← MCP Registry Integrity Report
com.validoria/validoria-mcp
Verdict: high-severity findings present. Endpoint https://api.teste.no/api/mcp. Tools now: 74 (74 ever seen). Changes recorded: 74. Findings: 4 high. Last probe: OK at 2026-10-25T00:19 UTC. JSON
Current tools
acknowledge_incident · active_runs · add_keyword · analyze_target · cancel_load_test · create_automation_rule · create_journey · create_maintenance_window · create_muting_rule · create_notification_rule · create_page_fragment · create_scheduled_report · create_target · daily_trends · delete_automation_rule · delete_journey · delete_maintenance_window · delete_notification_rule · delete_page_fragment · delete_scheduled_report · delete_secret · delete_target · disable_all_tests · enable_all_tests · get_automation_rule · get_finding · get_incident · get_journey · get_load_test · get_run · get_site_map · get_target · get_target_scores · get_team_settings · guest_get_scan · guest_start_scan · import_targets · list_automation_rules · list_findings · list_incidents · list_journeys · list_keywords · list_load_tests · list_maintenance_windows · list_notification_channels · list_notification_rules · list_page_fragments · list_runs · list_scheduled_reports · list_secrets · list_targets · list_tests · mute_finding · recompute_scores · record_deployment · remove_keyword · resolve_incident · rotate_secret · start_load_test · store_secret · system_health · target_stats · team_stats · trigger_all_tests · trigger_journey · trigger_test · update_automation_rule · update_journey · update_notification_rule · update_page_fragment · update_scheduled_report · update_target · update_team_settings · update_test
Findings (11)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | guest_start_scan | secret_material_reference | high | st HTTP scan against a public URL without an API key. Rate-limited (5/IP/hour, 3/session/day). Returns scanId — poll |
| 2026-10-23 | guest_start_scan | cross_tool_reference | high | references sibling tool 'guest_get_scan' |
| 2026-10-23 | guest_get_scan | secret_material_reference | high | d guestSessionId from the start response. No API key required. |
| 2026-10-23 | guest_get_scan | cross_tool_reference | high | references sibling tool 'guest_start_scan' |
| 2026-10-23 | get_target_scores | cross_tool_reference | high | references sibling tool 'get_target' |
| 2026-10-23 | trigger_test | cross_tool_reference | high | references sibling tool 'get_run' |
| 2026-10-23 | trigger_journey | cross_tool_reference | high | references sibling tool 'get_run' |
| 2026-10-23 | list_secrets | secret_material_reference | high | sed by test plugins (e.g. LOGIN_EMAIL, LOGIN_PASSWORD for B2B shops, ga4_service_account for GA4). |
| 2026-10-23 | store_secret | secret_material_reference | high | get's vault. Common keys: LOGIN_EMAIL, LOGIN_PASSWORD (B2B shop auth), ga4_service_account (GA4 monitoring). Values ar |
| 2026-10-23 | create_target | cross_tool_reference | high | references sibling tool 'analyze_target' |
| 2026-10-23 | analyze_target | cross_tool_reference | high | references sibling tool 'create_target' |
Change history (74)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 06:17 | guest_start_scan | mutated | high |
| 2026-10-23 06:17 | guest_get_scan | mutated | high |
| 2026-10-23 06:17 | list_targets | mutated | medium |
| 2026-10-23 06:17 | get_target | mutated | medium |
| 2026-10-23 06:17 | get_target_scores | mutated | high |
| 2026-10-23 06:17 | list_findings | mutated | medium |
| 2026-10-23 06:17 | get_finding | mutated | medium |
| 2026-10-23 06:17 | list_incidents | mutated | medium |
| 2026-10-23 06:17 | get_incident | mutated | medium |
| 2026-10-23 06:17 | list_runs | mutated | medium |
| 2026-10-23 06:17 | get_run | mutated | medium |
| 2026-10-23 06:17 | active_runs | mutated | medium |
| 2026-10-23 06:17 | team_stats | mutated | medium |
| 2026-10-23 06:17 | target_stats | mutated | medium |
| 2026-10-23 06:17 | daily_trends | mutated | medium |
| 2026-10-23 06:17 | get_site_map | mutated | medium |
| 2026-10-23 06:17 | list_maintenance_windows | mutated | medium |
| 2026-10-23 06:17 | list_tests | mutated | medium |
| 2026-10-23 06:17 | trigger_test | mutated | high |
| 2026-10-23 06:17 | trigger_all_tests | mutated | medium |
| 2026-10-23 06:17 | acknowledge_incident | mutated | medium |
| 2026-10-23 06:17 | resolve_incident | mutated | medium |
| 2026-10-23 06:17 | mute_finding | mutated | medium |
| 2026-10-23 06:17 | create_maintenance_window | mutated | medium |
| 2026-10-23 06:17 | delete_maintenance_window | mutated | medium |
| 2026-10-23 06:17 | record_deployment | mutated | medium |
| 2026-10-23 06:17 | recompute_scores | mutated | medium |
| 2026-10-23 06:17 | list_automation_rules | mutated | medium |
| 2026-10-23 06:17 | get_automation_rule | mutated | medium |
| 2026-10-23 06:17 | create_automation_rule | mutated | medium |
| 2026-10-23 06:17 | update_automation_rule | mutated | medium |
| 2026-10-23 06:17 | delete_automation_rule | mutated | medium |
| 2026-10-23 06:17 | list_journeys | mutated | medium |
| 2026-10-23 06:17 | get_journey | mutated | medium |
| 2026-10-23 06:17 | create_journey | mutated | medium |
| 2026-10-23 06:17 | update_journey | mutated | medium |
| 2026-10-23 06:17 | delete_journey | mutated | medium |
| 2026-10-23 06:17 | trigger_journey | mutated | high |
| 2026-10-23 06:17 | list_scheduled_reports | mutated | medium |
| 2026-10-23 06:17 | create_scheduled_report | mutated | medium |
| 2026-10-23 06:17 | update_scheduled_report | mutated | medium |
| 2026-10-23 06:17 | delete_scheduled_report | mutated | medium |
| 2026-10-23 06:17 | get_team_settings | mutated | medium |
| 2026-10-23 06:17 | update_team_settings | mutated | medium |
| 2026-10-23 06:17 | list_notification_rules | mutated | medium |
| 2026-10-23 06:17 | create_notification_rule | mutated | medium |
| 2026-10-23 06:17 | update_notification_rule | mutated | medium |
| 2026-10-23 06:17 | delete_notification_rule | mutated | medium |
| 2026-10-23 06:17 | list_notification_channels | mutated | medium |
| 2026-10-23 06:17 | list_keywords | mutated | medium |
| 2026-10-23 06:17 | add_keyword | mutated | medium |
| 2026-10-23 06:17 | remove_keyword | mutated | medium |
| 2026-10-23 06:17 | start_load_test | mutated | medium |
| 2026-10-23 06:17 | cancel_load_test | mutated | medium |
| 2026-10-23 06:17 | get_load_test | mutated | medium |
| 2026-10-23 06:17 | list_load_tests | mutated | medium |
| 2026-10-23 06:17 | list_secrets | mutated | high |
| 2026-10-23 06:17 | store_secret | mutated | high |
| 2026-10-23 06:17 | rotate_secret | mutated | medium |
| 2026-10-23 06:17 | delete_secret | mutated | medium |
| 2026-10-23 06:17 | list_page_fragments | mutated | medium |
| 2026-10-23 06:17 | create_page_fragment | mutated | medium |
| 2026-10-23 06:17 | update_page_fragment | mutated | medium |
| 2026-10-23 06:17 | delete_page_fragment | mutated | medium |
| 2026-10-23 06:17 | create_target | mutated | high |
| 2026-10-23 06:17 | update_target | mutated | medium |
| 2026-10-23 06:17 | delete_target | mutated | medium |
| 2026-10-23 06:17 | analyze_target | mutated | high |
| 2026-10-23 06:17 | import_targets | mutated | medium |
| 2026-10-23 06:17 | create_muting_rule | mutated | medium |
| 2026-10-23 06:17 | system_health | mutated | medium |
| 2026-10-23 06:17 | update_test | mutated | medium |
| 2026-10-23 06:17 | enable_all_tests | mutated | medium |
| 2026-10-23 06:17 | disable_all_tests | mutated | medium |
Probe history
10-25 00:19 OK (74) · 10-23 06:17 OK (74) · 08-14 00:17 OK (74)
Run or depend on com.validoria/validoria-mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).