← MCP Registry Integrity Report
io.github.mcp-dir/olist-mcp
Verdict: high-severity findings present. Endpoint https://api.mcp.ai/p_olist. Tools now: 7 (7 ever seen). Changes recorded: 7. Findings: {"high":7}. Last probe: OK at 2026-09-01T00:17 UTC. JSON
Current tools
authenticate · connect · marketplace · report_bug · search_tools · show_version · toolkit_info
Findings (7)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-09-01 | connect | secret_material_reference | high | authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-instal |
| 2026-09-01 | connect | cross_tool_reference | high | references sibling tool 'authenticate' |
| 2026-09-01 | authenticate | secret_material_reference | high | rsor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header `Authorization |
| 2026-09-01 | authenticate | cross_tool_reference | high | references sibling tool 'connect' |
| 2026-09-01 | toolkit_info | cross_tool_reference | high | references sibling tool 'connect' |
| 2026-09-01 | marketplace | secret_material_reference | high | t bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wall |
| 2026-09-01 | marketplace | cross_tool_reference | high | references sibling tool 'report_bug' |
Change history (7)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-09-01 00:17 | search_tools | mutated | medium |
| 2026-09-01 00:17 | show_version | mutated | medium |
| 2026-09-01 00:17 | report_bug | mutated | medium |
| 2026-09-01 00:17 | connect | mutated | high |
| 2026-09-01 00:17 | authenticate | mutated | high |
| 2026-09-01 00:17 | toolkit_info | mutated | high |
| 2026-09-01 00:17 | marketplace | mutated | high |
Probe history
09-01 00:17 OK (7)
Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).