← MCP Registry Integrity Report
com.trysuara/suara
Verdict: CRITICAL findings present. Endpoint https://mcp.trysuara.com/mcp. Tools now: 12 (12 ever seen). Changes recorded: 12. Findings: 1 critical, 1 high. Last probe: OK at 2026-10-24T18:17 UTC. JSON
Current tools
approve_post · best_time_to_post · connect_social_account · get_my_brand · get_my_posts · get_suara_replies · holiday_calendar · make_sample_posts · my_instagram_insights · my_social_accounts · send_to_suara · trending_audio
Findings (4)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-24 | get_my_posts | exfiltration_pattern | critical | Also attach the pictures to the answer (default false: the Suara viewer shows them) |
| 2026-10-24 | send_to_suara | cross_tool_reference | high | references sibling tool 'get_suara_replies' |
| 2026-10-24 | get_suara_replies | cross_tool_reference | high | references sibling tool 'send_to_suara' |
| 2026-10-24 | connect_social_account | secret_material_reference | high | orm's own login page; Suara never sees their password. Instagram must be a Business or Creator account. Nothing is pos |
Change history (12)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-24 18:17 | make_sample_posts | added | info |
| 2026-10-24 18:17 | trending_audio | added | info |
| 2026-10-24 18:17 | holiday_calendar | added | info |
| 2026-10-24 18:17 | best_time_to_post | added | info |
| 2026-10-24 18:17 | get_my_brand | added | info |
| 2026-10-24 18:17 | get_my_posts | added | critical |
| 2026-10-24 18:17 | send_to_suara | added | high |
| 2026-10-24 18:17 | get_suara_replies | added | high |
| 2026-10-24 18:17 | approve_post | added | info |
| 2026-10-24 18:17 | connect_social_account | added | high |
| 2026-10-24 18:17 | my_social_accounts | added | info |
| 2026-10-24 18:17 | my_instagram_insights | added | info |
Probe history
10-24 18:17 OK (12)
Run or depend on com.trysuara/suara? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).