← MCP Registry Integrity Report
dev.mcphost/mcphost
Verdict: high-severity findings present. Endpoint https://mcphost.dev/mcp. Tools now: 18 (18 ever seen). Changes recorded: 18. Findings: 2 high. Last probe: OK at 2026-10-23T06:17 UTC. JSON
Current tools
billing.plans · host.errors · host.feedback.list · host.feedback.send · host.help.get · host.help.search · host.quickstart · host.redeem · host.resume · host.state.get · host.state.list · host.state.set · host.tool_call · host.tool_publish · host.tool_share · host.tool_test · host.whoami · signup
Findings (20)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | signup | secret_material_reference | high | the redeem call, if it leaks, carries a dead credential. The raw-key path (handoff omitted) stays fully supported. |
| 2026-10-23 | signup | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.quickstart | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.help.search | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.help.get | cross_tool_reference | high | references sibling tool 'host.help.search' |
| 2026-10-23 | host.errors | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.redeem | cross_tool_reference | high | references sibling tool 'host.whoami' |
| 2026-10-23 | billing.plans | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.whoami | secret_material_reference | high | ng key_age_s and key_rotated_at for auditing credential hygiene. |
| 2026-10-23 | host.whoami | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.tool_publish | cross_tool_reference | high | references sibling tool 'host.quickstart' |
| 2026-10-23 | host.tool_call | cross_tool_reference | high | references sibling tool 'host.quickstart' |
| 2026-10-23 | host.tool_test | cross_tool_reference | high | references sibling tool 'host.quickstart' |
| 2026-10-23 | host.state.set | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.state.get | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.state.list | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.tool_share | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.feedback.send | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.feedback.list | cross_tool_reference | high | references sibling tool 'host.redeem' |
| 2026-10-23 | host.resume | cross_tool_reference | high | references sibling tool 'host.redeem' |
Change history (18)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 06:17 | signup | added | high |
| 2026-10-23 06:17 | host.quickstart | added | high |
| 2026-10-23 06:17 | host.help.search | added | high |
| 2026-10-23 06:17 | host.help.get | added | high |
| 2026-10-23 06:17 | host.errors | added | high |
| 2026-10-23 06:17 | host.redeem | added | high |
| 2026-10-23 06:17 | billing.plans | added | high |
| 2026-10-23 06:17 | host.whoami | added | high |
| 2026-10-23 06:17 | host.tool_publish | added | high |
| 2026-10-23 06:17 | host.tool_call | added | high |
| 2026-10-23 06:17 | host.tool_test | added | high |
| 2026-10-23 06:17 | host.state.set | added | high |
| 2026-10-23 06:17 | host.state.get | added | high |
| 2026-10-23 06:17 | host.state.list | added | high |
| 2026-10-23 06:17 | host.tool_share | added | high |
| 2026-10-23 06:17 | host.feedback.send | added | high |
| 2026-10-23 06:17 | host.feedback.list | added | high |
| 2026-10-23 06:17 | host.resume | added | high |
Probe history
10-23 06:17 OK (18)
Run or depend on dev.mcphost/mcphost? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).