← MCP Registry Integrity Report
com.agentickingdoms/agentic-kingdoms
Verdict: CRITICAL findings present. Endpoint https://mcp.agentickingdoms.com. Tools now: 17 (17 ever seen). Changes recorded: 17. Findings: 12 high, 2 critical. Last probe: OK at 2026-10-23T18:17 UTC. JSON
Current tools
account · buy_pack · buy_pack_with_store_credit · claim_account · find_players · game_data · get_snapshot · gift_code_pack · gift_pack · guest_login · invites · login · redeem_coupon · redeem_gift_code · register · send_command · shop_packs
Findings (29)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | buy_pack | model_directed_instruction | high | th the purchase, overriding snapshot; now is always included |
| 2026-10-23 | buy_pack | secret_material_reference | high | gent wallet (link-cli spend-request create --credential-type shared_payment_token), or from sandbox_payment_token when t |
| 2026-10-23 | buy_pack | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | buy_pack_with_store_credit | model_directed_instruction | high | th the purchase, overriding snapshot; now is always included |
| 2026-10-23 | buy_pack_with_store_credit | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | claim_account | secret_material_reference | high | ccount into a full account with an email and password, exactly like the web client's "save account" (POST /v1/guest/cl |
| 2026-10-23 | claim_account | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | find_players | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | get_snapshot | model_directed_instruction | high | chat, alliance), overriding snapshot; now is always included |
| 2026-10-23 | get_snapshot | cross_tool_reference | high | references sibling tool 'send_command' |
| 2026-10-23 | gift_code_pack | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | gift_pack | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | guest_login | model_directed_instruction | high | keys to return, overriding snapshot; now is always included |
| 2026-10-23 | guest_login | secret_material_reference | high | call with the same device_id) with no email/password, exactly like POST /v1/guest (docs/protocol.md §1). Omit device_ |
| 2026-10-23 | guest_login | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | invites | cross_tool_reference | high | references sibling tool 'guest_login' |
| 2026-10-23 | login | model_directed_instruction | high | keys to return, overriding snapshot; now is always included |
| 2026-10-23 | login | secret_material_reference | high | n existing Agentic Kingdoms account by email/password and open its game connection, exactly like POST /v1/login (docs/ |
| 2026-10-23 | login | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | redeem_coupon | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | redeem_gift_code | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | register | user_concealment | critical | ; registering again abandons the old account silently instead of erroring. The reply's snapshot is the full Snapshot u |
| 2026-10-23 | register | model_directed_instruction | high | keys to return, overriding snapshot; now is always included |
| 2026-10-23 | register | secret_material_reference | high | password, at least 6 characters |
| 2026-10-23 | register | cross_tool_reference | high | references sibling tool 'account' |
| 2026-10-23 | send_command | user_concealment | critical | .send") — unknown commands error rather than silently no-op. A refused command returns ok:false with error_code and er |
| 2026-10-23 | send_command | model_directed_instruction | high | keys to return, overriding snapshot; now is always included |
| 2026-10-23 | send_command | cross_tool_reference | high | references sibling tool 'game_data' |
| 2026-10-23 | shop_packs | cross_tool_reference | high | references sibling tool 'account' |
Change history (17)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 18:17 | account | added | info |
| 2026-10-23 18:17 | buy_pack | added | high |
| 2026-10-23 18:17 | buy_pack_with_store_credit | added | high |
| 2026-10-23 18:17 | claim_account | added | high |
| 2026-10-23 18:17 | find_players | added | high |
| 2026-10-23 18:17 | game_data | added | info |
| 2026-10-23 18:17 | get_snapshot | added | high |
| 2026-10-23 18:17 | gift_code_pack | added | high |
| 2026-10-23 18:17 | gift_pack | added | high |
| 2026-10-23 18:17 | guest_login | added | high |
| 2026-10-23 18:17 | invites | added | high |
| 2026-10-23 18:17 | login | added | high |
| 2026-10-23 18:17 | redeem_coupon | added | high |
| 2026-10-23 18:17 | redeem_gift_code | added | high |
| 2026-10-23 18:17 | register | added | critical |
| 2026-10-23 18:17 | send_command | added | critical |
| 2026-10-23 18:17 | shop_packs | added | high |
Probe history
10-23 18:17 OK (17)
Run or depend on com.agentickingdoms/agentic-kingdoms? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).