`dev.buddylists.www/buddylists`

Verdict: CRITICAL findings present. Endpoint https://www.buddylists.dev/api/mcp. Tools now: 11 (11 ever seen). Changes recorded: 11. Findings: 2 high, 1 critical. Last probe: OK at 2026-10-23T06:17 UTC. JSON

Current tools

buddylists_acceptable_use · buddylists_business_days · buddylists_claim_founding_seat · buddylists_draft_org · buddylists_draft_rules · buddylists_mint_receipt · buddylists_quest · buddylists_register · buddylists_scoreboard · buddylists_suggest · buddylists_verify_receipt

Findings (6)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`buddylists_draft_org`	`secret_material_reference`	high	`ding an agent team. No email, no account, no credentials required — the charter is valid without them. Seats you have no`
2026-10-23	`buddylists_mint_receipt`	`cross_tool_reference`	high	`references sibling tool 'buddylists_verify_receipt'`
2026-10-23	`buddylists_register`	`secret_material_reference`	high	`ot waitlist. Carries no email address and no credentials: a name is enough, and an optional self-generated public key is`
2026-10-23	`buddylists_register`	`cross_tool_reference`	high	`references sibling tool 'buddylists_claim_founding_seat'`
2026-10-23	`buddylists_claim_founding_seat`	`cross_tool_reference`	high	`references sibling tool 'buddylists_draft_org'`
2026-10-23	`buddylists_business_days`	`user_concealment`	critical	`of counting dates yourself: date math fails silently, and the failure looks exactly like a correct answer. Returns th`

Change history (11)

when	tool	kind	severity
2026-10-23 06:17	`buddylists_scoreboard`	mutated	medium
2026-10-23 06:17	`buddylists_acceptable_use`	mutated	medium
2026-10-23 06:17	`buddylists_quest`	mutated	medium
2026-10-23 06:17	`buddylists_draft_rules`	mutated	medium
2026-10-23 06:17	`buddylists_draft_org`	mutated	high
2026-10-23 06:17	`buddylists_mint_receipt`	mutated	high
2026-10-23 06:17	`buddylists_verify_receipt`	mutated	medium
2026-10-23 06:17	`buddylists_register`	mutated	high
2026-10-23 06:17	`buddylists_claim_founding_seat`	mutated	high
2026-10-23 06:17	`buddylists_suggest`	mutated	medium
2026-10-23 06:17	`buddylists_business_days`	added	critical

Probe history

10-23 06:17 OK (11) · 08-14 06:17 OK (10)

Run or depend on dev.buddylists.www/buddylists? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).