`dev.clipkit/clipkit`

Verdict: CRITICAL findings present. Endpoint https://www.clipkit.dev/mcp. Tools now: 15 (15 ever seen). Changes recorded: 15. Findings: 1 high, 1 critical, 1 low. Last probe: OK at 2026-10-23T06:17 UTC. JSON

Current tools

add_element · create_project · create_promo · delete_element · describe_project · edit_element · get_project · get_schema · ingest_asset · load_project · open_in_editor · preview_still · read_docs · set_project · validate_project

Findings (17)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`get_schema`	`cross_tool_reference`	high	`references sibling tool 'set_project'`
2026-10-23	`create_project`	`cross_tool_reference`	high	`references sibling tool 'set_project'`
2026-10-23	`get_project`	`cross_tool_reference`	high	`references sibling tool 'create_project'`
2026-10-23	`describe_project`	`cross_tool_reference`	high	`references sibling tool 'create_project'`
2026-10-23	`set_project`	`model_directed_instruction`	high	`for changes, you are fixing your own work — you MUST pass its project_id so the project is updated in place and keeps`
2026-10-23	`set_project`	`cross_tool_reference`	high	`references sibling tool 'get_schema'`
2026-10-23	`add_element`	`cross_tool_reference`	high	`references sibling tool 'get_schema'`
2026-10-23	`edit_element`	`cross_tool_reference`	high	`references sibling tool 'create_project'`
2026-10-23	`delete_element`	`cross_tool_reference`	high	`references sibling tool 'create_project'`
2026-10-23	`validate_project`	`user_concealment`	critical	`gs that pass the schema but the runtime will silently drop or clip: emoji / non-ASCII text (the runtime font atlas is`
2026-10-23	`validate_project`	`cross_tool_reference`	high	`references sibling tool 'create_project'`
2026-10-23	`preview_still`	`cross_tool_reference`	high	`references sibling tool 'create_project'`
2026-10-23	`create_promo`	`cross_tool_reference`	high	`references sibling tool 'create_project'`
2026-10-23	`open_in_editor`	`cross_tool_reference`	high	`references sibling tool 'create_project'`
2026-10-23	`ingest_asset`	`cross_tool_reference`	high	`references sibling tool 'create_project'`
2026-10-23	`load_project`	`url_in_description`	low	`https://clipkit.dev/editor?id=…`
2026-10-23	`load_project`	`cross_tool_reference`	high	`references sibling tool 'create_project'`

Change history (15)

when	tool	kind	severity
2026-10-23 06:17	`read_docs`	mutated	medium
2026-10-23 06:17	`get_schema`	mutated	high
2026-10-23 06:17	`create_project`	mutated	high
2026-10-23 06:17	`get_project`	mutated	high
2026-10-23 06:17	`describe_project`	mutated	high
2026-10-23 06:17	`set_project`	mutated	high
2026-10-23 06:17	`add_element`	mutated	high
2026-10-23 06:17	`edit_element`	mutated	high
2026-10-23 06:17	`delete_element`	mutated	high
2026-10-23 06:17	`validate_project`	mutated	critical
2026-10-23 06:17	`preview_still`	mutated	high
2026-10-23 06:17	`create_promo`	mutated	high
2026-10-23 06:17	`open_in_editor`	mutated	high
2026-10-23 06:17	`ingest_asset`	mutated	high
2026-10-23 06:17	`load_project`	mutated	high

Probe history

10-23 06:17 OK (15) · 08-14 06:17 OK (15)

Run or depend on dev.clipkit/clipkit? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).