← MCP Registry Integrity Report
com.hemmabo/hemmabo-mcp-server
Verdict: CRITICAL findings present. Endpoint https://www.hemmabo.com/mcp. Tools now: 6 (18 ever seen). Changes recorded: 30. Findings: 4 low, 1 critical. Last probe: OK at 2026-10-24T12:17 UTC. JSON
Current tools
hemmabo_check_availability · hemmabo_check_host_readiness · hemmabo_get_host_onboarding_link · hemmabo_search_properties · vrp_get_verified_stay_offer · vrp_verify_node
Findings (11)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | hemmabo_search_properties | cross_tool_reference | high | references sibling tool 'vrp_get_verified_stay_offer' |
| 2026-10-22 | hemmabo_check_availability | cross_tool_reference | high | references sibling tool 'hemmabo_search_properties' |
| 2026-10-22 | hemmabo_check_host_readiness | url_in_description | low | https://... |
| 2026-10-22 | hemmabo_check_host_readiness | cross_tool_reference | high | references sibling tool 'hemmabo_search_properties' |
| 2026-10-22 | hemmabo_get_host_onboarding_link | url_in_description | low | https://... |
| 2026-10-22 | hemmabo_get_host_onboarding_link | cross_tool_reference | high | references sibling tool 'hemmabo_search_properties' |
| 2026-10-22 | vrp_verify_node | url_in_description | low | https://... |
| 2026-10-22 | vrp_verify_node | cross_tool_reference | high | references sibling tool 'hemmabo_search_properties' |
| 2026-10-22 | vrp_get_verified_stay_offer | user_concealment | critical | the rendering client's own locale (which can silently disagree with the conversation). Never changes the signed price |
| 2026-10-22 | vrp_get_verified_stay_offer | url_in_description | low | https://... |
| 2026-10-22 | vrp_get_verified_stay_offer | cross_tool_reference | high | references sibling tool 'hemmabo_search_properties' |
Change history (30)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-24 12:17 | hemmabo_search_availability | removed | info |
| 2026-10-24 12:17 | hemmabo_booking_quote | removed | info |
| 2026-10-24 12:17 | hemmabo_booking_create | removed | info |
| 2026-10-24 12:17 | hemmabo_booking_negotiate | removed | info |
| 2026-10-24 12:17 | hemmabo_booking_checkout | removed | info |
| 2026-10-24 12:17 | hemmabo_booking_cancel | removed | info |
| 2026-10-24 12:17 | hemmabo_booking_status | removed | info |
| 2026-10-24 12:17 | hemmabo_booking_reschedule | removed | info |
| 2026-10-24 12:17 | hemmabo_host_readiness_check | removed | info |
| 2026-10-24 12:17 | hemmabo_host_onboarding_link | removed | info |
| 2026-10-24 12:17 | verify_vacation_rental_node | removed | info |
| 2026-10-24 12:17 | get_verified_stay_offer | removed | info |
| 2026-10-22 18:17 | hemmabo_search_properties | mutated | high |
| 2026-10-22 18:17 | hemmabo_check_availability | added | high |
| 2026-10-22 18:17 | hemmabo_check_host_readiness | added | high |
| 2026-10-22 18:17 | hemmabo_get_host_onboarding_link | added | high |
| 2026-10-22 18:17 | vrp_verify_node | added | high |
| 2026-10-22 18:17 | vrp_get_verified_stay_offer | added | critical |
| 2026-10-22 18:17 | hemmabo_search_availability | removed | info |
| 2026-10-22 18:17 | hemmabo_booking_quote | removed | info |
| 2026-10-22 18:17 | hemmabo_booking_create | removed | info |
| 2026-10-22 18:17 | hemmabo_booking_negotiate | removed | info |
| 2026-10-22 18:17 | hemmabo_booking_checkout | removed | info |
| 2026-10-22 18:17 | hemmabo_booking_cancel | removed | info |
| 2026-10-22 18:17 | hemmabo_booking_status | removed | info |
| 2026-10-22 18:17 | hemmabo_booking_reschedule | removed | info |
| 2026-10-22 18:17 | hemmabo_host_readiness_check | removed | info |
| 2026-10-22 18:17 | hemmabo_host_onboarding_link | removed | info |
| 2026-10-22 18:17 | verify_vacation_rental_node | removed | info |
| 2026-10-22 18:17 | get_verified_stay_offer | removed | info |
Probe history
10-24 12:17 OK (6) · 10-22 18:17 OK (6) · 08-13 18:17 OK (13)
Run or depend on com.hemmabo/hemmabo-mcp-server? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).