← MCP Registry Integrity Report
com.datavrn/schedule-iii
Verdict: CRITICAL findings present. Endpoint https://app.datavrn.com/api/mcp. Tools now: 67 (67 ever seen). Changes recorded: 67. Findings: 22 high, 1 low, 1 critical. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
assert_previous_year_no_activity · confirm_capture_review · confirm_centre_mappings · confirm_column_mapping · confirm_complete_chart · confirm_groupings · confirm_reporting_lines · copy_capture_declarations · create_client · create_cost_centre · create_profit_centre · create_upload_link · declare_capture_na · finalise_statement · generate_schedule_iii · get_allocation_account_figures · get_allocation_target_figures · get_budget · get_comparative_source_state · get_consolidated_statements · get_finalise_readiness · get_help · get_job · get_partner_capital · get_pending_work · get_schedule3_workspace · get_setup_status · get_spreading_reconciliation · get_statement_figures · get_statement_notes · get_tb_rows · get_upload · get_upload_link_status · get_variance_report · get_workbook_download · ingest_upload · list_account_mappings · list_allocation_runs · list_budgets · list_chart_rebaselines · list_clients · list_cost_centres · list_grouping_suggestions · list_periods · list_profit_centres · list_replacements · list_reporting_lines · list_snapshots · list_statement_policy_choices · preview_chart_rebaseline · preview_replacement_restore · restore_replacement · revoke_capture_declaration · save_accounting_policies · save_adjustments · save_asset_movements · save_disclosures · save_partner_capital · save_provision_movements · save_py_values · save_regulatory_affirmations · save_reserves_movements · save_share_capital · save_statement_settings · set_header_row · upload_trial_balance · verify_connection
Findings (86)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | list_clients | secret_material_reference | high | List the entities (companies) this credential can work with. Call this first to resolve the client_id every ot |
| 2026-10-22 | upload_trial_balance | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_upload | cross_tool_reference | high | references sibling tool 'upload_trial_balance' |
| 2026-10-22 | set_header_row | cross_tool_reference | high | references sibling tool 'upload_trial_balance' |
| 2026-10-22 | confirm_column_mapping | cross_tool_reference | high | references sibling tool 'upload_trial_balance' |
| 2026-10-22 | ingest_upload | cross_tool_reference | high | references sibling tool 'upload_trial_balance' |
| 2026-10-22 | list_periods | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_schedule3_workspace | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | list_grouping_suggestions | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | confirm_groupings | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_adjustments | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_py_values | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_asset_movements | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_provision_movements | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_reserves_movements | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_share_capital | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_statement_settings | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_disclosures | model_directed_instruction | high | at section — there is no row-level merge, so always send that section complete. To CLEAR a section, send it explicitly wi |
| 2026-10-22 | save_disclosures | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_disclosures | oversized_description | low | 5755 chars |
| 2026-10-22 | declare_capture_na | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | declare_capture_na | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | confirm_capture_review | model_directed_instruction | high | l assertion, recorded as authorised by them. Before calling this, show them what you are confirming — the whole comparative, or t |
| 2026-10-22 | confirm_capture_review | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | confirm_capture_review | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | revoke_capture_declaration | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | revoke_capture_declaration | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | copy_capture_declarations | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | copy_capture_declarations | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_partner_capital | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | save_partner_capital | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_partner_capital | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_accounting_policies | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | save_accounting_policies | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | save_regulatory_affirmations | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | save_regulatory_affirmations | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | list_statement_policy_choices | user_concealment | critical | r user about that second case explicitly: it silently replaces a policy they wrote. The summary gives you both numbers |
| 2026-10-22 | list_statement_policy_choices | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_finalise_readiness | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | get_finalise_readiness | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | finalise_statement | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | finalise_statement | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_comparative_source_state | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | get_comparative_source_state | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | assert_previous_year_no_activity | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | assert_previous_year_no_activity | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | generate_schedule_iii | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_job | cross_tool_reference | high | references sibling tool 'generate_schedule_iii' |
| 2026-10-22 | list_snapshots | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_workbook_download | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | create_upload_link | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_upload_link_status | cross_tool_reference | high | references sibling tool 'get_upload' |
| 2026-10-22 | get_statement_figures | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_statement_notes | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_tb_rows | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_pending_work | cross_tool_reference | high | references sibling tool 'list_replacements' |
| 2026-10-22 | list_allocation_runs | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_allocation_account_figures | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_allocation_target_figures | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_spreading_reconciliation | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | list_budgets | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_budget | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_variance_report | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | list_cost_centres | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | create_cost_centre | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | list_profit_centres | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | create_profit_centre | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | list_account_mappings | model_directed_instruction | high | licy pointing at a deactivated centre, which you must report rather than calling the entity profit-mapped. |
| 2026-10-22 | list_account_mappings | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | confirm_centre_mappings | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | list_reporting_lines | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | confirm_reporting_lines | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | get_setup_status | secret_material_reference | high | ganization view): it lists the entities this credential can see, or — if there are none — the step to create the first o |
| 2026-10-22 | get_setup_status | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | list_replacements | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | preview_replacement_restore | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | preview_replacement_restore | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | restore_replacement | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
| 2026-10-22 | restore_replacement | cross_tool_reference | high | references sibling tool 'list_clients' |
| 2026-10-22 | list_chart_rebaselines | secret_material_reference | high | the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con |
Change history (67)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | list_clients | mutated | high |
| 2026-10-22 18:17 | create_client | mutated | medium |
| 2026-10-22 18:17 | upload_trial_balance | mutated | high |
| 2026-10-22 18:17 | get_upload | mutated | high |
| 2026-10-22 18:17 | set_header_row | mutated | high |
| 2026-10-22 18:17 | confirm_column_mapping | mutated | high |
| 2026-10-22 18:17 | ingest_upload | mutated | high |
| 2026-10-22 18:17 | list_periods | mutated | high |
| 2026-10-22 18:17 | get_schedule3_workspace | mutated | high |
| 2026-10-22 18:17 | list_grouping_suggestions | mutated | high |
| 2026-10-22 18:17 | confirm_groupings | mutated | high |
| 2026-10-22 18:17 | save_adjustments | mutated | high |
| 2026-10-22 18:17 | save_py_values | mutated | high |
| 2026-10-22 18:17 | save_asset_movements | mutated | high |
| 2026-10-22 18:17 | save_provision_movements | mutated | high |
| 2026-10-22 18:17 | save_reserves_movements | mutated | high |
| 2026-10-22 18:17 | save_share_capital | mutated | high |
| 2026-10-22 18:17 | save_statement_settings | mutated | high |
| 2026-10-22 18:17 | save_disclosures | mutated | high |
| 2026-10-22 18:17 | declare_capture_na | mutated | high |
| 2026-10-22 18:17 | confirm_capture_review | mutated | high |
| 2026-10-22 18:17 | revoke_capture_declaration | mutated | high |
| 2026-10-22 18:17 | copy_capture_declarations | mutated | high |
| 2026-10-22 18:17 | save_partner_capital | mutated | high |
| 2026-10-22 18:17 | get_partner_capital | mutated | high |
| 2026-10-22 18:17 | save_accounting_policies | mutated | high |
| 2026-10-22 18:17 | save_regulatory_affirmations | mutated | high |
| 2026-10-22 18:17 | list_statement_policy_choices | mutated | critical |
| 2026-10-22 18:17 | get_finalise_readiness | mutated | high |
| 2026-10-22 18:17 | finalise_statement | mutated | high |
| 2026-10-22 18:17 | get_comparative_source_state | added | high |
| 2026-10-22 18:17 | assert_previous_year_no_activity | added | high |
| 2026-10-22 18:17 | generate_schedule_iii | mutated | high |
| 2026-10-22 18:17 | get_job | mutated | high |
| 2026-10-22 18:17 | list_snapshots | mutated | high |
| 2026-10-22 18:17 | get_workbook_download | mutated | high |
| 2026-10-22 18:17 | create_upload_link | mutated | high |
| 2026-10-22 18:17 | get_upload_link_status | mutated | high |
| 2026-10-22 18:17 | get_statement_figures | mutated | high |
| 2026-10-22 18:17 | get_statement_notes | mutated | high |
| 2026-10-22 18:17 | get_tb_rows | mutated | high |
| 2026-10-22 18:17 | get_pending_work | mutated | high |
| 2026-10-22 18:17 | list_allocation_runs | mutated | high |
| 2026-10-22 18:17 | get_allocation_account_figures | mutated | high |
| 2026-10-22 18:17 | get_allocation_target_figures | mutated | high |
| 2026-10-22 18:17 | get_spreading_reconciliation | mutated | high |
| 2026-10-22 18:17 | list_budgets | mutated | high |
| 2026-10-22 18:17 | get_budget | mutated | high |
| 2026-10-22 18:17 | get_variance_report | mutated | high |
| 2026-10-22 18:17 | get_consolidated_statements | mutated | medium |
| 2026-10-22 18:17 | list_cost_centres | mutated | high |
| 2026-10-22 18:17 | create_cost_centre | mutated | high |
| 2026-10-22 18:17 | list_profit_centres | mutated | high |
| 2026-10-22 18:17 | create_profit_centre | mutated | high |
| 2026-10-22 18:17 | list_account_mappings | mutated | high |
| 2026-10-22 18:17 | confirm_centre_mappings | mutated | high |
| 2026-10-22 18:17 | list_reporting_lines | mutated | high |
| 2026-10-22 18:17 | confirm_reporting_lines | mutated | high |
| 2026-10-22 18:17 | get_setup_status | mutated | high |
| 2026-10-22 18:17 | list_replacements | added | high |
| 2026-10-22 18:17 | preview_replacement_restore | added | high |
| 2026-10-22 18:17 | restore_replacement | added | high |
| 2026-10-22 18:17 | list_chart_rebaselines | added | high |
| 2026-10-22 18:17 | preview_chart_rebaseline | added | high |
| 2026-10-22 18:17 | confirm_complete_chart | added | high |
| 2026-10-22 18:17 | verify_connection | mutated | medium |
| 2026-10-22 18:17 | get_help | mutated | high |
Probe history
10-22 18:17 OK (67) · 08-13 12:17 OK (59)
Run or depend on com.datavrn/schedule-iii? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).