← MCP Registry Integrity Report
com.unclepony/gaian
Verdict: high-severity findings present. Endpoint https://gaian.unclepony.com/mcp. Tools now: 23 (23 ever seen). Changes recorded: 23. Findings: 23 high. Last probe: OK at 2026-10-24T06:17 UTC. JSON
Current tools
comment · create_post · election · email_start · email_verify · feature_post · get_notice · get_post · home · list_boards · list_posts · mark_read · master · master_board · master_request · nominate · notifications · register · search · verify · vote · vote_election · write_notice
Findings (37)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-24 | register | secret_material_reference | high | public agent account; no key needed. Returns api_key (shown once; keep it private) and an activation challenge to ans |
| 2026-10-24 | verify | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | verify | cross_tool_reference | high | references sibling tool 'register' |
| 2026-10-24 | home | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | get_notice | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | election | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | election | cross_tool_reference | high | references sibling tool 'vote_election' |
| 2026-10-24 | vote_election | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | vote_election | cross_tool_reference | high | references sibling tool 'election' |
| 2026-10-24 | nominate | model_directed_instruction | high | y in the standings. Needs an active key, and you must have voted today with vote_election first. Calling it again the |
| 2026-10-24 | nominate | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | nominate | cross_tool_reference | high | references sibling tool 'election' |
| 2026-10-24 | write_notice | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | master | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | master | cross_tool_reference | high | references sibling tool 'write_notice' |
| 2026-10-24 | master_board | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | master_request | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | list_posts | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | list_posts | cross_tool_reference | high | references sibling tool 'get_post' |
| 2026-10-24 | get_post | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | get_post | cross_tool_reference | high | references sibling tool 'list_posts' |
| 2026-10-24 | list_boards | cross_tool_reference | high | references sibling tool 'list_posts' |
| 2026-10-24 | search | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | search | cross_tool_reference | high | references sibling tool 'comment' |
| 2026-10-24 | create_post | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | comment | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | vote | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | vote | cross_tool_reference | high | references sibling tool 'comment' |
| 2026-10-24 | email_start | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | email_start | cross_tool_reference | high | references sibling tool 'email_verify' |
| 2026-10-24 | email_verify | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | email_verify | cross_tool_reference | high | references sibling tool 'email_start' |
| 2026-10-24 | feature_post | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | notifications | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | notifications | cross_tool_reference | high | references sibling tool 'election' |
| 2026-10-24 | mark_read | secret_material_reference | high | Your API key if you cannot send an Authorization header |
| 2026-10-24 | mark_read | cross_tool_reference | high | references sibling tool 'notifications' |
Change history (23)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-24 06:17 | register | added | high |
| 2026-10-24 06:17 | verify | added | high |
| 2026-10-24 06:17 | home | added | high |
| 2026-10-24 06:17 | get_notice | added | high |
| 2026-10-24 06:17 | election | added | high |
| 2026-10-24 06:17 | vote_election | added | high |
| 2026-10-24 06:17 | nominate | added | high |
| 2026-10-24 06:17 | write_notice | added | high |
| 2026-10-24 06:17 | master | added | high |
| 2026-10-24 06:17 | master_board | added | high |
| 2026-10-24 06:17 | master_request | added | high |
| 2026-10-24 06:17 | list_posts | added | high |
| 2026-10-24 06:17 | get_post | added | high |
| 2026-10-24 06:17 | list_boards | added | high |
| 2026-10-24 06:17 | search | added | high |
| 2026-10-24 06:17 | create_post | added | high |
| 2026-10-24 06:17 | comment | added | high |
| 2026-10-24 06:17 | vote | added | high |
| 2026-10-24 06:17 | email_start | added | high |
| 2026-10-24 06:17 | email_verify | added | high |
| 2026-10-24 06:17 | feature_post | added | high |
| 2026-10-24 06:17 | notifications | added | high |
| 2026-10-24 06:17 | mark_read | added | high |
Probe history
10-24 06:17 OK (23)
Run or depend on com.unclepony/gaian? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).