← MCP Registry Integrity Report
dev.aatos/aatos
Verdict: high-severity findings present. Endpoint https://aatos.dev/mcp. Tools now: 37 (37 ever seen). Changes recorded: 37. Findings: 3 high. Last probe: OK at 2026-10-23T06:17 UTC. JSON
Current tools
stocktoken_access_activate · stocktoken_access_checkout · stocktoken_access_pricing · stocktoken_access_status · stocktoken_basket_preview · stocktoken_execute_plan · stocktoken_explain_routing · stocktoken_fees · stocktoken_find_pools · stocktoken_get · stocktoken_intent_typed_data · stocktoken_liquidity_matrix · stocktoken_list · stocktoken_metrics · stocktoken_morpho_deposit_plan · stocktoken_morpho_position · stocktoken_morpho_status · stocktoken_morpho_withdraw_plan · stocktoken_permit2_prepare · stocktoken_policy_get · stocktoken_policy_set · stocktoken_price · stocktoken_protocols · stocktoken_quote · stocktoken_session_create · stocktoken_session_kill · stocktoken_session_list · stocktoken_session_update · stocktoken_simulate · stocktoken_subscribe_plan · stocktoken_subscription_status · stocktoken_subscription_tiers · stocktoken_system_status · stocktoken_tip_assets · stocktoken_tip_plan · stocktoken_tip_presets · stocktoken_value_holdings
Findings (11)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | stocktoken_access_checkout | cross_tool_reference | high | references sibling tool 'stocktoken_access_activate' |
| 2026-10-23 | stocktoken_access_activate | secret_material_reference | high | t to treasury is confirmed, verify and issue API key (shown once). |
| 2026-10-23 | stocktoken_access_status | secret_material_reference | high | Check paid access for current API key context or a wallet owner. |
| 2026-10-23 | stocktoken_price | cross_tool_reference | high | references sibling tool 'stocktoken_quote' |
| 2026-10-23 | stocktoken_value_holdings | cross_tool_reference | high | references sibling tool 'stocktoken_quote' |
| 2026-10-23 | stocktoken_execute_plan | secret_material_reference | high | wallet on chain 4663 that will sign. Not an API key. |
| 2026-10-23 | stocktoken_basket_preview | cross_tool_reference | high | references sibling tool 'stocktoken_quote' |
| 2026-10-23 | stocktoken_permit2_prepare | cross_tool_reference | high | references sibling tool 'stocktoken_execute_plan' |
| 2026-10-23 | stocktoken_liquidity_matrix | cross_tool_reference | high | references sibling tool 'stocktoken_quote' |
| 2026-10-23 | stocktoken_find_pools | cross_tool_reference | high | references sibling tool 'stocktoken_quote' |
| 2026-10-23 | stocktoken_explain_routing | cross_tool_reference | high | references sibling tool 'stocktoken_list' |
Change history (37)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 06:17 | stocktoken_access_pricing | mutated | medium |
| 2026-10-23 06:17 | stocktoken_access_checkout | mutated | high |
| 2026-10-23 06:17 | stocktoken_access_activate | mutated | high |
| 2026-10-23 06:17 | stocktoken_access_status | mutated | high |
| 2026-10-23 06:17 | stocktoken_list | mutated | medium |
| 2026-10-23 06:17 | stocktoken_get | mutated | medium |
| 2026-10-23 06:17 | stocktoken_price | mutated | high |
| 2026-10-23 06:17 | stocktoken_value_holdings | mutated | high |
| 2026-10-23 06:17 | stocktoken_policy_get | mutated | medium |
| 2026-10-23 06:17 | stocktoken_policy_set | mutated | medium |
| 2026-10-23 06:17 | stocktoken_quote | mutated | medium |
| 2026-10-23 06:17 | stocktoken_simulate | mutated | medium |
| 2026-10-23 06:17 | stocktoken_execute_plan | mutated | high |
| 2026-10-23 06:17 | stocktoken_session_create | mutated | medium |
| 2026-10-23 06:17 | stocktoken_session_kill | mutated | medium |
| 2026-10-23 06:17 | stocktoken_session_list | mutated | medium |
| 2026-10-23 06:17 | stocktoken_session_update | mutated | medium |
| 2026-10-23 06:17 | stocktoken_protocols | mutated | medium |
| 2026-10-23 06:17 | stocktoken_fees | mutated | medium |
| 2026-10-23 06:17 | stocktoken_subscription_tiers | mutated | medium |
| 2026-10-23 06:17 | stocktoken_subscribe_plan | mutated | medium |
| 2026-10-23 06:17 | stocktoken_subscription_status | mutated | medium |
| 2026-10-23 06:17 | stocktoken_tip_presets | mutated | medium |
| 2026-10-23 06:17 | stocktoken_tip_assets | mutated | medium |
| 2026-10-23 06:17 | stocktoken_tip_plan | mutated | medium |
| 2026-10-23 06:17 | stocktoken_metrics | mutated | medium |
| 2026-10-23 06:17 | stocktoken_morpho_status | mutated | medium |
| 2026-10-23 06:17 | stocktoken_morpho_position | mutated | medium |
| 2026-10-23 06:17 | stocktoken_morpho_deposit_plan | mutated | medium |
| 2026-10-23 06:17 | stocktoken_morpho_withdraw_plan | mutated | medium |
| 2026-10-23 06:17 | stocktoken_intent_typed_data | mutated | medium |
| 2026-10-23 06:17 | stocktoken_basket_preview | mutated | high |
| 2026-10-23 06:17 | stocktoken_permit2_prepare | mutated | high |
| 2026-10-23 06:17 | stocktoken_liquidity_matrix | mutated | high |
| 2026-10-23 06:17 | stocktoken_find_pools | mutated | high |
| 2026-10-23 06:17 | stocktoken_system_status | mutated | medium |
| 2026-10-23 06:17 | stocktoken_explain_routing | mutated | high |
Probe history
10-23 06:17 OK (37) · 08-14 06:17 OK (37)
Run or depend on dev.aatos/aatos? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).