{
 "server": "com.bluepillow/hotels",
 "url": "https://mcp.b2a.bluepillow.com/",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 6,
 "tools_ever_seen": 6,
 "drift_events": 13,
 "findings_by_severity": {
  "high": 24,
  "low": 8,
  "critical": 2
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 6,
  "ran_at": "2026-09-28T18:17:12.275Z"
 },
 "current_tools": [
  "b2a_get_key",
  "check_property_availability",
  "discover_destinations_near",
  "get_property_details",
  "resolve_destination",
  "search_stays"
 ],
 "drift": [
  {
   "tool": "search_stays",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "get_property_details",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "check_property_availability",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "resolve_destination",
   "kind": "mutated",
   "severity": "critical",
   "detected_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "discover_destinations_near",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "b2a_get_key",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "search_stays",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "get_property_details",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "check_property_availability",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "resolve_destination",
   "kind": "mutated",
   "severity": "critical",
   "detected_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "discover_destinations_near",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "b2a_get_key",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "discover_destinations_near",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-13T12:17:15.844Z"
  }
 ],
 "findings": [
  {
   "tool": "search_stays",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "search_stays",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_property_details'",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "search_stays",
   "detector": "oversized_description",
   "severity": "low",
   "field": "description",
   "evidence": "10806 chars",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "get_property_details",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "get_property_details",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.property_id.description",
   "evidence": "https://www.bluepillow.com/search/68d1a2...",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "get_property_details",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_stays'",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "get_property_details",
   "detector": "oversized_description",
   "severity": "low",
   "field": "description",
   "evidence": "4038 chars",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "check_property_availability",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "check_property_availability",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.property_id.description",
   "evidence": "https://www.bluepillow.com/search/68d1a2...",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "check_property_availability",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_stays'",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "resolve_destination",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "inputSchema.properties.country.description",
   "evidence": "supported language. Unrecognized values are silently ignored (fail-open).",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "resolve_destination",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "resolve_destination",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_stays'",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "discover_destinations_near",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "discover_destinations_near",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_stays'",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "b2a_get_key",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "title",
   "evidence": "Get an anonymous API key for Blue Pillow Hotels & Stays",
   "seen_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "tool": "search_stays",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "search_stays",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_property_details'",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "search_stays",
   "detector": "oversized_description",
   "severity": "low",
   "field": "description",
   "evidence": "10806 chars",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "get_property_details",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "get_property_details",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.property_id.description",
   "evidence": "https://www.bluepillow.com/search/68d1a2...",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "get_property_details",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_stays'",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "get_property_details",
   "detector": "oversized_description",
   "severity": "low",
   "field": "description",
   "evidence": "4038 chars",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "check_property_availability",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "check_property_availability",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.property_id.description",
   "evidence": "https://www.bluepillow.com/search/68d1a2...",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "check_property_availability",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_stays'",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "resolve_destination",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "inputSchema.properties.country.description",
   "evidence": "supported language. Unrecognized values are silently ignored (fail-open).",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "resolve_destination",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "resolve_destination",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_stays'",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "discover_destinations_near",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "discover_destinations_near",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_stays'",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "b2a_get_key",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "title",
   "evidence": "Get an anonymous API key for Blue Pillow Hotels & Stays",
   "seen_at": "2026-08-20T00:17:08.136Z"
  },
  {
   "tool": "discover_destinations_near",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key.description",
   "evidence": "Your anonymous Blue Pillow Hotels & Stays API key (format 'pk_anon_…'). Pass it in THIS field on every call — this",
   "seen_at": "2026-08-13T12:17:15.844Z"
  },
  {
   "tool": "discover_destinations_near",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_stays'",
   "seen_at": "2026-08-13T12:17:15.844Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-28T18:17:12.275Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-28T12:17:18.806Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-28T06:17:17.668Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-28T00:17:17.464Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-27T18:17:18.196Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-27T12:17:18.475Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-27T06:17:17.888Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-27T00:17:17.571Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-26T18:17:18.573Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-26T12:17:18.093Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-26T06:17:18.674Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-26T00:17:47.842Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-25T18:17:47.842Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-25T12:17:47.883Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-25T06:17:47.829Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-25T00:17:47.843Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-24T12:17:47.865Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-24T06:17:47.841Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-24T00:17:33.491Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-23T18:17:33.508Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-23T12:17:44.750Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-23T06:17:42.551Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-23T00:17:42.227Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-22T18:17:48.446Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-22T12:17:45.334Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-22T06:17:42.028Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-22T00:17:41.535Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-21T18:17:45.738Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-09-21T12:17:43.448Z"
  }
 ]
}