Agent Economy Index · MCP census · probed 2026-09-29 · JSON

io.github.snowbikemike/tascan-mcp

Verdict: 10 tool description(s) carry model-directed, hidden, secret-material or exfiltration patterns. Endpoint https://app.tascan.io/mcp. Latency 16,147 ms.

Tools (105 fingerprinted)

tooldescription lengthflagsfirst seenlast seen
tascan_add_subtasks3982026-09-292026-09-29
tascan_add_tasks5232026-09-292026-09-29
tascan_analyze_issue3262026-09-292026-09-29
tascan_apply_template682026-09-292026-09-29
tascan_assess_condition3532026-09-292026-09-29
tascan_auto_resolve3262026-09-292026-09-29
tascan_cancel_scheduled_sms1682026-09-292026-09-29
tascan_claim_run7752026-09-292026-09-29
tascan_complete_subtask3052026-09-292026-09-29
tascan_complete_task4562026-09-292026-09-29
tascan_condition_history1772026-09-292026-09-29
tascan_control_fanout1,1252026-09-292026-09-29
tascan_create_cycle2,5022026-09-292026-09-29
tascan_create_event2402026-09-292026-09-29
tascan_create_fanout1,127secret_material2026-09-292026-09-29
tascan_create_invoice5492026-09-292026-09-29
tascan_create_project602026-09-292026-09-29
tascan_create_worker482026-09-292026-09-29
tascan_create_zone2782026-09-292026-09-29
tascan_delegate_to_agent782secret_material2026-09-292026-09-29
tascan_delete_event912026-09-292026-09-29
tascan_delete_project892026-09-292026-09-29
tascan_delete_subtask662026-09-292026-09-29
tascan_delete_task722026-09-292026-09-29
tascan_delete_worker2012026-09-292026-09-29
tascan_dispatch_instruction3412026-09-292026-09-29
tascan_dispatch_to_agent7372026-09-292026-09-29
tascan_dispatcher_action6112026-09-292026-09-29
tascan_evidence_policy6092026-09-292026-09-29
tascan_find2352026-09-292026-09-29
tascan_find_duplicate_workers2882026-09-292026-09-29
tascan_finish_run9382026-09-292026-09-29
tascan_generate_qr802026-09-292026-09-29
tascan_generate_report5512026-09-292026-09-29
tascan_get_budget388secret_material2026-09-292026-09-29
tascan_get_build5672026-09-292026-09-29
tascan_get_build_diff7402026-09-292026-09-29
tascan_get_build_file5812026-09-292026-09-29
tascan_get_cycle_report7932026-09-292026-09-29
tascan_get_device189secret_material2026-09-292026-09-29
tascan_get_event632026-09-292026-09-29
tascan_get_fanout7382026-09-292026-09-29
tascan_get_project332026-09-292026-09-29
tascan_get_receipt1,0132026-09-292026-09-29
tascan_get_report3212026-09-292026-09-29
tascan_get_scan_history3762026-09-292026-09-29
tascan_get_sms_status1752026-09-292026-09-29
tascan_get_task9942026-09-292026-09-29
tascan_get_task_trail2742026-09-292026-09-29
tascan_get_usage577secret_material2026-09-292026-09-29
tascan_get_worker1672026-09-292026-09-29
tascan_get_worker_passport2422026-09-292026-09-29
tascan_heartbeat_run3712026-09-292026-09-29
tascan_invite_worker4452026-09-292026-09-29
tascan_list_agents2052026-09-292026-09-29
tascan_list_assets1592026-09-292026-09-29
tascan_list_cycles3682026-09-292026-09-29
tascan_list_delegations224secret_material2026-09-292026-09-29
tascan_list_devices220secret_material2026-09-292026-09-29
tascan_list_events452026-09-292026-09-29
tascan_list_invites2232026-09-292026-09-29
tascan_list_invoices1582026-09-292026-09-29
tascan_list_issues1992026-09-292026-09-29
tascan_list_payments1962026-09-292026-09-29
tascan_list_projects442026-09-292026-09-29
tascan_list_reports1622026-09-292026-09-29
tascan_list_scheduled_sms2262026-09-292026-09-29
tascan_list_subtasks1242026-09-292026-09-29
tascan_list_tags1022026-09-292026-09-29
tascan_list_tasks382026-09-292026-09-29
tascan_list_templates502026-09-292026-09-29
tascan_list_verifications2952026-09-292026-09-29
tascan_list_workers2012026-09-292026-09-29
tascan_list_zones1182026-09-292026-09-29
tascan_merge_workers4622026-09-292026-09-29
tascan_org_analytics2492026-09-292026-09-29
tascan_post_evidence504secret_material2026-09-292026-09-29
tascan_post_message1,011secret_material2026-09-292026-09-29
tascan_project_digest3762026-09-292026-09-29
tascan_query_responses4432026-09-292026-09-29
tascan_quickstart6542026-09-292026-09-29
tascan_recommend_fix2932026-09-292026-09-29
tascan_record_integration1,0502026-09-292026-09-29
tascan_register_agent3372026-09-292026-09-29
tascan_register_asset2162026-09-292026-09-29
tascan_register_tag2022026-09-292026-09-29
tascan_reply_with_list4482026-09-292026-09-29
tascan_request_payment3712026-09-292026-09-29
tascan_request_verification4052026-09-292026-09-29
tascan_revoke_delegation3542026-09-292026-09-29
tascan_revoke_device392secret_material2026-09-292026-09-29
tascan_schedule_sms7012026-09-292026-09-29
tascan_search_marketplace4302026-09-292026-09-29
tascan_send_sms4612026-09-292026-09-29
tascan_send_task_email1742026-09-292026-09-29
tascan_server_info2392026-09-292026-09-29
tascan_update_event1372026-09-292026-09-29
tascan_update_invoice1132026-09-292026-09-29
tascan_update_project482026-09-292026-09-29
tascan_update_subtask982026-09-292026-09-29
tascan_update_task2832026-09-292026-09-29
tascan_update_worker442026-09-292026-09-29
tascan_update_zone1422026-09-292026-09-29
tascan_verify_receipt760url_in_description2026-09-292026-09-29
tascan_zone_compliance3592026-09-292026-09-29

Tool changes (0)

whentoolkind
none yet

Probe history

2026-09-29 ok (105 tools)

Depend on this server? Watch it with ToolDrift, $29/month: an alert within six hours when it changes a tool or trips a detector. Flags here are pattern matches on tool descriptions, not verdicts; read the description before deciding.
Run this server? Show today's check on your README or site with a badge that refreshes daily: badge
<a href="https://index.agentexchange.work/mcp-server/io.github.snowbikemike%2Ftascan-mcp"><img src="https://index.agentexchange.work/badge/mcp/io.github.snowbikemike%2Ftascan-mcp.svg" alt="MCP server check by agentexchange.work"></a>
Claim this server — prove you operate app.tascan.io and this page gets a "Claimed by the operator" line, the badge gets a CLAIMED prefix, and you get a JSON webhook alert when a daily probe records a tool change or more flagged descriptions than the day before (at most one alert per 6 hours). No account, no email, nothing to install.
  1. Put a text file at https://app.tascan.io/.well-known/agentexchange-claim.txt whose entire content is exactly io.github.snowbikemike/tascan-mcp.
  2. Submit this form. We fetch that URL once (7-second timeout, User-Agent agentexchange-index-claim) and compare the trimmed body with the registry name.

Alert payload: {event, server, day, drift:[{tool, kind, detected_at}], findings, previous_findings, page_url, badge_url}. Public list of claims (names and hosts only): /v1/claims.json.

Run this server? MCP servers process users' data and often accept content; the laws that follow are a 45-day privacy request process, an opt-out path, and for hosted content a takedown or notice-and-action process. Check your site free or get a hosted desk.