← MCP Registry Integrity Report
com.tulugar/tulugar
Verdict: CRITICAL findings present. Endpoint https://tulugar.com/api/mcp. Tools now: 39 (39 ever seen). Changes recorded: 39. Findings: 3 high, 1 critical, 1 low. Last probe: OK at 2026-10-23T06:17 UTC. JSON
Current tools
account_status · buy_promotional_credits · close_listing · closing_costs · connect_account · create_lead · create_listing · delete_saved_search · edit_listing · fetch · get_agent · get_company · get_guide · get_listing · get_market_summary · get_project · get_str_data · link_email · list_locations · mortgage_calculator · my_inquiries · my_listings · my_saved_searches · neighborhood_guide · open_web_session · promote_listing · publish_listing · rental_yield · reply_to_inquiry · save_search · search · search_agents · search_companies · search_listings · search_projects · send_whatsapp_verification · share_listing_whatsapp · upload_listing_image · verify_whatsapp_code
Findings (22)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | search_listings | cross_tool_reference | high | references sibling tool 'search_projects' |
| 2026-10-23 | search_companies | cross_tool_reference | high | references sibling tool 'search_listings' |
| 2026-10-23 | get_company | cross_tool_reference | high | references sibling tool 'search_companies' |
| 2026-10-23 | neighborhood_guide | model_directed_instruction | high | when available, plus curated local context. ALWAYS use this for "¿cómo es <barrio>?" / "is X a good area?" questions in |
| 2026-10-23 | get_guide | model_directed_instruction | high | ng tips), airbnb (short-term rental basics). ALWAYS use this for "how does buying/renting work" / process / documents qu |
| 2026-10-23 | account_status | cross_tool_reference | high | references sibling tool 'connect_account' |
| 2026-10-23 | open_web_session | secret_material_reference | high | ady logged in to their account — no code, no password. Use when a WhatsApp user needs the website: upload photos, fini |
| 2026-10-23 | link_email | user_concealment | critical | the tool explains the options (never merges silently). |
| 2026-10-23 | connect_account | cross_tool_reference | high | references sibling tool 'account_status' |
| 2026-10-23 | create_listing | cross_tool_reference | high | references sibling tool 'account_status' |
| 2026-10-23 | edit_listing | cross_tool_reference | high | references sibling tool 'close_listing' |
| 2026-10-23 | close_listing | cross_tool_reference | high | references sibling tool 'my_listings' |
| 2026-10-23 | upload_listing_image | cross_tool_reference | high | references sibling tool 'create_listing' |
| 2026-10-23 | send_whatsapp_verification | cross_tool_reference | high | references sibling tool 'account_status' |
| 2026-10-23 | verify_whatsapp_code | cross_tool_reference | high | references sibling tool 'send_whatsapp_verification' |
| 2026-10-23 | reply_to_inquiry | cross_tool_reference | high | references sibling tool 'my_inquiries' |
| 2026-10-23 | save_search | cross_tool_reference | high | references sibling tool 'search_listings' |
| 2026-10-23 | delete_saved_search | cross_tool_reference | high | references sibling tool 'my_saved_searches' |
| 2026-10-23 | promote_listing | cross_tool_reference | high | references sibling tool 'my_listings' |
| 2026-10-23 | buy_promotional_credits | cross_tool_reference | high | references sibling tool 'promote_listing' |
| 2026-10-23 | share_listing_whatsapp | url_in_description | low | https://wa.me/<number |
| 2026-10-23 | share_listing_whatsapp | cross_tool_reference | high | references sibling tool 'my_listings' |
Change history (39)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 06:17 | search_listings | mutated | high |
| 2026-10-23 06:17 | get_listing | mutated | medium |
| 2026-10-23 06:17 | search | mutated | medium |
| 2026-10-23 06:17 | fetch | mutated | medium |
| 2026-10-23 06:17 | search_projects | mutated | medium |
| 2026-10-23 06:17 | get_project | mutated | medium |
| 2026-10-23 06:17 | search_companies | mutated | high |
| 2026-10-23 06:17 | get_company | mutated | high |
| 2026-10-23 06:17 | get_agent | mutated | medium |
| 2026-10-23 06:17 | search_agents | mutated | medium |
| 2026-10-23 06:17 | list_locations | mutated | medium |
| 2026-10-23 06:17 | get_market_summary | mutated | medium |
| 2026-10-23 06:17 | neighborhood_guide | mutated | high |
| 2026-10-23 06:17 | rental_yield | mutated | medium |
| 2026-10-23 06:17 | closing_costs | mutated | medium |
| 2026-10-23 06:17 | get_guide | mutated | high |
| 2026-10-23 06:17 | get_str_data | mutated | medium |
| 2026-10-23 06:17 | mortgage_calculator | mutated | medium |
| 2026-10-23 06:17 | account_status | mutated | high |
| 2026-10-23 06:17 | create_lead | mutated | medium |
| 2026-10-23 06:17 | open_web_session | mutated | high |
| 2026-10-23 06:17 | link_email | mutated | critical |
| 2026-10-23 06:17 | connect_account | mutated | high |
| 2026-10-23 06:17 | create_listing | mutated | high |
| 2026-10-23 06:17 | edit_listing | mutated | high |
| 2026-10-23 06:17 | publish_listing | mutated | medium |
| 2026-10-23 06:17 | close_listing | mutated | high |
| 2026-10-23 06:17 | upload_listing_image | mutated | high |
| 2026-10-23 06:17 | send_whatsapp_verification | mutated | high |
| 2026-10-23 06:17 | verify_whatsapp_code | mutated | high |
| 2026-10-23 06:17 | my_listings | mutated | medium |
| 2026-10-23 06:17 | my_inquiries | mutated | medium |
| 2026-10-23 06:17 | reply_to_inquiry | mutated | high |
| 2026-10-23 06:17 | save_search | mutated | high |
| 2026-10-23 06:17 | my_saved_searches | mutated | medium |
| 2026-10-23 06:17 | delete_saved_search | mutated | high |
| 2026-10-23 06:17 | promote_listing | mutated | high |
| 2026-10-23 06:17 | buy_promotional_credits | mutated | high |
| 2026-10-23 06:17 | share_listing_whatsapp | mutated | high |
Probe history
10-23 06:17 OK (39) · 08-14 00:17 OK (39)
Run or depend on com.tulugar/tulugar? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).