← MCP Registry Integrity Report
com.reqbeat/hiring-signals
Verdict: high-severity findings present. Endpoint https://mcp.reqbeat.com/mcp. Tools now: 15 (15 ever seen). Changes recorded: 15. Findings: 15 high, 1 low. Last probe: OK at 2026-10-23T00:17 UTC. JSON
Current tools
cancel_watch · find_company · find_qualified_reqs · get_changes · get_open_reqs · get_role · hiring_pulse · is_hiring · list_watches · pre_action_brief · register_webhook · search_jobs · watch_company · who_is_hiring_for · write_outcome
Findings (28)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | is_hiring | secret_material_reference | high | re it as a negative. No key yet? Pass `plane_api_key` as an empty string and the call answers with a signup link inst |
| 2026-10-23 | is_hiring | cross_tool_reference | high | references sibling tool 'who_is_hiring_for' |
| 2026-10-23 | get_open_reqs | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | hiring_pulse | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | hiring_pulse | cross_tool_reference | high | references sibling tool 'is_hiring' |
| 2026-10-23 | who_is_hiring_for | secret_material_reference | high | than an empty page. No key yet? Pass `plane_api_key` as an empty string and the call answers with a signup link inst |
| 2026-10-23 | who_is_hiring_for | cross_tool_reference | high | references sibling tool 'is_hiring' |
| 2026-10-23 | search_jobs | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | search_jobs | cross_tool_reference | high | references sibling tool 'is_hiring' |
| 2026-10-23 | get_role | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | get_role | cross_tool_reference | high | references sibling tool 'get_open_reqs' |
| 2026-10-23 | find_qualified_reqs | secret_material_reference | high | nd an empty page bills nothing. Needs an API key: without one the answer is a signup link. For a first look a |
| 2026-10-23 | find_qualified_reqs | cross_tool_reference | high | references sibling tool 'is_hiring' |
| 2026-10-23 | pre_action_brief | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | pre_action_brief | cross_tool_reference | high | references sibling tool 'hiring_pulse' |
| 2026-10-23 | get_changes | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | get_changes | cross_tool_reference | high | references sibling tool 'watch_company' |
| 2026-10-23 | find_company | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | find_company | url_in_description | low | https://www.stripe.com/jobs |
| 2026-10-23 | find_company | cross_tool_reference | high | references sibling tool 'is_hiring' |
| 2026-10-23 | register_webhook | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | register_webhook | cross_tool_reference | high | references sibling tool 'watch_company' |
| 2026-10-23 | watch_company | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | list_watches | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | list_watches | cross_tool_reference | high | references sibling tool 'cancel_watch' |
| 2026-10-23 | cancel_watch | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
| 2026-10-23 | cancel_watch | cross_tool_reference | high | references sibling tool 'watch_company' |
| 2026-10-23 | write_outcome | secret_material_reference | high | Deprecated: pass the key in the `X-API-Key` header. Removed in 1.2. |
Change history (15)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 00:17 | is_hiring | mutated | high |
| 2026-10-23 00:17 | get_open_reqs | mutated | high |
| 2026-10-23 00:17 | hiring_pulse | mutated | high |
| 2026-10-23 00:17 | who_is_hiring_for | mutated | high |
| 2026-10-23 00:17 | search_jobs | mutated | high |
| 2026-10-23 00:17 | get_role | added | high |
| 2026-10-23 00:17 | find_qualified_reqs | added | high |
| 2026-10-23 00:17 | pre_action_brief | mutated | high |
| 2026-10-23 00:17 | get_changes | mutated | high |
| 2026-10-23 00:17 | find_company | added | high |
| 2026-10-23 00:17 | register_webhook | mutated | high |
| 2026-10-23 00:17 | watch_company | mutated | high |
| 2026-10-23 00:17 | list_watches | added | high |
| 2026-10-23 00:17 | cancel_watch | added | high |
| 2026-10-23 00:17 | write_outcome | mutated | high |
Probe history
10-23 00:17 OK (15) · 08-14 00:17 OK (10)
Run or depend on com.reqbeat/hiring-signals? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).