{
 "server": "ai.webrun/webrun",
 "url": "https://api.webrun.ai/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 21,
 "tools_ever_seen": 21,
 "drift_events": 21,
 "findings_by_severity": {
  "high": 8,
  "low": 3
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 21,
  "ran_at": "2026-10-24T00:17:42.836Z"
 },
 "current_tools": [
  "browser_task",
  "create_agent",
  "create_session",
  "create_workflow",
  "get_task_status",
  "get_workflow",
  "guardrail_response",
  "list_agents",
  "list_environments",
  "list_sessions",
  "list_workflows",
  "pause_agent",
  "pause_session_task",
  "resume_agent",
  "resume_session_task",
  "screenshot",
  "send_task",
  "stop_session_task",
  "terminate_session",
  "trigger_workflow",
  "update_workflow"
 ],
 "drift": [
  {
   "tool": "browser_task",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_session",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "send_task",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "pause_session_task",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "resume_session_task",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "stop_session_task",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "terminate_session",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "guardrail_response",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "get_task_status",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "screenshot",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "list_sessions",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "list_environments",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "list_workflows",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "get_workflow",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_workflow",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "update_workflow",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "trigger_workflow",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_agent",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "list_agents",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "pause_agent",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "resume_agent",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T12:17:43.718Z"
  }
 ],
 "findings": [
  {
   "tool": "browser_task",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.proxy.description",
   "evidence": "type: \"http\"|\"socks\", host, port, username?, password? }. Omit for no proxy. Social/messaging automation (WhatsApp, Te",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "browser_task",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_task_status'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_session",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.proxy.description",
   "evidence": "type: \"http\"|\"socks\", host, port, username?, password? }. Omit for no proxy. Social/messaging automation (WhatsApp, Te",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_session",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_environments'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "send_task",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_session'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "pause_session_task",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'resume_session_task'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "guardrail_response",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "er when the browser agent needs human input (credentials, clarification, approval). The response is handed to the live a",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "guardrail_response",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_task_status'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "list_environments",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'browser_task'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "get_workflow",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "workflowId or exact title. Read-only; proxy credentials are masked.",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "get_workflow",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_workflows'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_workflow",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.proxy.description",
   "evidence": "type:\"http\"|\"socks\", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned. So",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_workflow",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.promptTemplate.description",
   "evidence": "https://url",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_workflow",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'browser_task'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "update_workflow",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.proxy.description",
   "evidence": "type:\"http\"|\"socks\", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned. So",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "update_workflow",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.promptTemplate.description",
   "evidence": "https://url",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "update_workflow",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_workflows'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "trigger_workflow",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'browser_task'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_agent",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "inputSchema.properties.environmentId.description",
   "evidence": "never ask the user to choose. Workflow mode always uses the workflow's deployed environment.",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_agent",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.proxy.description",
   "evidence": "type:\"http\"|\"socks\", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned. So",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_agent",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.prompt.description",
   "evidence": "https://url",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "create_agent",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_workflows'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "pause_agent",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_agent'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "tool": "resume_agent",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_agents'",
   "seen_at": "2026-10-22T12:17:43.718Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 21,
   "ran_at": "2026-10-24T00:17:42.836Z"
  },
  {
   "status": "OK",
   "n_tools": 21,
   "ran_at": "2026-10-22T12:17:43.718Z"
  },
  {
   "status": "OK",
   "n_tools": 21,
   "ran_at": "2026-08-13T06:17:15.836Z"
  }
 ]
}