`com.mystoq/storefront`

Verdict: high-severity findings present. Endpoint https://mystoq.com/api/mcp. Tools now: 12 (12 ever seen). Changes recorded: 12. Findings: 1 high. Last probe: OK at 2026-10-23T00:17 UTC. JSON

Current tools

cod_profit · create_product · create_store · delete_product · get_store · list_plans · order_risk · platform_stats · publish · search_stores · set_price · yalidine_delivery

Findings (1)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`create_store`	`secret_material_reference`	high	`(tenant). Returns the store id, slug and an access token. No auth needed. WRITE.`

Change history (12)

when	tool	kind	severity
2026-10-23 00:17	`search_stores`	mutated	medium
2026-10-23 00:17	`get_store`	mutated	medium
2026-10-23 00:17	`list_plans`	mutated	medium
2026-10-23 00:17	`platform_stats`	mutated	medium
2026-10-23 00:17	`cod_profit`	mutated	medium
2026-10-23 00:17	`yalidine_delivery`	mutated	medium
2026-10-23 00:17	`order_risk`	mutated	medium
2026-10-23 00:17	`create_store`	mutated	high
2026-10-23 00:17	`create_product`	mutated	medium
2026-10-23 00:17	`set_price`	mutated	medium
2026-10-23 00:17	`publish`	mutated	medium
2026-10-23 00:17	`delete_product`	mutated	medium

Probe history

10-23 00:17 OK (12) · 08-13 18:17 OK (12)

Run or depend on com.mystoq/storefront? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).