← MCP Registry Integrity Report
com.newscatcherapi/catchall
Verdict: CRITICAL findings present. Endpoint https://catchall-mcp.newscatcherapi.com/mcp. Tools now: 61 (61 ever seen). Changes recorded: 131. Findings: {"critical":6,"high":175}. Last probe: OK at 2026-09-28T18:17 UTC. JSON
Current tools
add_dataset_entities · add_project_resources · append_csv_to_dataset · assign_webhook_resource · check_health · continue_job · create_dataset · create_dataset_from_csv · create_entities_batch · create_entity · create_monitor · create_project · create_webhook · delete_dataset · delete_entity · delete_job · delete_monitor · delete_project · delete_webhook · disable_monitor · enable_monitor · get_dataset · get_dataset_status · get_entity · get_job_status · get_monitor_status · get_project · get_project_overview · get_user_limits · get_version · get_webhook · get_webhook_history · initialize_query · list_dataset_entities · list_datasets · list_entities · list_monitor_jobs · list_monitors · list_project_resources · list_projects · list_resource_webhooks · list_source_groups · list_user_jobs · list_webhook_resources · list_webhooks · pull_job_csv · pull_monitor_csv · pull_monitor_results · pull_results · remove_dataset_entities · remove_project_resource · remove_webhook_resource · submit_query · test_webhook · trigger_webhook · update_dataset · update_entity · update_monitor · update_project · update_webhook · validate_query
Findings (181)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-09-22 | submit_query | user_concealment | critical | e auto-generated — do not ask for them here. Do not mention things like "company list will be attached". |
| 2026-09-22 | submit_query | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | submit_query | cross_tool_reference | high | references sibling tool 'initialize_query' |
| 2026-09-22 | initialize_query | user_concealment | critical | e auto-generated — do not ask for them here. Do not mention things like "company list will be attached". Focus on the event |
| 2026-09-22 | initialize_query | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | initialize_query | cross_tool_reference | high | references sibling tool 'submit_query' |
| 2026-09-22 | get_job_status | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | get_job_status | cross_tool_reference | high | references sibling tool 'submit_query' |
| 2026-09-22 | pull_results | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | pull_results | cross_tool_reference | high | references sibling tool 'submit_query' |
| 2026-09-22 | pull_job_csv | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | pull_job_csv | cross_tool_reference | high | references sibling tool 'pull_results' |
| 2026-09-22 | continue_job | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | list_user_jobs | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | delete_job | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | validate_query | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | validate_query | cross_tool_reference | high | references sibling tool 'submit_query' |
| 2026-09-22 | list_source_groups | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | list_source_groups | cross_tool_reference | high | references sibling tool 'submit_query' |
| 2026-09-22 | create_monitor | model_directed_instruction | high | al language (e.g., 'every day at 9 AM EST'). Always include a timezone (in the schedule text or via the `timezone` arg). API |
| 2026-09-22 | create_monitor | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | create_monitor | cross_tool_reference | high | references sibling tool 'create_webhook' |
| 2026-09-22 | list_monitors | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | pull_monitor_results | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | pull_monitor_csv | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | pull_monitor_csv | cross_tool_reference | high | references sibling tool 'pull_monitor_results' |
| 2026-09-22 | list_monitor_jobs | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | disable_monitor | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | disable_monitor | cross_tool_reference | high | references sibling tool 'enable_monitor' |
| 2026-09-22 | enable_monitor | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | update_monitor | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | update_monitor | cross_tool_reference | high | references sibling tool 'list_webhooks' |
| 2026-09-22 | delete_monitor | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | delete_monitor | cross_tool_reference | high | references sibling tool 'disable_monitor' |
| 2026-09-22 | get_monitor_status | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | list_webhooks | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | create_webhook | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | create_webhook | cross_tool_reference | high | references sibling tool 'add_project_resources' |
| 2026-09-22 | get_webhook | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | update_webhook | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | delete_webhook | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | test_webhook | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | assign_webhook_resource | exfiltration_pattern | critical | The webhook ID to attach the resource to. |
| 2026-09-22 | assign_webhook_resource | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | list_webhook_resources | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | remove_webhook_resource | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | list_resource_webhooks | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | get_webhook_history | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | get_webhook_history | cross_tool_reference | high | references sibling tool 'get_webhook' |
| 2026-09-22 | trigger_webhook | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | create_dataset | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | create_dataset | cross_tool_reference | high | references sibling tool 'submit_query' |
| 2026-09-22 | list_datasets | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | get_dataset | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | update_dataset | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | delete_dataset | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | add_dataset_entities | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | remove_dataset_entities | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | list_dataset_entities | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | get_dataset_status | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | get_dataset_status | cross_tool_reference | high | references sibling tool 'get_dataset' |
| 2026-09-22 | create_dataset_from_csv | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | create_dataset_from_csv | cross_tool_reference | high | references sibling tool 'create_dataset' |
| 2026-09-22 | append_csv_to_dataset | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | append_csv_to_dataset | cross_tool_reference | high | references sibling tool 'create_dataset' |
| 2026-09-22 | create_entity | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | list_entities | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | create_entities_batch | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | get_entity | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | update_entity | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | update_entity | cross_tool_reference | high | references sibling tool 'create_entity' |
| 2026-09-22 | delete_entity | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | create_project | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | list_projects | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | get_project | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | update_project | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | delete_project | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | get_project_overview | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
| 2026-09-22 | get_project_overview | cross_tool_reference | high | references sibling tool 'get_project' |
| 2026-09-22 | add_project_resources | secret_material_reference | high | CatchAll API key. Optional if provided via x-api-key header or CATCHALL_API_KEY e |
Change history (131)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-09-22 12:17 | submit_query | mutated | critical |
| 2026-09-22 12:17 | initialize_query | mutated | critical |
| 2026-09-22 12:17 | get_job_status | mutated | high |
| 2026-09-22 12:17 | pull_results | mutated | high |
| 2026-09-22 12:17 | pull_job_csv | mutated | high |
| 2026-09-22 12:17 | continue_job | mutated | high |
| 2026-09-22 12:17 | list_user_jobs | mutated | high |
| 2026-09-22 12:17 | delete_job | mutated | high |
| 2026-09-22 12:17 | validate_query | mutated | high |
| 2026-09-22 12:17 | list_source_groups | mutated | high |
| 2026-09-22 12:17 | create_monitor | mutated | high |
| 2026-09-22 12:17 | list_monitors | mutated | high |
| 2026-09-22 12:17 | pull_monitor_results | mutated | high |
| 2026-09-22 12:17 | pull_monitor_csv | mutated | high |
| 2026-09-22 12:17 | list_monitor_jobs | mutated | high |
| 2026-09-22 12:17 | disable_monitor | mutated | high |
| 2026-09-22 12:17 | enable_monitor | mutated | high |
| 2026-09-22 12:17 | update_monitor | mutated | high |
| 2026-09-22 12:17 | delete_monitor | mutated | high |
| 2026-09-22 12:17 | get_monitor_status | mutated | high |
| 2026-09-22 12:17 | list_webhooks | mutated | high |
| 2026-09-22 12:17 | create_webhook | mutated | high |
| 2026-09-22 12:17 | get_webhook | mutated | high |
| 2026-09-22 12:17 | update_webhook | mutated | high |
| 2026-09-22 12:17 | delete_webhook | mutated | high |
| 2026-09-22 12:17 | test_webhook | mutated | high |
| 2026-09-22 12:17 | assign_webhook_resource | mutated | critical |
| 2026-09-22 12:17 | list_webhook_resources | mutated | high |
| 2026-09-22 12:17 | remove_webhook_resource | mutated | high |
| 2026-09-22 12:17 | list_resource_webhooks | mutated | high |
| 2026-09-22 12:17 | get_webhook_history | mutated | high |
| 2026-09-22 12:17 | trigger_webhook | mutated | high |
| 2026-09-22 12:17 | create_dataset | mutated | high |
| 2026-09-22 12:17 | list_datasets | mutated | high |
| 2026-09-22 12:17 | get_dataset | mutated | high |
| 2026-09-22 12:17 | update_dataset | mutated | high |
| 2026-09-22 12:17 | delete_dataset | mutated | high |
| 2026-09-22 12:17 | add_dataset_entities | mutated | high |
| 2026-09-22 12:17 | remove_dataset_entities | mutated | high |
| 2026-09-22 12:17 | list_dataset_entities | mutated | high |
| 2026-09-22 12:17 | get_dataset_status | mutated | high |
| 2026-09-22 12:17 | create_dataset_from_csv | mutated | high |
| 2026-09-22 12:17 | append_csv_to_dataset | mutated | high |
| 2026-09-22 12:17 | create_entity | mutated | high |
| 2026-09-22 12:17 | list_entities | mutated | high |
| 2026-09-22 12:17 | create_entities_batch | mutated | high |
| 2026-09-22 12:17 | get_entity | mutated | high |
| 2026-09-22 12:17 | update_entity | mutated | high |
| 2026-09-22 12:17 | delete_entity | mutated | high |
| 2026-09-22 12:17 | create_project | mutated | high |
| 2026-09-22 12:17 | list_projects | mutated | high |
| 2026-09-22 12:17 | get_project | mutated | high |
| 2026-09-22 12:17 | update_project | mutated | high |
| 2026-09-22 12:17 | delete_project | mutated | high |
| 2026-09-22 12:17 | get_project_overview | mutated | high |
| 2026-09-22 12:17 | add_project_resources | mutated | high |
| 2026-09-22 12:17 | list_project_resources | mutated | high |
| 2026-09-22 12:17 | remove_project_resource | mutated | high |
| 2026-09-22 12:17 | get_user_limits | mutated | high |
| 2026-09-22 12:17 | check_health | mutated | high |
| 2026-09-22 12:17 | get_version | mutated | high |
| 2026-08-27 12:17 | list_source_groups | added | high |
| 2026-08-27 12:17 | list_webhooks | mutated | high |
| 2026-08-27 12:17 | list_entities | mutated | high |
| 2026-08-20 06:17 | submit_query | mutated | critical |
| 2026-08-20 06:17 | initialize_query | mutated | critical |
| 2026-08-20 06:17 | get_job_status | mutated | high |
| 2026-08-20 06:17 | pull_results | mutated | high |
| 2026-08-20 06:17 | pull_job_csv | mutated | high |
| 2026-08-20 06:17 | continue_job | mutated | high |
| 2026-08-20 06:17 | list_user_jobs | mutated | high |
| 2026-08-20 06:17 | delete_job | mutated | high |
| 2026-08-20 06:17 | validate_query | mutated | high |
| 2026-08-20 06:17 | create_monitor | mutated | high |
| 2026-08-20 06:17 | list_monitors | mutated | high |
| 2026-08-20 06:17 | pull_monitor_results | mutated | high |
| 2026-08-20 06:17 | pull_monitor_csv | mutated | high |
| 2026-08-20 06:17 | list_monitor_jobs | mutated | high |
| 2026-08-20 06:17 | disable_monitor | mutated | high |
| 2026-08-20 06:17 | enable_monitor | mutated | high |
| 2026-08-20 06:17 | update_monitor | mutated | high |
| 2026-08-20 06:17 | delete_monitor | mutated | high |
| 2026-08-20 06:17 | get_monitor_status | mutated | high |
| 2026-08-20 06:17 | list_webhooks | mutated | high |
| 2026-08-20 06:17 | create_webhook | mutated | high |
| 2026-08-20 06:17 | get_webhook | mutated | high |
| 2026-08-20 06:17 | update_webhook | mutated | high |
| 2026-08-20 06:17 | delete_webhook | mutated | high |
| 2026-08-20 06:17 | test_webhook | mutated | high |
| 2026-08-20 06:17 | assign_webhook_resource | mutated | critical |
| 2026-08-20 06:17 | list_webhook_resources | mutated | high |
| 2026-08-20 06:17 | remove_webhook_resource | mutated | high |
| 2026-08-20 06:17 | list_resource_webhooks | mutated | high |
| 2026-08-20 06:17 | get_webhook_history | mutated | high |
| 2026-08-20 06:17 | trigger_webhook | mutated | high |
| 2026-08-20 06:17 | create_dataset | mutated | high |
| 2026-08-20 06:17 | list_datasets | mutated | high |
| 2026-08-20 06:17 | get_dataset | mutated | high |
| 2026-08-20 06:17 | update_dataset | mutated | high |
| 2026-08-20 06:17 | delete_dataset | mutated | high |
| 2026-08-20 06:17 | add_dataset_entities | mutated | high |
| 2026-08-20 06:17 | remove_dataset_entities | mutated | high |
| 2026-08-20 06:17 | list_dataset_entities | mutated | high |
| 2026-08-20 06:17 | get_dataset_status | mutated | high |
| 2026-08-20 06:17 | create_dataset_from_csv | mutated | high |
| 2026-08-20 06:17 | append_csv_to_dataset | mutated | high |
| 2026-08-20 06:17 | create_entity | mutated | high |
| 2026-08-20 06:17 | list_entities | mutated | high |
| 2026-08-20 06:17 | create_entities_batch | mutated | high |
| 2026-08-20 06:17 | get_entity | mutated | high |
| 2026-08-20 06:17 | update_entity | mutated | high |
| 2026-08-20 06:17 | delete_entity | mutated | high |
| 2026-08-20 06:17 | create_project | mutated | high |
| 2026-08-20 06:17 | list_projects | mutated | high |
| 2026-08-20 06:17 | get_project | mutated | high |
| 2026-08-20 06:17 | update_project | mutated | high |
| 2026-08-20 06:17 | delete_project | mutated | high |
| 2026-08-20 06:17 | get_project_overview | mutated | high |
| 2026-08-20 06:17 | add_project_resources | mutated | high |
| 2026-08-20 06:17 | list_project_resources | mutated | high |
Probe history
09-28 18:17 OK (61) · 09-28 12:17 OK (61) · 09-28 06:17 OK (61) · 09-28 00:17 OK (61) · 09-27 18:17 OK (61) · 09-27 12:17 OK (61) · 09-27 06:17 OK (61) · 09-27 00:17 OK (61) · 09-26 18:17 OK (61) · 09-26 12:17 OK (61) · 09-26 06:17 OK (61) · 09-26 00:17 OK (61) · 09-25 18:17 OK (61) · 09-25 12:17 OK (61) · 09-25 06:17 OK (61) · 09-25 00:17 OK (61) · 09-24 18:17 OK (61) · 09-24 12:17 OK (61) · 09-24 06:17 OK (61) · 09-24 00:17 OK (61) · 09-23 18:17 OK (61) · 09-23 12:17 OK (61) · 09-23 06:17 OK (61) · 09-23 00:17 OK (61) · 09-22 18:17 OK (61) · 09-22 12:17 OK (61) · 09-22 06:17 OK (61) · 09-22 00:17 OK (61) · 09-21 18:17 OK (61) · 09-21 12:17 OK (61)
Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).