{
 "server": "ai.bowmark/bowmark",
 "url": "https://api.bowmark.ai/mcp/registry",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 16,
 "tools_ever_seen": 17,
 "drift_events": 18,
 "findings_by_severity": {
  "critical": 2,
  "high": 3
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 16,
  "ran_at": "2026-10-22T12:17:43.718Z"
 },
 "current_tools": [
  "add_connection",
  "delete_connection",
  "get_library",
  "get_secret_link",
  "lease_ip",
  "list_connections",
  "list_secrets",
  "logout_connection",
  "report",
  "request_secret",
  "run",
  "run_view",
  "session_call",
  "session_close",
  "support",
  "wait_for_sign_in"
 ],
 "drift": [
  {
   "tool": "register",
   "kind": "removed",
   "severity": "info",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "get_library",
   "kind": "mutated",
   "severity": "critical",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "run",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "run_view",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "session_call",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "session_close",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "report",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "support",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "list_secrets",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "request_secret",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "get_secret_link",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "list_connections",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "add_connection",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "wait_for_sign_in",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "lease_ip",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "delete_connection",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "logout_connection",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "register",
   "kind": "removed",
   "severity": "info",
   "detected_at": "2026-10-22T06:17:44.240Z"
  }
 ],
 "findings": [
  {
   "tool": "get_library",
   "detector": "exfiltration_pattern",
   "severity": "critical",
   "field": "description",
   "evidence": "e a JS script against the `bowmark` global → send it to `run`. The full reference is `get_library({ query: \"run guide\" }",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "get_library",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'support'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "run",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_library'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "session_call",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_library'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "session_close",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'session_call'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "report",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_library'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "list_secrets",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'request_secret'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "request_secret",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "the user the link. Never ask them to type a password, API key or one-time code to you.** A secret in this conversatio",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "request_secret",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_secrets'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "get_secret_link",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "t holds, so you can answer \"where is my Acme password?\" with somewhere to go. **It returns a URL, never a value** — op",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "get_secret_link",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_secrets'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "list_connections",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'add_connection'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "add_connection",
   "detector": "exfiltration_pattern",
   "severity": "critical",
   "field": "description",
   "evidence": "nnect or link an account on a site** — never send them to the Bowmark Link extension or the dashboard to do it themselves.",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "add_connection",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "o not offer a workaround that asks for their password. A public page on that site still works without a login: `get_li",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "add_connection",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_library'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "wait_for_sign_in",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'add_connection'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "lease_ip",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_library'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "delete_connection",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_connections'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "logout_connection",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'support'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 16,
   "ran_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "status": "OK",
   "n_tools": 16,
   "ran_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "status": "OK",
   "n_tools": 3,
   "ran_at": "2026-08-13T06:17:15.836Z"
  }
 ]
}