← MCP Registry Integrity Report
com.pinappai/mcp
Verdict: high-severity findings present. Endpoint https://mcp.pinappai.com/mcp. Tools now: 38 (38 ever seen). Changes recorded: 24. Findings: {"high":24}. Last probe: OK at 2026-08-14T00:17 UTC. JSON
Current tools
analyze_patterns · archive_project · create_project · create_workspace · delete_workspace · export_my_data · get_api_key · get_change_request · get_me · get_project · get_review_summary · get_screenshot · get_workspace · invite_member · invite_reviewer · list_api_keys · list_audit_events · list_change_requests · list_members · list_projects · list_reviewers · list_workspaces · pinappai_apply_change_requests · pinappai_get_iteration_coverage · pinappai_get_workflow · pinappai_list_apply_inbox · pinappai_list_iterations · pinappai_register_change_items · pinappai_reset_review_data · remove_member · restore_api_key · revoke_api_key · revoke_reviewer · unarchive_project · update_me_profile · update_member_role · update_project · update_workspace
Findings (24)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-08-14 | list_projects | secret_material_reference | high | List PinAppAI projects this API key can access. Returns one entry per project in the key's workspace |
| 2026-08-14 | list_change_requests | cross_tool_reference | high | references sibling tool 'get_change_request' |
| 2026-08-14 | get_change_request | cross_tool_reference | high | references sibling tool 'list_change_requests' |
| 2026-08-14 | analyze_patterns | model_directed_instruction | high | t's createMessage call (the sampling request always uses a fixed speed/intelligence preference); reserved for future use |
| 2026-08-14 | get_screenshot | cross_tool_reference | high | references sibling tool 'get_change_request' |
| 2026-08-14 | get_project | secret_material_reference | high | ns, archive state, and the embeddable widget api_key. Scoped to the API key's workspace. |
| 2026-08-14 | create_project | secret_material_reference | high | Create a new PinAppAI project inside the API key's workspace. Returns the project plus its widget api_key for emb |
| 2026-08-14 | update_project | secret_material_reference | high | t snippets keep working since they reference api_key, not slug). |
| 2026-08-14 | archive_project | cross_tool_reference | high | references sibling tool 'unarchive_project' |
| 2026-08-14 | unarchive_project | cross_tool_reference | high | references sibling tool 'archive_project' |
| 2026-08-14 | list_workspaces | secret_material_reference | high | List all workspaces the API key's user is a member of, with role per workspace. The api-key rema |
| 2026-08-14 | create_workspace | secret_material_reference | high | Create a new workspace owned by the API key's user. Free/Pro plans cap at 1 workspace; Team/Business unlimit |
| 2026-08-14 | get_workspace | secret_material_reference | high | Get the API key's workspace details (slug, name, plan, tier) plus the user's rol |
| 2026-08-14 | update_workspace | secret_material_reference | high | Rename or re-slug the API key's workspace. Owner role required. Slug changes break existing da |
| 2026-08-14 | delete_workspace | secret_material_reference | high | Schedule the API key's workspace for permanent deletion (7-day grace window). Reversi |
| 2026-08-14 | list_members | secret_material_reference | high | List members of the API key's workspace with their roles, sorted owner → admin → editor → vi |
| 2026-08-14 | list_members | cross_tool_reference | high | references sibling tool 'update_member_role' |
| 2026-08-14 | invite_member | secret_material_reference | high | Invite a user to the API key's workspace as admin / editor / viewer (default editor). Admin r |
| 2026-08-14 | update_member_role | cross_tool_reference | high | references sibling tool 'list_members' |
| 2026-08-14 | remove_member | secret_material_reference | high | Remove a member from the API key's workspace. Self-removal works for any role; cross-removal requ |
| 2026-08-14 | remove_member | cross_tool_reference | high | references sibling tool 'list_members' |
| 2026-08-14 | list_reviewers | cross_tool_reference | high | references sibling tool 'invite_reviewer' |
| 2026-08-14 | revoke_reviewer | cross_tool_reference | high | references sibling tool 'list_reviewers' |
| 2026-08-14 | list_audit_events | secret_material_reference | high | Read audit log entries for the API key's workspace. Owner role + Business tier required. Returns newest |
Change history (24)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-08-14 00:17 | list_projects | added | high |
| 2026-08-14 00:17 | get_review_summary | added | info |
| 2026-08-14 00:17 | list_change_requests | added | high |
| 2026-08-14 00:17 | get_change_request | added | high |
| 2026-08-14 00:17 | analyze_patterns | added | high |
| 2026-08-14 00:17 | get_screenshot | added | high |
| 2026-08-14 00:17 | get_project | added | high |
| 2026-08-14 00:17 | create_project | added | high |
| 2026-08-14 00:17 | update_project | added | high |
| 2026-08-14 00:17 | archive_project | added | high |
| 2026-08-14 00:17 | unarchive_project | added | high |
| 2026-08-14 00:17 | list_workspaces | added | high |
| 2026-08-14 00:17 | create_workspace | added | high |
| 2026-08-14 00:17 | get_workspace | added | high |
| 2026-08-14 00:17 | update_workspace | added | high |
| 2026-08-14 00:17 | delete_workspace | added | high |
| 2026-08-14 00:17 | list_members | added | high |
| 2026-08-14 00:17 | invite_member | added | high |
| 2026-08-14 00:17 | update_member_role | added | high |
| 2026-08-14 00:17 | remove_member | added | high |
| 2026-08-14 00:17 | list_reviewers | added | high |
| 2026-08-14 00:17 | invite_reviewer | added | info |
| 2026-08-14 00:17 | revoke_reviewer | added | high |
| 2026-08-14 00:17 | list_audit_events | added | high |
Probe history
08-14 00:17 OK (38)
Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).