← MCP Registry Integrity Report
com.googleapis.compute/mcp
Verdict: CRITICAL findings present. Endpoint https://compute.googleapis.com/mcp. Tools now: 29 (29 ever seen). Changes recorded: 29. Findings: 3 critical, 9 high, 10 low. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
create_instance · delete_instance · get_commitment_basic_info · get_disk_basic_info · get_disk_performance_config · get_instance_basic_info · get_instance_group_manager_basic_info · get_instance_template_basic_info · get_instance_template_properties · get_reservation_basic_info · get_reservation_details · get_zone_operation · list_accelerator_types · list_commitment_reservations · list_commitments · list_disks · list_images · list_instance_attached_disks · list_instance_group_managers · list_instance_templates · list_instances · list_machine_types · list_managed_instances · list_reservations · list_snapshots · reset_instance · set_instance_machine_type · start_instance · stop_instance
Findings (28)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | create_instance | cross_tool_reference | high | references sibling tool 'get_zone_operation' |
| 2026-10-22 | delete_instance | cross_tool_reference | high | references sibling tool 'get_zone_operation' |
| 2026-10-22 | start_instance | cross_tool_reference | high | references sibling tool 'get_zone_operation' |
| 2026-10-22 | stop_instance | cross_tool_reference | high | references sibling tool 'get_zone_operation' |
| 2026-10-22 | reset_instance | cross_tool_reference | high | references sibling tool 'get_zone_operation' |
| 2026-10-22 | set_instance_machine_type | cross_tool_reference | high | references sibling tool 'get_zone_operation' |
| 2026-10-22 | list_instance_attached_disks | exfiltration_pattern | critical | apshot or an image from the disk or when you attach the disk to a virtual machine instance. If you do not provide an encryption |
| 2026-10-22 | list_instance_attached_disks | model_directed_instruction | high | ncrypt a disk using a customer-supplied key, you must provide the same key again when you attempt to use this resource |
| 2026-10-22 | list_instance_attached_disks | url_in_description | low | https://cloud.google.com/compute/docs/disks/persistent-disks |
| 2026-10-22 | get_instance_group_manager_basic_info | url_in_description | low | https://www.ietf.org/rfc/rfc3339.txt |
| 2026-10-22 | list_instance_group_managers | url_in_description | low | https://www.ietf.org/rfc/rfc3339.txt |
| 2026-10-22 | list_managed_instances | exfiltration_pattern | critical | apshot or an image from the disk or when you attach the disk to a virtual machine instance. If you do not provide an encryption |
| 2026-10-22 | list_managed_instances | model_directed_instruction | high | ncrypt a disk using a customer-supplied key, you must provide the same key again when you attempt to use this resource |
| 2026-10-22 | list_managed_instances | url_in_description | low | https://cloud.google.com/compute/docs/disks/persistent-disks |
| 2026-10-22 | get_instance_template_properties | exfiltration_pattern | critical | apshot or an image from the disk or when you attach the disk to a virtual machine instance. If you do not provide an encryption |
| 2026-10-22 | get_instance_template_properties | model_directed_instruction | high | ncrypt a disk using a customer-supplied key, you must provide the same key again when you attempt to use this resource |
| 2026-10-22 | get_instance_template_properties | secret_material_reference | high | t of service accounts with specified scopes. Access tokens for these service accounts are available to the instances that |
| 2026-10-22 | get_instance_template_properties | url_in_description | low | https://www.googleapis.com/compute/v1/projects/projectId/regions/region |
| 2026-10-22 | list_accelerator_types | model_directed_instruction | high | lerator type resides, such as us-central1-a. You must specify this field as part of the HTTP request URL. It is not se |
| 2026-10-22 | list_accelerator_types | url_in_description | low | https://www.ietf.org/rfc/rfc3339.txt |
| 2026-10-22 | list_machine_types | url_in_description | low | https://www.ietf.org/rfc/rfc3339.txt |
| 2026-10-22 | get_zone_operation | url_in_description | low | https://www.rfc-editor.org/rfc/bcp/bcp47.txt. |
| 2026-10-22 | get_reservation_details | model_directed_instruction | high | eate the reservation. If you use this field, you must exclude the instanceProperties field. This field is optional, an |
| 2026-10-22 | get_reservation_details | url_in_description | low | https://cloud.google.com/resource-manager/docs/tags/tags-overview |
| 2026-10-22 | list_commitments | model_directed_instruction | high | ing (in a type-dependent unit). - For vCPUs, you must specify an integer value. - For memory, you specify the amount o |
| 2026-10-22 | get_commitment_basic_info | model_directed_instruction | high | ing (in a type-dependent unit). - For vCPUs, you must specify an integer value. - For memory, you specify the amount o |
| 2026-10-22 | list_commitment_reservations | model_directed_instruction | high | eate the reservation. If you use this field, you must exclude the instanceProperties field. This field is optional, an |
| 2026-10-22 | list_commitment_reservations | url_in_description | low | https://www.ietf.org/rfc/rfc3339.txt |
Change history (29)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | create_instance | mutated | high |
| 2026-10-22 18:17 | delete_instance | mutated | high |
| 2026-10-22 18:17 | start_instance | mutated | high |
| 2026-10-22 18:17 | stop_instance | mutated | high |
| 2026-10-22 18:17 | reset_instance | mutated | high |
| 2026-10-22 18:17 | get_instance_basic_info | mutated | medium |
| 2026-10-22 18:17 | set_instance_machine_type | mutated | high |
| 2026-10-22 18:17 | list_instance_attached_disks | mutated | critical |
| 2026-10-22 18:17 | list_instances | mutated | medium |
| 2026-10-22 18:17 | get_instance_group_manager_basic_info | mutated | medium |
| 2026-10-22 18:17 | list_instance_group_managers | mutated | medium |
| 2026-10-22 18:17 | list_managed_instances | mutated | critical |
| 2026-10-22 18:17 | list_instance_templates | mutated | medium |
| 2026-10-22 18:17 | get_instance_template_basic_info | mutated | medium |
| 2026-10-22 18:17 | get_instance_template_properties | mutated | critical |
| 2026-10-22 18:17 | get_disk_basic_info | mutated | medium |
| 2026-10-22 18:17 | get_disk_performance_config | mutated | medium |
| 2026-10-22 18:17 | list_disks | mutated | medium |
| 2026-10-22 18:17 | list_accelerator_types | mutated | high |
| 2026-10-22 18:17 | list_machine_types | mutated | medium |
| 2026-10-22 18:17 | list_images | mutated | medium |
| 2026-10-22 18:17 | get_zone_operation | mutated | medium |
| 2026-10-22 18:17 | get_reservation_basic_info | mutated | medium |
| 2026-10-22 18:17 | get_reservation_details | mutated | high |
| 2026-10-22 18:17 | list_reservations | mutated | medium |
| 2026-10-22 18:17 | list_commitments | mutated | high |
| 2026-10-22 18:17 | get_commitment_basic_info | mutated | high |
| 2026-10-22 18:17 | list_commitment_reservations | mutated | high |
| 2026-10-22 18:17 | list_snapshots | mutated | medium |
Probe history
10-22 18:17 OK (29) · 08-13 18:17 OK (29)
Run or depend on com.googleapis.compute/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).