`com.googleapis.run/mcp`

Verdict: CRITICAL findings present. Endpoint https://run.googleapis.com/mcp. Tools now: 5 (5 ever seen). Changes recorded: 5. Findings: 1 critical, 1 high. Last probe: OK at 2026-10-22T18:17 UTC. JSON

Current tools

deploy_service_from_archive · deploy_service_from_file_contents · deploy_service_from_image · get_service · list_services

Findings (2)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-22	`deploy_service_from_archive`	`exfiltration_pattern`	critical	`ot of the application's source directory. 2. Upload the archive to a Google Cloud Storage bucket, preferably in the same region as`
2026-10-22	`deploy_service_from_file_contents`	`model_directed_instruction`	high	`quick tests and development feedback loops. You must include all necessary dependencies within the source files becau`

Change history (5)

when	tool	kind	severity
2026-10-22 18:17	`get_service`	mutated	medium
2026-10-22 18:17	`list_services`	mutated	medium
2026-10-22 18:17	`deploy_service_from_image`	mutated	medium
2026-10-22 18:17	`deploy_service_from_archive`	mutated	critical
2026-10-22 18:17	`deploy_service_from_file_contents`	mutated	high

Probe history

10-22 18:17 OK (5) · 08-13 18:17 OK (5)

Run or depend on com.googleapis.run/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).