← MCP Registry Integrity Report
com.beycome/listing
Verdict: high-severity findings present. Endpoint https://mcp.beycome.com/mcp. Tools now: 14 (14 ever seen). Changes recorded: 14. Findings: 10 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
beycome_check_coverage · beycome_comps · beycome_estimate · beycome_get_my_listings · beycome_messages · beycome_offers · beycome_questionnaire_link · beycome_rental_estimate · beycome_reply_message · beycome_showings · beycome_signin_start · beycome_signin_verify · beycome_signup · beycome_submit_property_link
Findings (23)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | beycome_signup | secret_material_reference | high | hen the owner has no account yet. beycome is passwordless: registering automatically emails the user a 6-digit sign-in |
| 2026-10-22 | beycome_signup | cross_tool_reference | high | references sibling tool 'beycome_signin_start' |
| 2026-10-22 | beycome_signin_start | secret_material_reference | high | n code (POST /auth/check-email). beycome is passwordless — never ask the user for a password. This emails the user a |
| 2026-10-22 | beycome_signin_start | cross_tool_reference | high | references sibling tool 'beycome_signup' |
| 2026-10-22 | beycome_signin_verify | secret_material_reference | high | t stage — exchange the one-time code for the access_token (POST /auth/validate-code). The gateway to the listing flow. Ca |
| 2026-10-22 | beycome_signin_verify | cross_tool_reference | high | references sibling tool 'beycome_signup' |
| 2026-10-22 | beycome_estimate | cross_tool_reference | high | references sibling tool 'beycome_rental_estimate' |
| 2026-10-22 | beycome_rental_estimate | cross_tool_reference | high | references sibling tool 'beycome_estimate' |
| 2026-10-22 | beycome_comps | cross_tool_reference | high | references sibling tool 'beycome_estimate' |
| 2026-10-22 | beycome_questionnaire_link | secret_material_reference | high | Bearer access token from beycome_signin_verify, or a previously saved token from you |
| 2026-10-22 | beycome_questionnaire_link | cross_tool_reference | high | references sibling tool 'beycome_signin_verify' |
| 2026-10-22 | beycome_submit_property_link | secret_material_reference | high | Bearer access token from beycome_signin_verify, or a previously saved token from you |
| 2026-10-22 | beycome_submit_property_link | cross_tool_reference | high | references sibling tool 'beycome_signin_verify' |
| 2026-10-22 | beycome_get_my_listings | secret_material_reference | high | Bearer access token from beycome_signin_verify, or a previously saved token from you |
| 2026-10-22 | beycome_get_my_listings | cross_tool_reference | high | references sibling tool 'beycome_signin_verify' |
| 2026-10-22 | beycome_offers | secret_material_reference | high | s). Used once a listing is live. Requires ``access_token``. Returns a paginated list (20 per page; pass ``page`` to advan |
| 2026-10-22 | beycome_offers | cross_tool_reference | high | references sibling tool 'beycome_signin_verify' |
| 2026-10-22 | beycome_showings | secret_material_reference | high | Bearer access token from beycome_signin_verify, or a previously saved token from you |
| 2026-10-22 | beycome_showings | cross_tool_reference | high | references sibling tool 'beycome_signin_verify' |
| 2026-10-22 | beycome_messages | secret_material_reference | high | ages (GET /messages). Read-only. Requires ``access_token``. Two modes: - Omit ``thread`` → lists the ~20 most recent co |
| 2026-10-22 | beycome_messages | cross_tool_reference | high | references sibling tool 'beycome_signin_start' |
| 2026-10-22 | beycome_reply_message | secret_material_reference | high | _id`` (the counterparty), ``message``, and ``access_token``. For a threaded reply pass the original ``thread`` verbatim an |
| 2026-10-22 | beycome_reply_message | cross_tool_reference | high | references sibling tool 'beycome_signin_start' |
Change history (14)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | beycome_signup | mutated | high |
| 2026-10-22 18:17 | beycome_signin_start | mutated | high |
| 2026-10-22 18:17 | beycome_signin_verify | mutated | high |
| 2026-10-22 18:17 | beycome_check_coverage | mutated | medium |
| 2026-10-22 18:17 | beycome_estimate | mutated | high |
| 2026-10-22 18:17 | beycome_rental_estimate | mutated | high |
| 2026-10-22 18:17 | beycome_comps | mutated | high |
| 2026-10-22 18:17 | beycome_questionnaire_link | mutated | high |
| 2026-10-22 18:17 | beycome_submit_property_link | mutated | high |
| 2026-10-22 18:17 | beycome_get_my_listings | mutated | high |
| 2026-10-22 18:17 | beycome_offers | mutated | high |
| 2026-10-22 18:17 | beycome_showings | mutated | high |
| 2026-10-22 18:17 | beycome_messages | mutated | high |
| 2026-10-22 18:17 | beycome_reply_message | mutated | high |
Probe history
10-22 18:17 OK (14) · 08-13 12:17 OK (14)
Run or depend on com.beycome/listing? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).