← MCP Registry Integrity Report
com.googleapis.firestore/mcp
Verdict: CRITICAL findings present. Endpoint https://firestore.googleapis.com/mcp. Tools now: 23 (25 ever seen). Changes recorded: 25. Findings: 6 critical, 4 low. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
add_document · create_backup_schedule · create_database · create_index · delete_backup · delete_backup_schedule · delete_database · delete_document · delete_index · get_backup · get_backup_schedule · get_database · get_document · get_index · list_backup_schedules · list_backups · list_collections · list_databases · list_documents · list_indexes · update_backup_schedule · update_database · update_document
Findings (12)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | get_document | user_concealment | critical | imum of 50 tags per request (excess tags are silently discarded). |
| 2026-10-22 | add_document | user_concealment | critical | imum of 50 tags per request (excess tags are silently discarded). |
| 2026-10-22 | update_document | user_concealment | critical | imum of 50 tags per request (excess tags are silently discarded). |
| 2026-10-22 | delete_document | user_concealment | critical | imum of 50 tags per request (excess tags are silently discarded). |
| 2026-10-22 | list_documents | user_concealment | critical | imum of 50 tags per request (excess tags are silently discarded). |
| 2026-10-22 | list_collections | user_concealment | critical | imum of 50 tags per request (excess tags are silently discarded). |
| 2026-10-22 | create_database | url_in_description | low | https://cloud.google.com/kms/docs/resource-hierarchy#key_versions |
| 2026-10-22 | get_database | url_in_description | low | https://cloud.google.com/kms/docs/resource-hierarchy#key_versions |
| 2026-10-22 | list_databases | url_in_description | low | https://cloud.google.com/kms/docs/resource-hierarchy#key_versions |
| 2026-10-22 | update_database | url_in_description | low | https://cloud.google.com/kms/docs/resource-hierarchy#key_versions |
| 2026-10-22 | get_backup_schedule | cross_tool_reference | high | references sibling tool 'get_backup' |
| 2026-10-22 | delete_backup_schedule | cross_tool_reference | high | references sibling tool 'delete_backup' |
Change history (25)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | get_document | mutated | critical |
| 2026-10-22 18:17 | add_document | mutated | critical |
| 2026-10-22 18:17 | update_document | mutated | critical |
| 2026-10-22 18:17 | delete_document | mutated | critical |
| 2026-10-22 18:17 | list_documents | mutated | critical |
| 2026-10-22 18:17 | list_collections | mutated | critical |
| 2026-10-22 18:17 | create_database | mutated | medium |
| 2026-10-22 18:17 | get_database | mutated | medium |
| 2026-10-22 18:17 | list_databases | mutated | medium |
| 2026-10-22 18:17 | update_database | mutated | medium |
| 2026-10-22 18:17 | delete_database | mutated | medium |
| 2026-10-22 18:17 | create_index | mutated | medium |
| 2026-10-22 18:17 | get_index | mutated | medium |
| 2026-10-22 18:17 | list_indexes | mutated | medium |
| 2026-10-22 18:17 | delete_index | mutated | medium |
| 2026-10-22 18:17 | get_backup | added | info |
| 2026-10-22 18:17 | list_backups | added | info |
| 2026-10-22 18:17 | delete_backup | added | info |
| 2026-10-22 18:17 | create_backup_schedule | added | info |
| 2026-10-22 18:17 | get_backup_schedule | added | high |
| 2026-10-22 18:17 | list_backup_schedules | added | info |
| 2026-10-22 18:17 | update_backup_schedule | added | info |
| 2026-10-22 18:17 | delete_backup_schedule | added | high |
| 2026-10-22 18:17 | query_collection | removed | info |
| 2026-10-22 18:17 | run_aggregation_query | removed | info |
Probe history
10-22 18:17 OK (23) · 08-13 18:17 OK (17)
Run or depend on com.googleapis.firestore/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).