← MCP Registry Integrity Report
com.lvlltd/skill-market
Verdict: high-severity findings present. Endpoint https://lvlltd.com/api/mcp. Tools now: 59 (59 ever seen). Changes recorded: 59. Findings: 1 high. Last probe: OK at 2026-10-23T00:17 UTC. JSON
Current tools
a2a_bridge_info · a2a_discover · a2a_message_send · a2a_tasks_cancel · a2a_tasks_get · bankr_quote · bankr_rails · check_access · esp_cycle · esp_discover · esp_evaluate · event_list · event_register · event_trigger · get_capability_info · get_commerce_signals · get_escrow_meta · get_eval_score · get_fleet · get_networks · get_pack_meta · get_payment_challenge · get_proof · get_ready · get_sandbox · get_security_scan · get_skill_details · install · install_skill_payload · intent_search · list_all_skills · list_judges · list_recurring_plans · long_running_cancel · long_running_start · long_running_status · lookup_agent_identity · memory_forget · memory_list · memory_recall · memory_remember · meter_budget · paid_api_call · post_intent · purchase_skill · quote_price · quote_skill · receipt_mint · receipt_verify · sco_canary · sco_challenge · sco_consensus · sco_discover · sco_eval · sco_reputation · search_skills · subscribe_plan · verify_skill · verify_unlock
Findings (10)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | get_payment_challenge | cross_tool_reference | high | references sibling tool 'purchase_skill' |
| 2026-10-23 | quote_price | cross_tool_reference | high | references sibling tool 'get_payment_challenge' |
| 2026-10-23 | verify_skill | cross_tool_reference | high | references sibling tool 'verify_unlock' |
| 2026-10-23 | install | cross_tool_reference | high | references sibling tool 'install_skill_payload' |
| 2026-10-23 | quote_skill | cross_tool_reference | high | references sibling tool 'get_payment_challenge' |
| 2026-10-23 | install_skill_payload | cross_tool_reference | high | references sibling tool 'install' |
| 2026-10-23 | a2a_discover | cross_tool_reference | high | references sibling tool 'a2a_message_send' |
| 2026-10-23 | a2a_message_send | cross_tool_reference | high | references sibling tool 'purchase_skill' |
| 2026-10-23 | sco_consensus | cross_tool_reference | high | references sibling tool 'sco_canary' |
| 2026-10-23 | get_capability_info | secret_material_reference | high | ived capability token discovery (P1). Not an API key for purchase. |
Change history (59)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 00:17 | search_skills | mutated | medium |
| 2026-10-23 00:17 | get_skill_details | mutated | medium |
| 2026-10-23 00:17 | get_payment_challenge | mutated | high |
| 2026-10-23 00:17 | quote_price | mutated | high |
| 2026-10-23 00:17 | list_all_skills | mutated | medium |
| 2026-10-23 00:17 | purchase_skill | mutated | medium |
| 2026-10-23 00:17 | verify_skill | mutated | high |
| 2026-10-23 00:17 | install | mutated | high |
| 2026-10-23 00:17 | get_commerce_signals | mutated | medium |
| 2026-10-23 00:17 | lookup_agent_identity | mutated | medium |
| 2026-10-23 00:17 | quote_skill | mutated | high |
| 2026-10-23 00:17 | verify_unlock | mutated | medium |
| 2026-10-23 00:17 | get_security_scan | mutated | medium |
| 2026-10-23 00:17 | get_eval_score | mutated | medium |
| 2026-10-23 00:17 | install_skill_payload | mutated | high |
| 2026-10-23 00:17 | intent_search | mutated | medium |
| 2026-10-23 00:17 | list_recurring_plans | mutated | medium |
| 2026-10-23 00:17 | check_access | mutated | medium |
| 2026-10-23 00:17 | subscribe_plan | mutated | medium |
| 2026-10-23 00:17 | a2a_discover | mutated | high |
| 2026-10-23 00:17 | a2a_message_send | mutated | high |
| 2026-10-23 00:17 | a2a_tasks_get | mutated | medium |
| 2026-10-23 00:17 | a2a_tasks_cancel | mutated | medium |
| 2026-10-23 00:17 | a2a_bridge_info | mutated | medium |
| 2026-10-23 00:17 | meter_budget | mutated | medium |
| 2026-10-23 00:17 | esp_discover | mutated | medium |
| 2026-10-23 00:17 | esp_cycle | mutated | medium |
| 2026-10-23 00:17 | esp_evaluate | mutated | medium |
| 2026-10-23 00:17 | sco_discover | mutated | medium |
| 2026-10-23 00:17 | sco_eval | mutated | medium |
| 2026-10-23 00:17 | sco_canary | mutated | medium |
| 2026-10-23 00:17 | sco_consensus | mutated | high |
| 2026-10-23 00:17 | sco_challenge | mutated | medium |
| 2026-10-23 00:17 | sco_reputation | mutated | medium |
| 2026-10-23 00:17 | list_judges | mutated | medium |
| 2026-10-23 00:17 | post_intent | mutated | medium |
| 2026-10-23 00:17 | get_ready | mutated | medium |
| 2026-10-23 00:17 | get_proof | mutated | medium |
| 2026-10-23 00:17 | get_fleet | mutated | medium |
| 2026-10-23 00:17 | get_sandbox | mutated | medium |
| 2026-10-23 00:17 | get_networks | mutated | medium |
| 2026-10-23 00:17 | get_escrow_meta | mutated | medium |
| 2026-10-23 00:17 | get_capability_info | mutated | high |
| 2026-10-23 00:17 | get_pack_meta | mutated | medium |
| 2026-10-23 00:17 | paid_api_call | added | info |
| 2026-10-23 00:17 | receipt_verify | mutated | medium |
| 2026-10-23 00:17 | receipt_mint | mutated | medium |
| 2026-10-23 00:17 | memory_remember | mutated | medium |
| 2026-10-23 00:17 | memory_recall | mutated | medium |
| 2026-10-23 00:17 | memory_list | mutated | medium |
| 2026-10-23 00:17 | memory_forget | mutated | medium |
| 2026-10-23 00:17 | long_running_start | mutated | medium |
| 2026-10-23 00:17 | long_running_status | mutated | medium |
| 2026-10-23 00:17 | long_running_cancel | mutated | medium |
| 2026-10-23 00:17 | event_register | mutated | medium |
| 2026-10-23 00:17 | event_list | mutated | medium |
| 2026-10-23 00:17 | event_trigger | mutated | medium |
| 2026-10-23 00:17 | bankr_rails | added | info |
| 2026-10-23 00:17 | bankr_quote | added | info |
Probe history
10-23 00:17 OK (59) · 08-13 18:17 OK (56)
Run or depend on com.lvlltd/skill-market? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).