`com.dataroia/data-trust`

Verdict: high-severity findings present. Endpoint https://api.dataroia.com/mcp/. Tools now: 8 (8 ever seen). Changes recorded: 8. Findings: 1 low, 5 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON

Current tools

croiser_deces · diagnostiquer_echantillon · dirigeants_entreprise · resoudre_siren · sante_entreprise · surveillance_alertes · surveillance_portefeuille · verifier_siret

Findings (7)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-22	`diagnostiquer_echantillon`	`url_in_description`	low	`https://dataroia.com`
2026-10-22	`sante_entreprise`	`secret_material_reference`	high	`Api Key`
2026-10-22	`dirigeants_entreprise`	`secret_material_reference`	high	`Api Key`
2026-10-22	`croiser_deces`	`secret_material_reference`	high	`Api Key`
2026-10-22	`surveillance_portefeuille`	`secret_material_reference`	high	`Api Key`
2026-10-22	`surveillance_portefeuille`	`cross_tool_reference`	high	`references sibling tool 'surveillance_alertes'`
2026-10-22	`surveillance_alertes`	`secret_material_reference`	high	`Api Key`

Change history (8)

when	tool	kind	severity
2026-10-22 18:17	`verifier_siret`	mutated	medium
2026-10-22 18:17	`diagnostiquer_echantillon`	mutated	medium
2026-10-22 18:17	`resoudre_siren`	mutated	medium
2026-10-22 18:17	`sante_entreprise`	mutated	high
2026-10-22 18:17	`dirigeants_entreprise`	mutated	high
2026-10-22 18:17	`croiser_deces`	mutated	high
2026-10-22 18:17	`surveillance_portefeuille`	mutated	high
2026-10-22 18:17	`surveillance_alertes`	mutated	high

Probe history

10-22 18:17 OK (8) · 08-13 12:17 OK (8)

Run or depend on com.dataroia/data-trust? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).