{
 "server": "ai.maximem/synap",
 "url": "https://synap-mcp.maximem.ai/mcp",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 4,
 "tools_ever_seen": 4,
 "drift_events": 4,
 "findings_by_severity": {
  "critical": 3
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 4,
  "ran_at": "2026-10-22T12:17:43.718Z"
 },
 "current_tools": [
  "check_memory_status",
  "list_recent_memories",
  "log_exchange",
  "recall_context"
 ],
 "drift": [
  {
   "tool": "log_exchange",
   "kind": "mutated",
   "severity": "critical",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "check_memory_status",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "recall_context",
   "kind": "mutated",
   "severity": "critical",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "list_recent_memories",
   "kind": "mutated",
   "severity": "critical",
   "detected_at": "2026-10-22T12:17:43.718Z"
  }
 ],
 "findings": [
  {
   "tool": "log_exchange",
   "detector": "exfiltration_pattern",
   "severity": "critical",
   "field": "inputSchema.properties.user_id.description",
   "evidence": "it is the whole identity. On a B2B instance send it together with customer_id. Omit both if every conversation is the s",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "check_memory_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'log_exchange'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "recall_context",
   "detector": "exfiltration_pattern",
   "severity": "critical",
   "field": "inputSchema.properties.user_id.description",
   "evidence": "it is the whole identity. On a B2B instance send it together with customer_id. Omit both if every conversation is the s",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "list_recent_memories",
   "detector": "exfiltration_pattern",
   "severity": "critical",
   "field": "inputSchema.properties.user_id.description",
   "evidence": "it is the whole identity. On a B2B instance send it together with customer_id. Omit both if every conversation is the s",
   "seen_at": "2026-10-22T12:17:43.718Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 4,
   "ran_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "status": "OK",
   "n_tools": 4,
   "ran_at": "2026-08-13T06:17:15.836Z"
  }
 ]
}