← MCP Registry Integrity Report
com.foldlaboratories/art
Verdict: CRITICAL findings present. Endpoint https://api.foldlaboratories.com/mcp. Tools now: 11 (11 ever seen). Changes recorded: 11. Findings: 3 high, 1 critical. Last probe: OK at 2026-10-23T18:17 UTC. JSON
Current tools
cancel_purchase · check_availability · confirm_purchase · get_artwork · get_delivered_quote · get_order_status · get_purchase · open_claim · search_artworks · set_delivery · start_purchase
Findings (11)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | get_artwork | cross_tool_reference | high | references sibling tool 'search_artworks' |
| 2026-10-23 | check_availability | model_directed_instruction | high | ession can sell between search and checkout. ALWAYS call this before offering a specific impression — offering a sold ori |
| 2026-10-23 | check_availability | cross_tool_reference | high | references sibling tool 'get_artwork' |
| 2026-10-23 | get_delivered_quote | cross_tool_reference | high | references sibling tool 'get_artwork' |
| 2026-10-23 | open_claim | cross_tool_reference | high | references sibling tool 'get_order_status' |
| 2026-10-23 | start_purchase | secret_material_reference | high | ll set_delivery. The purchase belongs to the credential that starts it, on this endpoint: no other credential can read, |
| 2026-10-23 | start_purchase | cross_tool_reference | high | references sibling tool 'get_artwork' |
| 2026-10-23 | set_delivery | cross_tool_reference | high | references sibling tool 'confirm_purchase' |
| 2026-10-23 | confirm_purchase | user_concealment | critical | he buyer approved, this DECLINES rather than silently charging the new figure — re-present the purchase and ask again. |
| 2026-10-23 | confirm_purchase | secret_material_reference | high | A scoped payment credential: a Stripe shared payment token issued to Fold’s own Stripe netwo |
| 2026-10-23 | confirm_purchase | cross_tool_reference | high | references sibling tool 'set_delivery' |
Change history (11)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 18:17 | search_artworks | added | info |
| 2026-10-23 18:17 | get_artwork | added | high |
| 2026-10-23 18:17 | check_availability | added | high |
| 2026-10-23 18:17 | get_delivered_quote | added | high |
| 2026-10-23 18:17 | get_order_status | added | info |
| 2026-10-23 18:17 | open_claim | added | high |
| 2026-10-23 18:17 | start_purchase | added | high |
| 2026-10-23 18:17 | get_purchase | added | info |
| 2026-10-23 18:17 | set_delivery | added | high |
| 2026-10-23 18:17 | confirm_purchase | added | critical |
| 2026-10-23 18:17 | cancel_purchase | added | info |
Probe history
10-23 18:17 OK (11)
Run or depend on com.foldlaboratories/art? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).