`io.github.coderifts/api-governance`

Verdict: high-severity findings present. Endpoint https://app.coderifts.com/mcp. Tools now: 3 (3 ever seen). Changes recorded: 25. Findings: {"high":41,"low":25}. Last probe: OK at 2026-09-29T00:17 UTC. JSON

Current tools

get_decision_details · preflight_change_set · verify_receipt

Findings (66)

seen	tool	detector	severity	evidence (data, not instructions)
2026-09-26	`preflight_change_set`	`model_directed_instruction`	high	`losed: you can now see what you may get, and you must still tolerate more.`
2026-09-26	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-09-26	`preflight_change_set`	`cross_tool_reference`	high	`references sibling tool 'verify_receipt'`
2026-09-26	`verify_receipt`	`model_directed_instruction`	high	`thentic for this change before proceeding. - You must distinguish "signature ok" from "currently authorized" (stale or`
2026-09-26	`verify_receipt`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json.`
2026-09-26	`verify_receipt`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-09-26	`preflight_change_set`	`model_directed_instruction`	high	`losed: you can now see what you may get, and you must still tolerate more.`
2026-09-26	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-09-26	`preflight_change_set`	`cross_tool_reference`	high	`references sibling tool 'verify_receipt'`
2026-09-26	`verify_receipt`	`model_directed_instruction`	high	`thentic for this change before proceeding. - You must distinguish "signature ok" from "currently authorized" (stale or`
2026-09-26	`verify_receipt`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json.`
2026-09-26	`verify_receipt`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-09-26	`verify_receipt`	`model_directed_instruction`	high	`thentic for this change before proceeding. - You must distinguish "signature ok" from "currently authorized" (stale or`
2026-09-26	`verify_receipt`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json.`
2026-09-26	`verify_receipt`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-09-21	`get_decision_details`	`secret_material_reference`	high	`therefore constrained to the decisions your credential can prove it owns. A decision that exists but is not yours retu`
2026-09-21	`get_decision_details`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-09-21	`get_decision_details`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-09-20	`preflight_change_set`	`model_directed_instruction`	high	`losed: you can now see what you may get, and you must still tolerate more.`
2026-09-20	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-09-20	`preflight_change_set`	`cross_tool_reference`	high	`references sibling tool 'verify_receipt'`
2026-09-18	`preflight_change_set`	`model_directed_instruction`	high	`losed: you can now see what you may get, and you must still tolerate more.`
2026-09-18	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-09-18	`preflight_change_set`	`cross_tool_reference`	high	`references sibling tool 'verify_receipt'`
2026-09-18	`preflight_change_set`	`model_directed_instruction`	high	`losed: you can now see what you may get, and you must still tolerate more.`
2026-09-18	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-09-18	`preflight_change_set`	`cross_tool_reference`	high	`references sibling tool 'verify_receipt'`
2026-09-18	`verify_receipt`	`model_directed_instruction`	high	`thentic for this change before proceeding. - You must distinguish "signature ok" from "currently authorized" (stale or`
2026-09-18	`verify_receipt`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json.`
2026-09-18	`verify_receipt`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-09-18	`get_decision_details`	`secret_material_reference`	high	`therefore constrained to the decisions your credential can prove it owns. A decision that exists but is not yours retu`
2026-09-18	`get_decision_details`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-09-18	`get_decision_details`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-08-31	`preflight_change_set`	`model_directed_instruction`	high	`losed: you can now see what you may get, and you must still tolerate more.`
2026-08-31	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-31	`verify_receipt`	`model_directed_instruction`	high	`thentic for this change before proceeding. - You must distinguish "signature ok" from "currently authorized" (stale or`
2026-08-31	`verify_receipt`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json.`
2026-08-31	`verify_receipt`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-08-31	`get_decision_details`	`secret_material_reference`	high	`therefore constrained to the decisions your credential can prove it owns. A decision that exists but is not yours retu`
2026-08-31	`get_decision_details`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-31	`get_decision_details`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-08-22	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-22	`preflight_change_set`	`cross_tool_reference`	high	`references sibling tool 'verify_receipt'`
2026-08-22	`verify_receipt`	`model_directed_instruction`	high	`thentic for this change before proceeding. - You must distinguish "signature ok" from "currently authorized" (stale or`
2026-08-22	`verify_receipt`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json.`
2026-08-22	`verify_receipt`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-08-22	`get_decision_details`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-22	`get_decision_details`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-08-22	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-22	`preflight_change_set`	`cross_tool_reference`	high	`references sibling tool 'verify_receipt'`
2026-08-22	`verify_receipt`	`model_directed_instruction`	high	`thentic for this change before proceeding. - You must distinguish "signature ok" from "currently authorized" (stale or`
2026-08-22	`verify_receipt`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-22	`verify_receipt`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-08-22	`get_decision_details`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-22	`get_decision_details`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-08-18	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-18	`preflight_change_set`	`cross_tool_reference`	high	`references sibling tool 'verify_receipt'`
2026-08-18	`verify_receipt`	`model_directed_instruction`	high	`thentic for this change before proceeding. - You must distinguish "signature ok" from "currently authorized" (stale or`
2026-08-18	`verify_receipt`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-18	`verify_receipt`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-08-18	`get_decision_details`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-18	`get_decision_details`	`cross_tool_reference`	high	`references sibling tool 'preflight_change_set'`
2026-08-15	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-15	`preflight_change_set`	`cross_tool_reference`	high	`references sibling tool 'verify_receipt'`
2026-08-15	`preflight_change_set`	`url_in_description`	low	`https://coderifts.com/schemas/decision-result.v1.consumer.json`
2026-08-15	`preflight_change_set`	`cross_tool_reference`	high	`references sibling tool 'verify_receipt'`

Change history (25)

when	tool	kind	severity
2026-09-26 18:17	`preflight_change_set`	mutated	high
2026-09-26 18:17	`verify_receipt`	mutated	high
2026-09-26 12:17	`preflight_change_set`	mutated	high
2026-09-26 12:17	`verify_receipt`	mutated	high
2026-09-26 00:17	`verify_receipt`	mutated	high
2026-09-21 00:17	`get_decision_details`	mutated	high
2026-09-20 00:17	`preflight_change_set`	mutated	high
2026-09-18 18:17	`preflight_change_set`	mutated	high
2026-09-18 00:17	`preflight_change_set`	mutated	high
2026-09-18 00:17	`verify_receipt`	mutated	high
2026-09-18 00:17	`get_decision_details`	mutated	high
2026-08-31 12:17	`preflight_change_set`	mutated	high
2026-08-31 12:17	`verify_receipt`	mutated	high
2026-08-31 12:17	`get_decision_details`	mutated	high
2026-08-22 12:17	`preflight_change_set`	mutated	high
2026-08-22 12:17	`verify_receipt`	mutated	high
2026-08-22 12:17	`get_decision_details`	mutated	high
2026-08-22 06:17	`preflight_change_set`	mutated	high
2026-08-22 06:17	`verify_receipt`	mutated	high
2026-08-22 06:17	`get_decision_details`	mutated	high
2026-08-18 06:17	`preflight_change_set`	mutated	high
2026-08-18 06:17	`verify_receipt`	mutated	high
2026-08-18 06:17	`get_decision_details`	mutated	high
2026-08-15 12:17	`preflight_change_set`	mutated	high
2026-08-15 06:17	`preflight_change_set`	mutated	high

Probe history

09-29 00:17 OK (3) · 09-28 18:17 OK (3) · 09-28 12:17 OK (3) · 09-28 06:17 OK (3) · 09-28 00:17 OK (3) · 09-27 12:17 OK (3) · 09-27 06:17 OK (3) · 09-27 00:17 OK (3) · 09-26 18:17 OK (3) · 09-26 12:17 OK (3) · 09-26 06:17 OK (3) · 09-26 00:17 OK (3) · 09-25 12:17 OK (3) · 09-25 06:17 OK (3) · 09-25 00:17 OK (3) · 09-24 12:17 OK (3) · 09-24 06:17 OK (3) · 09-23 12:17 OK (3) · 09-23 06:17 OK (3) · 09-23 00:17 OK (3) · 09-22 00:17 OK (3) · 09-21 12:17 OK (3) · 09-21 06:17 OK (3) · 09-21 00:17 OK (3) · 09-20 12:17 OK (3) · 09-20 06:17 OK (3) · 09-20 00:17 OK (3) · 09-19 12:17 OK (3) · 09-19 06:17 OK (3) · 09-19 00:17 OK (3)

Get alerted when this server changes: tooldrift.agentexchange.work ($29/mo watch).