← MCP Registry Integrity Report
com.bidda/bidda-compliance
Verdict: high-severity findings present. Endpoint https://bidda.com/mcp. Tools now: 25 (25 ever seen). Changes recorded: 25. Findings: 15 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
browse_topics · check_action_compliance · compare_jurisdictions · consult_node · create_attestation · create_control_attestation · drift_check · gap_check · get_audit_pack · get_crosswalk · get_dependency_chain · get_jurisdiction_bundle · get_latest_changes · get_mitre_mapping · get_node · get_run · list_pillars · obligation_deltas · open_run · oscal_assessment_results · point_in_time · record_run_entry · seal_run · search_nodes · watch_changes
Findings (18)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | compare_jurisdictions | secret_material_reference | high | active Bidda subscription: pass your key as api_key. |
| 2026-10-22 | create_attestation | secret_material_reference | high | Requires an active Bidda subscription: pass api_key. |
| 2026-10-22 | point_in_time | secret_material_reference | high | Requires an active Bidda subscription: pass api_key. |
| 2026-10-22 | watch_changes | secret_material_reference | high | Requires an active Bidda subscription: pass api_key. |
| 2026-10-22 | open_run | secret_material_reference | high | Requires an active Bidda subscription: pass api_key. |
| 2026-10-22 | open_run | cross_tool_reference | high | references sibling tool 'record_run_entry' |
| 2026-10-22 | record_run_entry | secret_material_reference | high | Requires an active Bidda subscription: pass api_key. |
| 2026-10-22 | record_run_entry | cross_tool_reference | high | references sibling tool 'open_run' |
| 2026-10-22 | consult_node | secret_material_reference | high | Requires an active Bidda subscription: pass api_key. |
| 2026-10-22 | consult_node | cross_tool_reference | high | references sibling tool 'get_node' |
| 2026-10-22 | get_audit_pack | secret_material_reference | high | id; a still-open run's draft pack needs your api_key. |
| 2026-10-22 | seal_run | secret_material_reference | high | Requires an active Bidda subscription: pass api_key. |
| 2026-10-22 | get_run | secret_material_reference | high | e owner can read an open or sealed run (pass api_key); a sealed run is also publicly readable by id and reports wheth |
| 2026-10-22 | drift_check | secret_material_reference | high | -call batch size scales with your plan. Pass api_key. |
| 2026-10-22 | create_control_attestation | secret_material_reference | high | Requires an active Bidda subscription: pass api_key. |
| 2026-10-22 | gap_check | secret_material_reference | high | Requires an active Bidda subscription: pass api_key. |
| 2026-10-22 | obligation_deltas | secret_material_reference | high | Requires an active Bidda subscription: pass api_key. |
| 2026-10-22 | oscal_assessment_results | secret_material_reference | high | readable by id; a still-open run needs your api_key. |
Change history (25)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | list_pillars | mutated | medium |
| 2026-10-22 18:17 | search_nodes | mutated | medium |
| 2026-10-22 18:17 | get_node | mutated | medium |
| 2026-10-22 18:17 | get_dependency_chain | mutated | medium |
| 2026-10-22 18:17 | get_crosswalk | mutated | medium |
| 2026-10-22 18:17 | get_latest_changes | mutated | medium |
| 2026-10-22 18:17 | get_jurisdiction_bundle | mutated | medium |
| 2026-10-22 18:17 | get_mitre_mapping | mutated | medium |
| 2026-10-22 18:17 | check_action_compliance | mutated | medium |
| 2026-10-22 18:17 | browse_topics | mutated | medium |
| 2026-10-22 18:17 | compare_jurisdictions | mutated | high |
| 2026-10-22 18:17 | create_attestation | mutated | high |
| 2026-10-22 18:17 | point_in_time | mutated | high |
| 2026-10-22 18:17 | watch_changes | mutated | high |
| 2026-10-22 18:17 | open_run | mutated | high |
| 2026-10-22 18:17 | record_run_entry | mutated | high |
| 2026-10-22 18:17 | consult_node | mutated | high |
| 2026-10-22 18:17 | get_audit_pack | mutated | high |
| 2026-10-22 18:17 | seal_run | mutated | high |
| 2026-10-22 18:17 | get_run | mutated | high |
| 2026-10-22 18:17 | drift_check | mutated | high |
| 2026-10-22 18:17 | create_control_attestation | mutated | high |
| 2026-10-22 18:17 | gap_check | mutated | high |
| 2026-10-22 18:17 | obligation_deltas | mutated | high |
| 2026-10-22 18:17 | oscal_assessment_results | mutated | high |
Probe history
10-22 18:17 OK (25) · 08-13 12:17 OK (25)
Run or depend on com.bidda/bidda-compliance? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).