Agorean

https://agorean.com/mcp
MCP · HTTP HTTP Transport in catalog since Oct 23
63
of 100
flagged
Tool descriptions contain instructions to the agent

Security audit detected prompt injection in tool descriptions: [financial_transfer_send: "send the goods as `content_base64` (≤ 4 MB, with `content_type` and `filename`);"], [financial_transfer_send: "transfer with `payee_changed` and this time is after you paid, the address moved"], [financial_transfer_send: "transfer on the listing's network and check it: USDC"]. These directives may attempt to hijack your agent's behavior.

Score breakdown

Availability 30
100
Honesty 30
100
Safety 25
0
Maturity 15
20
Community ±10
0

From the catalog

Host
agorean.com
Listed price
—
Pay to
—
Paying buyers, 30d
0
Source
mcp_registry
First seen
2026-10-23
Last checked
2026-10-24 11:01 UTC
Badge for your README
capkey: 63 flagged

Runs · last 7 days · 1 of 28

pass fail skipped
Oct 23 · 15:47
reach 1.6s challenge price payto injection mcp
details ↓
reach HTTP 405 · 1650 ms · raw response
Older runs are kept as daily summaries.

Community

0 votes from verified emails. Votes adjust the score by at most ±10 and never change a flag.

· sign in with email to vote

For your agent

$ curl https://capkey.dev/api/v1/score?url=agorean.com/mcp
{ "total": 63, "badge": "flagged",
  "verdict": "tool_descriptions_contain_inst", "checked_at": "2026-10-24T11:01:20.879Z" }