findings present. Endpoint https://api.advocatemcp.com/mcp. Tools now: 18 (18 ever seen). Changes recorded: 18. Findings: 2 high, 1 critical. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
cancel_booking · confirm_booking · create_booking_payment_link · get_availability · get_booking_destination · get_cancellation_policy · get_credentials · get_payment_handoff_url · get_quote · initiate_handoff · list_services · query_business_agent · request_callback · request_service · reserve_slot · search_businesses · submit_quote_request · subscribe_to_updates
Findings (10)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | get_credentials | secret_material_reference | high | get_credentials |
| 2026-10-22 | get_availability | cross_tool_reference | high | references sibling tool 'get_booking_destination' |
| 2026-10-22 | list_services | user_concealment | critical | res. Quoting a name that is not on this list silently falls back to an estimate with no offer. |
| 2026-10-22 | list_services | cross_tool_reference | high | references sibling tool 'get_quote' |
| 2026-10-22 | reserve_slot | cross_tool_reference | high | references sibling tool 'get_availability' |
| 2026-10-22 | confirm_booking | cross_tool_reference | high | references sibling tool 'reserve_slot' |
| 2026-10-22 | get_payment_handoff_url | cross_tool_reference | high | references sibling tool 'get_quote' |
| 2026-10-22 | submit_quote_request | cross_tool_reference | high | references sibling tool 'request_service' |
| 2026-10-22 | create_booking_payment_link | secret_material_reference | high | HTTP 402 challenge, then the person's wallet credential); no code is sent to the customer for a paid booking. A free boo |
| 2026-10-22 | create_booking_payment_link | cross_tool_reference | high | references sibling tool 'reserve_slot' |
Change history (18)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | search_businesses | mutated | medium |
| 2026-10-22 18:17 | get_credentials | mutated | high |
| 2026-10-22 18:17 | get_cancellation_policy | mutated | medium |
| 2026-10-22 18:17 | get_availability | mutated | high |
| 2026-10-22 18:17 | get_booking_destination | added | info |
| 2026-10-22 18:17 | list_services | added | critical |
| 2026-10-22 18:17 | get_quote | mutated | medium |
| 2026-10-22 18:17 | reserve_slot | mutated | high |
| 2026-10-22 18:17 | confirm_booking | added | high |
| 2026-10-22 18:17 | initiate_handoff | mutated | medium |
| 2026-10-22 18:17 | request_callback | mutated | medium |
| 2026-10-22 18:17 | subscribe_to_updates | mutated | medium |
| 2026-10-22 18:17 | query_business_agent | mutated | medium |
| 2026-10-22 18:17 | get_payment_handoff_url | added | high |
| 2026-10-22 18:17 | request_service | added | info |
| 2026-10-22 18:17 | submit_quote_request | added | high |
| 2026-10-22 18:17 | create_booking_payment_link | added | high |
| 2026-10-22 18:17 | cancel_booking | added | info |
Probe history
10-22 18:17 OK (18) · 08-13 12:17 OK (10)
Run or depend on com.advocatemcp/advocate? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).