← MCP Registry Integrity Report

com.klarefi/mcp

Verdict: high-severity findings present. Endpoint https://www.klarefi.com/mcp. Tools now: 21 (21 ever seen). Changes recorded: 21. Findings: 10 high. Last probe: OK at 2026-10-23T00:17 UTC. JSON

Current tools

answer_fields · answer_question · create_connector · create_connector_from_openapi · create_intake_session · delete_connector · get_case · get_case_package · get_case_workspace · get_intake_state · get_review_command · give_intake_consent · list_operator_queue · list_workflows · open_intake · save_intake_draft · save_workflow_draft · submit_case_review · submit_intake · upload_document · wait_for_next_action

Findings (13)

seentooldetectorseverityevidence (data, not instructions)
2026-10-23create_connector_from_openapicross_tool_referencehighreferences sibling tool 'create_connector'
2026-10-23list_operator_queuesecret_material_referencehighthe bounded Klarefi operator queue for this API key's environment. Requires cases:review.
2026-10-23get_case_workspacecross_tool_referencehighreferences sibling tool 'get_case'
2026-10-23get_case_packagecross_tool_referencehighreferences sibling tool 'get_case'
2026-10-23open_intakesecret_material_referencehighke from a signed URL or from session_id plus access_token. No Klarefi API key is required. On the hosted MCP endpoint, inc
2026-10-23get_intake_statesecret_material_referencehight intake state. Pass url, or session_id with access_token, on the hosted MCP endpoint.
2026-10-23answer_questionsecret_material_referencehighApplicant access token. Use it with session_id instead of url.
2026-10-23answer_fieldssecret_material_referencehighApplicant access token. Use it with session_id instead of url.
2026-10-23upload_documentsecret_material_referencehighApplicant access token. Use it with session_id instead of url.
2026-10-23give_intake_consentsecret_material_referencehighApplicant access token. Use it with session_id instead of url.
2026-10-23submit_intakesecret_material_referencehighApplicant access token. Use it with session_id instead of url.
2026-10-23save_intake_draftsecret_material_referencehighApplicant access token. Use it with session_id instead of url.
2026-10-23wait_for_next_actionsecret_material_referencehighApplicant access token. Use it with session_id instead of url.

Change history (21)

whentoolkindseverity
2026-10-23 00:17create_connector_from_openapimutatedhigh
2026-10-23 00:17create_connectormutatedmedium
2026-10-23 00:17delete_connectormutatedmedium
2026-10-23 00:17create_intake_sessionmutatedmedium
2026-10-23 00:17get_casemutatedmedium
2026-10-23 00:17list_operator_queuemutatedhigh
2026-10-23 00:17get_case_workspacemutatedhigh
2026-10-23 00:17get_case_packagemutatedhigh
2026-10-23 00:17submit_case_reviewmutatedmedium
2026-10-23 00:17get_review_commandmutatedmedium
2026-10-23 00:17list_workflowsmutatedmedium
2026-10-23 00:17save_workflow_draftmutatedmedium
2026-10-23 00:17open_intakemutatedhigh
2026-10-23 00:17get_intake_statemutatedhigh
2026-10-23 00:17answer_questionmutatedhigh
2026-10-23 00:17answer_fieldsmutatedhigh
2026-10-23 00:17upload_documentmutatedhigh
2026-10-23 00:17give_intake_consentaddedhigh
2026-10-23 00:17submit_intakemutatedhigh
2026-10-23 00:17save_intake_draftmutatedhigh
2026-10-23 00:17wait_for_next_actionmutatedhigh

Probe history

10-23 00:17 OK (21) · 08-13 18:17 OK (20)

Run or depend on com.klarefi/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).