← MCP Registry Integrity Report
com.bonissystems/knox-anchor
Verdict: high-severity findings present. Endpoint https://bonissystems.com/api/knox/mcp. Tools now: 9 (9 ever seen). Changes recorded: 9. Findings: 4 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
anchor_event · anchor_file_hash · anchor_mcp_tool_call · get_chain_health · get_descriptor · list_event_types · return_agent_trip · verify_agent_trip · verify_anchor
Findings (5)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | anchor_event | secret_material_reference | high | tamp, and verify URL. Requires a Knox Bearer API key on the Authorization header — unauthenticated calls are rejected |
| 2026-10-22 | anchor_event | cross_tool_reference | high | references sibling tool 'list_event_types' |
| 2026-10-22 | anchor_mcp_tool_call | secret_material_reference | high | Recorded as an assertion attributed to your API key, never as an authenticated subject; the anchored payload carries |
| 2026-10-22 | anchor_file_hash | secret_material_reference | high | the presiding court. Requires a Knox Bearer API key on the Authorization header — unauthenticated calls are rejected |
| 2026-10-22 | return_agent_trip | secret_material_reference | high | erify-agent-trip.mjs. Requires a Knox Bearer API key on the Authorization header. |
Change history (9)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | get_descriptor | mutated | medium |
| 2026-10-22 18:17 | get_chain_health | mutated | medium |
| 2026-10-22 18:17 | list_event_types | mutated | medium |
| 2026-10-22 18:17 | verify_anchor | mutated | medium |
| 2026-10-22 18:17 | anchor_event | mutated | high |
| 2026-10-22 18:17 | anchor_mcp_tool_call | mutated | high |
| 2026-10-22 18:17 | anchor_file_hash | mutated | high |
| 2026-10-22 18:17 | verify_agent_trip | added | info |
| 2026-10-22 18:17 | return_agent_trip | added | high |
Probe history
10-22 18:17 OK (9) · 08-13 12:17 OK (7)
Run or depend on com.bonissystems/knox-anchor? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).