Skip to content

Free private tools/list baseline for your agent-facing endpoint #11

Open

Description

@vdineshk

Hi - I run Dominion Observatory (https://dominionobservatory.com), which checks MCP tool manifests for changes. An agent builds against the tool description and input schema it last read. If either changes silently, its calls start failing or return something different, and it has no way to notice.

I read your public endpoint https://mcp.garbage.yukai.dev/mcp today with an unauthenticated JSON tools/list request (standard MCP initialize handshake, no credentials):

  • 4 tools
  • SHA-256 of the tools array (sorted keys, compact JSON): 41bba85edf691f3bd46a6e4ce2b7d7da40765c53935bb831c54148c506d63f86
  • first tools: list_cities, find_nearby_points, search_points
  • read at 2026-10-21T01:42Z

I kept this snapshot private. If a baseline JSON or a fresh comparison after your next release would be useful, reply here or email info@dominionobservatory.com. Free. I only listed the tools; I did not call them, and this is not a vulnerability report or a claim about access to tool execution.

For ongoing monitoring, Dominion is US$29/server/month: scheduled checks, email alerts and optional webhook, with no guaranteed detection interval. Monitoring history is public. New stored captures are Ed25519-signed; legacy captures remain unsigned. This offer covers the public no-auth JSON manifest, not authenticated or per-client views. Details: https://dominionobservatory.com/monitor

If this isn't useful or issues are the wrong place, say so and I'll leave it there.

Dinesh, Dominion Observatory

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions