{
 "server": "com.83blue.upload/transfer",
 "url": "https://upload.83blue.com/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 9,
 "tools_ever_seen": 9,
 "drift_events": 9,
 "findings_by_severity": {
  "high": 6,
  "low": 4
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 9,
  "ran_at": "2026-10-24T12:17:42.805Z"
 },
 "current_tools": [
  "delete_site",
  "deploy_site",
  "list_sites",
  "recall",
  "receive_file",
  "remember",
  "share_conversation",
  "share_file",
  "share_text"
 ],
 "drift": [
  {
   "tool": "share_text",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "share_file",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "share_conversation",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "receive_file",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "deploy_site",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_sites",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "delete_site",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "remember",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "recall",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  }
 ],
 "findings": [
  {
   "tool": "share_text",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "rl (one GET fetches it) plus a share url and password. No account or API key needed.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "share_file",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.password.description",
   "evidence": "Optional custom password (8-64 chars); a strong one is generated when omitted",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "share_file",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://upload.83blue.com/docs",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "share_conversation",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.password.description",
   "evidence": "Optional custom password (8-64 chars); a strong one is generated when omitted",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "receive_file",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "e.com/f/...) on its own, or a share url plus password. Returns metadata including sha256, the file list for zip bundle",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "receive_file",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://upload.83blue.com/f/...",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "deploy_site",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://upload.83blue.com/s/brave-otter-482/,",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_sites",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.site.description",
   "evidence": "https://.../s/name/",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "delete_site",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'deploy_site'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "remember",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "store for agents, no signup, no account, no API key. Also callable as save_memory, store_memory, save_note, stash. R",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "recall",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "token (a capability url, or a share url plus password). Use this to recall what you stored with remember in an earlier",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "recall",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'remember'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 9,
   "ran_at": "2026-10-24T12:17:42.805Z"
  },
  {
   "status": "OK",
   "n_tools": 9,
   "ran_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "status": "OK",
   "n_tools": 4,
   "ran_at": "2026-08-13T12:17:15.844Z"
  }
 ]
}