← MCP Registry Integrity Report
com.glasswarp/mcp-server
Verdict: high-severity findings present. Endpoint https://mcp.glasswarp.com/mcp. Tools now: 16 (16 ever seen). Changes recorded: 16. Findings: 5 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
app.launch · demos.get · demos.list · input.click_target · input.click_xy · input.drag · input.scroll · input.send_actions · input.send_keys · input.type_text · rigs.list · screen.observe · session.end · session.live_view · session.start · session.status
Findings (19)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | demos.list | cross_tool_reference | high | references sibling tool 'demos.get' |
| 2026-10-22 | demos.get | cross_tool_reference | high | references sibling tool 'demos.list' |
| 2026-10-22 | rigs.list | secret_material_reference | high | List Windows machines (rigs) paired to this API key: id, name, online, api_access_enabled, and USABLE flag. Read-onl |
| 2026-10-22 | session.start | model_directed_instruction | high | d. Idle sessions auto-end after ~15 minutes. Always call session.end when done or abandoning. Do not call if no USABLE ri |
| 2026-10-22 | session.start | cross_tool_reference | high | references sibling tool 'rigs.list' |
| 2026-10-22 | session.end | model_directed_instruction | high | estore, closes apps launched via app.launch. Always call when finished or abandoning — do not leave sessions open. Safe t |
| 2026-10-22 | session.end | cross_tool_reference | high | references sibling tool 'session.start' |
| 2026-10-22 | screen.observe | model_directed_instruction | high | no JPEG) for speed; set image=true only when you must judge pixels visually (then max_width≈960, quality≈60). If chang |
| 2026-10-22 | screen.observe | cross_tool_reference | high | references sibling tool 'session.start' |
| 2026-10-22 | input.click_target | cross_tool_reference | high | references sibling tool 'screen.observe' |
| 2026-10-22 | input.click_xy | cross_tool_reference | high | references sibling tool 'screen.observe' |
| 2026-10-22 | input.type_text | cross_tool_reference | high | references sibling tool 'input.click_target' |
| 2026-10-22 | input.send_keys | cross_tool_reference | high | references sibling tool 'input.type_text' |
| 2026-10-22 | input.drag | cross_tool_reference | high | references sibling tool 'input.send_actions' |
| 2026-10-22 | input.scroll | cross_tool_reference | high | references sibling tool 'input.send_actions' |
| 2026-10-22 | input.send_actions | cross_tool_reference | high | references sibling tool 'screen.observe' |
| 2026-10-22 | app.launch | cross_tool_reference | high | references sibling tool 'session.end' |
| 2026-10-22 | session.live_view | secret_material_reference | high | Read-only for the agent — does not grant the API key console access. Offer on long or sensitive tasks. Owner must be |
| 2026-10-22 | session.status | cross_tool_reference | high | references sibling tool 'session.start' |
Change history (16)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | demos.list | mutated | high |
| 2026-10-22 18:17 | demos.get | mutated | high |
| 2026-10-22 18:17 | rigs.list | mutated | high |
| 2026-10-22 18:17 | session.start | mutated | high |
| 2026-10-22 18:17 | session.end | mutated | high |
| 2026-10-22 18:17 | screen.observe | mutated | high |
| 2026-10-22 18:17 | input.click_target | mutated | high |
| 2026-10-22 18:17 | input.click_xy | mutated | high |
| 2026-10-22 18:17 | input.type_text | mutated | high |
| 2026-10-22 18:17 | input.send_keys | mutated | high |
| 2026-10-22 18:17 | input.drag | mutated | high |
| 2026-10-22 18:17 | input.scroll | mutated | high |
| 2026-10-22 18:17 | input.send_actions | mutated | high |
| 2026-10-22 18:17 | app.launch | mutated | high |
| 2026-10-22 18:17 | session.live_view | mutated | high |
| 2026-10-22 18:17 | session.status | mutated | high |
Probe history
10-22 18:17 OK (16) · 08-13 18:17 OK (16)
Run or depend on com.glasswarp/mcp-server? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).