← MCP Registry Integrity Report
com.tryspook/spook
Verdict: high-severity findings present. Endpoint https://www.tryspook.com/api/mcp. Tools now: 59 (59 ever seen). Changes recorded: 59. Findings: 12 high. Last probe: OK at 2026-10-23T06:17 UTC. JSON
Current tools
ad-copy-generator · aeo-checker · ai-crawler-checker · ai-prompt-generator · analyze_domain · article-rewriter · article-summarizer · blog-keyword-generator · blog-outline-generator · business-name-generator · canonical-tag-generator · character-counter · content-brief-generator · content-coverage-checker · content-idea-generator · conversion-rate-calculator · cpc-calculator · cpm-calculator · create_checkout · create_site · cta-generator · ctr-calculator · faq-generator · generate_article · get_article · get_site · get_site_metrics · grammar-checker · hashtag-generator · headline-analyzer · headline-generator · hreflang-generator · keyword-density-checker · list_articles · list_opportunities · list_sites · llms-txt-generator · meta-description-generator · meta-robots-generator · meta-tag-generator · paragraph-generator · product-description-generator · publish_article · readability-checker · roas-calculator · robots-txt-generator · robots-txt-tester · schema-generator · seo-title-generator · serp-preview · set_autopilot · sitemap-generator · slug-generator · social-post-generator · subject-line-generator · update_publishing · utm-builder · word-counter · youtube-title-generator
Findings (16)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | list_sites | secret_material_reference | high | List the Spook sites on the account this API key belongs to, with each site's id, domain, autopilot state, and pu |
| 2026-10-23 | get_site | secret_material_reference | high | ils and status by its id. (requires an agent API key) |
| 2026-10-23 | list_opportunities | secret_material_reference | high | question-shaped queries. (requires an agent API key) |
| 2026-10-23 | list_articles | secret_material_reference | high | d) and generation status. (requires an agent API key) |
| 2026-10-23 | generate_article | secret_material_reference | high | s an active subscription. (requires an agent API key) |
| 2026-10-23 | generate_article | cross_tool_reference | high | references sibling tool 'list_articles' |
| 2026-10-23 | get_article | secret_material_reference | high | draft before publishing. (requires an agent API key) |
| 2026-10-23 | get_site_metrics | secret_material_reference | high | whether Spook is working. (requires an agent API key) |
| 2026-10-23 | get_site_metrics | cross_tool_reference | high | references sibling tool 'get_site' |
| 2026-10-23 | create_site | secret_material_reference | high | . Returns the new siteId. (requires an agent API key) |
| 2026-10-23 | create_site | cross_tool_reference | high | references sibling tool 'create_checkout' |
| 2026-10-23 | update_publishing | secret_material_reference | high | es. Set publishIntegration to 'nextjs' for a credential-free Spook-hosted blog (returns a blog API key), or 'webhook' wi |
| 2026-10-23 | create_checkout | secret_material_reference | high | nt has no available slot. (requires an agent API key) |
| 2026-10-23 | create_checkout | cross_tool_reference | high | references sibling tool 'create_site' |
| 2026-10-23 | publish_article | secret_material_reference | high | hed:false with a reason). (requires an agent API key) |
| 2026-10-23 | set_autopilot | secret_material_reference | high | s articles automatically. (requires an agent API key) |
Change history (59)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 06:17 | serp-preview | mutated | medium |
| 2026-10-23 06:17 | meta-tag-generator | mutated | medium |
| 2026-10-23 06:17 | schema-generator | mutated | medium |
| 2026-10-23 06:17 | robots-txt-generator | mutated | medium |
| 2026-10-23 06:17 | word-counter | mutated | medium |
| 2026-10-23 06:17 | character-counter | mutated | medium |
| 2026-10-23 06:17 | readability-checker | mutated | medium |
| 2026-10-23 06:17 | hreflang-generator | mutated | medium |
| 2026-10-23 06:17 | canonical-tag-generator | mutated | medium |
| 2026-10-23 06:17 | meta-robots-generator | mutated | medium |
| 2026-10-23 06:17 | sitemap-generator | mutated | medium |
| 2026-10-23 06:17 | robots-txt-tester | mutated | medium |
| 2026-10-23 06:17 | keyword-density-checker | mutated | medium |
| 2026-10-23 06:17 | headline-analyzer | mutated | medium |
| 2026-10-23 06:17 | slug-generator | mutated | medium |
| 2026-10-23 06:17 | utm-builder | mutated | medium |
| 2026-10-23 06:17 | ctr-calculator | mutated | medium |
| 2026-10-23 06:17 | conversion-rate-calculator | mutated | medium |
| 2026-10-23 06:17 | roas-calculator | mutated | medium |
| 2026-10-23 06:17 | cpm-calculator | mutated | medium |
| 2026-10-23 06:17 | cpc-calculator | mutated | medium |
| 2026-10-23 06:17 | ai-crawler-checker | mutated | medium |
| 2026-10-23 06:17 | aeo-checker | mutated | medium |
| 2026-10-23 06:17 | llms-txt-generator | mutated | medium |
| 2026-10-23 06:17 | ai-prompt-generator | mutated | medium |
| 2026-10-23 06:17 | analyze_domain | mutated | medium |
| 2026-10-23 06:17 | list_sites | mutated | high |
| 2026-10-23 06:17 | get_site | mutated | high |
| 2026-10-23 06:17 | list_opportunities | mutated | high |
| 2026-10-23 06:17 | list_articles | mutated | high |
| 2026-10-23 06:17 | generate_article | mutated | high |
| 2026-10-23 06:17 | get_article | mutated | high |
| 2026-10-23 06:17 | get_site_metrics | mutated | high |
| 2026-10-23 06:17 | create_site | mutated | high |
| 2026-10-23 06:17 | update_publishing | mutated | high |
| 2026-10-23 06:17 | create_checkout | mutated | high |
| 2026-10-23 06:17 | publish_article | mutated | high |
| 2026-10-23 06:17 | set_autopilot | mutated | high |
| 2026-10-23 06:17 | blog-keyword-generator | mutated | medium |
| 2026-10-23 06:17 | content-brief-generator | mutated | medium |
| 2026-10-23 06:17 | blog-outline-generator | mutated | medium |
| 2026-10-23 06:17 | content-idea-generator | mutated | medium |
| 2026-10-23 06:17 | seo-title-generator | mutated | medium |
| 2026-10-23 06:17 | meta-description-generator | mutated | medium |
| 2026-10-23 06:17 | headline-generator | mutated | medium |
| 2026-10-23 06:17 | subject-line-generator | mutated | medium |
| 2026-10-23 06:17 | cta-generator | mutated | medium |
| 2026-10-23 06:17 | ad-copy-generator | mutated | medium |
| 2026-10-23 06:17 | social-post-generator | mutated | medium |
| 2026-10-23 06:17 | article-summarizer | mutated | medium |
| 2026-10-23 06:17 | article-rewriter | mutated | medium |
| 2026-10-23 06:17 | grammar-checker | mutated | medium |
| 2026-10-23 06:17 | faq-generator | mutated | medium |
| 2026-10-23 06:17 | product-description-generator | mutated | medium |
| 2026-10-23 06:17 | business-name-generator | mutated | medium |
| 2026-10-23 06:17 | youtube-title-generator | mutated | medium |
| 2026-10-23 06:17 | paragraph-generator | mutated | medium |
| 2026-10-23 06:17 | content-coverage-checker | mutated | medium |
| 2026-10-23 06:17 | hashtag-generator | mutated | medium |
Probe history
10-23 06:17 OK (59) · 08-14 00:17 OK (59)
Run or depend on com.tryspook/spook? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).