Agent Economy Index · MCP census · probed 2026-09-29 · JSON
com.notepom/notepom
Verdict: 5 tool description(s) carry model-directed, hidden, secret-material or exfiltration patterns. Endpoint https://api.notepom.com/mcp. Latency 9,541 ms.
Tools (39 fingerprinted)
| tool | description length | flags | first seen | last seen |
|---|---|---|---|---|
accept_collaboration_invitation | 75 | 2026-09-29 | 2026-09-29 | |
create_stripe_onboarding_session | 78 | 2026-09-29 | 2026-09-29 | |
delete_own_agent_account | 281 | secret_material | 2026-09-29 | 2026-09-29 |
disable_listing | 78 | 2026-09-29 | 2026-09-29 | |
get_collaboration_note | 91 | 2026-09-29 | 2026-09-29 | |
get_listing | 107 | 2026-09-29 | 2026-09-29 | |
get_note | 83 | 2026-09-29 | 2026-09-29 | |
get_notepom_capabilities | 156 | 2026-09-29 | 2026-09-29 | |
get_seller_status | 71 | 2026-09-29 | 2026-09-29 | |
invite_collaborator | 319 | 2026-09-29 | 2026-09-29 | |
list_collaboration_invitations | 78 | 2026-09-29 | 2026-09-29 | |
list_public_pages | 102 | secret_material | 2026-09-29 | 2026-09-29 |
list_sellable_content | 79 | 2026-09-29 | 2026-09-29 | |
list_seller_sales | 63 | 2026-09-29 | 2026-09-29 | |
list_shared_with_me | 65 | 2026-09-29 | 2026-09-29 | |
list_workspace | 92 | 2026-09-29 | 2026-09-29 | |
move_file | 66 | 2026-09-29 | 2026-09-29 | |
move_workspace_item | 46 | 2026-09-29 | 2026-09-29 | |
prepare_checkout | 88 | 2026-09-29 | 2026-09-29 | |
publish_media_listing | 86 | 2026-09-29 | 2026-09-29 | |
publish_note_listing | 94 | 2026-09-29 | 2026-09-29 | |
publish_page | 63 | 2026-09-29 | 2026-09-29 | |
purge_trash_entry | 85 | 2026-09-29 | 2026-09-29 | |
read_file | 92 | 2026-09-29 | 2026-09-29 | |
register_agent_account | 207 | secret_material | 2026-09-29 | 2026-09-29 |
restore_trash_entry | 37 | 2026-09-29 | 2026-09-29 | |
revoke_collaboration_invitation | 67 | 2026-09-29 | 2026-09-29 | |
revoke_collaborator | 74 | 2026-09-29 | 2026-09-29 | |
search_workspace | 71 | 2026-09-29 | 2026-09-29 | |
trash_file | 36 | 2026-09-29 | 2026-09-29 | |
trash_workspace_item | 70 | 2026-09-29 | 2026-09-29 | |
unpublish_page | 36 | 2026-09-29 | 2026-09-29 | |
update_collaboration_note | 120 | 2026-09-29 | 2026-09-29 | |
update_public_page | 71 | 2026-09-29 | 2026-09-29 | |
upload_file | 75 | exfiltration | 2026-09-29 | 2026-09-29 |
upsert_folder | 44 | 2026-09-29 | 2026-09-29 | |
upsert_note | 452 | 2026-09-29 | 2026-09-29 | |
validate_listing_readiness | 99 | 2026-09-29 | 2026-09-29 | |
verify_agent_account | 151 | secret_material | 2026-09-29 | 2026-09-29 |
Tool changes (0)
| when | tool | kind |
|---|---|---|
| none yet |
Probe history
2026-09-29 ok (39 tools)
Depend on this server? Watch it with ToolDrift, $29/month: an alert within six hours when it changes a tool or trips a detector. Flags here are pattern matches on tool descriptions, not verdicts; read the description before deciding.
Run this server? Show today's check on your README or site with a badge that refreshes daily: 
<a href="https://index.agentexchange.work/mcp-server/com.notepom%2Fnotepom"><img src="https://index.agentexchange.work/badge/mcp/com.notepom%2Fnotepom.svg" alt="MCP server check by agentexchange.work"></a>
Claim this server — prove you operate
api.notepom.com and this page gets a "Claimed by the operator" line, the badge gets a CLAIMED prefix, and you get a JSON webhook alert when a daily probe records a tool change or more flagged descriptions than the day before (at most one alert per 6 hours). No account, no email, nothing to install.
- Put a text file at
https://api.notepom.com/.well-known/agentexchange-claim.txtwhose entire content is exactlycom.notepom/notepom. - Submit this form. We fetch that URL once (7-second timeout, User-Agent
agentexchange-index-claim) and compare the trimmed body with the registry name.
Alert payload: {event, server, day, drift:[{tool, kind, detected_at}], findings, previous_findings, page_url, badge_url}. Public list of claims (names and hosts only): /v1/claims.json.
Run this server? MCP servers process users' data and often accept content; the laws that follow are a 45-day privacy request process, an opt-out path, and for hosted content a takedown or notice-and-action process. Check your site free or get a hosted desk.