← MCP Registry Integrity Report
com.temsor/api
Verdict: CRITICAL findings present. Endpoint https://api.temsor.com/mcp. Tools now: 43 (51 ever seen). Changes recorded: 51. Findings: 2 high, 2 critical. Last probe: OK at 2026-10-23T00:17 UTC. JSON
Current tools
email_verify · iban_validate · pbx_audio_chunk · pbx_calls · pbx_calls_get · pbx_calls_graph · pbx_dictionary · pbx_dictionary_add · pbx_events · pbx_facts · pbx_facts_get · pbx_index_partial · pbx_index_partial_get · pbx_ingest_transcript · pbx_persons · pbx_persons_get · pbx_promises · pbx_promises_act · pbx_promises_close · pbx_promises_export · pbx_promises_reopen · pbx_redact · pbx_redact_audit · pbx_register · pbx_search · pbx_status · pbx_webhooks · pbx_webhooks_deliveries · pbx_whisper_status · pbx_whisper_suggest · phone_validate · tr_address_parse · tr_business_days · tr_iban_olustur · tr_invoice_build · tr_invoice_parse · tr_labor · tr_money_to_words · tr_posta_kodu · tr_qr_odeme · tr_tebligat_clock · tr_validate · tr_vat
Findings (16)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | pbx_calls_get | cross_tool_reference | high | references sibling tool 'pbx_calls' |
| 2026-10-23 | pbx_calls_graph | cross_tool_reference | high | references sibling tool 'pbx_calls' |
| 2026-10-23 | pbx_dictionary_add | cross_tool_reference | high | references sibling tool 'pbx_dictionary' |
| 2026-10-23 | pbx_events | secret_material_reference | high | key, or x-temsor-signature = hex(HMAC-SHA256(api_key, body)); bad signature rejected when header present. BridgeEnter |
| 2026-10-23 | pbx_facts_get | cross_tool_reference | high | references sibling tool 'pbx_facts' |
| 2026-10-23 | pbx_index_partial_get | cross_tool_reference | high | references sibling tool 'pbx_index_partial' |
| 2026-10-23 | pbx_persons_get | cross_tool_reference | high | references sibling tool 'pbx_persons' |
| 2026-10-23 | pbx_promises_act | cross_tool_reference | high | references sibling tool 'pbx_promises' |
| 2026-10-23 | pbx_promises_close | cross_tool_reference | high | references sibling tool 'pbx_promises' |
| 2026-10-23 | pbx_promises_export | cross_tool_reference | high | references sibling tool 'pbx_promises' |
| 2026-10-23 | pbx_promises_reopen | cross_tool_reference | high | references sibling tool 'pbx_promises' |
| 2026-10-23 | pbx_redact_audit | cross_tool_reference | high | references sibling tool 'pbx_redact' |
| 2026-10-23 | pbx_register | secret_material_reference | high | Register a pilot PBX; returns pbx_id + API key once (hashed at rest). ≤5/hour/IP → 429. Idle $0. Control-plane |
| 2026-10-23 | pbx_webhooks_deliveries | cross_tool_reference | high | references sibling tool 'pbx_webhooks' |
| 2026-10-23 | tr_address_parse | user_concealment | critical | is listed in `unparsed` — nothing is dropped silently. Built for shipping, checkout and CRM systems that receive Turki |
| 2026-10-23 | tr_business_days | user_concealment | critical | d with `confirmed:false` rather than guessed silently. For delivery promises, SLA clocks, payment terms and shipping e |
Change history (51)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 00:17 | email_verify | mutated | medium |
| 2026-10-23 00:17 | iban_validate | mutated | medium |
| 2026-10-23 00:17 | pbx_audio_chunk | added | info |
| 2026-10-23 00:17 | pbx_calls | added | info |
| 2026-10-23 00:17 | pbx_calls_get | added | high |
| 2026-10-23 00:17 | pbx_calls_graph | added | high |
| 2026-10-23 00:17 | pbx_dictionary | added | info |
| 2026-10-23 00:17 | pbx_dictionary_add | added | high |
| 2026-10-23 00:17 | pbx_events | added | high |
| 2026-10-23 00:17 | pbx_facts | added | info |
| 2026-10-23 00:17 | pbx_facts_get | added | high |
| 2026-10-23 00:17 | pbx_index_partial | added | info |
| 2026-10-23 00:17 | pbx_index_partial_get | added | high |
| 2026-10-23 00:17 | pbx_ingest_transcript | added | info |
| 2026-10-23 00:17 | pbx_persons | added | info |
| 2026-10-23 00:17 | pbx_persons_get | added | high |
| 2026-10-23 00:17 | pbx_promises | added | info |
| 2026-10-23 00:17 | pbx_promises_act | added | high |
| 2026-10-23 00:17 | pbx_promises_close | added | high |
| 2026-10-23 00:17 | pbx_promises_export | added | high |
| 2026-10-23 00:17 | pbx_promises_reopen | added | high |
| 2026-10-23 00:17 | pbx_redact | added | info |
| 2026-10-23 00:17 | pbx_redact_audit | added | high |
| 2026-10-23 00:17 | pbx_register | added | high |
| 2026-10-23 00:17 | pbx_search | added | info |
| 2026-10-23 00:17 | pbx_status | added | info |
| 2026-10-23 00:17 | pbx_webhooks | added | info |
| 2026-10-23 00:17 | pbx_webhooks_deliveries | added | high |
| 2026-10-23 00:17 | pbx_whisper_status | added | info |
| 2026-10-23 00:17 | pbx_whisper_suggest | added | info |
| 2026-10-23 00:17 | phone_validate | mutated | medium |
| 2026-10-23 00:17 | tr_address_parse | mutated | critical |
| 2026-10-23 00:17 | tr_business_days | mutated | critical |
| 2026-10-23 00:17 | tr_iban_olustur | added | info |
| 2026-10-23 00:17 | tr_invoice_build | mutated | medium |
| 2026-10-23 00:17 | tr_invoice_parse | mutated | medium |
| 2026-10-23 00:17 | tr_labor | added | info |
| 2026-10-23 00:17 | tr_money_to_words | mutated | medium |
| 2026-10-23 00:17 | tr_posta_kodu | added | info |
| 2026-10-23 00:17 | tr_qr_odeme | added | info |
| 2026-10-23 00:17 | tr_tebligat_clock | added | info |
| 2026-10-23 00:17 | tr_validate | mutated | medium |
| 2026-10-23 00:17 | tr_vat | added | info |
| 2026-10-23 00:17 | eu_vat_validate | removed | info |
| 2026-10-23 00:17 | mcp_index | removed | info |
| 2026-10-23 00:17 | model_archive | removed | info |
| 2026-10-23 00:17 | model_drift | removed | info |
| 2026-10-23 00:17 | sanctions_screen | removed | info |
| 2026-10-23 00:17 | series_history | removed | info |
| 2026-10-23 00:17 | shipping_identify | removed | info |
| 2026-10-23 00:17 | tr_fuel_prices | removed | info |
Probe history
10-23 00:17 OK (43) · 08-14 00:17 OK (17)
Run or depend on com.temsor/api? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).