← MCP Registry Integrity Report
com.monopoly-gold.planner/mcp
Verdict: CRITICAL findings present. Endpoint https://planner.monopoly-gold.com/_mcp. Tools now: 43 (43 ever seen). Changes recorded: 43. Findings: 3 low, 1 critical, 2 high. Last probe: OK at 2026-10-23T00:17 UTC. JSON
Current tools
account-delete · goal-add-assumption · goal-add-criterion · goal-add-evidence-text · goal-add-note · goal-attach-assumption-evidence · goal-attach-evidence · goal-attach-file · goal-block · goal-create · goal-delete · goal-dismiss-red-team · goal-get · goal-list · goal-move · goal-read-evidence-content · goal-recent-unresolved · goal-record-iteration-certificate · goal-register-iteration-finding · goal-remove-assumption · goal-remove-blocker · goal-remove-criterion · goal-remove-evidence · goal-remove-note · goal-reorder · goal-request-ac-change · goal-request-upload · goal-resolve-escalation · goal-start-iteration-tracking · goal-suggest-assumptions · goal-summary · goal-todo · goal-tree · goal-update · goal-update-assumption · goal-update-criterion · project-add-dependency · project-create · project-delete · project-get · project-list · project-remove-dependency · project-update
Findings (26)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | project-list | cross_tool_reference | high | references sibling tool 'project-get' |
| 2026-10-23 | goal-create | cross_tool_reference | high | references sibling tool 'goal-update' |
| 2026-10-23 | goal-get | cross_tool_reference | high | references sibling tool 'goal-list' |
| 2026-10-23 | goal-update | cross_tool_reference | high | references sibling tool 'goal-add-criterion' |
| 2026-10-23 | goal-delete | cross_tool_reference | high | references sibling tool 'goal-update' |
| 2026-10-23 | goal-block | cross_tool_reference | high | references sibling tool 'goal-remove-blocker' |
| 2026-10-23 | goal-todo | cross_tool_reference | high | references sibling tool 'goal-create' |
| 2026-10-23 | goal-add-note | cross_tool_reference | high | references sibling tool 'goal-get' |
| 2026-10-23 | goal-remove-note | cross_tool_reference | high | references sibling tool 'goal-get' |
| 2026-10-23 | goal-add-criterion | url_in_description | low | https://planner.monopoly-gold.com/api/healthz |
| 2026-10-23 | goal-add-criterion | cross_tool_reference | high | references sibling tool 'goal-create' |
| 2026-10-23 | goal-update-criterion | url_in_description | low | https://planner.monopoly-gold.com/api/healthz |
| 2026-10-23 | goal-update-criterion | cross_tool_reference | high | references sibling tool 'goal-update' |
| 2026-10-23 | goal-attach-evidence | user_concealment | critical | 6 of raw bytes BEFORE base64). Without it, a silently truncated PNG looks valid to the MIME sniffer; the server cannot |
| 2026-10-23 | goal-attach-evidence | secret_material_reference | high | the signed ?t= ticket in the URL is the only credential, single-use, criterion-scoped. The PUT response is the same evid |
| 2026-10-23 | goal-attach-evidence | url_in_description | low | https://planner.monopoly-gold.com/api/cli/planner-attach.sh |
| 2026-10-23 | goal-attach-evidence | cross_tool_reference | high | references sibling tool 'goal-list' |
| 2026-10-23 | goal-request-upload | cross_tool_reference | high | references sibling tool 'goal-attach-evidence' |
| 2026-10-23 | goal-add-evidence-text | cross_tool_reference | high | references sibling tool 'goal-attach-evidence' |
| 2026-10-23 | goal-update-assumption | cross_tool_reference | high | references sibling tool 'goal-update' |
| 2026-10-23 | goal-suggest-assumptions | cross_tool_reference | high | references sibling tool 'goal-add-assumption' |
| 2026-10-23 | goal-request-ac-change | model_directed_instruction | high | ing else) — no failed attempts required, but you MUST pass quotedFragment: a verbatim slice of the criterion text you |
| 2026-10-23 | goal-attach-file | cross_tool_reference | high | references sibling tool 'goal-update' |
| 2026-10-23 | goal-dismiss-red-team | cross_tool_reference | high | references sibling tool 'goal-get' |
| 2026-10-23 | goal-read-evidence-content | cross_tool_reference | high | references sibling tool 'goal-get' |
| 2026-10-23 | goal-recent-unresolved | cross_tool_reference | high | references sibling tool 'goal-get' |
Change history (43)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 00:17 | project-list | mutated | high |
| 2026-10-23 00:17 | project-create | mutated | medium |
| 2026-10-23 00:17 | project-get | mutated | medium |
| 2026-10-23 00:17 | project-update | mutated | medium |
| 2026-10-23 00:17 | project-delete | mutated | medium |
| 2026-10-23 00:17 | project-add-dependency | mutated | medium |
| 2026-10-23 00:17 | project-remove-dependency | mutated | medium |
| 2026-10-23 00:17 | goal-list | mutated | medium |
| 2026-10-23 00:17 | goal-create | mutated | high |
| 2026-10-23 00:17 | goal-get | mutated | high |
| 2026-10-23 00:17 | goal-update | mutated | high |
| 2026-10-23 00:17 | goal-delete | mutated | high |
| 2026-10-23 00:17 | goal-move | mutated | medium |
| 2026-10-23 00:17 | goal-reorder | mutated | medium |
| 2026-10-23 00:17 | goal-block | mutated | high |
| 2026-10-23 00:17 | goal-remove-blocker | mutated | medium |
| 2026-10-23 00:17 | goal-todo | mutated | high |
| 2026-10-23 00:17 | goal-add-note | mutated | high |
| 2026-10-23 00:17 | goal-remove-note | mutated | high |
| 2026-10-23 00:17 | goal-tree | mutated | medium |
| 2026-10-23 00:17 | goal-summary | mutated | medium |
| 2026-10-23 00:17 | goal-add-criterion | mutated | high |
| 2026-10-23 00:17 | goal-update-criterion | mutated | high |
| 2026-10-23 00:17 | goal-remove-criterion | mutated | medium |
| 2026-10-23 00:17 | goal-attach-evidence | mutated | critical |
| 2026-10-23 00:17 | goal-request-upload | mutated | high |
| 2026-10-23 00:17 | goal-add-evidence-text | mutated | high |
| 2026-10-23 00:17 | goal-remove-evidence | mutated | medium |
| 2026-10-23 00:17 | goal-add-assumption | mutated | medium |
| 2026-10-23 00:17 | goal-update-assumption | mutated | high |
| 2026-10-23 00:17 | goal-remove-assumption | mutated | medium |
| 2026-10-23 00:17 | goal-suggest-assumptions | mutated | high |
| 2026-10-23 00:17 | goal-attach-assumption-evidence | mutated | medium |
| 2026-10-23 00:17 | goal-request-ac-change | mutated | high |
| 2026-10-23 00:17 | goal-resolve-escalation | mutated | medium |
| 2026-10-23 00:17 | goal-attach-file | added | high |
| 2026-10-23 00:17 | goal-dismiss-red-team | mutated | high |
| 2026-10-23 00:17 | goal-read-evidence-content | added | high |
| 2026-10-23 00:17 | goal-recent-unresolved | mutated | high |
| 2026-10-23 00:17 | goal-record-iteration-certificate | added | info |
| 2026-10-23 00:17 | goal-register-iteration-finding | added | info |
| 2026-10-23 00:17 | goal-start-iteration-tracking | added | info |
| 2026-10-23 00:17 | account-delete | mutated | medium |
Probe history
10-23 00:17 OK (43) · 08-13 18:17 OK (38)
Run or depend on com.monopoly-gold.planner/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).