{
 "server": "com.googleapis.androidmanagement/mcp",
 "url": "https://androidmanagement.googleapis.com/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 9,
 "tools_ever_seen": 9,
 "drift_events": 9,
 "findings_by_severity": {
  "high": 6,
  "low": 6,
  "medium": 2
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 9,
  "ran_at": "2026-10-22T18:17:43.445Z"
 },
 "current_tools": [
  "get_application",
  "get_device",
  "get_enterprise",
  "get_policy",
  "get_web_app",
  "list_devices",
  "list_enterprises",
  "list_policies",
  "list_web_apps"
 ],
 "drift": [
  {
   "tool": "get_enterprise",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_enterprises",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_application",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_device",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_devices",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_policy",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_policies",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_web_app",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_web_apps",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T18:17:43.445Z"
  }
 ],
 "findings": [
  {
   "tool": "get_enterprise",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "outputSchema.$defs.ExternalData.properties.url.description",
   "evidence": "e. Android Device Policy doesn't provide any credentials in the GET request, so the URL must be publicly accessible. Inc",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_enterprise",
   "detector": "url_in_description",
   "severity": "low",
   "field": "outputSchema.$defs.SigninDetail.properties.signinUrl.description",
   "evidence": "https://enterprise.google.com/android/enroll?et=",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_enterprises",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "outputSchema.$defs.ExternalData.properties.url.description",
   "evidence": "e. Android Device Policy doesn't provide any credentials in the GET request, so the URL must be publicly accessible. Inc",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_enterprises",
   "detector": "url_in_description",
   "severity": "low",
   "field": "outputSchema.$defs.SigninDetail.properties.signinUrl.description",
   "evidence": "https://enterprise.google.com/android/enroll?et=",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_device",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "outputSchema.$defs.DeviceSettings.properties.isDeviceSecure.description",
   "evidence": "Whether the device is secured with PIN/password.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_device",
   "detector": "url_in_description",
   "severity": "low",
   "field": "outputSchema.$defs.CommonCriteriaModeInfo.description",
   "evidence": "https://www.commoncriteriaportal.org/",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_devices",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "outputSchema.$defs.Device.properties.appliedPasswordPolicies.description",
   "evidence": "The password requirements currently applied to the device. * This field exist",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_devices",
   "detector": "url_in_description",
   "severity": "low",
   "field": "outputSchema.$defs.CommonCriteriaModeInfo.description",
   "evidence": "https://www.commoncriteriaportal.org/",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_policy",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "outputSchema.$defs.ApnSetting.properties.password.description",
   "evidence": "Optional. APN password of the APN.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_policy",
   "detector": "encoded_blob_base64",
   "severity": "medium",
   "field": "outputSchema.$defs.ExtensionConfig.properties.notificationReceiver.description",
   "evidence": "nReceiverService`](https://developers.google.com/android/management/reference/amapi/com/google/android/managementapi/notification/NotificationReceiverService) (see [Integrate with the AMAPI SDK](https",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_policy",
   "detector": "url_in_description",
   "severity": "low",
   "field": "outputSchema.$defs.AdvancedSecurityOverrides.properties.commonCriteriaMode.description",
   "evidence": "https://www.commoncriteriaportal.org/",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_policies",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "outputSchema.$defs.ApnSetting.properties.password.description",
   "evidence": "Optional. APN password of the APN.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_policies",
   "detector": "encoded_blob_base64",
   "severity": "medium",
   "field": "outputSchema.$defs.ExtensionConfig.properties.notificationReceiver.description",
   "evidence": "nReceiverService`](https://developers.google.com/android/management/reference/amapi/com/google/android/managementapi/notification/NotificationReceiverService) (see [Integrate with the AMAPI SDK](https",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_policies",
   "detector": "url_in_description",
   "severity": "low",
   "field": "outputSchema.$defs.AdvancedSecurityOverrides.properties.commonCriteriaMode.description",
   "evidence": "https://www.commoncriteriaportal.org/",
   "seen_at": "2026-10-22T18:17:43.445Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 9,
   "ran_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "status": "OK",
   "n_tools": 9,
   "ran_at": "2026-08-13T18:17:15.851Z"
  }
 ]
}