← MCP Registry Integrity Report
com.gaitkit/mcp
Verdict: high-severity findings present. Endpoint https://gaitkit.com/mcp. Tools now: 5 (5 ever seen). Changes recorded: 5. Findings: 1 high. Last probe: OK at 2026-10-23T00:17 UTC. JSON
Current tools
get_asset · get_variant · report_need · search_assets · who_am_i
Findings (1)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | who_am_i | secret_material_reference | high | Which Gaitkit account is calling (from the API key in the Authorization header), its plan, and the CDN token to put |
Change history (5)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 00:17 | search_assets | added | info |
| 2026-10-23 00:17 | get_asset | added | info |
| 2026-10-23 00:17 | get_variant | added | info |
| 2026-10-23 00:17 | who_am_i | added | high |
| 2026-10-23 00:17 | report_need | added | info |
Probe history
10-23 00:17 OK (5)
Run or depend on com.gaitkit/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).