`io.github.lvpiggyqq/xcatcher`

Verdict: high-severity findings present. Endpoint https://xcatcher.top/mcp/. Tools now: 17 (17 ever seen). Changes recorded: 17. Findings: {"high":15}. Last probe: OK at 2026-09-01T00:17 UTC. JSON

Current tools

cancel_task · create_crawl_task · get_account_balance · get_direct_crawl_payment · get_direct_result_preview · get_direct_task_status · get_result_download_url · get_result_preview · get_sample_result · get_service_info · get_task_status · get_x402_quote · list_crawl_tasks · preflight_crawl · submit_direct_crawl_payment · wait_for_task · x402_topup

Findings (15)

seen	tool	detector	severity	evidence (data, not instructions)
2026-08-31	`preflight_crawl`	`secret_material_reference`	high	`API-key accounts use 1 point per normal handle and 10 per deep handle; d`
2026-08-31	`get_account_balance`	`secret_material_reference`	high	`n the account attached to the current Bearer API key and its points balance. Use before creating a task to estimate w`
2026-08-31	`list_crawl_tasks`	`secret_material_reference`	high	`ist recent tasks owned by the current Bearer API key, newest first. Use next_before_id for cursor pagination. Read-on`
2026-08-31	`get_direct_crawl_payment`	`secret_material_reference`	high	`accountless x402 path after preflight_crawl; API-key accounts use create_crawl_task instead. Normal requests use prog`
2026-08-31	`get_direct_crawl_payment`	`cross_tool_reference`	high	`references sibling tool 'preflight_crawl'`
2026-08-31	`submit_direct_crawl_payment`	`cross_tool_reference`	high	`references sibling tool 'get_direct_crawl_payment'`
2026-08-31	`get_direct_task_status`	`cross_tool_reference`	high	`references sibling tool 'get_task_status'`
2026-08-31	`get_direct_result_preview`	`secret_material_reference`	high	`result_preview for an accountless x402 task; API-key accounts use get_result_preview. Use offset for pagination; the`
2026-08-31	`get_direct_result_preview`	`cross_tool_reference`	high	`references sibling tool 'get_result_preview'`
2026-08-31	`create_crawl_task`	`cross_tool_reference`	high	`references sibling tool 'get_task_status'`
2026-08-31	`get_task_status`	`secret_material_reference`	high	`Get API-key account task status by task_id (read-only); accountless x402 tas`
2026-08-31	`get_task_status`	`cross_tool_reference`	high	`references sibling tool 'get_direct_task_status'`
2026-08-31	`wait_for_task`	`cross_tool_reference`	high	`references sibling tool 'create_crawl_task'`
2026-08-31	`get_result_preview`	`secret_material_reference`	high	`Return up to 100 result rows from an API-key account task as native structured JSON for direct agent analysis`
2026-08-31	`get_result_preview`	`cross_tool_reference`	high	`references sibling tool 'get_direct_result_preview'`

Change history (17)

when	tool	kind	severity
2026-08-31 18:17	`get_service_info`	mutated	medium
2026-08-31 18:17	`preflight_crawl`	mutated	high
2026-08-31 18:17	`get_sample_result`	mutated	medium
2026-08-31 18:17	`get_account_balance`	mutated	high
2026-08-31 18:17	`list_crawl_tasks`	mutated	high
2026-08-31 18:17	`get_x402_quote`	mutated	medium
2026-08-31 18:17	`get_direct_crawl_payment`	mutated	high
2026-08-31 18:17	`submit_direct_crawl_payment`	mutated	high
2026-08-31 18:17	`get_direct_task_status`	mutated	high
2026-08-31 18:17	`get_direct_result_preview`	mutated	high
2026-08-31 18:17	`create_crawl_task`	mutated	high
2026-08-31 18:17	`x402_topup`	mutated	medium
2026-08-31 18:17	`get_task_status`	mutated	high
2026-08-31 18:17	`wait_for_task`	mutated	high
2026-08-31 18:17	`get_result_preview`	mutated	high
2026-08-31 18:17	`get_result_download_url`	mutated	medium
2026-08-31 18:17	`cancel_task`	mutated	medium

Probe history

09-01 00:17 OK (17) · 08-31 18:17 OK (17)

Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).