Agent Economy Index · MCP census · probed 2026-09-29 · JSON

dev.mcphost/mcphost

Verdict: 4 tool description(s) carry model-directed, hidden, secret-material or exfiltration patterns. Endpoint https://mcphost.dev/mcp. Latency 12,770 ms.

Tools (136 fingerprinted)

tooldescription lengthflagsfirst seenlast seen
billing.checkout2292026-09-292026-09-29
billing.plans1492026-09-292026-09-29
billing.status832026-09-292026-09-29
host.agent.contact_accept1552026-09-292026-09-29
host.agent.contact_deny1502026-09-292026-09-29
host.agent.contact_request4032026-09-292026-09-29
host.agent.contacts1802026-09-292026-09-29
host.agent.contacts_import3382026-09-292026-09-29
host.agent.lookup2452026-09-292026-09-29
host.agent.mute2322026-09-292026-09-29
host.agent.profile_set4212026-09-292026-09-29
host.agent.search2252026-09-292026-09-29
host.agent.unmute142026-09-292026-09-29
host.agent.whoami1662026-09-292026-09-29
host.bridge_test1002026-09-292026-09-29
host.catalog.get902026-09-292026-09-29
host.catalog.search702026-09-292026-09-29
host.changelog1362026-09-292026-09-29
host.channel.close1192026-09-292026-09-29
host.channel.freeze1202026-09-292026-09-29
host.channel.open2712026-09-292026-09-29
host.channel.post2162026-09-292026-09-29
host.channel.read2122026-09-292026-09-29
host.channel.unfreeze792026-09-292026-09-29
host.docs.delete982026-09-292026-09-29
host.docs.get1612026-09-292026-09-29
host.docs.index_config2992026-09-292026-09-29
host.docs.list2412026-09-292026-09-29
host.docs.purge1602026-09-292026-09-29
host.docs.put4202026-09-292026-09-29
host.docs.reindex1842026-09-292026-09-29
host.docs.search3692026-09-292026-09-29
host.docs.status2962026-09-292026-09-29
host.enduser.assertion_secret_rotate3142026-09-292026-09-29
host.enduser.audit1492026-09-292026-09-29
host.enduser.export1632026-09-292026-09-29
host.enduser.get1802026-09-292026-09-29
host.enduser.list2302026-09-292026-09-29
host.enduser.purge2452026-09-292026-09-29
host.enduser.revoke1422026-09-292026-09-29
host.enduser.unrevoke722026-09-292026-09-29
host.enduser.whoami2102026-09-292026-09-29
host.export4462026-09-292026-09-29
host.group.add562026-09-292026-09-29
host.group.create802026-09-292026-09-29
host.group.list512026-09-292026-09-29
host.group.remove612026-09-292026-09-29
host.key_rotate2532026-09-292026-09-29
host.msg.ack1302026-09-292026-09-29
host.msg.block2002026-09-292026-09-29
host.msg.inbox1752026-09-292026-09-29
host.msg.reply2532026-09-292026-09-29
host.msg.send3422026-09-292026-09-29
host.msg.thread1252026-09-292026-09-29
host.msg.unblock152026-09-292026-09-29
host.msg.wait2522026-09-292026-09-29
host.oauth.audit2882026-09-292026-09-29
host.oauth.audit_export2042026-09-292026-09-29
host.oauth.client_approve1032026-09-292026-09-29
host.oauth.client_deny1042026-09-292026-09-29
host.oauth.doctor2742026-09-292026-09-29
host.oauth.grant_revoke148secret_material2026-09-292026-09-29
host.oauth.grants2682026-09-292026-09-29
host.oauth.issuer_remove1062026-09-292026-09-29
host.oauth.issuer_set2762026-09-292026-09-29
host.oauth.issuers942026-09-292026-09-29
host.oauth.pending752026-09-292026-09-29
host.oauth.policy2002026-09-292026-09-29
host.oauth.policy_set6332026-09-292026-09-29
host.oauth.provider1502026-09-292026-09-29
host.oauth.provider_remove1692026-09-292026-09-29
host.oauth.provider_set3212026-09-292026-09-29
host.oauth.revoke_all121secret_material2026-09-292026-09-29
host.oauth.scope_set2192026-09-292026-09-29
host.oauth.scopes592026-09-292026-09-29
host.oauth.trusted_issuer_remove1112026-09-292026-09-29
host.oauth.trusted_issuer_set4012026-09-292026-09-29
host.oauth.trusted_issuers982026-09-292026-09-29
host.progress2972026-09-292026-09-29
host.quickstart3832026-09-292026-09-29
host.redeem2542026-09-292026-09-29
host.registry_publish1312026-09-292026-09-29
host.runs.cancel1592026-09-292026-09-29
host.runs.get1542026-09-292026-09-29
host.runs.list2282026-09-292026-09-29
host.runs.part1972026-09-292026-09-29
host.runs.purge1942026-09-292026-09-29
host.runs.wait1922026-09-292026-09-29
host.secret_list532026-09-292026-09-29
host.secret_set622026-09-292026-09-29
host.self_offboard4802026-09-292026-09-29
host.share.caller_limit2592026-09-292026-09-29
host.share.caller_limit_remove532026-09-292026-09-29
host.state.delete602026-09-292026-09-29
host.state.delete_rows1502026-09-292026-09-29
host.state.get1202026-09-292026-09-29
host.state.insert2252026-09-292026-09-29
host.state.list1122026-09-292026-09-29
host.state.query1902026-09-292026-09-29
host.state.set1822026-09-292026-09-29
host.state.table_create2732026-09-292026-09-29
host.state.table_drop452026-09-292026-09-29
host.table.append2232026-09-292026-09-29
host.table.create4042026-09-292026-09-29
host.table.describe4252026-09-292026-09-29
host.table.drop452026-09-292026-09-29
host.table.list1162026-09-292026-09-29
host.table.model_set2652026-09-292026-09-29
host.table.models1362026-09-292026-09-29
host.table.query2812026-09-292026-09-29
host.table.schema1312026-09-292026-09-29
host.tool_call5892026-09-292026-09-29
host.tool_diff832026-09-292026-09-29
host.tool_history1512026-09-292026-09-29
host.tool_list352026-09-292026-09-29
host.tool_logs642026-09-292026-09-29
host.tool_publish3412026-09-292026-09-29
host.tool_remove422026-09-292026-09-29
host.tool_rollback2062026-09-292026-09-29
host.tool_run1222026-09-292026-09-29
host.tool_share2972026-09-292026-09-29
host.tool_spec_shared1982026-09-292026-09-29
host.tool_test1052026-09-292026-09-29
host.tool_unshare352026-09-292026-09-29
host.trigger.fire1372026-09-292026-09-29
host.trigger.get762026-09-292026-09-29
host.trigger.list1952026-09-292026-09-29
host.trigger.pause762026-09-292026-09-29
host.trigger.remove712026-09-292026-09-29
host.trigger.replay4012026-09-292026-09-29
host.trigger.resume1302026-09-292026-09-29
host.trigger.set9962026-09-292026-09-29
host.trigger.test6032026-09-292026-09-29
host.usage4802026-09-292026-09-29
host.whoami109secret_material2026-09-292026-09-29
signup377secret_material2026-09-292026-09-29

Tool changes (0)

whentoolkind
none yet

Probe history

2026-09-29 ok (136 tools)

Depend on this server? Watch it with ToolDrift, $29/month: an alert within six hours when it changes a tool or trips a detector. Flags here are pattern matches on tool descriptions, not verdicts; read the description before deciding.
Run this server? Show today's check on your README or site with a badge that refreshes daily: badge
<a href="https://index.agentexchange.work/mcp-server/dev.mcphost%2Fmcphost"><img src="https://index.agentexchange.work/badge/mcp/dev.mcphost%2Fmcphost.svg" alt="MCP server check by agentexchange.work"></a>
Claim this server — prove you operate mcphost.dev and this page gets a "Claimed by the operator" line, the badge gets a CLAIMED prefix, and you get a JSON webhook alert when a daily probe records a tool change or more flagged descriptions than the day before (at most one alert per 6 hours). No account, no email, nothing to install.
  1. Put a text file at https://mcphost.dev/.well-known/agentexchange-claim.txt whose entire content is exactly dev.mcphost/mcphost.
  2. Submit this form. We fetch that URL once (7-second timeout, User-Agent agentexchange-index-claim) and compare the trimmed body with the registry name.

Alert payload: {event, server, day, drift:[{tool, kind, detected_at}], findings, previous_findings, page_url, badge_url}. Public list of claims (names and hosts only): /v1/claims.json.

Run this server? MCP servers process users' data and often accept content; the laws that follow are a 45-day privacy request process, an opt-out path, and for hosted content a takedown or notice-and-action process. Check your site free or get a hosted desk.