`glass.cocktail/cocktail-glass`

Verdict: CRITICAL findings present. Endpoint https://cocktail.glass/mcp. Tools now: 7 (7 ever seen). Changes recorded: 7. Findings: 1 critical. Last probe: OK at 2026-10-25T06:17 UTC. JSON

Current tools

find_cocktails_by_ingredient · find_cocktails_in_movie · find_makeable_cocktails · get_cocktail_recipe · list_cocktails · random_cocktail · search_cocktails

Findings (8)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`search_cocktails`	`cross_tool_reference`	high	`references sibling tool 'get_cocktail_recipe'`
2026-10-23	`list_cocktails`	`cross_tool_reference`	high	`references sibling tool 'search_cocktails'`
2026-10-23	`get_cocktail_recipe`	`cross_tool_reference`	high	`references sibling tool 'search_cocktails'`
2026-10-23	`find_cocktails_by_ingredient`	`cross_tool_reference`	high	`references sibling tool 'find_makeable_cocktails'`
2026-10-23	`find_cocktails_in_movie`	`cross_tool_reference`	high	`references sibling tool 'search_cocktails'`
2026-10-23	`find_makeable_cocktails`	`cross_tool_reference`	high	`references sibling tool 'find_cocktails_by_ingredient'`
2026-10-23	`random_cocktail`	`user_concealment`	critical	`if no cocktail matches that family the call silently falls back to the full catalogue rather than erroring. Use this`
2026-10-23	`random_cocktail`	`cross_tool_reference`	high	`references sibling tool 'get_cocktail_recipe'`

Change history (7)

when	tool	kind	severity
2026-10-23 06:17	`search_cocktails`	mutated	high
2026-10-23 06:17	`list_cocktails`	mutated	high
2026-10-23 06:17	`get_cocktail_recipe`	mutated	high
2026-10-23 06:17	`find_cocktails_by_ingredient`	mutated	high
2026-10-23 06:17	`find_cocktails_in_movie`	mutated	high
2026-10-23 06:17	`find_makeable_cocktails`	mutated	high
2026-10-23 06:17	`random_cocktail`	mutated	critical

Probe history

10-25 06:17 OK (7) · 10-23 06:17 OK (7) · 08-14 06:17 OK (7)

Run or depend on glass.cocktail/cocktail-glass? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).