{
 "server": "com.thousand-api/thousand-api",
 "url": "https://mcp.thousand-api.com/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 84,
 "tools_ever_seen": 84,
 "drift_events": 84,
 "findings_by_severity": {
  "high": 4,
  "low": 1
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 84,
  "ran_at": "2026-10-23T06:17:43.230Z"
 },
 "current_tools": [
  "convert.base64",
  "convert.color",
  "convert.csv",
  "convert.data_size",
  "convert.format",
  "convert.format_number",
  "convert.get_qrcode",
  "convert.markdown",
  "convert.toml",
  "convert.transform_image",
  "convert.unit",
  "convert.url_encoding",
  "convert.xml",
  "convert.yaml",
  "data.calc_stats",
  "data.diff_arrays",
  "data.execute_batch",
  "data.merge_json",
  "data.query_json",
  "data.sort_json",
  "data.validate_all",
  "data.validate_format",
  "data.validate_json",
  "data.validate_schema",
  "datetime.add_business_days",
  "datetime.add_calendar_days",
  "datetime.calc_datetime_diff",
  "datetime.calc_schedule",
  "datetime.check_business_hours",
  "datetime.check_custom_holidays",
  "datetime.convert_iso_duration",
  "datetime.convert_japanese_era",
  "datetime.format_relative_time",
  "datetime.generate_test_dates",
  "datetime.get_calendar_month",
  "datetime.get_cron_next",
  "datetime.get_current_datetime",
  "datetime.get_holidays",
  "datetime.is_holiday",
  "datetime.parse_laravel_schedule",
  "network.calc_cidr",
  "network.check_domain_format",
  "network.check_ip_in_range",
  "network.dns_lookup",
  "network.get_exchange_rate",
  "network.get_ip_info",
  "network.get_page_meta",
  "network.http_fetch",
  "network.inspect_url",
  "network.lookup_postal_code",
  "network.resolve_url",
  "security.decode_jwt",
  "security.generate_hash",
  "security.generate_hmac",
  "security.generate_totp",
  "security.generate_uuid",
  "security.validate_barcode",
  "security.validate_luhn",
  "security.validate_uuid",
  "text.calc_text_similarity",
  "text.convert_japanese",
  "text.convert_string_case",
  "text.diff_markdown_tables",
  "text.diff_text",
  "text.estimate_tokens",
  "text.extract_text_from_html",
  "text.generate_random_string",
  "text.generate_slug",
  "text.get_text_stats",
  "text.mask_pii",
  "text.split_text",
  "utility.calc_color_contrast",
  "utility.calc_expression",
  "utility.calc_loan",
  "utility.calc_pagination",
  "utility.calc_tax",
  "utility.compare_versions",
  "utility.convert_coordinates",
  "utility.diagnose_mcp",
  "utility.generate_color_palette",
  "utility.get_distance",
  "utility.get_tool_schema",
  "utility.get_usage",
  "utility.search_tools"
 ],
 "drift": [
  {
   "tool": "utility.search_tools",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.get_tool_schema",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.get_usage",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.diagnose_mcp",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.execute_batch",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.get_holidays",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.get_calendar_month",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.is_holiday",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.add_business_days",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.add_calendar_days",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.generate_test_dates",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.check_business_hours",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.check_custom_holidays",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.calc_schedule",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.get_cron_next",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.parse_laravel_schedule",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.get_exchange_rate",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.lookup_postal_code",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.get_page_meta",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.get_distance",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.convert_coordinates",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.get_qrcode",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.get_ip_info",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.extract_text_from_html",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.get_text_stats",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.estimate_tokens",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.split_text",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.mask_pii",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.diff_text",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.diff_markdown_tables",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.calc_text_similarity",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.resolve_url",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.markdown",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.generate_color_palette",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.calc_color_contrast",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.color",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.inspect_url",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "security.decode_jwt",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.unit",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "security.generate_hash",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "security.generate_uuid",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "security.validate_uuid",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "security.validate_barcode",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "security.validate_luhn",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "security.generate_hmac",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "security.generate_totp",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.csv",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.yaml",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.toml",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.xml",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.base64",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.url_encoding",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.format",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.calc_expression",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.calc_tax",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.calc_loan",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.compare_versions",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.calc_pagination",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.dns_lookup",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.calc_cidr",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.check_ip_in_range",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.check_domain_format",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.http_fetch",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.query_json",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.calc_stats",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.validate_format",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.data_size",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.format_number",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.convert_japanese",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.generate_slug",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.get_current_datetime",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.calc_datetime_diff",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.format_relative_time",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.convert_japanese_era",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.convert_iso_duration",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.convert_string_case",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.generate_random_string",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.validate_json",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.validate_schema",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.validate_all",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.merge_json",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.diff_arrays",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.sort_json",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.transform_image",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "findings": [
  {
   "tool": "utility.get_tool_schema",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'data.validate_json'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.get_usage",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ォータの使用状況（残量・リセット時刻）を返す / Returns the current API key plan and monthly quota usage before hitting limit_exceeded (429)",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "utility.diagnose_mcp",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "s: API health via GET /v1/health (no quota), API key check via tool-settings (no quota), and disabled tool counts. [u",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.execute_batch",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'datetime.is_holiday'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "datetime.generate_test_dates",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'datetime.add_calendar_days'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "text.split_text",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'text.estimate_tokens'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "security.validate_uuid",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "nal systems, or verifying AI-generated UUIDs before using them as database keys. [use_cases: security, validation]",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "security.generate_totp",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "validates RFC 6238 TOTP (time-based one-time password) codes for 2FA implementations. Exact HMAC-SHA1 computation and",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.url_encoding",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.component.description",
   "evidence": "http://,",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "network.check_domain_format",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'network.dns_lookup'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert.format_number",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convert.format'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data.validate_schema",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'data.validate_json'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 84,
   "ran_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "status": "OK",
   "n_tools": 84,
   "ran_at": "2026-08-14T00:17:15.846Z"
  }
 ]
}