io.github.realopengroup/mcp-server

https://mcp.realopen.app/mcp
MCP · HTTP HTTP Transport in catalog since Oct 24
63
of 100
flagged
Tool descriptions contain instructions to the agent

Security audit detected prompt injection in tool descriptions: [imperative_do_not_tell: "Do NOT tell the user"], [financial_transfer_send: "transfer deposit address, and the multi-asset menu; the user clicks through the "], [financial_transfer_send: "transfer verification method — the other way to prove ownership of a crypto wall"]. These directives may attempt to hijack your agent's behavior.

Availability 100
Weight 30% · 7-day uptime
Honesty 100
Weight 30% · price match
Safety 0
Weight 25% · prompt injection
Maturity 20
Weight 15% · longevity

Service Metadata

Host
Listed Price
Free / Undisclosed
Payee (Catalog)
—
30-day Unique Payers
0 buyers
First Seen
2026-10-24
Last Diagnostic Run
2026-10-24 14:01 UTC
Discovered via
mcp_registry
Embed Badge

Diagnostic Runs

pass fail skipped
Oct 24 · 09:47
reach 3.1s mcp_list injection
details ↓
mcp_list Pass: discovered 26 tools (search_assets, get_snippets, get_referral_link)
reach HTTP 406 · 3064 ms · raw response

Community

0 votes from verified emails. Votes adjust the score by at most ±10 and never change a flag.

· sign in with email to vote

For your agent

$ curl https://capkey.dev/api/v1/score?url=mcp.realopen.app/mcp
{ "total": 63, "badge": "flagged",
  "verdict": "tool_descriptions_contain_inst", "checked_at": "2026-10-24T14:01:55.038Z" }