Gluecron

9 of the 60 tools listed anonymously say in their own descriptions that they need an account or a key (gluecron_create_issue, gluecron_comment_issue, gluecron_close_issue, gluecron_reopen_issue, gluecron_create_pr, gluecron_comment_pr, gluecron_close_pr, gluecron_fork_repo, gluecron_chat_with_repo), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

The server exposes a public surface before authorization: gluecron_repo_search, gluecron_repo_read_file, gluecron_repo_list_issues, gluecron_repo_explain_codebase, gluecron_repo_health, gluecron_create_issue, gluecron_comment_issue, gluecron_close_issue, gluecron_reopen_issue, gluecron_create_pr, gluecron_get_pr, gluecron_list_prs, gluecron_comment_pr, gluecron_merge_pr, gluecron_close_pr, gluecron_fork_repo, gluecron_delete_repo, gluecron_update_repo, gluecron_search_repos, gluecron_clone_url, gluecron_label_issue, gluecron_unlabel_issue, gluecron_assign_issue, gluecron_search_issues, gluecron_request_changes, gluecron_search_prs, gluecron_open_draft_pr, gluecron_generate_pr_description, gluecron_read_file, gluecron_write_file, gluecron_delete_file, gluecron_list_tree, gluecron_get_commit, gluecron_create_branch, gluecron_atomic_multi_file_commit, gluecron_ship_spec, gluecron_voice_to_pr, gluecron_refactor_across_repos, gluecron_explain_repo, gluecron_chat_with_repo, gluecron_chat_continue, gluecron_generate_tests, gluecron_generate_commit_message, gluecron_generate_release_notes, gluecron_propose_migration, gluecron_propose_doc_update, gluecron_trigger_workflow, gluecron_get_workflow_run, gluecron_get_workflow_logs, gluecron_cancel_workflow_run, gluecron_get_preview_url, gluecron_provision_pr_sandbox, gluecron_create_agent_session, gluecron_acquire_lease, gluecron_release_lease, gluecron_get_agent_budget, gluecron_semantic_search, gluecron_find_symbol, gluecron_pr_status_summary, gluecron_ai_cost_summary.