← MCP Registry Integrity Report
de.agentview/agentview-mcp
Verdict: CRITICAL findings present. Endpoint https://agentview.de/mcp. Tools now: 57 (57 ever seen). Changes recorded: 57. Findings: 7 high, 1 critical, 1 low. Last probe: OK at 2026-10-23T06:17 UTC. JSON
Current tools
assign_display_categories · authenticate · broadcast_content · claim_display · clear_display · configure_display · configure_organization · create_api_key · create_auth_session · create_display · create_organization · delete_asset · delete_data_slot · delete_display · delete_organization · fetch · get_account · get_agent_artifact · get_asset · get_auth_session · get_data_slot · get_display · get_display_preview_url · get_license_info · get_organization · get_public_status · get_storage_usage · get_store_template_content · get_store_template_details · get_store_template_install_options · list_api_keys · list_assets · list_data_slots · list_display_categories · list_displays · list_organizations · list_store_categories · logout · manage_display_category · manage_licenses · manage_org_member · pair_by_code · read_display_html · remove_display_from_org · revoke_api_key · search · search_public_apis · search_store_templates · send_html · send_store_template_to_display · send_url · set_data_slot · set_display_grant · submit_feedback · test_display_content · update_asset · upload_asset
Findings (63)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | assign_display_categories | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | list_data_slots | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | set_display_grant | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | authenticate | secret_material_reference | high | erver-side state remembers this call, so the credential still travels on every protected call afterwards. Use only when |
| 2026-10-23 | authenticate | cross_tool_reference | high | references sibling tool 'create_auth_session' |
| 2026-10-23 | create_api_key | secret_material_reference | high | create_api_key |
| 2026-10-23 | create_api_key | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_data_slot | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_storage_usage | secret_material_reference | high | which displays would break). Narrowly-scoped API keys get suppressed=true with zeroed numbers. Requires content scope |
| 2026-10-23 | get_storage_usage | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | broadcast_content | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | manage_licenses | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_display | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | create_auth_session | cross_tool_reference | high | references sibling tool 'get_auth_session' |
| 2026-10-23 | list_store_categories | cross_tool_reference | high | references sibling tool 'search_store_templates' |
| 2026-10-23 | send_store_template_to_display | user_concealment | critical | or an inline object/array. Unknown keys are silently dropped; malformed JSON fails with invalid_slot_override. Per-sl |
| 2026-10-23 | send_store_template_to_display | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | create_display | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | delete_data_slot | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_license_info | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_organization | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | remove_display_from_org | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | set_data_slot | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | submit_feedback | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | upload_asset | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | configure_display | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | claim_display | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | send_url | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | clear_display | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_account | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | delete_asset | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_store_template_content | cross_tool_reference | high | references sibling tool 'send_store_template_to_display' |
| 2026-10-23 | get_auth_session | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | send_html | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | delete_display | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | logout | secret_material_reference | high | To stop acting as the user, stop sending the credential. |
| 2026-10-23 | search_store_templates | cross_tool_reference | high | references sibling tool 'get_store_template_details' |
| 2026-10-23 | search | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | pair_by_code | url_in_description | low | https://display.agentview.de |
| 2026-10-23 | pair_by_code | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_store_template_details | cross_tool_reference | high | references sibling tool 'search_store_templates' |
| 2026-10-23 | list_displays | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | list_assets | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_agent_artifact | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | configure_organization | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | list_api_keys | secret_material_reference | high | list_api_keys |
| 2026-10-23 | list_api_keys | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | read_display_html | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | list_organizations | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | revoke_api_key | secret_material_reference | high | revoke_api_key |
| 2026-10-23 | revoke_api_key | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_display_preview_url | model_directed_instruction | high | HT NOW, rendered inline as a preview widget. ALWAYS call this when the user wants to SEE their display or screen content |
| 2026-10-23 | get_display_preview_url | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | delete_organization | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | list_display_categories | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | update_asset | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | create_organization | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_asset | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | fetch | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | manage_display_category | cross_tool_reference | high | references sibling tool 'assign_display_categories' |
| 2026-10-23 | test_display_content | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | get_store_template_install_options | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-10-23 | manage_org_member | cross_tool_reference | high | references sibling tool 'authenticate' |
Change history (57)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 06:17 | assign_display_categories | mutated | high |
| 2026-10-23 06:17 | list_data_slots | mutated | high |
| 2026-10-23 06:17 | set_display_grant | mutated | high |
| 2026-10-23 06:17 | authenticate | mutated | high |
| 2026-10-23 06:17 | create_api_key | mutated | high |
| 2026-10-23 06:17 | get_data_slot | mutated | high |
| 2026-10-23 06:17 | get_storage_usage | mutated | high |
| 2026-10-23 06:17 | broadcast_content | mutated | high |
| 2026-10-23 06:17 | manage_licenses | mutated | high |
| 2026-10-23 06:17 | get_public_status | mutated | medium |
| 2026-10-23 06:17 | get_display | mutated | high |
| 2026-10-23 06:17 | create_auth_session | mutated | high |
| 2026-10-23 06:17 | list_store_categories | mutated | high |
| 2026-10-23 06:17 | send_store_template_to_display | mutated | critical |
| 2026-10-23 06:17 | create_display | mutated | high |
| 2026-10-23 06:17 | delete_data_slot | mutated | high |
| 2026-10-23 06:17 | get_license_info | mutated | high |
| 2026-10-23 06:17 | get_organization | mutated | high |
| 2026-10-23 06:17 | remove_display_from_org | mutated | high |
| 2026-10-23 06:17 | set_data_slot | mutated | high |
| 2026-10-23 06:17 | submit_feedback | mutated | high |
| 2026-10-23 06:17 | upload_asset | mutated | high |
| 2026-10-23 06:17 | configure_display | mutated | high |
| 2026-10-23 06:17 | search_public_apis | mutated | medium |
| 2026-10-23 06:17 | claim_display | mutated | high |
| 2026-10-23 06:17 | send_url | mutated | high |
| 2026-10-23 06:17 | clear_display | mutated | high |
| 2026-10-23 06:17 | get_account | mutated | high |
| 2026-10-23 06:17 | delete_asset | mutated | high |
| 2026-10-23 06:17 | get_store_template_content | mutated | high |
| 2026-10-23 06:17 | get_auth_session | mutated | high |
| 2026-10-23 06:17 | send_html | mutated | high |
| 2026-10-23 06:17 | delete_display | mutated | high |
| 2026-10-23 06:17 | logout | mutated | high |
| 2026-10-23 06:17 | search_store_templates | mutated | high |
| 2026-10-23 06:17 | search | mutated | high |
| 2026-10-23 06:17 | pair_by_code | mutated | high |
| 2026-10-23 06:17 | get_store_template_details | mutated | high |
| 2026-10-23 06:17 | list_displays | mutated | high |
| 2026-10-23 06:17 | list_assets | mutated | high |
| 2026-10-23 06:17 | get_agent_artifact | mutated | high |
| 2026-10-23 06:17 | configure_organization | mutated | high |
| 2026-10-23 06:17 | list_api_keys | mutated | high |
| 2026-10-23 06:17 | read_display_html | mutated | high |
| 2026-10-23 06:17 | list_organizations | mutated | high |
| 2026-10-23 06:17 | revoke_api_key | mutated | high |
| 2026-10-23 06:17 | get_display_preview_url | mutated | high |
| 2026-10-23 06:17 | delete_organization | mutated | high |
| 2026-10-23 06:17 | list_display_categories | mutated | high |
| 2026-10-23 06:17 | update_asset | mutated | high |
| 2026-10-23 06:17 | create_organization | mutated | high |
| 2026-10-23 06:17 | get_asset | mutated | high |
| 2026-10-23 06:17 | fetch | mutated | high |
| 2026-10-23 06:17 | manage_display_category | mutated | high |
| 2026-10-23 06:17 | test_display_content | mutated | high |
| 2026-10-23 06:17 | get_store_template_install_options | mutated | high |
| 2026-10-23 06:17 | manage_org_member | mutated | high |
Probe history
10-23 06:17 OK (57) · 08-14 06:17 OK (57)
Run or depend on de.agentview/agentview-mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).