← MCP Registry Integrity Report
com.supplyslate/sourcing
Verdict: high-severity findings present. Endpoint https://mcp.supplyslate.com/mcp. Tools now: 55 (55 ever seen). Changes recorded: 55. Findings: 7 high. Last probe: OK at 2026-10-23T00:17 UTC. JSON
Current tools
ask_rfq_clarification · attach_artifact_reference · create_artifact_upload · create_catalog_import · create_project · create_provider_checkout_handoff · create_purchase_plan · decide_supplier_order_cancellation · decline_supplier_rfq · describe_supplyslate · get_bom · get_checkout_handoffs · get_compatibility · get_connection_guide · get_live_fabrication_capabilities · get_order · get_product · get_project · get_purchase_plan · get_requirement_schema · get_sourcing_request · get_supplier · get_supplier_offers · get_supplier_profile · get_supplier_rfq · list_fabrication_processes · list_orders · list_project_validations · list_sourcing_categories · list_sourcing_requests · list_supplier_orders · list_supplier_rfqs · list_supplier_taxonomy · open_warranty_claim · report_order_issue · request_order_cancellation · request_order_return · request_purchase_approval · revise_supplier_quote · search_live_components · search_products · search_suppliers · source_project · submit_sourcing_request · submit_supplier_quote · update_availability · update_project_requirements · update_supplier_capabilities · update_supplier_order · update_supplier_order_issue · update_supplier_order_return · update_supplier_warranty_claim · upsert_bom · upsert_supplier_catalog · validate_project
Findings (13)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | search_suppliers | cross_tool_reference | high | references sibling tool 'list_supplier_taxonomy' |
| 2026-10-23 | create_project | secret_material_reference | high | part, or RFQ origin. Requires a scoped buyer credential. |
| 2026-10-23 | create_provider_checkout_handoff | secret_material_reference | high | but never submits payment or exposes payment credentials to SupplySlate. |
| 2026-10-23 | get_supplier_profile | secret_material_reference | high | rent catalog-item count. Requires a supplier API key. |
| 2026-10-23 | get_supplier_profile | cross_tool_reference | high | references sibling tool 'get_supplier' |
| 2026-10-23 | list_supplier_rfqs | secret_material_reference | high | authenticated supplier. Requires a supplier API key. |
| 2026-10-23 | get_supplier_rfq | secret_material_reference | high | alized buyer line items. Requires a supplier API key. |
| 2026-10-23 | get_supplier_rfq | cross_tool_reference | high | references sibling tool 'get_supplier' |
| 2026-10-23 | update_supplier_order_issue | cross_tool_reference | high | references sibling tool 'update_supplier_order' |
| 2026-10-23 | update_supplier_order_return | cross_tool_reference | high | references sibling tool 'update_supplier_order' |
| 2026-10-23 | submit_sourcing_request | secret_material_reference | high | ns structured offers later. Requires a buyer API key. |
| 2026-10-23 | list_sourcing_requests | secret_material_reference | high | the authenticated buyer organization across API keys and OAuth agents. |
| 2026-10-23 | get_supplier_offers | cross_tool_reference | high | references sibling tool 'get_supplier' |
Change history (55)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 00:17 | describe_supplyslate | mutated | medium |
| 2026-10-23 00:17 | list_sourcing_categories | mutated | medium |
| 2026-10-23 00:17 | get_connection_guide | mutated | medium |
| 2026-10-23 00:17 | list_fabrication_processes | mutated | medium |
| 2026-10-23 00:17 | get_live_fabrication_capabilities | mutated | medium |
| 2026-10-23 00:17 | search_live_components | mutated | medium |
| 2026-10-23 00:17 | get_requirement_schema | mutated | medium |
| 2026-10-23 00:17 | search_products | mutated | medium |
| 2026-10-23 00:17 | get_product | mutated | medium |
| 2026-10-23 00:17 | get_compatibility | mutated | medium |
| 2026-10-23 00:17 | list_supplier_taxonomy | mutated | medium |
| 2026-10-23 00:17 | search_suppliers | mutated | high |
| 2026-10-23 00:17 | get_supplier | mutated | medium |
| 2026-10-23 00:17 | create_project | mutated | high |
| 2026-10-23 00:17 | get_project | mutated | medium |
| 2026-10-23 00:17 | update_project_requirements | mutated | medium |
| 2026-10-23 00:17 | create_artifact_upload | mutated | medium |
| 2026-10-23 00:17 | attach_artifact_reference | mutated | medium |
| 2026-10-23 00:17 | upsert_bom | mutated | medium |
| 2026-10-23 00:17 | get_bom | mutated | medium |
| 2026-10-23 00:17 | validate_project | mutated | medium |
| 2026-10-23 00:17 | list_project_validations | mutated | medium |
| 2026-10-23 00:17 | source_project | mutated | medium |
| 2026-10-23 00:17 | create_purchase_plan | mutated | medium |
| 2026-10-23 00:17 | get_purchase_plan | mutated | medium |
| 2026-10-23 00:17 | request_purchase_approval | mutated | medium |
| 2026-10-23 00:17 | get_checkout_handoffs | mutated | medium |
| 2026-10-23 00:17 | create_provider_checkout_handoff | mutated | high |
| 2026-10-23 00:17 | list_orders | mutated | medium |
| 2026-10-23 00:17 | get_order | mutated | medium |
| 2026-10-23 00:17 | report_order_issue | mutated | medium |
| 2026-10-23 00:17 | request_order_cancellation | mutated | medium |
| 2026-10-23 00:17 | request_order_return | mutated | medium |
| 2026-10-23 00:17 | open_warranty_claim | mutated | medium |
| 2026-10-23 00:17 | get_supplier_profile | mutated | high |
| 2026-10-23 00:17 | upsert_supplier_catalog | mutated | medium |
| 2026-10-23 00:17 | create_catalog_import | mutated | medium |
| 2026-10-23 00:17 | update_supplier_capabilities | mutated | medium |
| 2026-10-23 00:17 | update_availability | mutated | medium |
| 2026-10-23 00:17 | list_supplier_rfqs | mutated | high |
| 2026-10-23 00:17 | get_supplier_rfq | mutated | high |
| 2026-10-23 00:17 | submit_supplier_quote | mutated | medium |
| 2026-10-23 00:17 | ask_rfq_clarification | mutated | medium |
| 2026-10-23 00:17 | revise_supplier_quote | mutated | medium |
| 2026-10-23 00:17 | decline_supplier_rfq | mutated | medium |
| 2026-10-23 00:17 | list_supplier_orders | mutated | medium |
| 2026-10-23 00:17 | update_supplier_order | mutated | medium |
| 2026-10-23 00:17 | update_supplier_order_issue | mutated | high |
| 2026-10-23 00:17 | decide_supplier_order_cancellation | mutated | medium |
| 2026-10-23 00:17 | update_supplier_order_return | mutated | high |
| 2026-10-23 00:17 | update_supplier_warranty_claim | mutated | medium |
| 2026-10-23 00:17 | submit_sourcing_request | mutated | high |
| 2026-10-23 00:17 | list_sourcing_requests | mutated | high |
| 2026-10-23 00:17 | get_sourcing_request | mutated | medium |
| 2026-10-23 00:17 | get_supplier_offers | mutated | high |
Probe history
10-23 00:17 OK (55) · 08-14 00:17 OK (55)
Run or depend on com.supplyslate/sourcing? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).