`com.merlonix/monitoring`

Verdict: CRITICAL findings present. Endpoint https://api.merlonix.com/mcp. Tools now: 16 (16 ever seen). Changes recorded: 16. Findings: 1 critical, 8 high. Last probe: OK at 2026-10-24T18:17 UTC. JSON

Current tools

acknowledge_alert · check_agent_readiness · check_broken_links · check_domain_health · check_email_blacklist · check_mcp_health · create_asset · delete_asset · get_asset_checks · get_vendor_status · list_my_alerts · list_my_assets · list_plans · list_vendor_status · resolve_alert · update_asset

Findings (15)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`check_email_blacklist`	`user_concealment`	critical	`ting mail — the usual reason legitimate mail silently lands in spam. Returns each zone checked, whether it is listed,`
2026-10-23	`get_vendor_status`	`cross_tool_reference`	high	`references sibling tool 'list_vendor_status'`
2026-10-23	`list_my_assets`	`secret_material_reference`	high	`me, type, and monitoring status. Requires an API key (Authorization: Bearer mk_… from app.merlonix.com → Settings → A`
2026-10-23	`get_asset_checks`	`secret_material_reference`	high	`asset id (from list_my_assets). Requires an API key.`
2026-10-23	`get_asset_checks`	`cross_tool_reference`	high	`references sibling tool 'list_my_assets'`
2026-10-23	`list_my_alerts`	`secret_material_reference`	high	`r severity and lifecycle status. Requires an API key.`
2026-10-23	`create_asset`	`secret_material_reference`	high	`able. Returns the created asset. Requires an API key with write scope. Subject to your plan asset quota (a full or no`
2026-10-23	`update_asset`	`secret_material_reference`	high	`run. Returns the updated asset. Requires an API key with write scope.`
2026-10-23	`update_asset`	`cross_tool_reference`	high	`references sibling tool 'list_my_assets'`
2026-10-23	`delete_asset`	`secret_material_reference`	high	`le — its check history goes too. Requires an API key with write scope.`
2026-10-23	`delete_asset`	`cross_tool_reference`	high	`references sibling tool 'list_my_assets'`
2026-10-23	`acknowledge_alert`	`secret_material_reference`	high	`ng it. Optionally attach a note. Requires an API key with write scope.`
2026-10-23	`acknowledge_alert`	`cross_tool_reference`	high	`references sibling tool 'list_my_alerts'`
2026-10-23	`resolve_alert`	`secret_material_reference`	high	`sitive" \| "wontfix") and a note. Requires an API key with write scope.`
2026-10-23	`resolve_alert`	`cross_tool_reference`	high	`references sibling tool 'list_my_alerts'`

Change history (16)

when	tool	kind	severity
2026-10-23 00:17	`check_domain_health`	mutated	medium
2026-10-23 00:17	`check_agent_readiness`	mutated	medium
2026-10-23 00:17	`check_mcp_health`	mutated	medium
2026-10-23 00:17	`check_email_blacklist`	mutated	critical
2026-10-23 00:17	`check_broken_links`	mutated	medium
2026-10-23 00:17	`list_vendor_status`	mutated	medium
2026-10-23 00:17	`get_vendor_status`	mutated	high
2026-10-23 00:17	`list_plans`	mutated	medium
2026-10-23 00:17	`list_my_assets`	mutated	high
2026-10-23 00:17	`get_asset_checks`	mutated	high
2026-10-23 00:17	`list_my_alerts`	mutated	high
2026-10-23 00:17	`create_asset`	mutated	high
2026-10-23 00:17	`update_asset`	mutated	high
2026-10-23 00:17	`delete_asset`	mutated	high
2026-10-23 00:17	`acknowledge_alert`	mutated	high
2026-10-23 00:17	`resolve_alert`	mutated	high

Probe history

10-24 18:17 OK (16) · 10-23 00:17 OK (16) · 08-13 18:17 OK (16)

Run or depend on com.merlonix/monitoring? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).