← MCP Registry Integrity Report
com.shinnslist/shinnslist
Verdict: high-severity findings present. Endpoint https://shinnslist.com/api/mcp. Tools now: 7 (7 ever seen). Changes recorded: 7. Findings: 1 high. Last probe: OK at 2026-10-23T12:22 UTC. JSON
Current tools
check_parcel · explain_grading · find_parcels · list_coverage · list_signals · run_signal · town_stats
Findings (3)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | list_signals | cross_tool_reference | high | references sibling tool 'run_signal' |
| 2026-10-23 | run_signal | secret_material_reference | high | nia (see list_signals for the ids). Needs an API key (x-api-key; a free key from POST /api/keys) and counts against i |
| 2026-10-23 | run_signal | cross_tool_reference | high | references sibling tool 'list_signals' |
Change history (7)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 12:22 | find_parcels | added | info |
| 2026-10-23 12:22 | town_stats | added | info |
| 2026-10-23 12:22 | check_parcel | added | info |
| 2026-10-23 12:22 | list_coverage | added | info |
| 2026-10-23 12:22 | list_signals | added | high |
| 2026-10-23 12:22 | explain_grading | added | info |
| 2026-10-23 12:22 | run_signal | added | high |
Probe history
10-23 12:22 OK (7)
Run or depend on com.shinnslist/shinnslist? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).