{
 "server": "ai.dataecho/mcp",
 "url": "https://dataecho.ai/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 26,
 "tools_ever_seen": 26,
 "drift_events": 26,
 "findings_by_severity": {
  "high": 4
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 26,
  "ran_at": "2026-10-22T12:17:43.718Z"
 },
 "current_tools": [
  "app_status",
  "claim_site",
  "create_drive",
  "delete_site",
  "delete_variable",
  "drive_delete_file",
  "drive_history",
  "drive_list_files",
  "drive_move_file",
  "drive_read_file",
  "drive_restore",
  "drive_revoke_token",
  "drive_share",
  "drive_tokens",
  "drive_write_file",
  "get_site",
  "list_drives",
  "list_sites",
  "list_variables",
  "platform_info",
  "publish_site",
  "request_login_code",
  "search_sites",
  "set_variable",
  "update_site_metadata",
  "verify_login_code"
 ],
 "drift": [
  {
   "tool": "platform_info",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "request_login_code",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "verify_login_code",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "publish_site",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "claim_site",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "list_sites",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "search_sites",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "get_site",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "update_site_metadata",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "delete_site",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "app_status",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "list_drives",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "create_drive",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_list_files",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_read_file",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_write_file",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_delete_file",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_move_file",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_share",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_tokens",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_revoke_token",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_history",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_restore",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "list_variables",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "set_variable",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "delete_variable",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T06:17:44.240Z"
  }
 ],
 "findings": [
  {
   "tool": "request_login_code",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'verify_login_code'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "verify_login_code",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "e sign-in with the emailed code. Returns the apiKey ONCE — configure it as the `Authorization: Bearer <key>` header",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "verify_login_code",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'request_login_code'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "publish_site",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "er-side app (auth required; listen on process.env.PORT; persist under /data; poll app_status). Total payload ≤ 8 M",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "publish_site",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'app_status'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "claim_site",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'publish_site'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "update_site_metadata",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ng: viewer title/description, SPA mode, TTL, password (string sets, null removes).",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "app_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'publish_site'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_share",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "Mint a scoped drive access token for another agent (perms read|write, optional path prefix + TTL",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_revoke_token",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'drive_tokens'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "tool": "drive_restore",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'drive_history'",
   "seen_at": "2026-10-22T06:17:44.240Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-10-22T06:17:44.240Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-08-13T06:17:15.836Z"
  }
 ]
}