← MCP Registry Integrity Report
io.github.mcp-dir/notafiscal-mcp
Verdict: high-severity findings present. Endpoint https://api.mcp.ai/p_notafiscal. Tools now: 12 (12 ever seen). Changes recorded: 13. Findings: {"high":7}. Last probe: OK at 2026-09-01T00:17 UTC. JSON
Current tools
authenticate · connect · marketplace · notafiscal_baixar_nfse · notafiscal_cancelar_nfse · notafiscal_consultar_nfse · notafiscal_emitir_nfse · notafiscal_empresas · notafiscal_listar_nfse · report_bug · show_version · toolkit_info
Findings (7)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-09-01 | connect | secret_material_reference | high | authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-instal |
| 2026-09-01 | connect | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-09-01 | toolkit_info | cross_tool_reference | high | references sibling tool 'connect' |
| 2026-09-01 | marketplace | secret_material_reference | high | t bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wall |
| 2026-09-01 | marketplace | cross_tool_reference | high | references sibling tool 'report_bug' |
| 2026-09-01 | authenticate | secret_material_reference | high | rsor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header `Authorization |
| 2026-09-01 | authenticate | cross_tool_reference | high | references sibling tool 'connect' |
Change history (13)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-09-01 00:17 | notafiscal_baixar_nfse | mutated | medium |
| 2026-09-01 00:17 | notafiscal_cancelar_nfse | mutated | medium |
| 2026-09-01 00:17 | show_version | mutated | medium |
| 2026-09-01 00:17 | report_bug | mutated | medium |
| 2026-09-01 00:17 | connect | mutated | high |
| 2026-09-01 00:17 | toolkit_info | mutated | high |
| 2026-09-01 00:17 | marketplace | mutated | high |
| 2026-09-01 00:17 | authenticate | mutated | high |
| 2026-08-31 18:17 | notafiscal_empresas | mutated | medium |
| 2026-08-31 18:17 | notafiscal_emitir_nfse | mutated | medium |
| 2026-08-31 18:17 | notafiscal_consultar_nfse | mutated | medium |
| 2026-08-31 18:17 | notafiscal_listar_nfse | mutated | medium |
| 2026-08-31 18:17 | notafiscal_baixar_nfse | mutated | medium |
Probe history
09-01 00:17 OK (12) · 08-31 18:17 OK (12)
Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).