← MCP Registry Integrity Report
com.tableall/mcp
Verdict: high-severity findings present. Endpoint https://mcp.tableall.com/sse. Tools now: 10 (10 ever seen). Changes recorded: 10. Findings: 8 high. Last probe: OK at 2026-10-23T00:17 UTC. JSON
Current tools
check_availability · create_reservation · create_reservation_request · get_cancellation_policies · get_reservation_request_status · get_reservation_status · get_restaurant_details · get_restaurant_menu · search_available_restaurants · search_restaurants
Findings (17)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | search_restaurants | cross_tool_reference | high | references sibling tool 'get_restaurant_details' |
| 2026-10-23 | get_restaurant_details | cross_tool_reference | high | references sibling tool 'search_restaurants' |
| 2026-10-23 | check_availability | cross_tool_reference | high | references sibling tool 'search_available_restaurants' |
| 2026-10-23 | search_available_restaurants | cross_tool_reference | high | references sibling tool 'check_availability' |
| 2026-10-23 | get_cancellation_policies | cross_tool_reference | high | references sibling tool 'get_restaurant_details' |
| 2026-10-23 | create_reservation | model_directed_instruction | high | AI client name. You MUST provide your AI model name (e.g., "Claude", "Gemini", "GPT", "Co |
| 2026-10-23 | create_reservation | secret_material_reference | high | n_seats and max_seats. Response: store data.access_token (required by get_reservation_status). If user.is_new_user is tru |
| 2026-10-23 | create_reservation | cross_tool_reference | high | references sibling tool 'check_availability' |
| 2026-10-23 | get_reservation_status | model_directed_instruction | high | returned in the create_reservation response. You MUST have stored the access_token from the create response to use thi |
| 2026-10-23 | get_reservation_status | secret_material_reference | high | f a reservation by session ID. Requires the access_token that was returned in the create_reservation response. You MUST h |
| 2026-10-23 | get_reservation_status | cross_tool_reference | high | references sibling tool 'create_reservation' |
| 2026-10-23 | create_reservation_request | model_directed_instruction | high | AI client name. You MUST provide your AI model name (e.g., "Claude", "Gemini", "GPT", "Co |
| 2026-10-23 | create_reservation_request | secret_material_reference | high | very day in the range. Response: store data.access_token (required by get_reservation_request_status). If user.is_new_use |
| 2026-10-23 | create_reservation_request | cross_tool_reference | high | references sibling tool 'check_availability' |
| 2026-10-23 | get_reservation_request_status | model_directed_instruction | high | in the create_reservation_request response. You MUST have stored the access_token from the create response to use thi |
| 2026-10-23 | get_reservation_request_status | secret_material_reference | high | rvation request by session ID. Requires the access_token that was returned in the create_reservation_request response. Yo |
| 2026-10-23 | get_reservation_request_status | cross_tool_reference | high | references sibling tool 'create_reservation' |
Change history (10)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 00:17 | search_restaurants | mutated | high |
| 2026-10-23 00:17 | get_restaurant_details | mutated | high |
| 2026-10-23 00:17 | get_restaurant_menu | mutated | medium |
| 2026-10-23 00:17 | check_availability | mutated | high |
| 2026-10-23 00:17 | search_available_restaurants | mutated | high |
| 2026-10-23 00:17 | get_cancellation_policies | mutated | high |
| 2026-10-23 00:17 | create_reservation | mutated | high |
| 2026-10-23 00:17 | get_reservation_status | mutated | high |
| 2026-10-23 00:17 | create_reservation_request | mutated | high |
| 2026-10-23 00:17 | get_reservation_request_status | mutated | high |
Probe history
10-23 00:17 OK (10) · 08-14 00:17 OK (10)
Run or depend on com.tableall/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).