← MCP Registry Integrity Report
dev.echorelay/management
Verdict: CRITICAL findings present. Endpoint https://mcp.echorelay.dev. Tools now: 77 (77 ever seen). Changes recorded: 55. Findings: {"high":52,"critical":4,"low":3}. Last probe: OK at 2026-08-14T06:17 UTC. JSON
Current tools
activate_line · archive_project · cancel_line_publish · cancel_subscription · change_plan · config_diff · create_api_key · create_credential · create_endpoint · create_line · create_project · create_project_token · deactivate_line · default_endpoint_template · delete_credential · delete_endpoint · delete_line · discard_dlq_entry · discard_draft_endpoint · discard_line_draft · downgrade_addon · dry_run_endpoint · duplicate_line · get_billing · get_config · get_dlq_entry · get_endpoint · get_key_policy · get_line_draft · get_metrics · get_project · get_request · get_subscription · invite_member · list_active_addons · list_addons · list_api_keys · list_audit_events · list_config_revisions · list_credentials · list_credit_packs · list_dlq · list_endpoints · list_lines · list_members · list_project_tokens · list_projects · list_requests · list_subscription_plans · preview_line_draft · preview_plan_change · protect_project · publish_line_draft · remove_member · rename_project · resend_invite · resume_addon · retry_dlq_entry · reveal_rotation_successor · revoke_api_key · revoke_project_token · rollback_config · rotate_api_key · schedule_line_publish · set_burst_opt_in · set_docs_shared · set_key_policy · set_member_role · set_outbound_allowlist · set_rpm_ceiling · start_subscription · start_topup · subscribe_addon · unarchive_project · unsubscribe_addon · update_credential · update_endpoint
Findings (59)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-08-14 | deactivate_line | cross_tool_reference | high | references sibling tool 'activate_line' |
| 2026-08-14 | duplicate_line | cross_tool_reference | high | references sibling tool 'activate_line' |
| 2026-08-14 | set_docs_shared | cross_tool_reference | high | references sibling tool 'list_lines' |
| 2026-08-14 | create_endpoint | user_concealment | critical | e is refused when the line is published, not silently dropped. null = no reshaping. |
| 2026-08-14 | create_endpoint | secret_material_reference | high | inel to keep the stored secret. Ignored when credentialVaultEntryId is set. |
| 2026-08-14 | create_endpoint | url_in_description | low | https://schemas.echorelay.dev/transform/mapping/v1.json |
| 2026-08-14 | create_endpoint | cross_tool_reference | high | references sibling tool 'get_endpoint' |
| 2026-08-14 | update_endpoint | user_concealment | critical | e is refused when the line is published, not silently dropped. null = no reshaping. |
| 2026-08-14 | update_endpoint | secret_material_reference | high | inel to keep the stored secret. Ignored when credentialVaultEntryId is set. |
| 2026-08-14 | update_endpoint | url_in_description | low | https://schemas.echorelay.dev/transform/mapping/v1.json |
| 2026-08-14 | update_endpoint | cross_tool_reference | high | references sibling tool 'get_endpoint' |
| 2026-08-14 | default_endpoint_template | cross_tool_reference | high | references sibling tool 'create_endpoint' |
| 2026-08-14 | dry_run_endpoint | user_concealment | critical | e is refused when the line is published, not silently dropped. null = no reshaping. |
| 2026-08-14 | dry_run_endpoint | secret_material_reference | high | inel to keep the stored secret. Ignored when credentialVaultEntryId is set. |
| 2026-08-14 | dry_run_endpoint | url_in_description | low | https://schemas.echorelay.dev/transform/mapping/v1.json |
| 2026-08-14 | dry_run_endpoint | cross_tool_reference | high | references sibling tool 'get_endpoint' |
| 2026-08-14 | remove_member | cross_tool_reference | high | references sibling tool 'list_members' |
| 2026-08-14 | set_member_role | cross_tool_reference | high | references sibling tool 'list_members' |
| 2026-08-14 | resend_invite | cross_tool_reference | high | references sibling tool 'list_members' |
| 2026-08-14 | list_api_keys | secret_material_reference | high | list_api_keys |
| 2026-08-14 | create_api_key | secret_material_reference | high | create_api_key |
| 2026-08-14 | create_api_key | cross_tool_reference | high | references sibling tool 'get_key_policy' |
| 2026-08-14 | rotate_api_key | secret_material_reference | high | rotate_api_key |
| 2026-08-14 | reveal_rotation_successor | secret_material_reference | high | y the auto-rotation scheduler (not by rotate_api_key — that returns its own plaintext directly). Decrypts the at-rest |
| 2026-08-14 | reveal_rotation_successor | cross_tool_reference | high | references sibling tool 'rotate_api_key' |
| 2026-08-14 | revoke_api_key | secret_material_reference | high | revoke_api_key |
| 2026-08-14 | set_key_policy | cross_tool_reference | high | references sibling tool 'get_key_policy' |
| 2026-08-14 | list_credentials | secret_material_reference | high | list_credentials |
| 2026-08-14 | list_credentials | cross_tool_reference | high | references sibling tool 'create_credential' |
| 2026-08-14 | create_credential | secret_material_reference | high | create_credential |
| 2026-08-14 | create_credential | cross_tool_reference | high | references sibling tool 'create_endpoint' |
| 2026-08-14 | update_credential | secret_material_reference | high | update_credential |
| 2026-08-14 | update_credential | cross_tool_reference | high | references sibling tool 'list_credentials' |
| 2026-08-14 | delete_credential | secret_material_reference | high | delete_credential |
| 2026-08-14 | list_requests | cross_tool_reference | high | references sibling tool 'get_project' |
| 2026-08-14 | get_request | cross_tool_reference | high | references sibling tool 'get_project' |
| 2026-08-14 | get_metrics | user_concealment | critical | id subscription on the project owner and are silently downgraded to "day" otherwise (the response includes `planGated: |
| 2026-08-14 | get_metrics | cross_tool_reference | high | references sibling tool 'list_endpoints' |
| 2026-08-14 | list_dlq | cross_tool_reference | high | references sibling tool 'get_request' |
| 2026-08-14 | get_dlq_entry | cross_tool_reference | high | references sibling tool 'list_requests' |
| 2026-08-14 | retry_dlq_entry | cross_tool_reference | high | references sibling tool 'list_dlq' |
| 2026-08-14 | discard_dlq_entry | cross_tool_reference | high | references sibling tool 'list_dlq' |
| 2026-08-14 | list_credit_packs | cross_tool_reference | high | references sibling tool 'start_topup' |
| 2026-08-14 | preview_plan_change | cross_tool_reference | high | references sibling tool 'change_plan' |
| 2026-08-14 | start_subscription | cross_tool_reference | high | references sibling tool 'change_plan' |
| 2026-08-14 | change_plan | cross_tool_reference | high | references sibling tool 'preview_plan_change' |
| 2026-08-14 | cancel_subscription | cross_tool_reference | high | references sibling tool 'subscribe_addon' |
| 2026-08-14 | start_topup | cross_tool_reference | high | references sibling tool 'list_credit_packs' |
| 2026-08-14 | subscribe_addon | cross_tool_reference | high | references sibling tool 'list_addons' |
| 2026-08-14 | unsubscribe_addon | cross_tool_reference | high | references sibling tool 'subscribe_addon' |
| 2026-08-14 | downgrade_addon | cross_tool_reference | high | references sibling tool 'list_addons' |
| 2026-08-14 | list_audit_events | secret_material_reference | high | ho changed what — lines, endpoints, targets, API keys. Outbound-target `auth.token` / `auth.password` are redacted in |
| 2026-08-14 | list_audit_events | cross_tool_reference | high | references sibling tool 'get_project' |
| 2026-08-14 | create_project | cross_tool_reference | high | references sibling tool 'list_subscription_plans' |
| 2026-08-14 | protect_project | cross_tool_reference | high | references sibling tool 'archive_project' |
| 2026-08-14 | unarchive_project | cross_tool_reference | high | references sibling tool 'archive_project' |
| 2026-08-14 | create_project_token | model_directed_instruction | high | subset of THIS token's own grant (`read` is always included), expiry is mandatory (1–90 days, default 30, never "never"), a |
| 2026-08-14 | create_project_token | cross_tool_reference | high | references sibling tool 'create_project' |
| 2026-08-14 | revoke_project_token | cross_tool_reference | high | references sibling tool 'create_project' |
Change history (55)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-08-14 06:17 | deactivate_line | added | high |
| 2026-08-14 06:17 | duplicate_line | added | high |
| 2026-08-14 06:17 | set_docs_shared | added | high |
| 2026-08-14 06:17 | create_endpoint | added | critical |
| 2026-08-14 06:17 | update_endpoint | added | critical |
| 2026-08-14 06:17 | delete_endpoint | added | info |
| 2026-08-14 06:17 | default_endpoint_template | added | high |
| 2026-08-14 06:17 | dry_run_endpoint | added | critical |
| 2026-08-14 06:17 | list_members | added | info |
| 2026-08-14 06:17 | invite_member | added | info |
| 2026-08-14 06:17 | remove_member | added | high |
| 2026-08-14 06:17 | set_member_role | added | high |
| 2026-08-14 06:17 | resend_invite | added | high |
| 2026-08-14 06:17 | list_api_keys | added | high |
| 2026-08-14 06:17 | create_api_key | added | high |
| 2026-08-14 06:17 | rotate_api_key | added | high |
| 2026-08-14 06:17 | reveal_rotation_successor | added | high |
| 2026-08-14 06:17 | revoke_api_key | added | high |
| 2026-08-14 06:17 | get_key_policy | added | info |
| 2026-08-14 06:17 | set_key_policy | added | high |
| 2026-08-14 06:17 | list_credentials | added | high |
| 2026-08-14 06:17 | create_credential | added | high |
| 2026-08-14 06:17 | update_credential | added | high |
| 2026-08-14 06:17 | delete_credential | added | high |
| 2026-08-14 06:17 | list_requests | added | high |
| 2026-08-14 06:17 | get_request | added | high |
| 2026-08-14 06:17 | get_metrics | added | critical |
| 2026-08-14 06:17 | list_dlq | added | high |
| 2026-08-14 06:17 | get_dlq_entry | added | high |
| 2026-08-14 06:17 | retry_dlq_entry | added | high |
| 2026-08-14 06:17 | discard_dlq_entry | added | high |
| 2026-08-14 06:17 | list_subscription_plans | added | info |
| 2026-08-14 06:17 | list_credit_packs | added | high |
| 2026-08-14 06:17 | list_addons | added | info |
| 2026-08-14 06:17 | get_subscription | added | info |
| 2026-08-14 06:17 | preview_plan_change | added | high |
| 2026-08-14 06:17 | start_subscription | added | high |
| 2026-08-14 06:17 | change_plan | added | high |
| 2026-08-14 06:17 | cancel_subscription | added | high |
| 2026-08-14 06:17 | start_topup | added | high |
| 2026-08-14 06:17 | subscribe_addon | added | high |
| 2026-08-14 06:17 | unsubscribe_addon | added | high |
| 2026-08-14 06:17 | resume_addon | added | info |
| 2026-08-14 06:17 | downgrade_addon | added | high |
| 2026-08-14 06:17 | list_active_addons | added | info |
| 2026-08-14 06:17 | list_audit_events | added | high |
| 2026-08-14 06:17 | list_projects | added | info |
| 2026-08-14 06:17 | create_project | added | high |
| 2026-08-14 06:17 | rename_project | added | info |
| 2026-08-14 06:17 | archive_project | added | info |
| 2026-08-14 06:17 | protect_project | added | high |
| 2026-08-14 06:17 | unarchive_project | added | high |
| 2026-08-14 06:17 | create_project_token | added | high |
| 2026-08-14 06:17 | list_project_tokens | added | info |
| 2026-08-14 06:17 | revoke_project_token | added | high |
Probe history
08-14 06:17 OK (77)
Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).