← MCP Registry Integrity Report

dev.seekrit/remote-mcp

Verdict: high-severity findings present. Endpoint https://mcp.seekrit.dev/mcp. Tools now: 40 (40 ever seen). Changes recorded: 40. Findings: 38 high. Last probe: OK at 2026-10-23T06:17 UTC. JSON

Current tools

audit · billing · compose_group · create_app · create_group · delete_app · delete_branch · delete_env · delete_group · delete_secret · get_started · invite_member · kms_disable_key · kms_list_keys · kms_revoke_grant · list_apps · list_branches · list_env_groups · list_envs · list_group_envs · list_groups · list_invites · list_lease_targets · list_leases · list_members · list_orgs · list_secret_versions · list_secrets · list_tokens · local_tool_for · rename_app · rename_group · restore_secret · revoke_invite · revoke_lease · revoke_token · setup_local_crypto · signup · uncompose_group · whoami

Findings (74)

seentooldetectorseverityevidence (data, not instructions)
2026-10-23signupsecret_material_referencehighate a seekrit workspace and your own machine credential — one call, no human, no browser. Binds the credential to this s
2026-10-23setup_local_cryptosecret_material_referencehighy-paste .mcp.json that reuses this session's credential. Takes no arguments and returns prose plus config. Call this the
2026-10-23setup_local_cryptocross_tool_referencehighreferences sibling tool 'local_tool_for'
2026-10-23local_tool_forcross_tool_referencehighreferences sibling tool 'setup_local_crypto'
2026-10-23whoamisecret_material_referencehighcan access. Call this first: it confirms the credential works and tells you which org slug to pass (or that you can omit
2026-10-23list_orgssecret_material_referencehighList the organizations this credential can access. Use it to find the `org` slug every other tool takes
2026-10-23list_appssecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23list_appscross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_envssecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23list_envscross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_branchessecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23list_branchescross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_groupssecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23list_groupscross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_group_envssecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23list_group_envscross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_env_groupssecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23list_env_groupscross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_memberssecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23list_memberscross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_secretssecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23list_secretscross_tool_referencehighreferences sibling tool 'setup_local_crypto'
2026-10-23list_secret_versionssecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23list_secret_versionscross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_tokenssecret_material_referencehighganization's service tokens — the long-lived credentials that let a deployed workload fetch secrets. Metadata only: the
2026-10-23list_tokenscross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_invitessecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23list_invitescross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23kms_list_keyssecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23kms_list_keyscross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_lease_targetssecret_material_referencehighostgres, MySQL, …) against which short-lived credentials can be minted on demand instead of storing a standing password.
2026-10-23list_lease_targetscross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23list_leasessecret_material_referencehighissued — the ledger of who got a short-lived credential against which target and until when. Never includes the credenti
2026-10-23list_leasescross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23auditsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23auditcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23billingsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23billingcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23create_appsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23create_appcross_tool_referencehighreferences sibling tool 'setup_local_crypto'
2026-10-23create_groupsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23create_groupcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23compose_groupsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23compose_groupcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23uncompose_groupsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23uncompose_groupcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23invite_membersecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23invite_membercross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23rename_appsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23rename_appcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23rename_groupsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23rename_groupcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23restore_secretsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23restore_secretcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23delete_secretsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23delete_secretcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23revoke_tokensecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23revoke_tokencross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23revoke_invitesecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23revoke_invitecross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23revoke_leasesecret_material_referencehighiting for it to expire — the leased database credential is dropped at the target immediately, so anything still holding
2026-10-23revoke_leasecross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23kms_disable_keysecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23kms_disable_keycross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23kms_revoke_grantsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23kms_revoke_grantcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23delete_appsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23delete_appcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23delete_groupsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23delete_groupcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23delete_envsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23delete_envcross_tool_referencehighreferences sibling tool 'list_orgs'
2026-10-23delete_branchsecret_material_referencehighOrganization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With
2026-10-23delete_branchcross_tool_referencehighreferences sibling tool 'list_orgs'

Change history (40)

whentoolkindseverity
2026-10-23 06:17signupmutatedhigh
2026-10-23 06:17get_startedmutatedmedium
2026-10-23 06:17setup_local_cryptomutatedhigh
2026-10-23 06:17local_tool_formutatedhigh
2026-10-23 06:17whoamimutatedhigh
2026-10-23 06:17list_orgsmutatedhigh
2026-10-23 06:17list_appsmutatedhigh
2026-10-23 06:17list_envsmutatedhigh
2026-10-23 06:17list_branchesmutatedhigh
2026-10-23 06:17list_groupsmutatedhigh
2026-10-23 06:17list_group_envsmutatedhigh
2026-10-23 06:17list_env_groupsmutatedhigh
2026-10-23 06:17list_membersmutatedhigh
2026-10-23 06:17list_secretsmutatedhigh
2026-10-23 06:17list_secret_versionsmutatedhigh
2026-10-23 06:17list_tokensmutatedhigh
2026-10-23 06:17list_invitesmutatedhigh
2026-10-23 06:17kms_list_keysmutatedhigh
2026-10-23 06:17list_lease_targetsmutatedhigh
2026-10-23 06:17list_leasesmutatedhigh
2026-10-23 06:17auditmutatedhigh
2026-10-23 06:17billingmutatedhigh
2026-10-23 06:17create_appmutatedhigh
2026-10-23 06:17create_groupmutatedhigh
2026-10-23 06:17compose_groupmutatedhigh
2026-10-23 06:17uncompose_groupmutatedhigh
2026-10-23 06:17invite_membermutatedhigh
2026-10-23 06:17rename_appmutatedhigh
2026-10-23 06:17rename_groupmutatedhigh
2026-10-23 06:17restore_secretmutatedhigh
2026-10-23 06:17delete_secretmutatedhigh
2026-10-23 06:17revoke_tokenmutatedhigh
2026-10-23 06:17revoke_invitemutatedhigh
2026-10-23 06:17revoke_leasemutatedhigh
2026-10-23 06:17kms_disable_keymutatedhigh
2026-10-23 06:17kms_revoke_grantmutatedhigh
2026-10-23 06:17delete_appmutatedhigh
2026-10-23 06:17delete_groupmutatedhigh
2026-10-23 06:17delete_envmutatedhigh
2026-10-23 06:17delete_branchmutatedhigh

Probe history

10-23 06:17 OK (40) · 08-14 06:17 OK (40)

Run or depend on dev.seekrit/remote-mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).