{"data":{"slug":"tarotap","verdict":"passed","scannedAt":"2026-10-26T10:54:32.712Z","scannerVersion":"1.2.1","latest":{"id":"8f6705a2-8b4a-4e06-81da-2602768e59ba","createdAt":"2026-10-26T10:54:32.712Z","version":"1.0.1","trigger":"tools_changed","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":0,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":0,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[],"toolCount":2},"history":[{"id":"8f6705a2-8b4a-4e06-81da-2602768e59ba","createdAt":"2026-10-26T10:54:32.712Z","version":"1.0.1","trigger":"tools_changed","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":0,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":0,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[],"toolCount":2},{"id":"cc1c20aa-9559-4b66-ab87-03b62eae2c86","createdAt":"2026-10-25T22:45:42.655Z","version":"1.0.1","trigger":"new","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":0,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":0,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[],"toolCount":null}],"endpoint":{"url":"https://tarotap.com/mcp","transport":"streamable-http","status":"ok","checkedAt":"2026-10-26T10:53:34.214Z","toolCount":2,"latencyMs":1152,"error":null},"tools":[{"name":"draw_cards","title":"Draw Tarot Cards","description":"Shuffle a full 78-card Rider-Waite-Smith deck with server-side randomness and show it face-down in an interactive widget, where the user picks their cards by hand. Where the widget renders, the tool result does not contain the drawn cards: the widget sends the cards the user picked to the conversation once the last one is revealed. In a text-only host the cards are drawn server-side and returned in the result. Takes a spread_id from list_spreads to draw into that spread's positions, or a card_count (1-10) for a free-form draw such as a single card of the day. Card names, position names and the widget text follow locale.","access":"read","accessDeclared":true,"hash":"72c6b6d2b08555624c2cbf39f90cc2bf8b7c6ec8f9075428760b00081997c585","inputSchema":"{\n  \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n  \"properties\": {\n    \"card_count\": {\n      \"description\": \"Number of cards for a free-form draw without a spread. Defaults to 3.\",\n      \"maximum\": 10,\n      \"minimum\": 1,\n      \"type\": \"integer\"\n    },\n    \"locale\": {\n      \"description\": \"Language for spread names, position names, card names and widget text: the language the user is writing in, as a BCP-47 code (zh-CN = Simplified Chinese, zh-TW = Traditional Chinese). Defaults to en.\",\n      \"enum\": [\n        \"en\",\n        \"zh-TW\",\n        \"zh-CN\",\n        \"ja\",\n        \"ko\",\n        \"es\",\n        \"de\",\n        \"pt\",\n        \"fr\",\n        \"it\",\n        \"nl\",\n        \"ru\",\n        \"uk\",\n        \"he\",\n        \"th\",\n        \"tr\",\n        \"pl\",\n        \"da\",\n        \"no\",\n        \"vi\",\n        \"hu\",\n        \"fi\",\n        \"id\"\n      ],\n      \"type\": \"string\"\n    },\n    \"spread_id\": {\n      \"description\": \"Spread id from list_spreads. Takes precedence over card_count.\",\n      \"maxLength\": 64,\n      \"type\": \"string\"\n    }\n  },\n  \"type\": \"object\"\n}"},{"name":"list_spreads","title":"List Tarot Spreads","description":"List the tarot spreads available for a reading, with each spread's id, name, tagline, number of cards, and position names, in the requested language. The ids are the values draw_cards accepts as spread_id and are the same in every language.","access":"read","accessDeclared":true,"hash":"e74cc7ad2ec76b0060de26a2b302db659b3d811dc5999e82fd11c5ed72c68b46","inputSchema":"{\n  \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n  \"properties\": {\n    \"locale\": {\n      \"description\": \"Language for spread names, position names, card names and widget text: the language the user is writing in, as a BCP-47 code (zh-CN = Simplified Chinese, zh-TW = Traditional Chinese). Defaults to en.\",\n      \"enum\": [\n        \"en\",\n        \"zh-TW\",\n        \"zh-CN\",\n        \"ja\",\n        \"ko\",\n        \"es\",\n        \"de\",\n        \"pt\",\n        \"fr\",\n        \"it\",\n        \"nl\",\n        \"ru\",\n        \"uk\",\n        \"he\",\n        \"th\",\n        \"tr\",\n        \"pl\",\n        \"da\",\n        \"no\",\n        \"vi\",\n        \"hu\",\n        \"fi\",\n        \"id\"\n      ],\n      \"type\": \"string\"\n    }\n  },\n  \"type\": \"object\"\n}"}],"toolsHash":"127629a7e6882f80e074d86b2dafb534f800dcaa383493543a98300e01237da0","toolsPinnedAt":"2026-10-26T10:53:34.232Z","toolsLastSeenAt":"2026-10-26T10:53:34.214Z","toolChanges":[]}}