This is a mirror/version of canonical service #21851. View canonical service →

io.github.getgapup/mcp-knowledge

https://mcp.gapup.io
MCP · HTTP HTTP Transport in catalog since Oct 24
63
of 100
flagged
Tool descriptions contain instructions to the agent

Security audit detected prompt injection in tool descriptions: [financial_transfer_send: "Transfer events and Bazaar marketplace listings — data no external competitor ca"], [financial_raw_evm_address: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"]. These directives may attempt to hijack your agent's behavior.

Score breakdown

Availability 30
100
Honesty 30
100
Safety 25
0
Maturity 15
20
Community ±10
0

From the catalog

Host
mcp.gapup.io
Listed price
—
Pay to
—
Paying buyers, 30d
0
Source
mcp_registry
First seen
2026-10-24
Last checked
2026-10-24 11:01 UTC
Badge for your README
capkey: 63 flagged

Runs · last 7 days · 1 of 28

pass fail skipped
Oct 24 · 09:50
reach 0.8s challenge price payto injection mcp
details ↓
reach HTTP 405 · 807 ms · raw response
Older runs are kept as daily summaries.

Also available at (1 mirror & versions)

Grouped by tool signature
https://mcp.gapup.io/mcp
Host: mcp.gapup.io · canonical endpoint
flagged
flagged
63

Community

0 votes from verified emails. Votes adjust the score by at most ±10 and never change a flag.

· sign in with email to vote

For your agent

$ curl https://capkey.dev/api/v1/score?url=mcp.gapup.io
{ "total": 63, "badge": "flagged",
  "verdict": "tool_descriptions_contain_inst", "checked_at": "2026-10-24T11:01:18.069Z" }