← MCP Registry Integrity Report
com.qumge/skills
Verdict: high-severity findings present. Endpoint https://qumge.com/mcp. Tools now: 19 (21 ever seen). Changes recorded: 21. Findings: 13 high, 1 low. Last probe: OK at 2026-10-23T00:17 UTC. JSON
Current tools
become_developer · call_cap · cap_status · get_balance · get_cap · get_cap_job · get_earnings · get_skill · list_caps · list_categories · list_models · list_wanted · publish_cap · request_payout · search_caps · search_skills · submit_cap · test_cap · verify_domain
Findings (24)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | search_skills | cross_tool_reference | high | references sibling tool 'get_skill' |
| 2026-10-23 | get_skill | cross_tool_reference | high | references sibling tool 'search_skills' |
| 2026-10-23 | search_caps | cross_tool_reference | high | references sibling tool 'get_cap' |
| 2026-10-23 | get_cap | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | get_cap | cross_tool_reference | high | references sibling tool 'search_caps' |
| 2026-10-23 | call_cap | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | call_cap | cross_tool_reference | high | references sibling tool 'search_caps' |
| 2026-10-23 | get_cap_job | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | get_cap_job | cross_tool_reference | high | references sibling tool 'get_cap' |
| 2026-10-23 | get_balance | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | become_developer | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | become_developer | cross_tool_reference | high | references sibling tool 'publish_cap' |
| 2026-10-23 | list_caps | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | verify_domain | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | publish_cap | secret_material_reference | high | ion_config or connection_id to share private credentials across Caps. Read https://qumge.com/en/docs/caps/managed.md for |
| 2026-10-23 | publish_cap | url_in_description | low | https://qumge.com/en/docs/caps/managed.md |
| 2026-10-23 | publish_cap | cross_tool_reference | high | references sibling tool 'call_cap' |
| 2026-10-23 | cap_status | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | test_cap | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | test_cap | cross_tool_reference | high | references sibling tool 'publish_cap' |
| 2026-10-23 | submit_cap | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | submit_cap | cross_tool_reference | high | references sibling tool 'test_cap' |
| 2026-10-23 | get_earnings | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
| 2026-10-23 | request_payout | secret_material_reference | high | Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes prec |
Change history (21)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 00:17 | search_skills | mutated | high |
| 2026-10-23 00:17 | get_skill | mutated | high |
| 2026-10-23 00:17 | list_categories | mutated | medium |
| 2026-10-23 00:17 | list_models | mutated | medium |
| 2026-10-23 00:17 | search_caps | added | high |
| 2026-10-23 00:17 | get_cap | added | high |
| 2026-10-23 00:17 | call_cap | added | high |
| 2026-10-23 00:17 | get_cap_job | added | high |
| 2026-10-23 00:17 | get_balance | added | high |
| 2026-10-23 00:17 | become_developer | added | high |
| 2026-10-23 00:17 | list_caps | added | high |
| 2026-10-23 00:17 | verify_domain | added | high |
| 2026-10-23 00:17 | publish_cap | added | high |
| 2026-10-23 00:17 | cap_status | added | high |
| 2026-10-23 00:17 | test_cap | added | high |
| 2026-10-23 00:17 | submit_cap | added | high |
| 2026-10-23 00:17 | get_earnings | added | high |
| 2026-10-23 00:17 | request_payout | added | high |
| 2026-10-23 00:17 | list_wanted | added | info |
| 2026-10-23 00:17 | list_bundles | removed | info |
| 2026-10-23 00:17 | get_bundle | removed | info |
Probe history
10-23 00:17 OK (19) · 08-14 00:17 OK (6)
Run or depend on com.qumge/skills? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).