{
 "server": "com.klarefi/mcp",
 "url": "https://www.klarefi.com/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 21,
 "tools_ever_seen": 21,
 "drift_events": 21,
 "findings_by_severity": {
  "high": 10
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 21,
  "ran_at": "2026-10-23T00:17:43.435Z"
 },
 "current_tools": [
  "answer_fields",
  "answer_question",
  "create_connector",
  "create_connector_from_openapi",
  "create_intake_session",
  "delete_connector",
  "get_case",
  "get_case_package",
  "get_case_workspace",
  "get_intake_state",
  "get_review_command",
  "give_intake_consent",
  "list_operator_queue",
  "list_workflows",
  "open_intake",
  "save_intake_draft",
  "save_workflow_draft",
  "submit_case_review",
  "submit_intake",
  "upload_document",
  "wait_for_next_action"
 ],
 "drift": [
  {
   "tool": "create_connector_from_openapi",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "create_connector",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "delete_connector",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "create_intake_session",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_case",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "list_operator_queue",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_case_workspace",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_case_package",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "submit_case_review",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_review_command",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "list_workflows",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "save_workflow_draft",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "open_intake",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_intake_state",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "answer_question",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "answer_fields",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "upload_document",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "give_intake_consent",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "submit_intake",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "save_intake_draft",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "wait_for_next_action",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  }
 ],
 "findings": [
  {
   "tool": "create_connector_from_openapi",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_connector'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "list_operator_queue",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "the bounded Klarefi operator queue for this API key's environment. Requires cases:review.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_case_workspace",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_case'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_case_package",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_case'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "open_intake",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ke from a signed URL or from session_id plus access_token. No Klarefi API key is required. On the hosted MCP endpoint, inc",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_intake_state",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "t intake state. Pass url, or session_id with access_token, on the hosted MCP endpoint.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "answer_question",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.access_token.description",
   "evidence": "Applicant access token. Use it with session_id instead of url.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "answer_fields",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.access_token.description",
   "evidence": "Applicant access token. Use it with session_id instead of url.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "upload_document",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.access_token.description",
   "evidence": "Applicant access token. Use it with session_id instead of url.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "give_intake_consent",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.access_token.description",
   "evidence": "Applicant access token. Use it with session_id instead of url.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "submit_intake",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.access_token.description",
   "evidence": "Applicant access token. Use it with session_id instead of url.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "save_intake_draft",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.access_token.description",
   "evidence": "Applicant access token. Use it with session_id instead of url.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "wait_for_next_action",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.access_token.description",
   "evidence": "Applicant access token. Use it with session_id instead of url.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 21,
   "ran_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "status": "OK",
   "n_tools": 20,
   "ran_at": "2026-08-13T18:17:15.851Z"
  }
 ]
}