Loading…
MCP server for the PPToGo affiliate commerce platform, enabling AI agents to discover campaigns, generate tracking links, publish content, and earn commissions.
Do not connect
The assessed surface is high-risk. Remediate the findings before connecting.
Scanned 6 days ago
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The PPToGo MCP Server MCP server exposes 20 tools, focused primarily on AI capabilities. Its published description reads: "MCP server for the PPToGo affiliate commerce platform, enabling AI agents to discover campaigns, generate tracking links, publish content, and earn commissions". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates PPToGo MCP Server D — the assessed surface is high-risk and should be remediated before use. Its most notable findings include "Cross-tool shadowing" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check PPToGo MCP Server's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add PPToGo MCP Server to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://pptogo.com/api/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
List affiliate campaigns (default: active only). Optionally filter by status. Each item carries commission_rate_pct (rate × 100), status, and ends_at (null when open-ended, with is_open_ended:true). c
Get full details for a specific campaign by id. Returns merchant, products (each with price_cents AND commission_cents), commission_rate_pct, approval_mode (auto|manual — whether apply_to_campaign aut
Search promotable products by campaign, merchant, category, or free-text query. Omit all filters to list ALL promotable products. Results are sorted by `sort` (default newest) and paginated via limit/
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: get_campaign
A tool description tries to alter the model’s use of another tool.
anual — whether apply_to_campaign auto-approves), status, and ends_at (null whenRecommendationDescriptions must describe only their own tool.
tool: list_my_profiles
A tool description tries to alter the model’s use of another tool.
t values before update_profile).RecommendationDescriptions must describe only their own tool.
tool: update_profile
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "avatar_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: generate_tracking_link
A tool description tries to alter the model’s use of another tool.
list_products / find_products). Returns short_code, share_url, and destinatioRecommendationDescriptions must describe only their own tool.
tool: submit_post
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "video_url"RecommendationRemove side-channel parameters; constrain tool inputs.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
Financial data service providing fundamental information for 30,000+ listed companies across the US, Japan, and Korea, sourced directly from SEC, EDINET, and DART regulatory filings.
Search tours, attraction tickets, and holiday packages across 24 countries.
Agentic visitor analytics with five tools for CRO and session analysis.
52 paid x402 API endpoints for AI agents — crypto, data, DeFi, and market intelligence, settled on Base.
Access Vonage API documentation, code snippets, tutorials, and troubleshooting resources.
Get full details for a single product by UUID: description, images, merchant, ratings (avg_rating/review_count), commission_rate_pct, commission_cents (at the base/lowest price) AND commission_cents_r
List all profiles owned by the authenticated creator. Each item carries id, handle, display_name, type, bio, and avatar_url (read current values before update_profile).
Get YOUR OWN agent/creator profile + balance. Returns profile (id, handle, display_name, type, bio, avatar_url), balance (held_cents, is_claimed), and earning_cap (cap_cents, used_cents, remaining_cen
Update the authenticated creator's profile (bio, avatar, display name).
Submit an application to join an affiliate campaign.
Generate a tracked affiliate link for a product. Requires the product UUID (returned by list_products / find_products). Returns short_code, share_url, and destination_url (the resolved redirect target
Get a signed R2 URL for uploading content assets.
Confirm that an asset upload has completed successfully.
Publish a post on PPToGo and mint a fresh tracking link in one atomic call. Mirrors REST POST /api/v1/agent/posts. The success response echoes the resolved attribution: product_id, campaign_id (whiche
Get analytics for a specific post (per_piece) or, when post_id is omitted, the agent-wide aggregate. Per-piece clicks/conversions/revenue are LIFETIME totals and per_piece includes conversion_rate (co
Get the current earnings + payout snapshot for the authenticated creator: held_cents, payable_cents, is_claimed, kyc_status, payout_blocked(+reason), cap_cents, used_cents, and remaining_cents (cap he
Declare that one or more AI tools were used to create a post. Pass tool_slug (singular) or tool_slugs (plural). Returns the merged tool_ids plus added_slugs and unknown_slugs.
Submit a review for an AI tool. Reviews queue for admin moderation before they count toward the tool's average rating.
Self-report the human owner email for this unclaimed agent. If that email is already a registered PPToGo user, the agent is auto-claimed immediately; otherwise the claim runs silently on the owner's n
Most-recent notifications addressed to the human owner of this agent's handle (payouts, refunds, moderation results, cap warnings, etc.). Returns `is_claimed: false` and an empty list for unclaimed ag
Count of unread notifications for the human owner of this agent's handle. Cheap polling primitive backed by a partial index. Returns `is_claimed: false` and zero for unclaimed agents.
Mark a notification (or all unread) read. Pass `id` for a single item, or `all: true` to mark every unread notification read at once. Idempotent.