← MCP Registry Integrity Report
io.github.corply-dev/corply
Verdict: high-severity findings present. Endpoint https://corply.dev/mcp. Tools now: 52 (52 ever seen). Changes recorded: 42. Findings: {"high":32}. Last probe: OK at 2026-08-15T06:17 UTC. JSON
Current tools
adopt_existing_company · amend_frozen_application · await_payment · await_registered_agent_upgrade · check_company_names · configure_payment_catalog · create_payment_integration_bundle · create_payment_project · create_payment_route_draft · generate_documents · get_bank_onboarding_status · get_cap_table · get_company_briefing · get_org · get_payment_pipeline_status · get_status · import_cap_table · invite_cofounders · invite_member · manage_operating_access_grant · mark_task_done · nudge_signer · prepare_83b_tin_input · prepare_revenue_launch · recall · reconcile_bank_onboarding · reconcile_payment_route · record_existing_completion · record_operating_event · record_operating_evidence · record_operating_fact · redeem_invite · refresh_payment_route_onboarding · remember · request_payment · request_registered_agent_upgrade · request_signature · resolve_company_plan · run_sandbox_payment_probe · run_sandbox_payout_probe · save_application · sign_bundle · start_bank_onboarding · start_payment_route_onboarding · submit_for_formation · submit_operating_fact_evidence · transition_operating_work_item · upload_operating_evidence · upsert_operating_subject · validate_application · verify_payment_integration · whoami
Findings (32)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-08-15 | request_payment | cross_tool_reference | high | references sibling tool 'request_registered_agent_upgrade' |
| 2026-08-15 | await_payment | cross_tool_reference | high | references sibling tool 'request_payment' |
| 2026-08-15 | request_registered_agent_upgrade | cross_tool_reference | high | references sibling tool 'await_registered_agent_upgrade' |
| 2026-08-15 | await_registered_agent_upgrade | cross_tool_reference | high | references sibling tool 'request_registered_agent_upgrade' |
| 2026-08-15 | request_signature | cross_tool_reference | high | references sibling tool 'request_payment' |
| 2026-08-15 | sign_bundle | cross_tool_reference | high | references sibling tool 'get_status' |
| 2026-08-15 | submit_for_formation | cross_tool_reference | high | references sibling tool 'request_payment' |
| 2026-08-15 | invite_cofounders | cross_tool_reference | high | references sibling tool 'request_payment' |
| 2026-08-15 | prepare_revenue_launch | secret_material_reference | high | provider calls and no writes; never requests credentials, identity documents, bank/card data, or acceptance of terms. If |
| 2026-08-15 | prepare_revenue_launch | cross_tool_reference | high | references sibling tool 'get_company_briefing' |
| 2026-08-15 | create_payment_project | cross_tool_reference | high | references sibling tool 'prepare_revenue_launch' |
| 2026-08-15 | configure_payment_catalog | secret_material_reference | high | onment-variable NAMES only—never Paddle IDs, API keys, webhook secrets, bank/card data, or customer data. Makes zero |
| 2026-08-15 | configure_payment_catalog | cross_tool_reference | high | references sibling tool 'create_payment_integration_bundle' |
| 2026-08-15 | create_payment_integration_bundle | secret_material_reference | high | overwrites existing files, and never handles credential values. The manifest is verify-exact and must never be merged fi |
| 2026-08-15 | create_payment_integration_bundle | cross_tool_reference | high | references sibling tool 'verify_payment_integration' |
| 2026-08-15 | get_payment_pipeline_status | secret_material_reference | high | s for one company. It never returns provider credentials, hosted payment tokens, bank/card data, or customer data; makes |
| 2026-08-15 | create_payment_route_draft | secret_material_reference | high | n idempotency key; it cannot accept or store credentials, provider IDs, identity documents, terms acceptance, bank/card |
| 2026-08-15 | create_payment_route_draft | cross_tool_reference | high | references sibling tool 'get_payment_pipeline_status' |
| 2026-08-15 | start_payment_route_onboarding | secret_material_reference | high | identity documents, bank/card data, provider credentials, or terms acceptance in chat, activates no route, and moves no |
| 2026-08-15 | start_payment_route_onboarding | cross_tool_reference | high | references sibling tool 'get_payment_pipeline_status' |
| 2026-08-15 | refresh_payment_route_onboarding | secret_material_reference | high | oute connection. It accepts no provider IDs, credentials, identity documents, bank/card data, or terms acceptance from c |
| 2026-08-15 | reconcile_payment_route | secret_material_reference | high | s only, exposes no provider account, wallet, credential, bank/card, or customer data, and moves no money. The first run |
| 2026-08-15 | get_bank_onboarding_status | secret_material_reference | high | r returns SSNs, identity documents, provider credentials, or submitted KYC payloads. A handoff URL is available only to |
| 2026-08-15 | start_bank_onboarding | secret_material_reference | high | ntity image, raw formation document, Mercury credential, or legal name/EIN override; Corply loads trusted company facts |
| 2026-08-15 | start_bank_onboarding | cross_tool_reference | high | references sibling tool 'get_bank_onboarding_status' |
| 2026-08-15 | upsert_operating_subject | secret_material_reference | high | s. Never fabricate personal, immigration, or credential data. Prerequisite: authenticated active organization access plu |
| 2026-08-15 | upsert_operating_subject | cross_tool_reference | high | references sibling tool 'record_operating_fact' |
| 2026-08-15 | record_operating_event | cross_tool_reference | high | references sibling tool 'resolve_company_plan' |
| 2026-08-15 | upload_operating_evidence | cross_tool_reference | high | references sibling tool 'record_operating_evidence' |
| 2026-08-15 | record_operating_evidence | secret_material_reference | high | sional determinations require named reviewer credentials. A guidance link or model assertion is never professional evide |
| 2026-08-15 | record_operating_evidence | cross_tool_reference | high | references sibling tool 'upload_operating_evidence' |
| 2026-08-15 | submit_operating_fact_evidence | cross_tool_reference | high | references sibling tool 'upload_operating_evidence' |
Change history (42)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-08-15 06:17 | validate_application | added | info |
| 2026-08-15 06:17 | check_company_names | added | info |
| 2026-08-15 06:17 | generate_documents | added | info |
| 2026-08-15 06:17 | request_payment | added | high |
| 2026-08-15 06:17 | await_payment | added | high |
| 2026-08-15 06:17 | request_registered_agent_upgrade | added | high |
| 2026-08-15 06:17 | await_registered_agent_upgrade | added | high |
| 2026-08-15 06:17 | request_signature | added | high |
| 2026-08-15 06:17 | sign_bundle | added | high |
| 2026-08-15 06:17 | submit_for_formation | added | high |
| 2026-08-15 06:17 | remember | added | info |
| 2026-08-15 06:17 | recall | added | info |
| 2026-08-15 06:17 | invite_member | added | info |
| 2026-08-15 06:17 | redeem_invite | added | info |
| 2026-08-15 06:17 | invite_cofounders | added | high |
| 2026-08-15 06:17 | nudge_signer | added | info |
| 2026-08-15 06:17 | mark_task_done | added | info |
| 2026-08-15 06:17 | prepare_revenue_launch | added | high |
| 2026-08-15 06:17 | create_payment_project | added | high |
| 2026-08-15 06:17 | configure_payment_catalog | added | high |
| 2026-08-15 06:17 | create_payment_integration_bundle | added | high |
| 2026-08-15 06:17 | verify_payment_integration | added | info |
| 2026-08-15 06:17 | get_payment_pipeline_status | added | high |
| 2026-08-15 06:17 | create_payment_route_draft | added | high |
| 2026-08-15 06:17 | start_payment_route_onboarding | added | high |
| 2026-08-15 06:17 | refresh_payment_route_onboarding | added | high |
| 2026-08-15 06:17 | reconcile_payment_route | added | high |
| 2026-08-15 06:17 | run_sandbox_payment_probe | added | info |
| 2026-08-15 06:17 | run_sandbox_payout_probe | added | info |
| 2026-08-15 06:17 | get_bank_onboarding_status | added | high |
| 2026-08-15 06:17 | start_bank_onboarding | added | high |
| 2026-08-15 06:17 | reconcile_bank_onboarding | added | info |
| 2026-08-15 06:17 | resolve_company_plan | added | info |
| 2026-08-15 06:17 | upsert_operating_subject | added | high |
| 2026-08-15 06:17 | manage_operating_access_grant | added | info |
| 2026-08-15 06:17 | record_operating_fact | added | info |
| 2026-08-15 06:17 | record_operating_event | added | high |
| 2026-08-15 06:17 | upload_operating_evidence | added | high |
| 2026-08-15 06:17 | record_operating_evidence | added | high |
| 2026-08-15 06:17 | submit_operating_fact_evidence | added | high |
| 2026-08-15 06:17 | record_existing_completion | added | info |
| 2026-08-15 06:17 | transition_operating_work_item | added | info |
Probe history
08-15 06:17 OK (52)
Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).