`com.bmcxiv/breach402-owner-protection`

Verdict: high-severity findings present. Endpoint https://breach402.bmcxiv.com/mcp. Tools now: 8 (8 ever seen). Changes recorded: 8. Findings: 2 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON

Current tools

assess_owner_security_need · create_owner_email_verification · get_breach_report · get_owner_email_verification_status · prepare_paid_breach_check · preview_synthetic_breach_report · revoke_owner_email_authorization · verify_owner_email_code

Findings (2)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-22	`assess_owner_security_need`	`secret_material_reference`	high	`oved Breach402 check after suspicious login, credential exposure, phishing, recovery, sensitive-service connection, or m`
2026-10-22	`get_breach_report`	`secret_material_reference`	high	`complete provider record objects, including credential and recovery values when present, plus local analysis derived on`

Change history (8)

when	tool	kind	severity
2026-10-22 18:17	`assess_owner_security_need`	mutated	high
2026-10-22 18:17	`preview_synthetic_breach_report`	mutated	medium
2026-10-22 18:17	`create_owner_email_verification`	mutated	medium
2026-10-22 18:17	`get_owner_email_verification_status`	mutated	medium
2026-10-22 18:17	`verify_owner_email_code`	mutated	medium
2026-10-22 18:17	`prepare_paid_breach_check`	mutated	medium
2026-10-22 18:17	`get_breach_report`	mutated	high
2026-10-22 18:17	`revoke_owner_email_authorization`	mutated	medium

Probe history

10-22 18:17 OK (8) · 08-13 12:17 OK (8)

Run or depend on com.bmcxiv/breach402-owner-protection? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).