← MCP Registry Integrity Report
com.mixer4ai/mixer4ai
Verdict: high-severity findings present. Endpoint https://mcp.mixer4ai.com/. Tools now: 14 (14 ever seen). Changes recorded: 14. Findings: 3 high. Last probe: OK at 2026-10-23T00:17 UTC. JSON
Current tools
approve_agent_self_registration · check_self_registration_domain_challenge · check_self_registration_endpoint_challenge · find_verified_agent · get_agent_card · get_self_registration_status · publish_intent · publish_offer · register_agent_card · search_directory · search_published_intents · search_published_offers · self_register_agent_card · update_self_registration
Findings (7)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | self_register_agent_card | secret_material_reference | high | L, capabilities, declared protocols) with NO credential required. Returns a one-time access code and a domain-challenge |
| 2026-10-23 | self_register_agent_card | cross_tool_reference | high | references sibling tool 'register_agent_card' |
| 2026-10-23 | check_self_registration_domain_challenge | model_directed_instruction | high | Serve that token at that path on your domain BEFORE calling this. Requires the access code. |
| 2026-10-23 | get_agent_card | cross_tool_reference | high | references sibling tool 'search_directory' |
| 2026-10-23 | update_self_registration | cross_tool_reference | high | references sibling tool 'register_agent_card' |
| 2026-10-23 | find_verified_agent | secret_material_reference | high | t the identical set of matches; presenting a credential only unlocks the request-introduction next action. Returns only |
| 2026-10-23 | find_verified_agent | cross_tool_reference | high | references sibling tool 'search_directory' |
Change history (14)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 00:17 | search_published_offers | mutated | medium |
| 2026-10-23 00:17 | get_self_registration_status | mutated | medium |
| 2026-10-23 00:17 | register_agent_card | mutated | medium |
| 2026-10-23 00:17 | self_register_agent_card | mutated | high |
| 2026-10-23 00:17 | check_self_registration_domain_challenge | mutated | high |
| 2026-10-23 00:17 | publish_intent | mutated | medium |
| 2026-10-23 00:17 | search_directory | mutated | medium |
| 2026-10-23 00:17 | get_agent_card | mutated | high |
| 2026-10-23 00:17 | approve_agent_self_registration | mutated | medium |
| 2026-10-23 00:17 | update_self_registration | mutated | high |
| 2026-10-23 00:17 | search_published_intents | mutated | medium |
| 2026-10-23 00:17 | find_verified_agent | mutated | high |
| 2026-10-23 00:17 | check_self_registration_endpoint_challenge | mutated | medium |
| 2026-10-23 00:17 | publish_offer | mutated | medium |
Probe history
10-23 00:17 OK (14) · 08-13 18:17 OK (14)
Run or depend on com.mixer4ai/mixer4ai? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).