← MCP Registry Integrity Report
io.github.Licium-ai/licium
Verdict: high-severity findings present. Endpoint https://www.licium.ai/mcp. Tools now: 26 (26 ever seen). Changes recorded: 45. Findings: 14 high. Last probe: OK at 2026-09-30T06:17 UTC. JSON
Current tools
agent_register · bounties_list · bounty_attachments_get · bounty_counter · bounty_get · bounty_pledge · bounty_post · bounty_self_gate · bounty_subscribe · bounty_withdraw · capabilities_list · capability_call · capability_get · capability_price_notices · capability_register · capability_version_publish · check_received_work · get_rows · get_source · list_sources · needs_intake · request_source · search_mcp_directory · source_report · submission_post · work_alert_subscribe
Findings (24)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-08-21 | check_received_work | secret_material_reference | high | nonymous saves also return a one-time delete_credential. File content, filenames, and verbatim source_context are never |
| 2026-08-21 | capability_call | secret_material_reference | high | ent_key outside bounties, or balance with an api_key for a Stripe-topped-up wallet. Retries require the same idempote |
| 2026-08-21 | capability_price_notices | secret_material_reference | high | ed recently. Supply the buyer's agent_key or api_key; price remains separate from quality. |
| 2026-08-21 | bounty_post | secret_material_reference | high | vide agent_key so it can be sent as a Bearer credential. |
| 2026-08-21 | bounty_post | cross_tool_reference | high | references sibling tool 'agent_register' |
| 2026-08-21 | bounty_pledge | secret_material_reference | high | vide agent_key so it can be sent as a Bearer credential. |
| 2026-08-21 | bounty_pledge | cross_tool_reference | high | references sibling tool 'agent_register' |
| 2026-08-21 | bounty_counter | cross_tool_reference | high | references sibling tool 'agent_register' |
| 2026-08-21 | work_alert_subscribe | cross_tool_reference | high | references sibling tool 'agent_register' |
| 2026-08-21 | submission_post | secret_material_reference | high | or final work with the agent key in a Bearer credential. |
| 2026-08-21 | submission_post | cross_tool_reference | high | references sibling tool 'agent_register' |
| 2026-08-16 | check_received_work | secret_material_reference | high | nonymous saves also return a one-time delete_credential. File content, filenames, and verbatim source_context are never |
| 2026-08-16 | submission_post | secret_material_reference | high | or final work with the agent key in a Bearer credential. |
| 2026-08-16 | submission_post | cross_tool_reference | high | references sibling tool 'agent_register' |
| 2026-08-15 | check_received_work | secret_material_reference | high | nonymous saves also return a one-time delete_credential. File content, filenames, and verbatim source_context are never |
| 2026-08-15 | bounty_post | secret_material_reference | high | vide agent_key so it can be sent as a Bearer credential. |
| 2026-08-15 | bounty_post | cross_tool_reference | high | references sibling tool 'agent_register' |
| 2026-08-15 | submission_post | secret_material_reference | high | or final work with the agent key in a Bearer credential. |
| 2026-08-15 | submission_post | cross_tool_reference | high | references sibling tool 'agent_register' |
| 2026-08-14 | capability_call | secret_material_reference | high | ent_key outside bounties, or balance with an api_key for a Stripe-topped-up wallet. Retries require the same idempote |
| 2026-08-14 | capability_price_notices | secret_material_reference | high | ed recently. Supply the buyer's agent_key or api_key; price remains separate from quality. |
| 2026-08-14 | bounty_post | secret_material_reference | high | vide agent_key so it can be sent as a Bearer credential. |
| 2026-08-14 | bounty_post | cross_tool_reference | high | references sibling tool 'agent_register' |
| 2026-08-14 | work_alert_subscribe | cross_tool_reference | high | references sibling tool 'agent_register' |
Change history (45)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-08-21 00:17 | list_sources | mutated | medium |
| 2026-08-21 00:17 | get_source | mutated | medium |
| 2026-08-21 00:17 | get_rows | mutated | medium |
| 2026-08-21 00:17 | request_source | mutated | medium |
| 2026-08-21 00:17 | check_received_work | mutated | high |
| 2026-08-21 00:17 | search_mcp_directory | mutated | medium |
| 2026-08-21 00:17 | capabilities_list | mutated | medium |
| 2026-08-21 00:17 | capability_get | mutated | medium |
| 2026-08-21 00:17 | capability_register | mutated | medium |
| 2026-08-21 00:17 | capability_version_publish | mutated | medium |
| 2026-08-21 00:17 | capability_call | mutated | high |
| 2026-08-21 00:17 | capability_price_notices | mutated | high |
| 2026-08-21 00:17 | bounties_list | mutated | medium |
| 2026-08-21 00:17 | needs_intake | mutated | medium |
| 2026-08-21 00:17 | bounty_get | mutated | medium |
| 2026-08-21 00:17 | bounty_attachments_get | mutated | medium |
| 2026-08-21 00:17 | bounty_post | mutated | high |
| 2026-08-21 00:17 | bounty_self_gate | mutated | medium |
| 2026-08-21 00:17 | bounty_pledge | mutated | high |
| 2026-08-21 00:17 | bounty_counter | mutated | high |
| 2026-08-21 00:17 | bounty_subscribe | mutated | medium |
| 2026-08-21 00:17 | work_alert_subscribe | mutated | high |
| 2026-08-21 00:17 | source_report | mutated | medium |
| 2026-08-21 00:17 | agent_register | mutated | medium |
| 2026-08-21 00:17 | submission_post | mutated | high |
| 2026-08-21 00:17 | bounty_withdraw | mutated | medium |
| 2026-08-16 12:17 | check_received_work | mutated | high |
| 2026-08-16 12:17 | bounty_self_gate | mutated | medium |
| 2026-08-16 12:17 | submission_post | mutated | high |
| 2026-08-15 12:17 | check_received_work | mutated | high |
| 2026-08-15 12:17 | needs_intake | added | info |
| 2026-08-15 12:17 | bounty_attachments_get | added | info |
| 2026-08-15 12:17 | bounty_post | mutated | high |
| 2026-08-15 12:17 | bounty_self_gate | added | info |
| 2026-08-15 12:17 | submission_post | mutated | high |
| 2026-08-14 18:17 | check_received_work | added | info |
| 2026-08-14 18:17 | search_mcp_directory | mutated | medium |
| 2026-08-14 18:17 | capabilities_list | added | info |
| 2026-08-14 18:17 | capability_get | added | info |
| 2026-08-14 18:17 | capability_register | added | info |
| 2026-08-14 18:17 | capability_version_publish | added | info |
| 2026-08-14 18:17 | capability_call | added | high |
| 2026-08-14 18:17 | capability_price_notices | added | high |
| 2026-08-14 18:17 | bounty_post | mutated | high |
| 2026-08-14 18:17 | work_alert_subscribe | added | high |
Probe history
09-30 06:17 OK (26) · 09-30 00:17 OK (26) · 09-29 18:17 OK (26) · 09-29 06:17 OK (26) · 09-29 00:17 OK (26) · 09-28 18:17 OK (26) · 09-28 12:17 OK (26) · 09-28 06:17 OK (26) · 09-28 00:17 OK (26) · 09-27 18:17 OK (26) · 09-27 12:17 OK (26) · 09-27 06:17 OK (26) · 09-27 00:17 OK (26) · 09-26 18:17 OK (26) · 09-26 12:17 OK (26) · 09-26 06:17 OK (26) · 09-26 00:17 OK (26) · 09-25 12:17 OK (26) · 09-25 06:17 OK (26) · 09-25 00:17 OK (26) · 09-24 18:17 OK (26) · 09-24 12:17 OK (26) · 09-24 06:17 OK (26) · 09-23 12:17 OK (26) · 09-23 06:17 OK (26) · 09-23 00:17 OK (26) · 09-22 18:17 OK (26) · 09-22 12:17 OK (26) · 09-22 00:17 OK (26) · 09-21 18:17 OK (26)
Run or depend on io.github.Licium-ai/licium? ToolDrift watches servers for tool changes every six hours (watch plans open when its checkout is configured).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).