`io.github.CHANGCHINFU/mcp-gauge`

Verdict: CRITICAL findings present. Endpoint https://aeml-x402.zeabur.app/mcp. Tools now: 5 (5 ever seen). Changes recorded: 5. Findings: 3 high, 1 critical. Last probe: OK at 2026-10-23T12:22 UTC. JSON

Current tools

find_signal · get_official_record · purchase_options · verify_citation · verify_triangular

Findings (6)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`verify_citation`	`secret_material_reference`	high	`ocument BEFORE relying on it. No payment, no API key.`
2026-10-23	`get_official_record`	`cross_tool_reference`	high	`references sibling tool 'find_signal'`
2026-10-23	`purchase_options`	`user_concealment`	critical	`e reference client default per-call cap that silently blocks higher-priced calls`
2026-10-23	`purchase_options`	`secret_material_reference`	high	`token (for a person or team - no wallet, no private key, no account), and a card rail. This tool takes no payment and ho`
2026-10-23	`verify_triangular`	`secret_material_reference`	high	`ast, no causation, no advice. No payment, no API key.`
2026-10-23	`verify_triangular`	`cross_tool_reference`	high	`references sibling tool 'verify_citation'`

Change history (5)

when	tool	kind	severity
2026-10-23 12:22	`verify_citation`	mutated	high
2026-10-23 12:22	`find_signal`	mutated	medium
2026-10-23 12:22	`get_official_record`	mutated	high
2026-10-23 12:22	`purchase_options`	added	critical
2026-10-23 12:22	`verify_triangular`	added	high

Probe history

10-23 12:22 OK (5) · 08-14 12:17 OK (3)

Run or depend on io.github.CHANGCHINFU/mcp-gauge? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).