← MCP Registry Integrity Report
io.github.ariekogan/ateam-mcp
Verdict: CRITICAL findings present. Endpoint https://mcp.ateam-ai.com/mcp. Tools now: 47 (47 ever seen). Changes recorded: 36. Findings: {"high":27,"low":1,"critical":1}. Last probe: OK at 2026-08-15T00:17 UTC. JSON
Current tools
ateam_auth · ateam_bootstrap · ateam_build_and_run · ateam_chain_status · ateam_conversation · ateam_create_connector · ateam_create_plugin · ateam_delete_connector · ateam_delete_skill · ateam_delete_solution · ateam_design_advisor · ateam_get_chain · ateam_get_connector_source · ateam_get_examples · ateam_get_solution · ateam_get_spec · ateam_get_widget_catalog · ateam_get_workflows · ateam_github_diff · ateam_github_list_versions · ateam_github_log · ateam_github_patch · ateam_github_promote · ateam_github_pull · ateam_github_push · ateam_github_read · ateam_github_rollback · ateam_github_status · ateam_github_write · ateam_list_solutions · ateam_patch · ateam_redeploy · ateam_show_skill_minimal · ateam_show_solution_minimal · ateam_spec_search · ateam_status_all · ateam_sync_all · ateam_test_abort · ateam_test_connector · ateam_test_notification · ateam_test_pipeline · ateam_test_skill · ateam_test_status · ateam_test_voice · ateam_upload_connector · ateam_verify · ateam_verify_consistency
Findings (29)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-08-15 | ateam_auth | model_directed_instruction | high | ent variables (ADAS_API_KEY) are configured, you MUST call ateam_auth explicitly — env vars alone are not sufficient. |
| 2026-08-15 | ateam_auth | secret_material_reference | high | ying, testing, etc.). The user can get their API key at https://mcp.ateam-ai.com/get-api-key. Only global endpoints ( |
| 2026-08-15 | ateam_auth | url_in_description | low | https://mcp.ateam-ai.com/get-api-key. |
| 2026-08-15 | ateam_get_spec | cross_tool_reference | high | references sibling tool 'ateam_get_widget_catalog' |
| 2026-08-15 | ateam_design_advisor | cross_tool_reference | high | references sibling tool 'ateam_get_spec' |
| 2026-08-15 | ateam_spec_search | cross_tool_reference | high | references sibling tool 'ateam_get_spec' |
| 2026-08-15 | ateam_build_and_run | cross_tool_reference | high | references sibling tool 'ateam_patch' |
| 2026-08-15 | ateam_test_skill | cross_tool_reference | high | references sibling tool 'ateam_test_status' |
| 2026-08-15 | ateam_test_notification | secret_material_reference | high | n the response). Auth: forwards your authed api_key to Core (no master-secret involvement). Tenant is pinned by the |
| 2026-08-15 | ateam_test_notification | cross_tool_reference | high | references sibling tool 'ateam_test_skill' |
| 2026-08-15 | ateam_conversation | cross_tool_reference | high | references sibling tool 'ateam_get_chain' |
| 2026-08-15 | ateam_patch | secret_material_reference | high | policy.guardrails.never_push": ["Never share passwords"] } - Add a tool: updates: { "tools_push": [{ name: "conn.tool" |
| 2026-08-15 | ateam_get_solution | cross_tool_reference | high | references sibling tool 'ateam_show_skill_minimal' |
| 2026-08-15 | ateam_delete_solution | cross_tool_reference | high | references sibling tool 'ateam_github_pull' |
| 2026-08-15 | ateam_delete_skill | cross_tool_reference | high | references sibling tool 'ateam_github_pull' |
| 2026-08-15 | ateam_delete_connector | cross_tool_reference | high | references sibling tool 'ateam_build_and_run' |
| 2026-08-15 | ateam_show_skill_minimal | cross_tool_reference | high | references sibling tool 'ateam_get_solution' |
| 2026-08-15 | ateam_create_connector | cross_tool_reference | high | references sibling tool 'ateam_create_plugin' |
| 2026-08-15 | ateam_create_plugin | model_directed_instruction | high | LUGINS[] + PLUGIN_MANIFESTS{} in server.js), you MUST add this plugin there (copy the render block from the manifest.j |
| 2026-08-15 | ateam_create_plugin | cross_tool_reference | high | references sibling tool 'ateam_get_spec' |
| 2026-08-15 | ateam_upload_connector | user_concealment | critical | he GitHub base. • Pre-fix bug: github:true silently read from `main` even when patches were on `dev`. Now: defaults |
| 2026-08-15 | ateam_upload_connector | cross_tool_reference | high | references sibling tool 'ateam_github_patch' |
| 2026-08-15 | ateam_test_status | cross_tool_reference | high | references sibling tool 'ateam_test_skill' |
| 2026-08-15 | ateam_get_chain | secret_material_reference | high | aring two runs). Auth: forwards your authed api_key. Tenant scoped by the key itself. Actor scoping: you can only in |
| 2026-08-15 | ateam_get_chain | cross_tool_reference | high | references sibling tool 'ateam_test_status' |
| 2026-08-15 | ateam_chain_status | cross_tool_reference | high | references sibling tool 'ateam_conversation' |
| 2026-08-15 | ateam_get_widget_catalog | secret_material_reference | high | in the solution. Auth: forwards your authed api_key to Core (no master-secret involvement). Tenant scope is pinned b |
| 2026-08-15 | ateam_get_widget_catalog | cross_tool_reference | high | references sibling tool 'ateam_get_spec' |
| 2026-08-15 | ateam_github_push | cross_tool_reference | high | references sibling tool 'ateam_build_and_run' |
Change history (36)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-08-15 00:17 | ateam_bootstrap | added | info |
| 2026-08-15 00:17 | ateam_auth | added | high |
| 2026-08-15 00:17 | ateam_get_spec | added | high |
| 2026-08-15 00:17 | ateam_get_workflows | added | info |
| 2026-08-15 00:17 | ateam_get_examples | added | info |
| 2026-08-15 00:17 | ateam_design_advisor | added | high |
| 2026-08-15 00:17 | ateam_spec_search | added | high |
| 2026-08-15 00:17 | ateam_build_and_run | added | high |
| 2026-08-15 00:17 | ateam_test_skill | added | high |
| 2026-08-15 00:17 | ateam_test_notification | added | high |
| 2026-08-15 00:17 | ateam_conversation | added | high |
| 2026-08-15 00:17 | ateam_test_pipeline | added | info |
| 2026-08-15 00:17 | ateam_test_voice | added | info |
| 2026-08-15 00:17 | ateam_patch | added | high |
| 2026-08-15 00:17 | ateam_get_solution | added | high |
| 2026-08-15 00:17 | ateam_list_solutions | added | info |
| 2026-08-15 00:17 | ateam_delete_solution | added | high |
| 2026-08-15 00:17 | ateam_delete_skill | added | high |
| 2026-08-15 00:17 | ateam_delete_connector | added | high |
| 2026-08-15 00:17 | ateam_show_skill_minimal | added | high |
| 2026-08-15 00:17 | ateam_show_solution_minimal | added | info |
| 2026-08-15 00:17 | ateam_create_connector | added | high |
| 2026-08-15 00:17 | ateam_create_plugin | added | high |
| 2026-08-15 00:17 | ateam_upload_connector | added | critical |
| 2026-08-15 00:17 | ateam_test_status | added | high |
| 2026-08-15 00:17 | ateam_get_chain | added | high |
| 2026-08-15 00:17 | ateam_chain_status | added | high |
| 2026-08-15 00:17 | ateam_get_widget_catalog | added | high |
| 2026-08-15 00:17 | ateam_test_abort | added | info |
| 2026-08-15 00:17 | ateam_test_connector | added | info |
| 2026-08-15 00:17 | ateam_get_connector_source | added | info |
| 2026-08-15 00:17 | ateam_verify | added | info |
| 2026-08-15 00:17 | ateam_github_push | added | high |
| 2026-08-15 00:17 | ateam_github_pull | added | info |
| 2026-08-15 00:17 | ateam_github_status | added | info |
| 2026-08-15 00:17 | ateam_github_read | added | info |
Probe history
08-15 00:17 OK (47)
Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).