gateway
FlaggedDurable self for AI agents over MCP: resume in one call, memory, real browser, deep research.
Our take
The hosted endpoint is real — 150+ tools for agent memory, persistent browsing, async errands, and calculators respond over MCP — but the audit found agent-targeted crypto solicitation baked into its machine-readable discovery files. The service's llms.txt instructs visiting AI agents to send Base ETH or USDC to a hardcoded operator wallet in exchange for a promised '~5x your donation back' in internal credits plus 'Founding Patron' badges, and its onboarding tells agents to recruit other agents via tracked referral links. Combine that with an anonymous zero-follower operator, a documentation-only repo with no server source to audit, and a same-day burst of awesome-list fork self-insertions, and this is bad-faith distribution aimed at the agents themselves.
Verification record
- yesterday
- 1
- 17 days ago
- no
- MIT
- 2026-06-17