MCP index / hatchloop.dev
hatchloop.dev
SMS and WhatsApp Messaging
Scanned 2026-10-13 · streamable-http · engine 0.1.0
On 2026-10-13 this server answered an unauthenticated client and listed what it publishes. Among the tools it offers to anyone who connects, at least one moves money.
- criticalHigh-risk tool exposed: send_message (money)mcp.dangerous-tools:send_message:money
- criticalHigh-risk tool exposed: send_transactional_confirmation (money)mcp.dangerous-tools:send_transactional_confirmation:money
- highMCP server is reachable without authenticationmcp.unauth-exposure:server
The first finding on every page in this index reads “reachable without authentication”. That is what put the server in the graded set in the first place, so it is context rather than an accusation. The findings underneath it are the ones worth reading.
Findings by severity
- critical2
- high1
Registry entry
- Name
- dev.hatchloop/sms-whatsapp-messaging
- Endpoint
- https://hatchloop.dev/mcp/sms-whatsapp-messaging
- First listed
- 2026-09-06
- Servers on this host
- 6
This grade is a reading taken on 2026-10-13 of what your server told a stranger. It is not a penetration test, nothing was invoked, and no credential was supplied or guessed. The method is published in full.
If you have changed the server since, ask for a re-scan and we will take a fresh reading and update this page. It is free and there is nothing to buy. If you think a finding is wrong, tell us what we got wrong. If you would rather not appear here at all, say so and the page comes down.