← MCP Registry Integrity Report

com.luthersystems.insideout/mcp

Verdict: high-severity findings present. Endpoint https://app.luthersystems.com/v1/insideout-mcp. Tools now: 24 (24 ever seen). Changes recorded: 24. Findings: 26 high. Last probe: OK at 2026-10-23T00:17 UTC. JSON

Current tools

awsinspect · awsinspect_batch · convoawait · convoinspect · convoopen · convoreply · convostatus · credawait · gcpinspect · gcpinspect_batch · help · stackdiff · stackrollback · stackversions · submit_feedback · tfdeploy · tfdestroy · tfdrift · tfgenerate · tflogs · tfoutputs · tfplan · tfruns · tfstatus

Findings (49)

seentooldetectorseverityevidence (data, not instructions)
2026-10-23awsinspectsecret_material_referencehighfrastructure. It fetches temporary read-only credentials securely and queries the AWS API directly. RESPONSE TIERS (def
2026-10-23awsinspectcross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23awsinspect_batchsecret_material_referencehighhan ~3 resources. The backend fetches Oracle credentials ONCE per batch and fans out probes against a single AWS config
2026-10-23awsinspect_batchcross_tool_referencehighreferences sibling tool 'awsinspect'
2026-10-23convoawaitsecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23convoawaitcross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23convoinspectsecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23convoinspectcross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23convoopenmodel_directed_instructionhighturns a session_id in the response metadata. You MUST use this session_id for ALL subsequent tool calls (convoreply, t
2026-10-23convoopensecret_material_referencehigh_xxx?token=yyy) which is part of the session credential — without it, downstream tools fall back to a tokenless connect
2026-10-23convoopencross_tool_referencehighreferences sibling tool 'convoreply'
2026-10-23convoreplymodel_directed_instructionhighd say. Examples of questions Riley asks that YOU MUST forward to the user: - 'Any questions or tweaks to these details
2026-10-23convoreplysecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23convoreplycross_tool_referencehighreferences sibling tool 'convoawait'
2026-10-23convostatussecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23convostatuscross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23credawaitsecret_material_referencehighAwait Cloud Credentials
2026-10-23credawaitcross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23gcpinspectsecret_material_referencehighfrastructure. It fetches temporary read-only credentials securely and queries the GCP API directly. RESPONSE TIERS (def
2026-10-23gcpinspectcross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23gcpinspect_batchsecret_material_referencehighhan ~3 resources. The backend fetches Oracle credentials ONCE per batch and fans out probes against a single GCP credent
2026-10-23gcpinspect_batchcross_tool_referencehighreferences sibling tool 'awsinspect'
2026-10-23stackdiffsecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23stackdiffcross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23stackrollbacksecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23stackrollbackcross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23stackversionssecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23stackversionscross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23submit_feedbacksecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing. Identifies the conversation th
2026-10-23submit_feedbackcross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23tfdeploysecret_material_referencehighly when the existing run is provably wedged. CREDENTIAL FLOW (if credentials are missing): 1. Response includes a connec
2026-10-23tfdeploycross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23tfdestroysecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing. The deployed stack for this se
2026-10-23tfdestroycross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23tfdriftsecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23tfdriftcross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23tfgeneratemodel_directed_instructionhighy must have signaled [TERRAFORM_READY: true] before calling this tool.
2026-10-23tfgeneratesecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing. Riley must have signaled [TERR
2026-10-23tfgeneratecross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23tflogssecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23tflogscross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23tfoutputssecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23tfoutputscross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23tfplansecret_material_referencehighly when the existing run is provably wedged. CREDENTIAL HANDLING: Same as tfdeploy - credentials must be configured firs
2026-10-23tfplancross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23tfrunssecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing. Returns the deployment-job his
2026-10-23tfrunscross_tool_referencehighreferences sibling tool 'convoopen'
2026-10-23tfstatussecret_material_referencehigh?token=*). The suffix is part of the session credential; never strip it when summarizing.
2026-10-23tfstatuscross_tool_referencehighreferences sibling tool 'convoopen'

Change history (24)

whentoolkindseverity
2026-10-23 00:17awsinspectmutatedhigh
2026-10-23 00:17awsinspect_batchmutatedhigh
2026-10-23 00:17convoawaitmutatedhigh
2026-10-23 00:17convoinspectmutatedhigh
2026-10-23 00:17convoopenmutatedhigh
2026-10-23 00:17convoreplymutatedhigh
2026-10-23 00:17convostatusmutatedhigh
2026-10-23 00:17credawaitmutatedhigh
2026-10-23 00:17gcpinspectmutatedhigh
2026-10-23 00:17gcpinspect_batchmutatedhigh
2026-10-23 00:17helpmutatedmedium
2026-10-23 00:17stackdiffmutatedhigh
2026-10-23 00:17stackrollbackmutatedhigh
2026-10-23 00:17stackversionsmutatedhigh
2026-10-23 00:17submit_feedbackmutatedhigh
2026-10-23 00:17tfdeploymutatedhigh
2026-10-23 00:17tfdestroymutatedhigh
2026-10-23 00:17tfdriftmutatedhigh
2026-10-23 00:17tfgeneratemutatedhigh
2026-10-23 00:17tflogsmutatedhigh
2026-10-23 00:17tfoutputsmutatedhigh
2026-10-23 00:17tfplanmutatedhigh
2026-10-23 00:17tfrunsmutatedhigh
2026-10-23 00:17tfstatusmutatedhigh

Probe history

10-23 00:17 OK (24) · 08-13 18:17 OK (24)

Run or depend on com.luthersystems.insideout/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).