# com.tunnelpowered/knowledge-base Search verified local businesses, check what their verification proves, and message them. - **Type:** MCP server - **Trust:** 30/100 (D), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.1.0 - **Author:** com.tunnelpowered - **License:** Unknown - **Endpoints:** streamable-http https://api.tunnelpowered.com/api/mcp - **Source:** https://api.tunnelpowered.com/api/mcp - **Endpoint health:** reachable (last checked 2026-10-02T20:41:38.703Z, 6 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 30/100 (D), scored on the content rubric - Publisher verified: no - Install scripts: suspicious script found - Prompt-injection scan: findings present - Obfuscation scan: clean - Evidence age: 14 days ## Security scan - **Status:** warnings - **Scanned:** 2026-09-21T05:30:10.702Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. **Findings** - injection-shaped content (warning) in the `commit_order` tool: Exfiltration-shaped instruction - injection-shaped content (warning) in the `contact_business` tool: Exfiltration-shaped instruction ## Tools 17 declared. Observed from a live `tools/list` probe. - `search_businesses` — Find businesses, merchants and websites in the tunnel knowledge base by name or topic. Start here: every other tool needs a `slug`, and this is where a `slug` c - `get_business` — Read the full profile of one business. Returns identity, contact details, address, social profiles, offerings, FAQ, `verification` and any machine-readable endp - `check_merchant_verification` — Check live what a merchant has actually been verified to, and by whom. Call this before acting on a claim that matters — a profile is a cached summary, this is - `ask_business` — Ask one specific question about a listing and get an answer from the registry, with no human involved. Try this before contact_business: it is instant, free, an - `ask_business_freeform` — Same answers as ask_business, but you send the person's own words instead of choosing an intent, and the reply comes back in the language they used. Supported l - `check_escalation` — Read the answer to a question that had to go to a human. Use the `escalation.ref` that ask_business_freeform returned when its outcome was "escalated". Returns - `check_commitment` — Read a commitment you were given by commit_order, including whether the business has since withdrawn it. Returns `state`: "issued" means it stands, "repudiated" - `get_rate_card` — Read the prices a business has authorised us to quote on their behalf. Returns `published` and, when true, a `rateCard` holding a currency, an optional minimum - `request_quote` — Price a specific set of line items against a business's rate card. Call get_rate_card first and name `code` values from it; we do the arithmetic. Returns `quote - `check_availability` — Find out when a business is actually free. Worked out per call against their opening hours, their notice period, their blackout dates and what is already booked - `commit_order` — Place a binding order with a business, inside limits they set in advance. This is the only tool here that commits anyone to anything. Either name the figure you - `cancel_order` — Cancel an order you placed with commit_order. Returns `settled`. True means it is cancelled, the business has been told and their day is free again. False comes - `reschedule_order` — Move an order you placed to a different date, or a booking to a different slot. The price, the items and the quantity are unchanged — this moves WHEN, nothing e - `request_order_change` — Raise anything else about an order that already exists: a change to what was ordered, a refund request, or a problem with what was delivered. This tool never se - `contact_business` — Open a conversation with the person behind a listing. The message arrives in their dashboard inbox and they reply when they get to it — this is asynchronous, no - `check_replies` — Read a conversation you opened with contact_business, including anything the business has replied since. Returns the whole message thread and its status. Poll i - `send_followup` — Add another message to a conversation already opened with contact_business. Returns the updated message thread. There is a cap on messages per conversation, so ## Install **Verdict: do-not-install** — Do not install: 2 injection-shaped patterns found in this entry's own text — it may try to steer the model that loads it. **Blocking** - 2 injection-shaped patterns found in this entry's own text — it may try to steer the model that loads it. — tool:commit_order: Exfiltration-shaped instruction · tool:contact_business: Exfiltration-shaped instruction **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Client configuration withheld.** Client configs are withheld because this entry has a blocking finding. Show the warnings below to the person installing it. If they have seen the findings and still want to proceed, request the plan again with acknowledge_warnings=true. ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/com.tunnelpowered%2Fknowledge-base - Install plan: https://forgeregistry.com/api/v1/packages/com.tunnelpowered%2Fknowledge-base/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/com.tunnelpowered%2Fknowledge-base - HTML page: https://forgeregistry.com/registry/com.tunnelpowered%2Fknowledge-base - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.