← MCP Registry Integrity Report
com.googleapis.androidmanagement/mcp
Verdict: high-severity findings present. Endpoint https://androidmanagement.googleapis.com/mcp. Tools now: 9 (9 ever seen). Changes recorded: 9. Findings: 6 high, 6 low, 2 medium. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
get_application · get_device · get_enterprise · get_policy · get_web_app · list_devices · list_enterprises · list_policies · list_web_apps
Findings (14)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | get_enterprise | secret_material_reference | high | e. Android Device Policy doesn't provide any credentials in the GET request, so the URL must be publicly accessible. Inc |
| 2026-10-22 | get_enterprise | url_in_description | low | https://enterprise.google.com/android/enroll?et= |
| 2026-10-22 | list_enterprises | secret_material_reference | high | e. Android Device Policy doesn't provide any credentials in the GET request, so the URL must be publicly accessible. Inc |
| 2026-10-22 | list_enterprises | url_in_description | low | https://enterprise.google.com/android/enroll?et= |
| 2026-10-22 | get_device | secret_material_reference | high | Whether the device is secured with PIN/password. |
| 2026-10-22 | get_device | url_in_description | low | https://www.commoncriteriaportal.org/ |
| 2026-10-22 | list_devices | secret_material_reference | high | The password requirements currently applied to the device. * This field exist |
| 2026-10-22 | list_devices | url_in_description | low | https://www.commoncriteriaportal.org/ |
| 2026-10-22 | get_policy | secret_material_reference | high | Optional. APN password of the APN. |
| 2026-10-22 | get_policy | encoded_blob_base64 | medium | nReceiverService`](https://developers.google.com/android/management/reference/amapi/com/google/android/managementapi/notification/NotificationReceiverService) (see [Integrate with the AMAPI SDK](https |
| 2026-10-22 | get_policy | url_in_description | low | https://www.commoncriteriaportal.org/ |
| 2026-10-22 | list_policies | secret_material_reference | high | Optional. APN password of the APN. |
| 2026-10-22 | list_policies | encoded_blob_base64 | medium | nReceiverService`](https://developers.google.com/android/management/reference/amapi/com/google/android/managementapi/notification/NotificationReceiverService) (see [Integrate with the AMAPI SDK](https |
| 2026-10-22 | list_policies | url_in_description | low | https://www.commoncriteriaportal.org/ |
Change history (9)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | get_enterprise | mutated | high |
| 2026-10-22 18:17 | list_enterprises | mutated | high |
| 2026-10-22 18:17 | get_application | mutated | medium |
| 2026-10-22 18:17 | get_device | mutated | high |
| 2026-10-22 18:17 | list_devices | mutated | high |
| 2026-10-22 18:17 | get_policy | mutated | high |
| 2026-10-22 18:17 | list_policies | mutated | high |
| 2026-10-22 18:17 | get_web_app | mutated | medium |
| 2026-10-22 18:17 | list_web_apps | mutated | medium |
Probe history
10-22 18:17 OK (9) · 08-13 18:17 OK (9)
Run or depend on com.googleapis.androidmanagement/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).