`com.santosautomation/site-audit`

Verdict: high-severity findings present. Endpoint https://api.santosautomation.com/mcp. Tools now: 7 (7 ever seen). Changes recorded: 7. Findings: 7 high, 7 low. Last probe: OK at 2026-10-23T00:17 UTC. JSON

Current tools

audit_agent_readiness · audit_website_preview · extract_page_markdown · extract_structured_data · feed_parse · link_map · summarize

Findings (14)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`audit_website_preview`	`secret_material_reference`	high	`net (eip155:8453) via x402 v2; no account or API key required.`
2026-10-23	`audit_website_preview`	`url_in_description`	low	`https://api.santosautomation.com/api/audit?url=...`
2026-10-23	`audit_agent_readiness`	`secret_material_reference`	high	`readiness?url=...&depth=quick. No account or API key is required.`
2026-10-23	`audit_agent_readiness`	`url_in_description`	low	`https://api.santosautomation.com/api/agent-readiness?url=...&depth=quick.`
2026-10-23	`extract_page_markdown`	`secret_material_reference`	high	`rl=... (or POST {"url": "…"}). No account or API key is required.`
2026-10-23	`extract_page_markdown`	`url_in_description`	low	`https://api.santosautomation.com/v1/extract?url=...`
2026-10-23	`extract_structured_data`	`secret_material_reference`	high	`oes not fit in a query string. No account or API key is required.`
2026-10-23	`extract_structured_data`	`url_in_description`	low	`https://api.santosautomation.com/v1/extract/structured`
2026-10-23	`feed_parse`	`secret_material_reference`	high	`rl=... (or POST {"url": "…"}). No account or API key is required.`
2026-10-23	`feed_parse`	`url_in_description`	low	`https://api.santosautomation.com/v1/feed?url=...`
2026-10-23	`link_map`	`secret_material_reference`	high	`rl=... (or POST {"url": "…"}). No account or API key is required.`
2026-10-23	`link_map`	`url_in_description`	low	`https://api.santosautomation.com/v1/links?url=...`
2026-10-23	`summarize`	`secret_material_reference`	high	`": "…"} (or GET ?url=&focus=). No account or API key is required.`
2026-10-23	`summarize`	`url_in_description`	low	`https://api.santosautomation.com/v1/summarize`

Change history (7)

when	tool	kind	severity
2026-10-23 00:17	`audit_website_preview`	mutated	high
2026-10-23 00:17	`audit_agent_readiness`	mutated	high
2026-10-23 00:17	`extract_page_markdown`	mutated	high
2026-10-23 00:17	`extract_structured_data`	mutated	high
2026-10-23 00:17	`feed_parse`	mutated	high
2026-10-23 00:17	`link_map`	mutated	high
2026-10-23 00:17	`summarize`	mutated	high

Probe history

10-23 00:17 OK (7) · 08-14 00:17 OK (7)

Run or depend on com.santosautomation/site-audit? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).