← MCP Registry Integrity Report
com.bluepillow/hotels
Verdict: CRITICAL findings present. Endpoint https://mcp.b2a.bluepillow.com/. Tools now: 6 (6 ever seen). Changes recorded: 13. Findings: {"high":24,"low":8,"critical":2}. Last probe: OK at 2026-09-28T18:17 UTC. JSON
Current tools
b2a_get_key · check_property_availability · discover_destinations_near · get_property_details · resolve_destination · search_stays
Findings (34)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-09-24 | search_stays | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-09-24 | search_stays | cross_tool_reference | high | references sibling tool 'get_property_details' |
| 2026-09-24 | search_stays | oversized_description | low | 10806 chars |
| 2026-09-24 | get_property_details | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-09-24 | get_property_details | url_in_description | low | https://www.bluepillow.com/search/68d1a2... |
| 2026-09-24 | get_property_details | cross_tool_reference | high | references sibling tool 'search_stays' |
| 2026-09-24 | get_property_details | oversized_description | low | 4038 chars |
| 2026-09-24 | check_property_availability | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-09-24 | check_property_availability | url_in_description | low | https://www.bluepillow.com/search/68d1a2... |
| 2026-09-24 | check_property_availability | cross_tool_reference | high | references sibling tool 'search_stays' |
| 2026-09-24 | resolve_destination | user_concealment | critical | supported language. Unrecognized values are silently ignored (fail-open). |
| 2026-09-24 | resolve_destination | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-09-24 | resolve_destination | cross_tool_reference | high | references sibling tool 'search_stays' |
| 2026-09-24 | discover_destinations_near | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-09-24 | discover_destinations_near | cross_tool_reference | high | references sibling tool 'search_stays' |
| 2026-09-24 | b2a_get_key | secret_material_reference | high | Get an anonymous API key for Blue Pillow Hotels & Stays |
| 2026-08-20 | search_stays | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-08-20 | search_stays | cross_tool_reference | high | references sibling tool 'get_property_details' |
| 2026-08-20 | search_stays | oversized_description | low | 10806 chars |
| 2026-08-20 | get_property_details | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-08-20 | get_property_details | url_in_description | low | https://www.bluepillow.com/search/68d1a2... |
| 2026-08-20 | get_property_details | cross_tool_reference | high | references sibling tool 'search_stays' |
| 2026-08-20 | get_property_details | oversized_description | low | 4038 chars |
| 2026-08-20 | check_property_availability | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-08-20 | check_property_availability | url_in_description | low | https://www.bluepillow.com/search/68d1a2... |
| 2026-08-20 | check_property_availability | cross_tool_reference | high | references sibling tool 'search_stays' |
| 2026-08-20 | resolve_destination | user_concealment | critical | supported language. Unrecognized values are silently ignored (fail-open). |
| 2026-08-20 | resolve_destination | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-08-20 | resolve_destination | cross_tool_reference | high | references sibling tool 'search_stays' |
| 2026-08-20 | discover_destinations_near | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-08-20 | discover_destinations_near | cross_tool_reference | high | references sibling tool 'search_stays' |
| 2026-08-20 | b2a_get_key | secret_material_reference | high | Get an anonymous API key for Blue Pillow Hotels & Stays |
| 2026-08-13 | discover_destinations_near | secret_material_reference | high | Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this |
| 2026-08-13 | discover_destinations_near | cross_tool_reference | high | references sibling tool 'search_stays' |
Change history (13)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-09-24 18:17 | search_stays | mutated | high |
| 2026-09-24 18:17 | get_property_details | mutated | high |
| 2026-09-24 18:17 | check_property_availability | mutated | high |
| 2026-09-24 18:17 | resolve_destination | mutated | critical |
| 2026-09-24 18:17 | discover_destinations_near | mutated | high |
| 2026-09-24 18:17 | b2a_get_key | mutated | high |
| 2026-08-20 00:17 | search_stays | mutated | high |
| 2026-08-20 00:17 | get_property_details | mutated | high |
| 2026-08-20 00:17 | check_property_availability | mutated | high |
| 2026-08-20 00:17 | resolve_destination | mutated | critical |
| 2026-08-20 00:17 | discover_destinations_near | mutated | high |
| 2026-08-20 00:17 | b2a_get_key | mutated | high |
| 2026-08-13 12:17 | discover_destinations_near | mutated | high |
Probe history
09-28 18:17 OK (6) · 09-28 12:17 OK (6) · 09-28 06:17 OK (6) · 09-28 00:17 OK (6) · 09-27 18:17 OK (6) · 09-27 12:17 OK (6) · 09-27 06:17 OK (6) · 09-27 00:17 OK (6) · 09-26 18:17 OK (6) · 09-26 12:17 OK (6) · 09-26 06:17 OK (6) · 09-26 00:17 OK (6) · 09-25 18:17 OK (6) · 09-25 12:17 OK (6) · 09-25 06:17 OK (6) · 09-25 00:17 OK (6) · 09-24 18:17 OK (6) · 09-24 12:17 OK (6) · 09-24 06:17 OK (6) · 09-24 00:17 OK (6) · 09-23 18:17 OK (6) · 09-23 12:17 OK (6) · 09-23 06:17 OK (6) · 09-23 00:17 OK (6) · 09-22 18:17 OK (6) · 09-22 12:17 OK (6) · 09-22 06:17 OK (6) · 09-22 00:17 OK (6) · 09-21 18:17 OK (6) · 09-21 12:17 OK (6)
Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).