← MCP Registry Integrity Report
com.synorb/mcp
Verdict: high-severity findings present. Endpoint https://mcp.synorb.com/mcp. Tools now: 11 (11 ever seen). Changes recorded: 11. Findings: 8 high, 1 low. Last probe: OK at 2026-10-24T00:17 UTC. JSON
Current tools
synorb-archive-beacon · synorb-beacons · synorb-catalog · synorb-configure-beacon · synorb-details · synorb-get-demo-key · synorb-manifests · synorb-profile · synorb-save-beacon · synorb-stream-search · synorb-update-beacon
Findings (14)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-24 | synorb-get-demo-key | secret_material_reference | high | pen MCP session. Keyless: call this with no credential at all. New keys are capped per network; on demo_key_rate_limite |
| 2026-10-24 | synorb-get-demo-key | url_in_description | low | https://synorb.com/connect/start |
| 2026-10-24 | synorb-details | cross_tool_reference | high | references sibling tool 'synorb-manifests' |
| 2026-10-24 | synorb-manifests | secret_material_reference | high | Api Key |
| 2026-10-24 | synorb-profile | secret_material_reference | high | Api Key |
| 2026-10-24 | synorb-profile | cross_tool_reference | high | references sibling tool 'synorb-manifests' |
| 2026-10-24 | synorb-save-beacon | secret_material_reference | high | Api Key |
| 2026-10-24 | synorb-save-beacon | cross_tool_reference | high | references sibling tool 'synorb-manifests' |
| 2026-10-24 | synorb-beacons | model_directed_instruction | high | ks what Beacons exist, needs a beacon_id, or you must read a Beacon before you edit it. DO NOT USE THIS WHEN: the user |
| 2026-10-24 | synorb-beacons | secret_material_reference | high | Api Key |
| 2026-10-24 | synorb-beacons | cross_tool_reference | high | references sibling tool 'synorb-manifests' |
| 2026-10-24 | synorb-archive-beacon | secret_material_reference | high | Api Key |
| 2026-10-24 | synorb-update-beacon | secret_material_reference | high | Api Key |
| 2026-10-24 | synorb-update-beacon | cross_tool_reference | high | references sibling tool 'synorb-save-beacon' |
Change history (11)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-24 00:17 | synorb-get-demo-key | added | high |
| 2026-10-24 00:17 | synorb-catalog | added | info |
| 2026-10-24 00:17 | synorb-details | added | high |
| 2026-10-24 00:17 | synorb-stream-search | added | info |
| 2026-10-24 00:17 | synorb-manifests | added | high |
| 2026-10-24 00:17 | synorb-profile | added | high |
| 2026-10-24 00:17 | synorb-configure-beacon | added | info |
| 2026-10-24 00:17 | synorb-save-beacon | added | high |
| 2026-10-24 00:17 | synorb-beacons | added | high |
| 2026-10-24 00:17 | synorb-archive-beacon | added | high |
| 2026-10-24 00:17 | synorb-update-beacon | added | high |
Probe history
10-24 00:17 OK (11)
Run or depend on com.synorb/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).