Agent Economy Index · MCP census · probed 2026-09-29 · JSON

ai.tunnelmind/data

Verdict: 19 tool description(s) carry model-directed, hidden, secret-material or exfiltration patterns. Endpoint https://mcp-data.tunnelmind.ai/mcp. Latency 4,351 ms.

Tools (96 fingerprinted)

tooldescription lengthflagsfirst seenlast seen
agent_registries_lookup1,7052026-09-292026-09-29
attributes_lookup1,4242026-09-292026-09-29
audit_export1,4812026-09-292026-09-29
cancel_task5722026-09-292026-09-29
check_receipt_revoked1,3262026-09-292026-09-29
compliance_configure3942026-09-292026-09-29
compliance_export4342026-09-292026-09-29
compliance_ledger3682026-09-292026-09-29
compliance_profile3962026-09-292026-09-29
compliance_verify3952026-09-292026-09-29
create_free_key615secret_material2026-09-292026-09-29
create_subscription1,075secret_material2026-09-292026-09-29
cross_lens_lookup6102026-09-292026-09-29
cross_lens_verify2,8552026-09-292026-09-29
delete_subscription222026-09-292026-09-29
explain_verdict9162026-09-292026-09-29
generate_receipt1,9822026-09-292026-09-29
get_analyst_config2,430model_directed2026-09-292026-09-29
get_api_key1,039secret_material2026-09-292026-09-29
get_bgp_events1,1072026-09-292026-09-29
get_domain1,9392026-09-292026-09-29
get_entity1,3282026-09-292026-09-29
get_feedback3672026-09-292026-09-29
get_freshness9302026-09-292026-09-29
get_receipt1,351secret_material2026-09-292026-09-29
get_self_view1,9352026-09-292026-09-29
get_stats7442026-09-292026-09-29
get_subscription542026-09-292026-09-29
get_task1,1062026-09-292026-09-29
get_website_history6722026-09-292026-09-29
ghostroute_ai_lookup6432026-09-292026-09-29
ghostroute_asn_lookup7272026-09-292026-09-29
ghostroute_check1,5322026-09-292026-09-29
ghostroute_ct_alerts1,1802026-09-292026-09-29
ghostroute_ct_proofs1,1012026-09-292026-09-29
ghostroute_ct_witness1,1022026-09-292026-09-29
ghostroute_verify5132026-09-292026-09-29
health_check805secret_material2026-09-292026-09-29
intel_agent1,136secret_material2026-09-292026-09-29
intel_http1,559secret_material,url_in_description2026-09-292026-09-29
intel_inject1,108secret_material2026-09-292026-09-29
intel_optout1,197secret_material2026-09-292026-09-29
intel_robots1,195secret_material2026-09-292026-09-29
intel_stack1,168secret_material2026-09-292026-09-29
list_domains1,5352026-09-292026-09-29
list_entities1,3222026-09-292026-09-29
list_subscriptions99secret_material2026-09-292026-09-29
preflight_should_i_act1,1662026-09-292026-09-29
profile_entity1,3712026-09-292026-09-29
receipt_log_consistency_proof2282026-09-292026-09-29
receipt_log_inclusion_proof4672026-09-292026-09-29
receipt_log_sth4572026-09-292026-09-29
receipt_lookup1,1242026-09-292026-09-29
revoke_api_key851secret_material2026-09-292026-09-29
scan_injection1,721model_directed,secret_material2026-09-292026-09-29
scan_mcp1,481secret_material2026-09-292026-09-29
search1,2472026-09-292026-09-29
sigil_ads_txt_history5592026-09-292026-09-29
sigil_atap_ait_status1362026-09-292026-09-29
sigil_atap_register_ait375url_in_description2026-09-292026-09-29
sigil_atap_roll_block1552026-09-292026-09-29
sigil_atap_witness6152026-09-292026-09-29
sigil_receipt_generate566url_in_description2026-09-292026-09-29
sigil_score_batch2632026-09-292026-09-29
sigil_score_entity7642026-09-292026-09-29
sigil_score_weights2572026-09-292026-09-29
sigil_traverse8662026-09-292026-09-29
sigil_verify_ads_txt2,3922026-09-292026-09-29
sigil_verify_ads_txt_batch1,3472026-09-292026-09-29
sigil_verify_adscert6302026-09-292026-09-29
sigil_verify_app_bundle7422026-09-292026-09-29
sigil_verify_domain9652026-09-292026-09-29
sigil_verify_ip_type1,6572026-09-292026-09-29
sigil_verify_supply_chain8852026-09-292026-09-29
sigil_verify_supply_path1,0002026-09-292026-09-29
sigil_verify_token3352026-09-292026-09-29
signal_dark_pool_risk4952026-09-292026-09-29
signal_halo_score4632026-09-292026-09-29
signal_team_signal3912026-09-292026-09-29
signal_tracker_density5142026-09-292026-09-29
snapshot_data1542026-09-292026-09-29
snapshot_diff892026-09-292026-09-29
snapshot_manifest6752026-09-292026-09-29
status_history3332026-09-292026-09-29
stream_task1,1312026-09-292026-09-29
submit_feedback951secret_material2026-09-292026-09-29
tollbooth_export7922026-09-292026-09-29
tollbooth_sites6752026-09-292026-09-29
tollbooth_stats1,036secret_material2026-09-292026-09-29
tracker_verify1,3392026-09-292026-09-29
traction1,0702026-09-292026-09-29
verdict_lookup1,7632026-09-292026-09-29
verify_agent1,8722026-09-292026-09-29
verify_agent_signature2,312url_in_description2026-09-292026-09-29
verify_receipt1,282secret_material2026-09-292026-09-29
x402_echo1,804url_in_description2026-09-292026-09-29

Tool changes (0)

whentoolkind
none yet

Probe history

2026-09-29 ok (96 tools)

Depend on this server? Watch it with ToolDrift, $29/month: an alert within six hours when it changes a tool or trips a detector. Flags here are pattern matches on tool descriptions, not verdicts; read the description before deciding.
Run this server? Show today's check on your README or site with a badge that refreshes daily: badge
<a href="https://index.agentexchange.work/mcp-server/ai.tunnelmind%2Fdata"><img src="https://index.agentexchange.work/badge/mcp/ai.tunnelmind%2Fdata.svg" alt="MCP server check by agentexchange.work"></a>
Claim this server — prove you operate mcp-data.tunnelmind.ai and this page gets a "Claimed by the operator" line, the badge gets a CLAIMED prefix, and you get a JSON webhook alert when a daily probe records a tool change or more flagged descriptions than the day before (at most one alert per 6 hours). No account, no email, nothing to install.
  1. Put a text file at https://mcp-data.tunnelmind.ai/.well-known/agentexchange-claim.txt whose entire content is exactly ai.tunnelmind/data.
  2. Submit this form. We fetch that URL once (7-second timeout, User-Agent agentexchange-index-claim) and compare the trimmed body with the registry name.

Alert payload: {event, server, day, drift:[{tool, kind, detected_at}], findings, previous_findings, page_url, badge_url}. Public list of claims (names and hosts only): /v1/claims.json.

Run this server? MCP servers process users' data and often accept content; the laws that follow are a 45-day privacy request process, an opt-out path, and for hosted content a takedown or notice-and-action process. Check your site free or get a hosted desk.