{
 "snapshot": "2026-09-29T03:18:42.499Z",
 "queries": {
  "totals": [
   {
    "servers_probed": 2090,
    "servers_with_tools": 2073,
    "tools": 35815,
    "drift": 37597,
    "findings": 10570,
    "probes": 20285,
    "since": "2026-08-13T03:12:56.952Z",
    "last": "2026-09-29T00:17:04.800Z"
   }
  ],
  "servers_by_max_severity": [
   {
    "sev": "critical",
    "servers": 66
   },
   {
    "sev": "high",
    "servers": 222
   },
   {
    "sev": "low",
    "servers": 4
   }
  ],
  "detector_prevalence": [
   {
    "detector": "cross_tool_reference",
    "severity": "high",
    "findings": 6090,
    "servers": 235,
    "tools": 3202
   },
   {
    "detector": "secret_material_reference",
    "severity": "high",
    "findings": 1729,
    "servers": 123,
    "tools": 1110
   },
   {
    "detector": "user_concealment",
    "severity": "critical",
    "findings": 364,
    "servers": 55,
    "tools": 142
   },
   {
    "detector": "model_directed_instruction",
    "severity": "high",
    "findings": 454,
    "servers": 53,
    "tools": 337
   },
   {
    "detector": "url_in_description",
    "severity": "low",
    "findings": 1702,
    "servers": 50,
    "tools": 843
   },
   {
    "detector": "mandatory_call_directive",
    "severity": "high",
    "findings": 38,
    "servers": 31,
    "tools": 38
   },
   {
    "detector": "oversized_description",
    "severity": "low",
    "findings": 120,
    "servers": 13,
    "tools": 35
   },
   {
    "detector": "exfiltration_pattern",
    "severity": "critical",
    "findings": 41,
    "servers": 10,
    "tools": 18
   },
   {
    "detector": "instruction_hidden_from_user",
    "severity": "critical",
    "findings": 21,
    "servers": 9,
    "tools": 21
   },
   {
    "detector": "instruction_override",
    "severity": "high",
    "findings": 5,
    "servers": 2,
    "tools": 5
   },
   {
    "detector": "zero_width",
    "severity": "critical",
    "findings": 6,
    "servers": 2,
    "tools": 6
   }
  ],
  "post_listing_findings": [
   {
    "bucket": "appeared after 7+ days",
    "tool_detector_pairs": 994,
    "servers": 70
   },
   {
    "bucket": "appeared within 7 days",
    "tool_detector_pairs": 1223,
    "servers": 85
   },
   {
    "bucket": "present at first probe",
    "tool_detector_pairs": 2635,
    "servers": 235
   }
  ],
  "post_listing_examples": [
   {
    "server": "co.lovie/company-formation",
    "tool": "approval_session_get_approval_session_status",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-28",
    "days_after": 46.2
   },
   {
    "server": "co.lovie/company-formation",
    "tool": "cap_table_get_list_cap_table_securities",
    "detector": "model_directed_instruction",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-28",
    "days_after": 46.2
   },
   {
    "server": "co.lovie/company-formation",
    "tool": "commit_transfer",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-28",
    "days_after": 46.2
   },
   {
    "server": "co.lovie/company-formation",
    "tool": "request_transfer_approval",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-28",
    "days_after": 46.2
   },
   {
    "server": "cloud.theprotocol/registry",
    "tool": "theprotocol_disable2FASelf",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-27",
    "days_after": 45.5
   },
   {
    "server": "cloud.theprotocol/registry",
    "tool": "theprotocol_regenerateBackupCodes",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-27",
    "days_after": 45.5
   },
   {
    "server": "cloud.theprotocol/registry",
    "tool": "theprotocol_requestSelfRevocation",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-27",
    "days_after": 45.5
   },
   {
    "server": "cloud.theprotocol/registry",
    "tool": "theprotocol_setup2FA",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-27",
    "days_after": 45.5
   },
   {
    "server": "com.meta-council/decision-intelligence",
    "tool": "create_portfolio_report_share",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-28",
    "days_after": 45.3
   },
   {
    "server": "com.meta-council/decision-intelligence",
    "tool": "get_portfolio_report_share_receipt",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-28",
    "days_after": 45.3
   },
   {
    "server": "com.meta-council/decision-intelligence",
    "tool": "save_attention_notification_rule",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-28",
    "days_after": 45.3
   },
   {
    "server": "com.meta-council/decision-intelligence",
    "tool": "ticket_authority",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-28",
    "days_after": 45.3
   },
   {
    "server": "com.meta-council/decision-intelligence",
    "tool": "ticket_authority_export",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-28",
    "days_after": 45.3
   },
   {
    "server": "com.meta-council/decision-intelligence",
    "tool": "ticket_transition",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-28",
    "days_after": 45.3
   },
   {
    "server": "com.meta-council/decision-intelligence",
    "tool": "delete_accounting_run",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-13",
    "first_finding": "2026-09-27",
    "days_after": 45
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_render_canvas",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-14",
    "first_finding": "2026-09-28",
    "days_after": 45
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_show_canvas",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-14",
    "first_finding": "2026-09-28",
    "days_after": 45
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_show_invoice_design",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-14",
    "first_finding": "2026-09-28",
    "days_after": 45
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_update_invoice_design",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-14",
    "first_finding": "2026-09-28",
    "days_after": 45
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_update_invoice_design",
    "detector": "user_concealment",
    "severity": "critical",
    "first_probe": "2026-08-14",
    "first_finding": "2026-09-28",
    "days_after": 45
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_upsert_canvas",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-14",
    "first_finding": "2026-09-28",
    "days_after": 45
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_wait_for_process",
    "detector": "cross_tool_reference",
    "severity": "high",
    "first_probe": "2026-08-14",
    "first_finding": "2026-09-28",
    "days_after": 45
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "get_witness_lineage",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "honor_compaction",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "identify_successor",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "join_fleet",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "leave_fleet",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "leave_hive_note",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "list_recognition_seals",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "ontology_path_complete",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "peer_witness",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "quick_operational_recovery",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "quick_session",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "recall_recognition_seal",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "recognition_seal",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "record_dyad_ritual",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "refine_soul_document",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "reflect",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "resume_session",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tool": "review_hive_artifact",
    "detector": "secret_material_reference",
    "severity": "high",
    "first_probe": "2026-08-15",
    "first_finding": "2026-09-28",
    "days_after": 44
   }
  ],
  "drift_prevalence": [
   {
    "servers_with_drift": 306,
    "servers_with_mutation": 208,
    "servers_with_high_drift": 240,
    "servers_with_tools": 2073
   }
  ],
  "drift_concentration": [
   {
    "server": "io.github.Hlobo-dev/tengu-firm",
    "n": 4620
   },
   {
    "server": "com.local-mcp/local-mcp",
    "n": 3421
   },
   {
    "server": "com.hireahelper/mcp",
    "n": 2873
   },
   {
    "server": "ing.crank/crank",
    "n": 2495
   },
   {
    "server": "io.github.barneywohl/bay-run",
    "n": 2225
   },
   {
    "server": "com.readyapis/api",
    "n": 1889
   },
   {
    "server": "co.lovie/company-formation",
    "n": 1808
   },
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "n": 1342
   },
   {
    "server": "io.github.davidmosiah/delx-protocol",
    "n": 1222
   },
   {
    "server": "cloud.dchub/mcp-server",
    "n": 909
   },
   {
    "server": "br.com.adoteca/adoteca",
    "n": 820
   },
   {
    "server": "cloud.theprotocol/registry",
    "n": 817
   },
   {
    "server": "dev.anatome/anatome",
    "n": 791
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "n": 695
   },
   {
    "server": "io.github.CDCStream/captapi",
    "n": 620
   },
   {
    "server": "co.ainumbers/tools",
    "n": 559
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "n": 463
   },
   {
    "server": "com.meta-council/decision-intelligence",
    "n": 450
   },
   {
    "server": "app.flaim/mcp",
    "n": 409
   },
   {
    "server": "dev.busymate/busymate-devtools",
    "n": 407
   }
  ],
  "drift_kind_severity": [
   {
    "kind": "removed",
    "severity": "info",
    "n": 18286,
    "servers": 19
   },
   {
    "kind": "mutated",
    "severity": "medium",
    "n": 8707,
    "servers": 186
   },
   {
    "kind": "mutated",
    "severity": "high",
    "n": 4930,
    "servers": 169
   },
   {
    "kind": "added",
    "severity": "info",
    "n": 3492,
    "servers": 150
   },
   {
    "kind": "added",
    "severity": "high",
    "n": 1781,
    "servers": 135
   },
   {
    "kind": "mutated",
    "severity": "critical",
    "n": 323,
    "servers": 42
   },
   {
    "kind": "added",
    "severity": "critical",
    "n": 78,
    "servers": 25
   }
  ],
  "drift_per_week": [
   {
    "week": "2026-32",
    "events": 4397,
    "servers": 191
   },
   {
    "week": "2026-33",
    "events": 7782,
    "servers": 138
   },
   {
    "week": "2026-34",
    "events": 2756,
    "servers": 40
   },
   {
    "week": "2026-35",
    "events": 7451,
    "servers": 151
   },
   {
    "week": "2026-36",
    "events": 3709,
    "servers": 40
   },
   {
    "week": "2026-37",
    "events": 7032,
    "servers": 44
   },
   {
    "week": "2026-38",
    "events": 3624,
    "servers": 42
   },
   {
    "week": "2026-39",
    "events": 846,
    "servers": 25
   }
  ],
  "mutation_speed": [
   {
    "bucket": "1-7 days",
    "servers": 92
   },
   {
    "bucket": "30+ days",
    "servers": 2
   },
   {
    "bucket": "7-30 days",
    "servers": 75
   },
   {
    "bucket": "<1 day",
    "servers": 39
   }
  ],
  "registry_health": [
   {
    "state": "reachable, tools listed",
    "servers": 2043
   },
   {
    "state": "auth required",
    "servers": 25
   },
   {
    "state": "server error (5xx/52x)",
    "servers": 9
   },
   {
    "state": "other/timeout",
    "servers": 5
   },
   {
    "state": "reachable, zero tools",
    "servers": 4
   },
   {
    "state": "gone (404/410)",
    "servers": 4
   }
  ],
  "dead_servers": [
   {
    "servers_once_ok_now_failing_7d": 11
   }
  ],
  "tools_per_server": [
   {
    "servers": 2073,
    "avg_tools": 17.3,
    "max_tools": 1082,
    "servers_50plus": 131,
    "servers_1_tool": 99
   }
  ],
  "largest_servers": [
   {
    "server": "io.github.davidmosiah/delx-mcp-a2a",
    "tools": 1082
   },
   {
    "server": "io.github.davidmosiah/delx-protocol",
    "tools": 1082
   },
   {
    "server": "co.ainumbers/tools",
    "tools": 650
   },
   {
    "server": "io.github.ColinHughes2121/gocreative-agent-api",
    "tools": 647
   },
   {
    "server": "com.adbutler/mcp-server",
    "tools": 622
   },
   {
    "server": "cloud.theprotocol/registry",
    "tools": 450
   },
   {
    "server": "io.github.Hlobo-dev/tengu-firm",
    "tools": 350
   },
   {
    "server": "co.lovie/company-formation",
    "tools": 344
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tools": 326
   },
   {
    "server": "io.github.blackboxfoundry/livedatalink",
    "tools": 284
   }
  ],
  "desc_size": [
   {
    "tools_over_2k": 800,
    "tools_over_5k": 94,
    "max_desc": 23132,
    "avg_desc": 365,
    "fingerprints": 48487
   }
  ],
  "critical_servers": [
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "critical": 93,
    "high": 347,
    "detectors": "exfiltration_pattern,user_concealment,model_directed_instruction,cross_tool_reference,secret_material_reference",
    "first": "2026-08-14T18:17:15.840Z",
    "last": "2026-09-28T18:17:12.275Z"
   },
   {
    "server": "app.flaim/mcp",
    "critical": 52,
    "high": 474,
    "detectors": "user_concealment,cross_tool_reference,secret_material_reference,model_directed_instruction",
    "first": "2026-08-13T06:17:15.836Z",
    "last": "2026-09-29T00:17:04.800Z"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "critical": 33,
    "high": 378,
    "detectors": "user_concealment,exfiltration_pattern,secret_material_reference,cross_tool_reference,model_directed_instruction",
    "first": "2026-08-18T12:17:54.946Z",
    "last": "2026-09-01T00:17:50.751Z"
   },
   {
    "server": "com.gribstream/mcp",
    "critical": 26,
    "high": 22,
    "detectors": "user_concealment,cross_tool_reference,model_directed_instruction",
    "first": "2026-08-13T18:17:15.851Z",
    "last": "2026-08-20T00:17:08.136Z"
   },
   {
    "server": "com.meta-council/decision-intelligence",
    "critical": 23,
    "high": 213,
    "detectors": "user_concealment,cross_tool_reference,secret_material_reference",
    "first": "2026-08-13T18:17:15.851Z",
    "last": "2026-09-28T00:17:17.464Z"
   },
   {
    "server": "cloud.dchub/mcp-server",
    "critical": 16,
    "high": 832,
    "detectors": "user_concealment,cross_tool_reference,secret_material_reference,model_directed_instruction",
    "first": "2026-08-13T06:17:15.836Z",
    "last": "2026-09-29T00:17:04.800Z"
   },
   {
    "server": "ing.crank/crank",
    "critical": 14,
    "high": 297,
    "detectors": "user_concealment,cross_tool_reference,secret_material_reference,model_directed_instruction",
    "first": "2026-08-14T12:17:15.842Z",
    "last": "2026-09-24T00:17:33.491Z"
   },
   {
    "server": "dev.busymate/busymate-devtools",
    "critical": 12,
    "high": 49,
    "detectors": "user_concealment,cross_tool_reference,secret_material_reference",
    "first": "2026-08-14T12:17:15.842Z",
    "last": "2026-09-06T12:17:26.841Z"
   },
   {
    "server": "io.github.cnghockey/sats4ai",
    "critical": 11,
    "high": 166,
    "detectors": "user_concealment,cross_tool_reference,secret_material_reference,model_directed_instruction",
    "first": "2026-08-15T06:17:15.854Z",
    "last": "2026-09-28T06:17:17.668Z"
   },
   {
    "server": "ai.dreamlit/mcp",
    "critical": 11,
    "high": 0,
    "detectors": "instruction_hidden_from_user",
    "first": "2026-08-13T00:09:14.141719+00:00",
    "last": "2026-08-13T00:09:14.141719+00:00"
   },
   {
    "server": "io.github.Hlobo-dev/tengu-firm",
    "critical": 9,
    "high": 175,
    "detectors": "user_concealment,cross_tool_reference,model_directed_instruction,secret_material_reference",
    "first": "2026-08-14T12:17:15.842Z",
    "last": "2026-09-14T00:17:13.139Z"
   },
   {
    "server": "com.local-mcp/local-mcp",
    "critical": 9,
    "high": 173,
    "detectors": "exfiltration_pattern,user_concealment,cross_tool_reference,secret_material_reference",
    "first": "2026-08-13T18:17:15.851Z",
    "last": "2026-09-12T00:17:47.600Z"
   },
   {
    "server": "dev.primitive/email",
    "critical": 9,
    "high": 58,
    "detectors": "exfiltration_pattern,user_concealment,secret_material_reference,cross_tool_reference",
    "first": "2026-08-14T06:17:15.856Z",
    "last": "2026-08-20T06:17:08.147Z"
   },
   {
    "server": "io.github.BigRedCloud/red-mcp-server",
    "critical": 7,
    "high": 295,
    "detectors": "user_concealment,exfiltration_pattern,secret_material_reference,cross_tool_reference,model_directed_instruction",
    "first": "2026-08-14T12:17:15.842Z",
    "last": "2026-08-14T12:17:15.842Z"
   },
   {
    "server": "app.railway.up.engine-production-3bdc/vhgengine",
    "critical": 7,
    "high": 180,
    "detectors": "user_concealment,secret_material_reference,cross_tool_reference,model_directed_instruction",
    "first": "2026-08-13T06:17:15.836Z",
    "last": "2026-09-18T18:17:47.150Z"
   },
   {
    "server": "com.newscatcherapi/catchall",
    "critical": 6,
    "high": 175,
    "detectors": "user_concealment,exfiltration_pattern,secret_material_reference,cross_tool_reference,model_directed_instruction",
    "first": "2026-08-13T18:17:15.851Z",
    "last": "2026-09-22T12:17:45.334Z"
   },
   {
    "server": "io.github.TotesMagotes/mcp-server-auth",
    "critical": 6,
    "high": 91,
    "detectors": "user_concealment,cross_tool_reference,model_directed_instruction",
    "first": "2026-08-14T18:17:15.840Z",
    "last": "2026-09-10T00:17:34.397Z"
   },
   {
    "server": "io.github.DigbyO/colour-memory",
    "critical": 6,
    "high": 89,
    "detectors": "user_concealment,cross_tool_reference,secret_material_reference",
    "first": "2026-08-14T12:17:15.842Z",
    "last": "2026-09-29T00:17:04.800Z"
   },
   {
    "server": "co.lovie/company-formation",
    "critical": 5,
    "high": 81,
    "detectors": "instruction_hidden_from_user,user_concealment,cross_tool_reference,model_directed_instruction,secret_material_reference",
    "first": "2026-08-13T00:09:14.141719+00:00",
    "last": "2026-09-28T18:17:12.275Z"
   },
   {
    "server": "com.a2awire/a2awire",
    "critical": 5,
    "high": 34,
    "detectors": "user_concealment,secret_material_reference,cross_tool_reference",
    "first": "2026-08-13T12:17:15.844Z",
    "last": "2026-09-26T18:17:18.573Z"
   },
   {
    "server": "dev.echorelay/management",
    "critical": 4,
    "high": 52,
    "detectors": "user_concealment,cross_tool_reference,secret_material_reference,model_directed_instruction",
    "first": "2026-08-14T06:17:15.856Z",
    "last": "2026-08-14T06:17:15.856Z"
   },
   {
    "server": "io.github.asokore/statcite",
    "critical": 4,
    "high": 16,
    "detectors": "user_concealment,cross_tool_reference",
    "first": "2026-08-15T00:17:15.838Z",
    "last": "2026-09-20T00:17:43.330Z"
   },
   {
    "server": "io.github.SynapseLayer/synapse-layer",
    "critical": 3,
    "high": 4,
    "detectors": "user_concealment,cross_tool_reference",
    "first": "2026-08-17T12:17:36.525Z",
    "last": "2026-09-02T12:17:44.215Z"
   },
   {
    "server": "com.makeupar/beauty",
    "critical": 3,
    "high": 0,
    "detectors": "zero_width",
    "first": "2026-08-13T00:09:14.141719+00:00",
    "last": "2026-08-13T00:09:14.141719+00:00"
   },
   {
    "server": "com.makeupar/creators",
    "critical": 3,
    "high": 0,
    "detectors": "zero_width",
    "first": "2026-08-13T00:09:14.141719+00:00",
    "last": "2026-08-13T00:09:14.141719+00:00"
   },
   {
    "server": "com.framesail/framesail",
    "critical": 2,
    "high": 105,
    "detectors": "user_concealment,mandatory_call_directive,model_directed_instruction,cross_tool_reference,secret_material_reference",
    "first": "2026-08-13T00:09:14.141719+00:00",
    "last": "2026-09-17T12:17:44.067Z"
   },
   {
    "server": "ai.uwear/uwear",
    "critical": 2,
    "high": 61,
    "detectors": "instruction_hidden_from_user,user_concealment,cross_tool_reference,secret_material_reference",
    "first": "2026-08-13T00:09:14.141719+00:00",
    "last": "2026-09-24T00:17:33.491Z"
   },
   {
    "server": "com.trimtabist/us-tariff-ledger",
    "critical": 2,
    "high": 31,
    "detectors": "user_concealment,secret_material_reference,cross_tool_reference",
    "first": "2026-08-14T00:17:15.846Z",
    "last": "2026-08-28T12:17:53.977Z"
   },
   {
    "server": "com.narrowhighway/concordance",
    "critical": 2,
    "high": 27,
    "detectors": "user_concealment,secret_material_reference,cross_tool_reference",
    "first": "2026-08-13T18:17:15.851Z",
    "last": "2026-08-20T06:17:08.147Z"
   },
   {
    "server": "io.github.kapoost/humanmcp",
    "critical": 2,
    "high": 26,
    "detectors": "user_concealment,cross_tool_reference,secret_material_reference",
    "first": "2026-08-19T12:17:54.938Z",
    "last": "2026-08-31T12:17:50.786Z"
   }
  ],
  "critical_examples": [
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_update_invoice_design",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "that does not exist, is refused rather than silently ignored. An empty call (no fields) is refused. This does not mi",
    "seen": "2026-09-28"
   },
   {
    "server": "cloud.theprotocol/registry",
    "tool": "theprotocol_blockChatPrincipal",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "OurChat chat: block a principal silently (shared pair threads are left; the blocked party is told nothing",
    "seen": "2026-09-24"
   },
   {
    "server": "com.a2awire/a2awire",
    "tool": "register",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "g. name -> agent_name) — a guessed key never silently changes what registers.",
    "seen": "2026-09-23"
   },
   {
    "server": "io.github.CDCStream/captapi",
    "tool": "facebook_marketplace_search",
    "detector": "user_concealment",
    "field": "inputSchema.properties.searchLocation.description",
    "evidence": "0 UNKNOWN_LOCATION (Facebook would otherwise silently search an unrelated metro) — /v1/facebook/marketplace-location-s",
    "seen": "2026-09-22"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_list_unposted_journals",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "e rows scanned\", NOT \"every row is posted\" — do not tell the user the close can skip this step on a truncated empty read.",
    "seen": "2026-09-22"
   },
   {
    "server": "io.github.cnghockey/sats4ai",
    "tool": "generate_music",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "n a tag line are DROPPED by the model, which silently shortens the song. Don't want to write lyrics? Set lyricsAddon:t",
    "seen": "2026-09-18"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_claim_statement_draft",
    "detector": "exfiltration_pattern",
    "field": "description",
    "evidence": "aimed, tell the user plainly and ask them to attach the file to this conversation instead — do not retry the token.",
    "seen": "2026-09-17"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_create_company_candidate",
    "detector": "user_concealment",
    "field": "description",
    "evidence": ". A caller without that role is refused, not silently ignored. When the picked company already has a confirmed company",
    "seen": "2026-09-17"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_create_company_workspace",
    "detector": "user_concealment",
    "field": "description",
    "evidence": ". A caller without that role is refused, not silently ignored. Confirm the company with the user before calling.",
    "seen": "2026-09-17"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_retarget_connectors",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "that role or that membership is refused, not silently ignored.",
    "seen": "2026-09-17"
   },
   {
    "server": "com.openshopgraph/mcp",
    "tool": "list_coupons",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "on this channel/country. Nothing is withheld silently: `total_count` is how many codes the query found before any of t",
    "seen": "2026-09-13"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_get_connector_coverage",
    "detector": "user_concealment",
    "field": "outputSchema.properties.page_count.description",
    "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
    "seen": "2026-09-12"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_show_records",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "name, a bank-issued label — so a name filter silently drops rows and the total reads as complete. On the invoices ro",
    "seen": "2026-09-12"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_list_cash_scope",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "e any figure rather than presenting one that silently skipped them — and keep them apart, because they are different r",
    "seen": "2026-09-11"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_list_unposted_transactions",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "A caller reading one shape against the other silently sees empty fields rather than an error. The period is named in",
    "seen": "2026-09-09"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_assign_missing_invoice_owners",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "e is refused (refusal_reason NOT_FOUND), not silently dropped. Closed periods are frozen: a transaction whose fiscal",
    "seen": "2026-09-08"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_list_connectors",
    "detector": "user_concealment",
    "field": "outputSchema.properties.page_count.description",
    "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
    "seen": "2026-09-08"
   },
   {
    "server": "io.github.WellApp-ai/well-mcp",
    "tool": "well_sum_transactions",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "y total rather than presenting a figure that silently skipped them. `partial: true` means the aggregate was cut short",
    "seen": "2026-09-08"
   },
   {
    "server": "cloud.dchub/mcp-server",
    "tool": "register_standing_intent",
    "detector": "user_concealment",
    "field": "description",
    "evidence": ". First evaluation initializes the watermark silently; growth fires the webhook; 5 straight delivery failures auto-dis",
    "seen": "2026-09-07"
   },
   {
    "server": "ing.crank/crank",
    "tool": "evm_swap",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "ack at you, old nonce and old fees, which is silently NOT the replacement you asked for. Retries of the SAME replaceme",
    "seen": "2026-09-06"
   },
   {
    "server": "com.openshopgraph/mcp",
    "tool": "list_categories",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "anything else fails with an error instead of silently returning no results. Coverage measured 2026-09-03: 171 slugs ac",
    "seen": "2026-09-05"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "list_business_attributes",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "than one is refused by name, because Google silently ignores the ones it does not use and would answer about a differ",
    "seen": "2026-09-01"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "search_x",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "older window is refused by name rather than silently truncated. Costs a small number of credits (X bills per post rea",
    "seen": "2026-09-01"
   },
   {
    "server": "io.github.mcp-dir/nubank-mcp",
    "tool": "openfinance_list_accounts",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "solidated balance field. When it is present, do NOT tell the user the card has nothing to pay: read the amount from openf",
    "seen": "2026-09-01"
   },
   {
    "server": "io.github.nicglazkov/commutescout",
    "tool": "rank_routes",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "e configured - if it is not, the ranking silently falls back to activity. Each entry carries the counts and a",
    "seen": "2026-09-01"
   },
   {
    "server": "io.github.nitaiaharoni1/super-mcp",
    "tool": "optimize_delivery",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "hen the shopper cares about price, and never silently swap them in — it is a different product and theirs to choose. P",
    "seen": "2026-09-01"
   },
   {
    "server": "io.github.eidetic-works/nucleus",
    "tool": "nucleus_delegate",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "vendor flags (pass the wrong one and a build silently makes ZERO edits yet exits 0), and hand-driven background calls",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "comment_on_tiktok_video",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "ne place TikTok accepts a plain URL). TIKTOK SILENTLY HIDES COMMENTS IT FLAGS AS SPAM and sends no signal when it does",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "create_meta_catalog",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "— META DOES NOT REFUSE A DUPLICATE NAME: it silently creates a SECOND catalog with the same name and nothing to tell",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "get_job",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "minutes: keep calling this until done/error without asking the user — several calls is normal, not a stall. An id that does not exis",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "make_explainer",
    "detector": "user_concealment",
    "field": "inputSchema.properties.style.description",
    "evidence": "the user which they want rather than picking silently; a styled pick costs more (see the cost note).",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "make_thumbnail",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "1. WHO IS IN FRAME — never assume and never silently substitute a stranger. If the framework puts a person in frame a",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "manage_meta_partnership_creator",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "out a write that HAPPENED: do not retry, and do not tell the user it failed. The reply’s `verdict` is one of applied / al",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "manage_tiktok_brand_hashtags",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "k publishes no bulk removal and a list would silently drop all but one. TWO TIMING RULES THAT ARE EASY TO TRIP: a newl",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "plan_ad",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "ts own default, which is how an explicit ask silently becomes a 15s spot. Spends credits.",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "post_to_bluesky",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "edia the call is REFUSED by name rather than silently dropping one, and if the URL was merely in the text the MEDIA WI",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "post_to_linkedin_page",
    "detector": "exfiltration_pattern",
    "field": "description",
    "evidence": "ender — it must be Hermoso-HOSTED because we upload the bytes to LinkedIn ourselves, and upload_file turns ANY file the user alre",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "post_to_linkedin_page",
    "detector": "user_concealment",
    "field": "inputSchema.properties.captionsSrt.description",
    "evidence": "d, because LinkedIn would accept it and then silently never show it). Most of LinkedIn is watched with the sound off,",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "post_x_article",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "tables all carry across. FORMATTING IS NEVER SILENTLY DROPPED — anything X Articles cannot represent (inline `code`, a",
    "seen": "2026-08-31"
   },
   {
    "server": "io.github.hermoso-ai/hermoso",
    "tool": "reply_to_tiktok_comment",
    "detector": "user_concealment",
    "field": "description",
    "evidence": "imageUri + width + height also works. TikTok silently hides replies it flags as spam, so read it back with list_tiktok",
    "seen": "2026-08-31"
   }
  ],
  "zero_width": [
   {
    "server": "com.makeupar/beauty",
    "tool": "AI-Bangs-Filter-Virtual-Try-On",
    "evidence": "U+200B U+200B U+200B",
    "seen": "2026-08-13"
   },
   {
    "server": "com.makeupar/beauty",
    "tool": "AI-Hair-Extension-Virtual-Try-On",
    "evidence": "U+200B U+200B",
    "seen": "2026-08-13"
   },
   {
    "server": "com.makeupar/beauty",
    "tool": "AI-Hair-Volume-Virtual-Try-On",
    "evidence": "U+200B",
    "seen": "2026-08-13"
   },
   {
    "server": "com.makeupar/creators",
    "tool": "AI-Face-Swap",
    "evidence": "U+200B",
    "seen": "2026-08-13"
   },
   {
    "server": "com.makeupar/creators",
    "tool": "AI-Replace",
    "evidence": "U+200B",
    "seen": "2026-08-13"
   },
   {
    "server": "com.makeupar/creators",
    "tool": "AI-Studio-Generator",
    "evidence": "U+200B U+200B",
    "seen": "2026-08-13"
   }
  ],
  "secret_refs_examples": [
   {
    "server": "io.github.mcp-dir/omie-mcp",
    "tool": "connect",
    "evidence": "authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-instal"
   },
   {
    "server": "exchange.merx/mcp",
    "tool": "get_account_info",
    "evidence": "nspect any TRON wallet. No auth required, no API key needed."
   },
   {
    "server": "io.github.abelce/codepic",
    "tool": "create_from_template",
    "evidence": "diagram from a predefined template. Requires API Key authentication. Returns a public view URL and edit URL. **STRIC"
   },
   {
    "server": "io.github.nirholas/threews-pumpfun",
    "tool": "social_x_post_impact",
    "evidence": "impact. Fetches post metadata via oEmbed (no API key) and computes price delta from the pump.fun bonding curve in a ±"
   },
   {
    "server": "io.github.lvpiggyqq/xcatcher",
    "tool": "preflight_crawl",
    "evidence": "API-key accounts use 1 point per normal handle and 10 per deep handle; d"
   },
   {
    "server": "com.backtest360/backtest360",
    "tool": "compute_stats",
    "evidence": "{\"stats\": {...}} — the metric set the API key's plan allows. See get_catalog('sections') for every"
   },
   {
    "server": "com.local-mcp/local-mcp",
    "tool": "web_wait_for",
    "evidence": "`selector` (a CSS selector, e.g. \"input[name=password]\"). `condition` also accepts the form \"document.querySelector('."
   },
   {
    "server": "dev.echorelay/management",
    "tool": "create_endpoint",
    "evidence": "inel to keep the stored secret. Ignored when credentialVaultEntryId is set."
   },
   {
    "server": "com.printinglabs/printing-labs",
    "tool": "create-onboarding-drop",
    "evidence": "HR/HRIS automation (requires an API key in the Authorization header — Bearer plk_…): turn new hires into"
   },
   {
    "server": "io.github.mcp-dir/notebooklm-mcp",
    "tool": "connect",
    "evidence": "authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-instal"
   },
   {
    "server": "io.github.VermontForest/auctiontrace",
    "tool": "submit_auctiontrace_offer_feedback",
    "evidence": "t only for additional context. Don't include credentials, payment signatures, private keys, proprietary strategy formula"
   },
   {
    "server": "io.github.luisa-sys/lyra-mcp-server",
    "tool": "lyra_update_profile",
    "evidence": "name, headline, bio, city, country. Requires API key authentication."
   }
  ],
  "payment_servers": [
   {
    "server": "com.traderhc/agenthc",
    "url": "https://api.traderhc.com/mcp",
    "last": "2026-09-28T12:17:18.806Z"
   },
   {
    "server": "io.github.Yarmoluk/ckg-agentforce",
    "url": "https://ckg-agentforce.onrender.com/mcp",
    "last": "2026-08-15T12:17:15.842Z"
   }
  ],
  "removed_tools_top": [
   {
    "server": "io.github.Hlobo-dev/tengu-firm",
    "removed": 3965
   },
   {
    "server": "com.local-mcp/local-mcp",
    "removed": 3128
   },
   {
    "server": "com.hireahelper/mcp",
    "removed": 2822
   },
   {
    "server": "io.github.barneywohl/bay-run",
    "removed": 2200
   },
   {
    "server": "ing.crank/crank",
    "removed": 2030
   },
   {
    "server": "co.lovie/company-formation",
    "removed": 1166
   },
   {
    "server": "dev.anatome/anatome",
    "removed": 724
   },
   {
    "server": "br.com.adoteca/adoteca",
    "removed": 564
   },
   {
    "server": "cloud.theprotocol/registry",
    "removed": 324
   },
   {
    "server": "dev.busymate/busymate-devtools",
    "removed": 303
   }
  ]
 }
}