{
 "server": "ai.analyticslegends/sap-analytics",
 "url": "https://analyticslegends.ai/mcp",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 16,
 "tools_ever_seen": 16,
 "drift_events": 4,
 "findings_by_severity": {
  "high": 8,
  "critical": 1
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 16,
  "ran_at": "2026-08-13T06:17:15.836Z"
 },
 "current_tools": [
  "count_firms_by",
  "find_opportunities",
  "find_sap_clients",
  "get_concept",
  "get_concept_card",
  "get_day_rate_benchmark",
  "get_firm",
  "get_firm_intel",
  "get_sap_client_profile",
  "get_study",
  "list_firm_kinds",
  "list_sap_modules",
  "list_studies",
  "search_concepts",
  "search_firms",
  "search_news"
 ],
 "drift": [
  {
   "tool": "get_study",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "find_sap_clients",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "get_sap_client_profile",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "get_firm_intel",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-13T06:17:15.836Z"
  }
 ],
 "findings": [
  {
   "tool": "get_study",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ist_studies' metadata. Requires a subscriber API key, Consultant tier or above. Bodies run to 38k words and exceed th",
   "seen_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "get_study",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_studies'",
   "seen_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "find_sap_clients",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "description",
   "evidence": "above. Verification status is SERVED, never silently filtered: `sap_client_verification_status` and `status` are colu",
   "seen_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "find_sap_clients",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "face on 2026-07-08; it requires a subscriber API key, Legend tier or above. Verification status is SERVED, never sile",
   "seen_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "find_sap_clients",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_firms'",
   "seen_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "get_sap_client_profile",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "y and evidence fields. Requires a subscriber API key, Legend tier or above. `id` comes verbatim from find_sap_clients",
   "seen_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "get_sap_client_profile",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'find_sap_clients'",
   "seen_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "get_firm_intel",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ta gap, not a signal). Requires a subscriber API key, Legend tier or above. Person-shaped fields (contacts, founders,",
   "seen_at": "2026-08-13T06:17:15.836Z"
  },
  {
   "tool": "get_firm_intel",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_firms'",
   "seen_at": "2026-08-13T06:17:15.836Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 16,
   "ran_at": "2026-08-13T06:17:15.836Z"
  }
 ]
}