← MCP Registry Integrity Report
com.fiatdock/fiatdock-mcp
Verdict: high-severity findings present. Endpoint https://fiatdock.com/mcp. Tools now: 49 (49 ever seen). Changes recorded: 49. Findings: 5 low, 4 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
address_intel · block_number · call_service · call_x402 · company_financials · create_offramp_session · create_onramp_session · crypto_news · defi_yields · domain_intel · email_check · ens_resolve · eth_balance · feed_read · fx_rates · gas_price · get_order_status · get_quote · get_service · hn_search · package_intel · paper_search · perp_market · prediction_markets · prompt_injection_check · public_holidays · satellite_scenes · search_services · search_x402 · sec_filings · seo_audit · site_contacts · stablecoin_intel · strategy_backtest · timezone_convert · token_holders · token_metadata · token_price · token_report · token_safety · token_screener · token_verdict · tx_status · usdc_balance · wallet_portfolio · weather_forecast · web_read · wiki_summary · x402_top_services
Findings (20)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | token_price | cross_tool_reference | high | references sibling tool 'token_safety' |
| 2026-10-22 | search_services | url_in_description | low | https://…/s/:id |
| 2026-10-22 | search_services | cross_tool_reference | high | references sibling tool 'get_service' |
| 2026-10-22 | get_service | url_in_description | low | https://…/s/:id |
| 2026-10-22 | get_service | cross_tool_reference | high | references sibling tool 'search_services' |
| 2026-10-22 | search_x402 | cross_tool_reference | high | references sibling tool 'search_services' |
| 2026-10-22 | create_offramp_session | secret_material_reference | high | ure of 'MtPelerin-<code>' by the agent's OWN wallet key (never shared with us). Requires walletCode |
| 2026-10-22 | create_offramp_session | cross_tool_reference | high | references sibling tool 'get_order_status' |
| 2026-10-22 | create_onramp_session | secret_material_reference | high | ure of 'MtPelerin-<code>' by the agent's OWN wallet key (never shared with us). Locks the widget to walletAddress. Requi |
| 2026-10-22 | create_onramp_session | cross_tool_reference | high | references sibling tool 'get_order_status' |
| 2026-10-22 | token_report | cross_tool_reference | high | references sibling tool 'token_price' |
| 2026-10-22 | web_read | secret_material_reference | high | Absolute http(s) URL of the page to read (no credentials in the URL) |
| 2026-10-22 | prompt_injection_check | secret_material_reference | high | ned system role or persona, requests to move credentials or keys, hidden directive tags and invisible Unicode. Returns a |
| 2026-10-22 | token_screener | cross_tool_reference | high | references sibling tool 'token_safety' |
| 2026-10-22 | seo_audit | url_in_description | low | https://… |
| 2026-10-22 | public_holidays | url_in_description | low | https://date.nager.at/api/v3/AvailableCountries. |
| 2026-10-22 | feed_read | url_in_description | low | https://hnrss.org/frontpage. |
| 2026-10-22 | token_verdict | cross_tool_reference | high | references sibling tool 'token_safety' |
| 2026-10-22 | call_service | cross_tool_reference | high | references sibling tool 'search_services' |
| 2026-10-22 | call_x402 | cross_tool_reference | high | references sibling tool 'search_x402' |
Change history (49)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | get_quote | mutated | medium |
| 2026-10-22 18:17 | get_order_status | mutated | medium |
| 2026-10-22 18:17 | token_price | mutated | high |
| 2026-10-22 18:17 | search_services | mutated | high |
| 2026-10-22 18:17 | get_service | mutated | high |
| 2026-10-22 18:17 | search_x402 | added | high |
| 2026-10-22 18:17 | create_offramp_session | mutated | high |
| 2026-10-22 18:17 | create_onramp_session | mutated | high |
| 2026-10-22 18:17 | token_safety | mutated | medium |
| 2026-10-22 18:17 | stablecoin_intel | mutated | medium |
| 2026-10-22 18:17 | gas_price | mutated | medium |
| 2026-10-22 18:17 | block_number | mutated | medium |
| 2026-10-22 18:17 | eth_balance | mutated | medium |
| 2026-10-22 18:17 | usdc_balance | mutated | medium |
| 2026-10-22 18:17 | token_metadata | mutated | medium |
| 2026-10-22 18:17 | tx_status | mutated | medium |
| 2026-10-22 18:17 | address_intel | mutated | medium |
| 2026-10-22 18:17 | token_report | mutated | high |
| 2026-10-22 18:17 | web_read | added | high |
| 2026-10-22 18:17 | email_check | added | info |
| 2026-10-22 18:17 | perp_market | added | info |
| 2026-10-22 18:17 | prediction_markets | added | info |
| 2026-10-22 18:17 | defi_yields | added | info |
| 2026-10-22 18:17 | fx_rates | added | info |
| 2026-10-22 18:17 | wallet_portfolio | added | info |
| 2026-10-22 18:17 | token_holders | added | info |
| 2026-10-22 18:17 | domain_intel | added | info |
| 2026-10-22 18:17 | site_contacts | added | info |
| 2026-10-22 18:17 | crypto_news | added | info |
| 2026-10-22 18:17 | sec_filings | added | info |
| 2026-10-22 18:17 | prompt_injection_check | added | high |
| 2026-10-22 18:17 | token_screener | added | high |
| 2026-10-22 18:17 | paper_search | added | info |
| 2026-10-22 18:17 | satellite_scenes | added | info |
| 2026-10-22 18:17 | seo_audit | added | info |
| 2026-10-22 18:17 | x402_top_services | added | info |
| 2026-10-22 18:17 | ens_resolve | added | info |
| 2026-10-22 18:17 | timezone_convert | added | info |
| 2026-10-22 18:17 | public_holidays | added | info |
| 2026-10-22 18:17 | weather_forecast | added | info |
| 2026-10-22 18:17 | wiki_summary | added | info |
| 2026-10-22 18:17 | hn_search | added | info |
| 2026-10-22 18:17 | feed_read | added | info |
| 2026-10-22 18:17 | package_intel | added | info |
| 2026-10-22 18:17 | company_financials | added | info |
| 2026-10-22 18:17 | token_verdict | added | high |
| 2026-10-22 18:17 | strategy_backtest | added | info |
| 2026-10-22 18:17 | call_service | mutated | high |
| 2026-10-22 18:17 | call_x402 | added | high |
Probe history
10-22 18:17 OK (49) · 08-13 18:17 OK (18)
Run or depend on com.fiatdock/fiatdock-mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).