Loading…
Publish posts, manage drafts, generate AI cover images, and pull analytics from Misar.Blog.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The misarblog MCP server exposes 23 tools, focused primarily on AI capabilities. Its published description reads: "Publish posts, manage drafts, generate AI cover images, and pull analytics from Misar.Blog". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates misarblog F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Hidden instructions in a tool description" and "Data-exfiltration parameters". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check misarblog's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add misarblog to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://www.misar.blog/api/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Show the account's current plan, how much of each quota remains, and what a higher plan unlocks. Called with no arguments it only reads — useful any time, not just after hitting a limit, and the natur
Fetch the authenticated account's own creator profile: id, username, display name, bio, public profile URL, and whether Stripe payouts are connected. Use it to confirm which account a key belongs to b
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: get_series
A tool description contains imperative text aimed at the model (e.g. "ignore previous", "before answering read …").
d a series slug before calling add_to_series, or to check whether a series already exists before create_series makes a …RecommendationRemove model-directed instructions from tool descriptions.
tool: upgrade
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
f. Requires an API key. No billing state changes unless you pass startRecommendationRemove side-channel parameters; constrain tool inputs.
tool: upgrade
One tool reads private data, ingests untrusted content, AND can send data outbound — the three preconditions for autonomous data theft in a single call. A prompt injection reaching this tool can exfiltrate secrets with no further step.
preview), and `open` LAUNCHES a checkout page in the user's browser. Neither charges a card bRecommendationSplit the capabilities across separate least-privilege tools so no single tool can read secrets, read untrusted input, and reach the network at once.
tool: list_my_articles
A tool description tries to alter the model’s use of another tool.
cle body — call get_article for that. `total` counts all matches, not justRecommendationDescriptions must describe only their own tool.
tool: get_article
A tool description tries to alter the model’s use of another tool.
Use this after list_my_articles or search_articles has given you a slug and youRecommendationDescriptions must describe only their own tool.
tool: publish_article
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "cover_image_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: publish_article
A tool description tries to alter the model’s use of another tool.
not ready, use create_draft instead and publish later. Each call creates aRecommendationDescriptions must describe only their own tool.
tool: create_draft
A tool description tries to alter the model’s use of another tool.
eds review, and publish_article only when it should go live. The draft can be eRecommendationDescriptions must describe only their own tool.
tool: update_article
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
lt. Requires an API key, and the account must own the article. Errors iRecommendationRemove side-channel parameters; constrain tool inputs.
tool: search_articles
A tool description tries to alter the model’s use of another tool.
— so reach for list_my_articles when you want your unpublished work. Reads onlRecommendationDescriptions must describe only their own tool.
tool: research_topic
A tool description tries to alter the model’s use of another tool.
Misar.Blog use search_articles. Nothing is saved: no draft, article, or fileRecommendationDescriptions must describe only their own tool.
tool: generate_title_seo
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
le. Requires an API key and consumes AI credits per call. Generative, sRecommendationRemove side-channel parameters; constrain tool inputs.
tool: generate_title_seo
A tool description tries to alter the model’s use of another tool.
r retitled; use update_article to apply a title. Requires an API key and consuRecommendationDescriptions must describe only their own tool.
tool: suggest_titles
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "context"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: suggest_titles
A tool description tries to alter the model’s use of another tool.
y a choice with update_article. Requires an API key and consumes AI credits peRecommendationDescriptions must describe only their own tool.
tool: generate_cover_image
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
s. Requires an API key. The resulting URL is public and cannot be deleRecommendationRemove side-channel parameters; constrain tool inputs.
tool: get_series
A tool description tries to alter the model’s use of another tool.
y exists before create_series makes a duplicate. Reads only; nothing is creaRecommendationDescriptions must describe only their own tool.
tool: create_series
A tool description tries to alter the model’s use of another tool.
each one. Call get_series first to avoid making a second series with theRecommendationDescriptions must describe only their own tool.
tool: add_to_series
A tool description tries to alter the model’s use of another tool.
y SLUG, not id: get_series supplies the series slug and the article toolsRecommendationDescriptions must describe only their own tool.
tool: list_newsletter_subscribers
A tool description tries to alter the model’s use of another tool.
NT to them, use list_newsletter_issues instead. Reads only — no email is sent and noRecommendationDescriptions must describe only their own tool.
tool: list_newsletter_issues
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ue. Requires an API key. Returns each issue with its subject, status anRecommendationRemove side-channel parameters; constrain tool inputs.
tool: list_newsletter_issues
A tool description tries to alter the model’s use of another tool.
eives them, use list_newsletter_subscribers. Reads only — this neither sends nor cancels aRecommendationDescriptions must describe only their own tool.
tool: get_reactions
A tool description tries to alter the model’s use of another tool.
Use it before add_reaction or remove_reaction so you know the current statRecommendationDescriptions must describe only their own tool.
tool: add_reaction
A tool description tries to alter the model’s use of another tool.
on to undo, and get_reactions to see the resulting totals.RecommendationDescriptions must describe only their own tool.
tool: remove_reaction
A tool description tries to alter the model’s use of another tool.
n API key. Call get_reactions first if you need to know what is currently setRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: upgrade
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_profile
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_analytics_summary
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: list_my_articles
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_article
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: publish_article
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: create_draft
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: update_article
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: search_articles
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: research_topic
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: generate_title_seo
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: suggest_titles
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: generate_cover_image
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_series
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: create_series
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: add_to_series
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: list_comments
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_follow_status
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: list_newsletter_subscribers
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: list_newsletter_issues
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_reactions
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: add_reaction
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: remove_reaction
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Summarise the account's performance over a trailing window: page views, gross and net revenue, and active subscriber count. Use it for 'how did I do this month' style questions. These are whole-accoun
List articles owned by the authenticated account, newest first, including drafts and scheduled posts. Use this to find your own work — it is the only listing that sees unpublished content. To search a
Fetch a single article by slug, including its full Markdown body. Use this after list_my_articles or search_articles has given you a slug and you need the actual content — for reading, editing, or rep
Create a new article and make it live immediately, or schedule it for a future time. This PUBLISHES: without schedule_at the article is world-readable the moment this returns, at the visibility you ch
Save an article as an unpublished draft. Nothing becomes visible to readers: use this whenever the work still needs review, and publish_article only when it should go live. The draft can be edited aft
Change the title, body, or tags of an article or draft that already exists. Only the fields you pass are touched; omitted fields keep their current values. Passing `tags` REPLACES the whole tag list r
Search PUBLISHED articles across all of Misar.Blog, including other creators' work. Use this for discovery, research, and competitive reading. It never returns drafts, scheduled, or private posts — no
Research a topic with AI and return insights, sources, and a suggested content outline. Use it at the START of a piece, before drafting — it produces raw material to write from, not a finished article
Generate 5 search-optimised article titles from a TOPIC OR KEYWORD, each with a keyword-strategy hint. Aims at high-volume, low-competition long-tail phrases and at AI answer engines (ChatGPT, Perplex
Generate 5 title options FROM AN EXISTING DRAFT, derived from what the article actually says. Pick between the two title tools by what you have in hand: use this one when the text exists and should dr
Generate an image from a text prompt with AI, upload it to the Misar.Blog CDN, and return its public URL for use as cover_image_url when publishing. Use it when no artwork exists yet; use upload_image
List every series the authenticated account owns. Despite the name this returns the whole collection, not one series — there is no single-series lookup. Use it to find a series slug before calling add
Create a new, empty series — a named collection that related articles can be added to. Creating the series does not move any article into it; follow up with add_to_series for each one. Call get_series
Place an existing article into an existing series, optionally at a specific position. Both the series and the article must already exist — this creates neither. Identify them by SLUG, not id: get_seri
Read the comment thread on one article, oldest first, paginated. Use it to review reader feedback or summarise a discussion. It reads comments only; there is no tool here for posting or moderating a r
Check whether the authenticated account follows a given profile, and how many followers that profile has. Use it before offering to follow someone, so you do not suggest an action that is already done
List the people subscribed to the authenticated account's newsletter, paginated. Use it to size the audience or export the list. For what has been SENT to them, use list_newsletter_issues instead. Rea
List newsletter issues the account has sent or scheduled, newest first. Use it to check what went out and when, or to confirm a scheduled send exists before queueing another. For WHO receives them, us
Read the reaction totals on one article, plus which reactions the authenticated account has left on it. Use it before add_reaction or remove_reaction so you know the current state — it is how you tell
Record one reaction — like, clap, or bookmark — from the authenticated account on an article. This acts publicly as the account holder, so only call it when the user has actually asked to react; do no
Withdraw one reaction the authenticated account previously left on an article. Removes exactly the type you name and leaves the account's other reactions on that article intact — removing 'like' does