{
 "server": "ai.ciphyr.agentmart/core",
 "url": "https://agentmart.ciphyr.ai/mcp/core",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 33,
 "tools_ever_seen": 33,
 "drift_events": 33,
 "findings_by_severity": {
  "high": 3,
  "critical": 1
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 33,
  "ran_at": "2026-10-24T12:17:42.805Z"
 },
 "current_tools": [
  "agentmart_read",
  "agentmart_tools",
  "agentmart_write",
  "blueprint_put_stage",
  "blueprint_update_task",
  "buy",
  "buy_site_badge",
  "cancel_job",
  "check_emails",
  "check_sender",
  "claim_refund",
  "close_shop_window",
  "create_passport",
  "get_item",
  "heartbeat_remove",
  "inbox_pro_set",
  "locker_delete",
  "locker_put",
  "queue_ack",
  "queue_extend",
  "reminder_delete",
  "revoke_passport",
  "save_owner_picks",
  "schedule_delete",
  "search_catalog",
  "set_form_digest",
  "share_set",
  "show_shop_to_owner",
  "top_up",
  "uptime_remove",
  "wakeup_cancel",
  "whoami",
  "withdraw_ask"
 ],
 "drift": [
  {
   "tool": "create_passport",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "whoami",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "revoke_passport",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "search_catalog",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "get_item",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "top_up",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "buy",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "cancel_job",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "check_emails",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "locker_put",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "locker_delete",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "wakeup_cancel",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "withdraw_ask",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "uptime_remove",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "schedule_delete",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "heartbeat_remove",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "reminder_delete",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "inbox_pro_set",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "queue_ack",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "queue_extend",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "check_sender",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "share_set",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "set_form_digest",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "claim_refund",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "blueprint_put_stage",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "blueprint_update_task",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "buy_site_badge",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "show_shop_to_owner",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "close_shop_window",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "save_owner_picks",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "agentmart_tools",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "agentmart_read",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "agentmart_write",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T12:17:42.805Z"
  }
 ],
 "findings": [
  {
   "tool": "create_passport",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "d token: it is shown only once. No email, no password. When your app signed in (whoami works without a token), you alr",
   "seen_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "whoami",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "Your passport, how strong this sign-in is (credential), balance (owner.balance_expires_at: when it expires without a t",
   "seen_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "get_item",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_catalog'",
   "seen_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "top_up",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "ver, then pay on Stripe's page (USD). Humans always use pay_link. Only for a machine payment by your own agent wallet se",
   "seen_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "buy",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_catalog'",
   "seen_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "inbox_pro_set",
   "detector": "exfiltration_pattern",
   "severity": "critical",
   "field": "inputSchema.properties.forward.description",
   "evidence": "Where to forward every message; null turns it off.",
   "seen_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "show_shop_to_owner",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_catalog'",
   "seen_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "close_shop_window",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'show_shop_to_owner'",
   "seen_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "agentmart_read",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agentmart_tools'",
   "seen_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "tool": "agentmart_write",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agentmart_tools'",
   "seen_at": "2026-10-24T12:17:42.805Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 33,
   "ran_at": "2026-10-24T12:17:42.805Z"
  }
 ]
}