{
 "server": "app.steadywrk/mcp-dispatch",
 "url": "https://steadywrk.app/api/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 9,
 "tools_ever_seen": 9,
 "drift_events": 9,
 "findings_by_severity": {
  "high": 8,
  "low": 3
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 9,
  "ran_at": "2026-10-22T18:17:43.445Z"
 },
 "current_tools": [
  "acp.validate",
  "agentic.readiness_probe",
  "dispatch.estimate",
  "dispatch.evals",
  "dispatch.index",
  "dispatch.order",
  "dispatch.order_status",
  "dispatch.quote",
  "ucp.validate"
 ],
 "drift": [
  {
   "tool": "agentic.readiness_probe",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.quote",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.estimate",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.order",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.order_status",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.evals",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.index",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "acp.validate",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "ucp.validate",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  }
 ],
 "findings": [
  {
   "tool": "agentic.readiness_probe",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ks under `next`. Rate-limited per caller. No API key required.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.quote",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "epts a provisioned integration key through x-api-key or, when OAuth is enabled, a scoped self-serve OAuth token throu",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.quote",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://steadywrk.app/api/integration-key-request",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.quote",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'dispatch.estimate'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.estimate",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "quotes. Use dispatch.quote with an accepted credential to request a quote. No API key required.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.estimate",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'dispatch.quote'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.order",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ires a provisioned integration key through x-api-key. MCP also accepts that key through Authorization: Bearer; direct",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.order",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://steadywrk.app/api/integration-key-request",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.order",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'dispatch.index'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.order_status",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://steadywrk.app/api/integration-key-request",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.order_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'dispatch.order'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.evals",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ndent audit or a service-level guarantee. No API key required.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "dispatch.index",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ved transaction prices or binding quotes. No API key required.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "acp.validate",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ores nothing, calls no checkout endpoint. No API key required.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "ucp.validate",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ores nothing, calls no checkout endpoint. No API key required.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 9,
   "ran_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "status": "OK",
   "n_tools": 5,
   "ran_at": "2026-08-13T06:17:15.836Z"
  }
 ]
}