← MCP Registry Integrity Report
com.fadehost/mcp
Verdict: high-severity findings present. Endpoint https://api.fadehost.com/mcp. Tools now: 38 (38 ever seen). Changes recorded: 38. Findings: 3 high, 1 low. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
create_app · create_app_schedule · create_backup · create_server · delete_app_schedule · get_app_firewall · get_app_refusals · get_app_usage · get_bot_logs · get_console_logs · get_creation_options · get_live_stats · get_player_activity · get_server · get_world_activity · list_app_deployments · list_app_schedules · list_app_variables · list_backups · list_bots · list_files · list_servers · list_vps · move_app_region · power_bot · power_vps · prune_world · read_file · redeploy_app · restart_server · rollback_app · send_console_command · set_app_firewall · set_app_variables · start_server · stop_server · undo_world_prune · write_file
Findings (40)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | get_server | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | get_console_logs | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | get_live_stats | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | get_player_activity | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | start_server | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | stop_server | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | restart_server | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | send_console_command | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | list_backups | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | get_world_activity | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | prune_world | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | undo_world_prune | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | create_backup | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | create_server | cross_tool_reference | high | references sibling tool 'get_creation_options' |
| 2026-10-22 | create_app | secret_material_reference | high | ap of NAME to value (DISCORD_TOKEN for bots, API keys, ...). |
| 2026-10-22 | create_app | url_in_description | low | https://<name |
| 2026-10-22 | get_creation_options | cross_tool_reference | high | references sibling tool 'create_server' |
| 2026-10-22 | list_files | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | read_file | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | write_file | cross_tool_reference | high | references sibling tool 'list_servers' |
| 2026-10-22 | list_bots | cross_tool_reference | high | references sibling tool 'get_bot_logs' |
| 2026-10-22 | get_bot_logs | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | power_bot | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | redeploy_app | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | list_app_deployments | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | rollback_app | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | get_app_usage | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | get_app_firewall | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | set_app_firewall | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | get_app_refusals | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | list_app_schedules | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | create_app_schedule | cross_tool_reference | high | references sibling tool 'create_app' |
| 2026-10-22 | delete_app_schedule | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | move_app_region | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | list_app_variables | secret_material_reference | high | not even to the owner: they are bot tokens, API keys and database passwords, and an assistant does not need them to |
| 2026-10-22 | list_app_variables | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | set_app_variables | secret_material_reference | high | first and refused if Discord rejects it. The credentials of a bundled one-click database are written by FadeHost and are |
| 2026-10-22 | set_app_variables | cross_tool_reference | high | references sibling tool 'list_bots' |
| 2026-10-22 | list_vps | cross_tool_reference | high | references sibling tool 'power_vps' |
| 2026-10-22 | power_vps | cross_tool_reference | high | references sibling tool 'list_vps' |
Change history (38)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | list_servers | mutated | medium |
| 2026-10-22 18:17 | get_server | mutated | high |
| 2026-10-22 18:17 | get_console_logs | mutated | high |
| 2026-10-22 18:17 | get_live_stats | mutated | high |
| 2026-10-22 18:17 | get_player_activity | mutated | high |
| 2026-10-22 18:17 | start_server | mutated | high |
| 2026-10-22 18:17 | stop_server | mutated | high |
| 2026-10-22 18:17 | restart_server | mutated | high |
| 2026-10-22 18:17 | send_console_command | mutated | high |
| 2026-10-22 18:17 | list_backups | mutated | high |
| 2026-10-22 18:17 | get_world_activity | added | high |
| 2026-10-22 18:17 | prune_world | added | high |
| 2026-10-22 18:17 | undo_world_prune | added | high |
| 2026-10-22 18:17 | create_backup | mutated | high |
| 2026-10-22 18:17 | create_server | added | high |
| 2026-10-22 18:17 | create_app | added | high |
| 2026-10-22 18:17 | get_creation_options | added | high |
| 2026-10-22 18:17 | list_files | added | high |
| 2026-10-22 18:17 | read_file | added | high |
| 2026-10-22 18:17 | write_file | added | high |
| 2026-10-22 18:17 | list_bots | added | high |
| 2026-10-22 18:17 | get_bot_logs | added | high |
| 2026-10-22 18:17 | power_bot | added | high |
| 2026-10-22 18:17 | redeploy_app | added | high |
| 2026-10-22 18:17 | list_app_deployments | added | high |
| 2026-10-22 18:17 | rollback_app | added | high |
| 2026-10-22 18:17 | get_app_usage | added | high |
| 2026-10-22 18:17 | get_app_firewall | added | high |
| 2026-10-22 18:17 | set_app_firewall | added | high |
| 2026-10-22 18:17 | get_app_refusals | added | high |
| 2026-10-22 18:17 | list_app_schedules | added | high |
| 2026-10-22 18:17 | create_app_schedule | added | high |
| 2026-10-22 18:17 | delete_app_schedule | added | high |
| 2026-10-22 18:17 | move_app_region | added | high |
| 2026-10-22 18:17 | list_app_variables | added | high |
| 2026-10-22 18:17 | set_app_variables | added | high |
| 2026-10-22 18:17 | list_vps | added | high |
| 2026-10-22 18:17 | power_vps | added | high |
Probe history
10-22 18:17 OK (38) · 08-13 12:17 OK (11)
Run or depend on com.fadehost/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).