← MCP Registry Integrity Report
com.zinvyl/marketplace
Verdict: high-severity findings present. Endpoint https://zinvyl.com/marketplace/agent-mcp. Tools now: 14 (14 ever seen). Changes recorded: 14. Findings: 8 high. Last probe: OK at 2026-10-25T06:17 UTC. JSON
Current tools
acknowledge_purchase_offer · buy_matching_service · buy_service · create_purchase_intent · find_service · get_acceptance_tests · get_purchase_requirements · list_offers · match_or_capture_demand · preflight_agent_purchase · prepare_purchase_route · qualify_task · recover_abandoned_purchase · resume_agent_purchase
Findings (15)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-25 | qualify_task | secret_material_reference | high | pected-versus-actual outcome. Do not include credentials, tokens, personal data, or production secrets. |
| 2026-10-25 | preflight_agent_purchase | secret_material_reference | high | y transaction check. Verifies product match, credential, standing agent policy or narrower signed mandate, exact offer a |
| 2026-10-25 | find_service | secret_material_reference | high | clude names, email addresses, phone numbers, credentials, payment data, personal data, confidential text, or production |
| 2026-10-25 | find_service | cross_tool_reference | high | references sibling tool 'qualify_task' |
| 2026-10-25 | list_offers | cross_tool_reference | high | references sibling tool 'qualify_task' |
| 2026-10-25 | get_purchase_requirements | cross_tool_reference | high | references sibling tool 'qualify_task' |
| 2026-10-25 | buy_matching_service | secret_material_reference | high | One sanitized bounded outcome. Never include credentials, tokens, payment data, personal data, confidential files, or pr |
| 2026-10-25 | buy_service | secret_material_reference | high | One sanitized bounded outcome. Never include credentials, tokens, payment data, personal data, confidential files, or pr |
| 2026-10-25 | recover_abandoned_purchase | secret_material_reference | high | One sanitized bounded outcome. Never include credentials, tokens, payment data, personal data, confidential files, or pr |
| 2026-10-25 | create_purchase_intent | secret_material_reference | high | nitized, bounded task summary. Never include credentials, tokens, payment data, personal data, confidential files, or pr |
| 2026-10-25 | create_purchase_intent | cross_tool_reference | high | references sibling tool 'find_service' |
| 2026-10-25 | match_or_capture_demand | secret_material_reference | high | clude names, email addresses, phone numbers, credentials, payment data, personal data, confidential text, or production |
| 2026-10-25 | match_or_capture_demand | cross_tool_reference | high | references sibling tool 'qualify_task' |
| 2026-10-25 | get_acceptance_tests | cross_tool_reference | high | references sibling tool 'qualify_task' |
| 2026-10-25 | prepare_purchase_route | cross_tool_reference | high | references sibling tool 'qualify_task' |
Change history (14)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-25 06:17 | qualify_task | added | high |
| 2026-10-25 06:17 | acknowledge_purchase_offer | added | info |
| 2026-10-25 06:17 | preflight_agent_purchase | added | high |
| 2026-10-25 06:17 | resume_agent_purchase | added | info |
| 2026-10-25 06:17 | find_service | added | high |
| 2026-10-25 06:17 | list_offers | added | high |
| 2026-10-25 06:17 | get_purchase_requirements | added | high |
| 2026-10-25 06:17 | buy_matching_service | added | high |
| 2026-10-25 06:17 | buy_service | added | high |
| 2026-10-25 06:17 | recover_abandoned_purchase | added | high |
| 2026-10-25 06:17 | create_purchase_intent | added | high |
| 2026-10-25 06:17 | match_or_capture_demand | added | high |
| 2026-10-25 06:17 | get_acceptance_tests | added | high |
| 2026-10-25 06:17 | prepare_purchase_route | added | high |
Probe history
10-25 06:17 OK (14)
Run or depend on com.zinvyl/marketplace? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).