{
 "server": "com.predme/hypathesis",
 "url": "https://hypathesis.com/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 4,
 "tools_ever_seen": 4,
 "drift_events": 4,
 "findings_by_severity": {
  "high": 4,
  "low": 1
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 4,
  "ran_at": "2026-10-23T00:17:43.435Z"
 },
 "current_tools": [
  "check_device_auth",
  "get_analysis_status",
  "get_variable_relationships",
  "initiate_device_auth"
 ],
 "drift": [
  {
   "tool": "get_analysis_status",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_variable_relationships",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "initiate_device_auth",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "check_device_auth",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  }
 ],
 "findings": [
  {
   "tool": "get_analysis_status",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "d endpoint. authorization: Optional. API key as 'Bearer hk_...' or 'hk_...'. session_token: Optional.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_analysis_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_variable_relationships'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_variable_relationships",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "atus reports status='Ready'. Without an API key (anonymous): returns the relationship list with source, targ",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_variable_relationships",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://hypathesis.com",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "get_variable_relationships",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_analysis_status'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "initiate_device_auth",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "Start a browser-based sign-in flow to get an API key for full access. Call this when you need detailed analysis",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "initiate_device_auth",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'check_device_auth'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "check_device_auth",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ng' while waiting, or 'complete' with an api_key when the user has signed in. Use the returned api_key as the",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "check_device_auth",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'initiate_device_auth'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 4,
   "ran_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "status": "OK",
   "n_tools": 4,
   "ran_at": "2026-08-14T00:17:15.846Z"
  }
 ]
}