← MCP Registry Integrity Report
dev.sipflow/sipflow
Verdict: CRITICAL findings present. Endpoint https://mcp.sipflow.dev/mcp. Tools now: 22 (22 ever seen). Changes recorded: 22. Findings: 1 critical, 2 high, 2 low. Last probe: OK at 2026-10-23T06:17 UTC. JSON
Current tools
compare_sdp_offer_answer · detect_sip_stack · detect_sip_vendor_from_config · diff_sip_messages · dns_diagnose_sip_target · fetch_sipflow_share · lint_sip_request · lookup_response_code · lookup_sip_header · minimize_sip_trace · parse_sdp · parse_sip_message · render_sip_ladder · review_sip_config · search_sip_docs · sip_ladder_example · stir_attestation_explainer · submit_sipflow_feedback · troubleshoot_response_code · validate_e164_number · validate_stir_shaken_identity · webrtc_sip_checklist
Findings (27)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | search_sip_docs | cross_tool_reference | high | references sibling tool 'lookup_response_code' |
| 2026-10-23 | lookup_response_code | cross_tool_reference | high | references sibling tool 'lint_sip_request' |
| 2026-10-23 | lookup_sip_header | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | detect_sip_stack | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | detect_sip_vendor_from_config | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | minimize_sip_trace | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | render_sip_ladder | cross_tool_reference | high | references sibling tool 'minimize_sip_trace' |
| 2026-10-23 | sip_ladder_example | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | lint_sip_request | user_concealment | critical | of findings. Catches the failure modes that silently break carrier interop: - Two `From:` headers in one request (R |
| 2026-10-23 | lint_sip_request | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | parse_sip_message | cross_tool_reference | high | references sibling tool 'lint_sip_request' |
| 2026-10-23 | diff_sip_messages | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | review_sip_config | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | webrtc_sip_checklist | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | parse_sdp | secret_material_reference | high | p), direction, DTLS setup + fingerprint, ICE credentials + candidates, rtcp-mux, BUNDLE groups, fax-relay (`m=image udpt |
| 2026-10-23 | parse_sdp | cross_tool_reference | high | references sibling tool 'webrtc_sip_checklist' |
| 2026-10-23 | compare_sdp_offer_answer | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | validate_stir_shaken_identity | cross_tool_reference | high | references sibling tool 'lookup_response_code' |
| 2026-10-23 | stir_attestation_explainer | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | validate_e164_number | cross_tool_reference | high | references sibling tool 'lint_sip_request' |
| 2026-10-23 | troubleshoot_response_code | cross_tool_reference | high | references sibling tool 'lookup_response_code' |
| 2026-10-23 | dns_diagnose_sip_target | url_in_description | low | https://www.twilio.com/docs/sip-trunking/api/ipaccesscontrollist-resource |
| 2026-10-23 | dns_diagnose_sip_target | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
| 2026-10-23 | fetch_sipflow_share | url_in_description | low | https://sipflow.dev/share/<token |
| 2026-10-23 | fetch_sipflow_share | cross_tool_reference | high | references sibling tool 'minimize_sip_trace' |
| 2026-10-23 | submit_sipflow_feedback | model_directed_instruction | high | ou plan to send and wait for an explicit yes before calling this tool. Set `userConsent: true` only after that confirmation. 3. |
| 2026-10-23 | submit_sipflow_feedback | cross_tool_reference | high | references sibling tool 'search_sip_docs' |
Change history (22)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 06:17 | search_sip_docs | mutated | high |
| 2026-10-23 06:17 | lookup_response_code | mutated | high |
| 2026-10-23 06:17 | lookup_sip_header | mutated | high |
| 2026-10-23 06:17 | detect_sip_stack | mutated | high |
| 2026-10-23 06:17 | detect_sip_vendor_from_config | mutated | high |
| 2026-10-23 06:17 | minimize_sip_trace | mutated | high |
| 2026-10-23 06:17 | render_sip_ladder | mutated | high |
| 2026-10-23 06:17 | sip_ladder_example | mutated | high |
| 2026-10-23 06:17 | lint_sip_request | mutated | critical |
| 2026-10-23 06:17 | parse_sip_message | mutated | high |
| 2026-10-23 06:17 | diff_sip_messages | mutated | high |
| 2026-10-23 06:17 | review_sip_config | mutated | high |
| 2026-10-23 06:17 | webrtc_sip_checklist | mutated | high |
| 2026-10-23 06:17 | parse_sdp | mutated | high |
| 2026-10-23 06:17 | compare_sdp_offer_answer | mutated | high |
| 2026-10-23 06:17 | validate_stir_shaken_identity | mutated | high |
| 2026-10-23 06:17 | stir_attestation_explainer | mutated | high |
| 2026-10-23 06:17 | validate_e164_number | mutated | high |
| 2026-10-23 06:17 | troubleshoot_response_code | mutated | high |
| 2026-10-23 06:17 | dns_diagnose_sip_target | mutated | high |
| 2026-10-23 06:17 | fetch_sipflow_share | mutated | high |
| 2026-10-23 06:17 | submit_sipflow_feedback | mutated | high |
Probe history
10-23 06:17 OK (22) · 08-14 06:17 OK (22)
Run or depend on dev.sipflow/sipflow? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).