{
 "server": "com.glasswarp/mcp-server",
 "url": "https://mcp.glasswarp.com/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 16,
 "tools_ever_seen": 16,
 "drift_events": 16,
 "findings_by_severity": {
  "high": 5
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 16,
  "ran_at": "2026-10-22T18:17:43.445Z"
 },
 "current_tools": [
  "app.launch",
  "demos.get",
  "demos.list",
  "input.click_target",
  "input.click_xy",
  "input.drag",
  "input.scroll",
  "input.send_actions",
  "input.send_keys",
  "input.type_text",
  "rigs.list",
  "screen.observe",
  "session.end",
  "session.live_view",
  "session.start",
  "session.status"
 ],
 "drift": [
  {
   "tool": "demos.list",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "demos.get",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "rigs.list",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "session.start",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "session.end",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "screen.observe",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.click_target",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.click_xy",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.type_text",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.send_keys",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.drag",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.scroll",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.send_actions",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "app.launch",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "session.live_view",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "session.status",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  }
 ],
 "findings": [
  {
   "tool": "demos.list",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'demos.get'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "demos.get",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'demos.list'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "rigs.list",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "List Windows machines (rigs) paired to this API key: id, name, online, api_access_enabled, and USABLE flag. Read-onl",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "session.start",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "d. Idle sessions auto-end after ~15 minutes. Always call session.end when done or abandoning. Do not call if no USABLE ri",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "session.start",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'rigs.list'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "session.end",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "estore, closes apps launched via app.launch. Always call when finished or abandoning — do not leave sessions open. Safe t",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "session.end",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'session.start'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "screen.observe",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "no JPEG) for speed; set image=true only when you must judge pixels visually (then max_width≈960, quality≈60). If chang",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "screen.observe",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'session.start'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.click_target",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'screen.observe'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.click_xy",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'screen.observe'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.type_text",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'input.click_target'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.send_keys",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'input.type_text'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.drag",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'input.send_actions'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.scroll",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'input.send_actions'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "input.send_actions",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'screen.observe'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "app.launch",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'session.end'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "session.live_view",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "Read-only for the agent — does not grant the API key console access. Offer on long or sensitive tasks. Owner must be",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "session.status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'session.start'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 16,
   "ran_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "status": "OK",
   "n_tools": 16,
   "ran_at": "2026-08-13T18:17:15.851Z"
  }
 ]
}