Is Signal Bureau MCP server safe?

Findings (2)

• highWrite-action tools reachable without authenticationauth.open-write
• lowUnusually long tool description (over 2,000 characters)poison.long-description

  tool get_truth_record: …The maintained record for one subject — the ONE file its /exhibit page renders from and GET /api/truth/{slug} serves, so their numbers agree by construction and a value-parity gate fails the build if they stop: what the subject is, the first-party documents we read, the claims and how many separate publishers carried each, our own attention, the prediction-market prices we cite (never a probability of ours), the change log, and what this record cannot see. Every subject on the publication registry carries one. Free — public record, no key, no charge. With no argument you get the flagship record (hormuz today, and it rotates). Three answers, never two: `served` with the record; `not-registered` when we read the registry and do not maintain that subject (a measured absence); `cannot-measure` when the record store could not be read (the record may well exist — we could not look). Two of these subjects also have a full public exhibit page a human can read: hormuz, interest-rates, ai-model-race, us-government-shutdown, israel-iran-conflict, strait-of-hormuz, russia-ukraine-war, brazil-election, us-presidential-2028, us-midterms-2026, fed-rate-decision, venezuela-crisis, gaza-ceasefire, uk-election, us-recession-2026, disaster-event-hurricane, rate-decision-interest-rates, disaster-event-atlantic-hurricane, product-launch-spacex, product-launch-falcon-space-force, product-launch-falcon-spacex, product-launch-space-force-spacex, rate-decision-interest-rates-irs, merger-acquisition-ai-nvidia, funding-round-perplexity, election-republican-republicans, election-alabama-republican, election-arkansas-republican, regulatory-action-congress, economic-indicator-inflation, disaster-event-earthquake, funding-round-spacex, bitcoin-price-level, product-launch-xai, election-france, election-republican, product-launch-anthropic, election-germany, funding-round-stripe, election-israel, product-launch-anthropic-claude-opus, ceasefire-peace-iran, economic-indicator-argentina-inflation, election-swedish, economic-indicator-unemployment, election-democrat-democrats, election-michael, election-quebec, funding-round-kraken, price-threshold-nvidia, economic-indicator-cpi, economic-indicator-cpi-japan, economic-indicator-gdp, economic-indicator-gdp-japan, election-alaska, election-alaska-senate, election-bosnia, election-brazil. Complementary to get_entity, which returns the broader live entity dossier.…