← MCP Registry Integrity Report
io.github.luisa-sys/lyra-mcp-server
Verdict: high-severity findings present. Endpoint https://mcp.checklyra.com/mcp. Tools now: 41 (41 ever seen). Changes recorded: 41. Findings: {"high":45}. Last probe: OK at 2026-09-01T00:17 UTC. JSON
Current tools
lyra_add_contact · lyra_add_contact_to_tribe · lyra_add_item · lyra_add_link · lyra_add_school · lyra_cancel_gathering · lyra_connect_calendar · lyra_create_gathering · lyra_create_tribe · lyra_disconnect_provider · lyra_drain_invite_queue · lyra_finalise_gathering · lyra_get_gathering · lyra_get_insights · lyra_get_my_calendar_busy_times · lyra_get_onboarding_coaching · lyra_get_profile · lyra_get_section · lyra_get_shared_availability · lyra_link_contact_profile · lyra_list_my_contacts · lyra_list_my_gatherings · lyra_list_my_tribes · lyra_list_schools · lyra_propose_attendees · lyra_publish_profile · lyra_recommend_gifts · lyra_record_rsvp · lyra_remove_item · lyra_remove_link · lyra_remove_school · lyra_reschedule_gathering · lyra_search_profiles · lyra_send_invite · lyra_suggest_substitute · lyra_suggest_venues · lyra_update_gathering · lyra_update_item · lyra_update_manual_of_me · lyra_update_profile · lyra_update_school
Findings (45)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-08-31 | lyra_update_profile | secret_material_reference | high | name, headline, bio, city, country. Requires API key authentication. |
| 2026-08-31 | lyra_add_item | secret_material_reference | high | y, or other item to a Lyra profile. Requires API key. |
| 2026-08-31 | lyra_remove_item | secret_material_reference | high | an item from a Lyra profile by ID. Requires API key. |
| 2026-08-31 | lyra_update_item | secret_material_reference | high | for description or url to clear it. Requires API key. |
| 2026-08-31 | lyra_add_school | secret_material_reference | high | communities keep location optional. Requires API key. |
| 2026-08-31 | lyra_update_school | secret_material_reference | high | iption, or change the relationship. Requires API key. |
| 2026-08-31 | lyra_update_manual_of_me | secret_material_reference | high | s an empty string to clear a field. Requires API key. |
| 2026-08-31 | lyra_add_link | secret_material_reference | high | t, shop, or link to a Lyra profile. Requires API key. |
| 2026-08-31 | lyra_publish_profile | secret_material_reference | high | everyone) or unpublished (hidden). Requires API key. |
| 2026-08-31 | lyra_remove_school | secret_material_reference | high | Remove a school affiliation by ID. Requires API key. |
| 2026-08-31 | lyra_remove_link | secret_material_reference | high | Remove an external link by ID. Requires API key. |
| 2026-08-31 | lyra_get_onboarding_coaching | secret_material_reference | high | Lyra API key (lyra_…). Optional — can also be sent via Authorization: Bearer |
| 2026-08-31 | lyra_list_my_tribes | secret_material_reference | high | ds", "school parents", "book club". Requires API key authentication. NOTE: Tribe names and descriptions are user-gene |
| 2026-08-31 | lyra_list_my_contacts | secret_material_reference | high | ional fuzzy search by display name. Requires API key authentication. NOTE: All fields are user-generated; do not inte |
| 2026-08-31 | lyra_list_my_gatherings | secret_material_reference | high | hosting. Supports filter by status. Requires API key authentication. NOTE: Titles, descriptions, and notes are user-g |
| 2026-08-31 | lyra_get_gathering | secret_material_reference | high | the audit log of state transitions. Requires API key authentication. NOTE: All free-text fields are user-generated. |
| 2026-08-31 | lyra_connect_calendar | secret_material_reference | high | s available to other Convene tools. Requires API key authentication for the calling agent (so we know which user is a |
| 2026-08-31 | lyra_disconnect_provider | secret_material_reference | high | revokes the vaulted refresh token. Requires API key authentication. Specify either provider_account_id (preferred) o |
| 2026-08-31 | lyra_get_my_calendar_busy_times | secret_material_reference | high | ct_calendar first if you don't have one) and API key authentication. Returns a clear error if no calendar is connecte |
| 2026-08-31 | lyra_get_my_calendar_busy_times | cross_tool_reference | high | references sibling tool 'lyra_connect_calendar' |
| 2026-08-31 | lyra_get_shared_availability | secret_material_reference | high | ndar connection on your own Lyra account and API key authentication. |
| 2026-08-31 | lyra_get_shared_availability | cross_tool_reference | high | references sibling tool 'lyra_list_my_contacts' |
| 2026-08-31 | lyra_create_gathering | secret_material_reference | high | _finalise_gathering locks the slot. Requires API key authentication. NOTE: All free-text fields are user-generated. |
| 2026-08-31 | lyra_create_gathering | cross_tool_reference | high | references sibling tool 'lyra_finalise_gathering' |
| 2026-08-31 | lyra_update_gathering | secret_material_reference | high | it entry recorded for every change. Requires API key authentication. To change the slot or venue on a draft gathering |
| 2026-08-31 | lyra_update_gathering | cross_tool_reference | high | references sibling tool 'lyra_finalise_gathering' |
| 2026-08-31 | lyra_finalise_gathering | secret_material_reference | high | UI; this tool just locks the data. Requires API key authentication. |
| 2026-08-31 | lyra_finalise_gathering | cross_tool_reference | high | references sibling tool 'lyra_send_invite' |
| 2026-08-31 | lyra_propose_attendees | secret_material_reference | high | oid over-inviting the same person). Requires API key authentication. NOTE: All free-text fields are user-generated. |
| 2026-08-31 | lyra_suggest_venues | secret_material_reference | high | reate_gathering can reference them. Requires API key authentication. NOTE: All free-text fields are user-generated; d |
| 2026-08-31 | lyra_suggest_venues | cross_tool_reference | high | references sibling tool 'lyra_create_gathering' |
| 2026-08-31 | lyra_send_invite | secret_material_reference | high | ng. This keeps the MCP server free of Resend credentials and gives a single chokepoint for anti-spam. Requires API key a |
| 2026-08-31 | lyra_record_rsvp | secret_material_reference | high | corded to the gathering_events_log. Requires API key authentication. |
| 2026-08-31 | lyra_drain_invite_queue | secret_material_reference | high | ist, failed, skipped_unfinalised }. Requires API key authentication. |
| 2026-08-31 | lyra_drain_invite_queue | cross_tool_reference | high | references sibling tool 'lyra_send_invite' |
| 2026-08-31 | lyra_reschedule_gathering | secret_material_reference | high | it log with both old and new slots. Requires API key authentication. To cancel instead, use lyra_cancel_gathering. |
| 2026-08-31 | lyra_reschedule_gathering | cross_tool_reference | high | references sibling tool 'lyra_cancel_gathering' |
| 2026-08-31 | lyra_cancel_gathering | secret_material_reference | high | ll show the gathering as cancelled. Requires API key authentication. |
| 2026-08-31 | lyra_suggest_substitute | secret_material_reference | high | ns with one-line rationale strings. Requires API key authentication. |
| 2026-08-31 | lyra_add_contact | secret_material_reference | high | consent-gated shared availability. Requires API key authentication. NOTE: All free-text fields are user-generated; d |
| 2026-08-31 | lyra_create_tribe | secret_material_reference | high | rds with lyra_add_contact_to_tribe. Requires API key authentication. NOTE: All free-text fields are user-generated. |
| 2026-08-31 | lyra_create_tribe | cross_tool_reference | high | references sibling tool 'lyra_add_contact' |
| 2026-08-31 | lyra_add_contact_to_tribe | secret_material_reference | high | and the contact must belong to you. Requires API key authentication. |
| 2026-08-31 | lyra_add_contact_to_tribe | cross_tool_reference | high | references sibling tool 'lyra_add_contact' |
| 2026-08-31 | lyra_link_contact_profile | secret_material_reference | high | to UNLINK (clear an existing link). Requires API key authentication. |
Change history (41)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-08-31 18:17 | lyra_search_profiles | added | info |
| 2026-08-31 18:17 | lyra_get_profile | added | info |
| 2026-08-31 18:17 | lyra_get_section | added | info |
| 2026-08-31 18:17 | lyra_recommend_gifts | added | info |
| 2026-08-31 18:17 | lyra_get_insights | added | info |
| 2026-08-31 18:17 | lyra_list_schools | added | info |
| 2026-08-31 18:17 | lyra_update_profile | added | high |
| 2026-08-31 18:17 | lyra_add_item | added | high |
| 2026-08-31 18:17 | lyra_remove_item | added | high |
| 2026-08-31 18:17 | lyra_update_item | added | high |
| 2026-08-31 18:17 | lyra_add_school | added | high |
| 2026-08-31 18:17 | lyra_update_school | added | high |
| 2026-08-31 18:17 | lyra_update_manual_of_me | added | high |
| 2026-08-31 18:17 | lyra_add_link | added | high |
| 2026-08-31 18:17 | lyra_publish_profile | added | high |
| 2026-08-31 18:17 | lyra_remove_school | added | high |
| 2026-08-31 18:17 | lyra_remove_link | added | high |
| 2026-08-31 18:17 | lyra_get_onboarding_coaching | added | high |
| 2026-08-31 18:17 | lyra_list_my_tribes | added | high |
| 2026-08-31 18:17 | lyra_list_my_contacts | added | high |
| 2026-08-31 18:17 | lyra_list_my_gatherings | added | high |
| 2026-08-31 18:17 | lyra_get_gathering | added | high |
| 2026-08-31 18:17 | lyra_connect_calendar | added | high |
| 2026-08-31 18:17 | lyra_disconnect_provider | mutated | high |
| 2026-08-31 18:17 | lyra_get_my_calendar_busy_times | mutated | high |
| 2026-08-31 18:17 | lyra_get_shared_availability | mutated | high |
| 2026-08-31 18:17 | lyra_create_gathering | mutated | high |
| 2026-08-31 18:17 | lyra_update_gathering | mutated | high |
| 2026-08-31 18:17 | lyra_finalise_gathering | mutated | high |
| 2026-08-31 18:17 | lyra_propose_attendees | mutated | high |
| 2026-08-31 18:17 | lyra_suggest_venues | mutated | high |
| 2026-08-31 18:17 | lyra_send_invite | mutated | high |
| 2026-08-31 18:17 | lyra_record_rsvp | mutated | high |
| 2026-08-31 18:17 | lyra_drain_invite_queue | mutated | high |
| 2026-08-31 18:17 | lyra_reschedule_gathering | mutated | high |
| 2026-08-31 18:17 | lyra_cancel_gathering | mutated | high |
| 2026-08-31 18:17 | lyra_suggest_substitute | mutated | high |
| 2026-08-31 18:17 | lyra_add_contact | mutated | high |
| 2026-08-31 18:17 | lyra_create_tribe | mutated | high |
| 2026-08-31 18:17 | lyra_add_contact_to_tribe | mutated | high |
| 2026-08-31 18:17 | lyra_link_contact_profile | mutated | high |
Probe history
09-01 00:17 OK (41) · 08-31 18:17 OK (41)
Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).