`dev.provinglab/browser-citation-capture`

Verdict: CRITICAL findings present. Endpoint https://provinglab.dev/mcp. Tools now: 10 (10 ever seen). Changes recorded: 10. Findings: 1 critical. Last probe: OK at 2026-10-23T06:17 UTC. JSON

Current tools

adoption_stats · extract_citation · extract_citations · get_measurement_data · get_method · how_to_capture · install_extension · list_measurements · open_work · recommend_settings

Findings (2)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`extract_citations`	`user_concealment`	critical	`ch; the other 10 came back named rather than silently empty. Up to 50 addresses, five fetched in parallel. Returns one`
2026-10-23	`extract_citations`	`cross_tool_reference`	high	`references sibling tool 'extract_citation'`

Change history (10)

when	tool	kind	severity
2026-10-23 06:17	`list_measurements`	mutated	medium
2026-10-23 06:17	`get_measurement_data`	mutated	medium
2026-10-23 06:17	`get_method`	mutated	medium
2026-10-23 06:17	`extract_citation`	mutated	medium
2026-10-23 06:17	`extract_citations`	mutated	critical
2026-10-23 06:17	`recommend_settings`	mutated	medium
2026-10-23 06:17	`how_to_capture`	mutated	medium
2026-10-23 06:17	`install_extension`	mutated	medium
2026-10-23 06:17	`adoption_stats`	mutated	medium
2026-10-23 06:17	`open_work`	mutated	medium

Probe history

10-23 06:17 OK (10) · 08-14 06:17 OK (10)

Run or depend on dev.provinglab/browser-citation-capture? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).