`com.safetydatasheetapi/sds-extraction`

Verdict: high-severity findings present. Endpoint https://safetydatasheetapi.com/mcp. Tools now: 4 (4 ever seen). Changes recorded: 4. Findings: 4 high. Last probe: OK at 2026-10-25T06:17 UTC. JSON

Current tools

extract_sds · get_account · get_bulk_job · submit_bulk_extraction

Findings (6)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-25	`extract_sds`	`secret_material_reference`	high	`redit (failures are not billed). Requires an API key.`
2026-10-25	`submit_bulk_extraction`	`secret_material_reference`	high	`eleased for any file that fails. Requires an API key.`
2026-10-25	`submit_bulk_extraction`	`cross_tool_reference`	high	`references sibling tool 'get_bulk_job'`
2026-10-25	`get_bulk_job`	`secret_material_reference`	high	`n. Read-only and safe to repeat. Requires an API key.`
2026-10-25	`get_bulk_job`	`cross_tool_reference`	high	`references sibling tool 'submit_bulk_extraction'`
2026-10-25	`get_account`	`secret_material_reference`	high	`days of usage for the account that owns the API key. Read-only. Requires a per-customer API key.`

Change history (4)

when	tool	kind	severity
2026-10-25 06:17	`extract_sds`	added	high
2026-10-25 06:17	`submit_bulk_extraction`	added	high
2026-10-25 06:17	`get_bulk_job`	added	high
2026-10-25 06:17	`get_account`	added	high

Probe history

10-25 06:17 OK (4)

Run or depend on com.safetydatasheetapi/sds-extraction? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).