Agent Economy Index · MCP census · probed 2026-09-29 · JSON

io.github.WellApp-ai/well-mcp

Verdict: 10 tool description(s) carry model-directed, hidden, secret-material or exfiltration patterns. Endpoint https://api.wellapp.ai/v1/mcp. Latency 6,217 ms.

Tools (94 fingerprinted)

tooldescription lengthflagsfirst seenlast seen
well_add_contact_channel7512026-09-292026-09-29
well_assign_account1,3442026-09-292026-09-29
well_assign_missing_invoice_owners1,2822026-09-292026-09-29
well_claim_statement_draft799url_in_description2026-09-292026-09-29
well_create_company5432026-09-292026-09-29
well_create_company_candidate8652026-09-292026-09-29
well_create_company_workspace8002026-09-292026-09-29
well_create_invoice_document1,1202026-09-292026-09-29
well_create_invoice_from_data1,2652026-09-292026-09-29
well_create_person3752026-09-292026-09-29
well_create_statement_upload1,317exfiltration2026-09-292026-09-29
well_delete_company4282026-09-292026-09-29
well_delete_invoice2502026-09-292026-09-29
well_delete_person4292026-09-292026-09-29
well_enqueue_invoice_fetch1,9802026-09-292026-09-29
well_get_accounting_settings9762026-09-292026-09-29
well_get_connector_coverage1,4102026-09-292026-09-29
well_get_customer_einvoicing_details1,3292026-09-292026-09-29
well_get_design_tokens1,0832026-09-292026-09-29
well_get_entity6592026-09-292026-09-29
well_get_graph8622026-09-292026-09-29
well_get_investment_holdings7892026-09-292026-09-29
well_get_own_company1,4292026-09-292026-09-29
well_get_schema1,5082026-09-292026-09-29
well_get_session_digest3,6482026-09-292026-09-29
well_get_skill6252026-09-292026-09-29
well_get_statement_import_result1,379exfiltration2026-09-292026-09-29
well_get_worklist_status4,7502026-09-292026-09-29
well_invite_members1,2902026-09-292026-09-29
well_invoke_connector_tool1,2962026-09-292026-09-29
well_list_account_balances6,0992026-09-292026-09-29
well_list_accounts_needing_company3,8662026-09-292026-09-29
well_list_burn_exemptions4,4812026-09-292026-09-29
well_list_cash_scope3,6502026-09-292026-09-29
well_list_connector_tools9362026-09-292026-09-29
well_list_connectors12,5532026-09-292026-09-29
well_list_counterparties4,639hidden_instruction2026-09-292026-09-29
well_list_ledger_accounts9322026-09-292026-09-29
well_list_member_candidates3,2382026-09-292026-09-29
well_list_missing_invoice_owners1,9782026-09-292026-09-29
well_list_missing_invoices4,4202026-09-292026-09-29
well_list_periods10,1852026-09-292026-09-29
well_list_recurring_contexts3,8482026-09-292026-09-29
well_list_retargetable_connectors9582026-09-292026-09-29
well_list_uncategorized_window2,3532026-09-292026-09-29
well_list_unposted_journals2,505hidden_instruction2026-09-292026-09-29
well_list_unposted_transactions3,3702026-09-292026-09-29
well_list_workspaces3,8212026-09-292026-09-29
well_preview_invoice_fetch7,4392026-09-292026-09-29
well_preview_provider_export2,821exfiltration2026-09-292026-09-29
well_propose_next_steps2,7282026-09-292026-09-29
well_query_records6,6602026-09-292026-09-29
well_remove_contact_channel3542026-09-292026-09-29
well_render_burn5,5272026-09-292026-09-29
well_render_canvas2,2812026-09-292026-09-29
well_render_cash_flow_bridge2,8142026-09-292026-09-29
well_render_cash_forecast4,4722026-09-292026-09-29
well_render_cash_position3,5882026-09-292026-09-29
well_render_cost_structure4,7182026-09-292026-09-29
well_render_mrr5,6422026-09-292026-09-29
well_render_runway4,5582026-09-292026-09-29
well_repost_journals1,5502026-09-292026-09-29
well_resolve_reconciliation_task4042026-09-292026-09-29
well_resolve_register_diff_gap7632026-09-292026-09-29
well_retarget_connectors1,010secret_material2026-09-292026-09-29
well_run_register_diff1,5222026-09-292026-09-29
well_search_company_registry8362026-09-292026-09-29
well_search_context7322026-09-292026-09-29
well_search_skill9952026-09-292026-09-29
well_set_counterparty_default_category2,1792026-09-292026-09-29
well_set_own_company8842026-09-292026-09-29
well_set_transaction_category2,1782026-09-292026-09-29
well_set_transaction_ledger_account1,6582026-09-292026-09-29
well_show_accounting_settings9642026-09-292026-09-29
well_show_canvas1,5472026-09-292026-09-29
well_show_company_candidates1,0242026-09-292026-09-29
well_show_invoice_design9922026-09-292026-09-29
well_show_records6,6762026-09-292026-09-29
well_show_retargetable_connectors1,129secret_material2026-09-292026-09-29
well_show_workspace_picker1,7222026-09-292026-09-29
well_sum_invoices4,6842026-09-292026-09-29
well_sum_transactions9,2312026-09-292026-09-29
well_switch_workspace5,9882026-09-292026-09-29
well_update_company2,2632026-09-292026-09-29
well_update_invoice7252026-09-292026-09-29
well_update_invoice_design1,0582026-09-292026-09-29
well_update_person4942026-09-292026-09-29
well_upload_document1,357exfiltration2026-09-292026-09-29
well_upload_statement_bytes1,016exfiltration2026-09-292026-09-29
well_upload_statement_content1,158exfiltration2026-09-292026-09-29
well_upsert_accounting_settings1,3362026-09-292026-09-29
well_upsert_canvas2,5512026-09-292026-09-29
well_wait_for_process1,4132026-09-292026-09-29
well_wait_for_selection6,2252026-09-292026-09-29

Tool changes (0)

whentoolkind
none yet

Probe history

2026-09-29 ok (94 tools)

Depend on this server? Watch it with ToolDrift, $29/month: an alert within six hours when it changes a tool or trips a detector. Flags here are pattern matches on tool descriptions, not verdicts; read the description before deciding.
Run this server? Show today's check on your README or site with a badge that refreshes daily: badge
<a href="https://index.agentexchange.work/mcp-server/io.github.WellApp-ai%2Fwell-mcp"><img src="https://index.agentexchange.work/badge/mcp/io.github.WellApp-ai%2Fwell-mcp.svg" alt="MCP server check by agentexchange.work"></a>
Claim this server — prove you operate api.wellapp.ai and this page gets a "Claimed by the operator" line, the badge gets a CLAIMED prefix, and you get a JSON webhook alert when a daily probe records a tool change or more flagged descriptions than the day before (at most one alert per 6 hours). No account, no email, nothing to install.
  1. Put a text file at https://api.wellapp.ai/.well-known/agentexchange-claim.txt whose entire content is exactly io.github.WellApp-ai/well-mcp.
  2. Submit this form. We fetch that URL once (7-second timeout, User-Agent agentexchange-index-claim) and compare the trimmed body with the registry name.

Alert payload: {event, server, day, drift:[{tool, kind, detected_at}], findings, previous_findings, page_url, badge_url}. Public list of claims (names and hosts only): /v1/claims.json.

Run this server? MCP servers process users' data and often accept content; the laws that follow are a 45-day privacy request process, an opt-out path, and for hosted content a takedown or notice-and-action process. Check your site free or get a hosted desk.

Pay-per-call tools and data for agents, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · the x402 directory · sector gap lists (card or USDC) · MCP integrity report.