{
 "server": "com.tunnelpowered/knowledge-base",
 "url": "https://api.tunnelpowered.com/api/mcp",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 17,
 "tools_ever_seen": 17,
 "drift_events": 17,
 "findings_by_severity": {
  "high": 13,
  "critical": 1
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 17,
  "ran_at": "2026-10-23T06:17:43.230Z"
 },
 "current_tools": [
  "ask_business",
  "ask_business_freeform",
  "cancel_order",
  "check_availability",
  "check_commitment",
  "check_escalation",
  "check_merchant_verification",
  "check_replies",
  "commit_order",
  "contact_business",
  "get_business",
  "get_rate_card",
  "request_order_change",
  "request_quote",
  "reschedule_order",
  "search_businesses",
  "send_followup"
 ],
 "drift": [
  {
   "tool": "search_businesses",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_business",
   "kind": "mutated",
   "severity": "critical",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_merchant_verification",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ask_business",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ask_business_freeform",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_escalation",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_commitment",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_rate_card",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "request_quote",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_availability",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "commit_order",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "cancel_order",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "reschedule_order",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "request_order_change",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "contact_business",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_replies",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "send_followup",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "findings": [
  {
   "tool": "search_businesses",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "uthentication: none. This tool works with no credentials.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_business",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "description",
   "evidence": "on is named in `missing` rather than dropped silently, so an empty field means \"we do not hold this\", not \"they do not",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_business",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "uthentication: none. This tool works with no credentials.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_business",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_businesses'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_merchant_verification",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "uthentication: none. This tool works with no credentials.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_merchant_verification",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_businesses'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ask_business",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "uthentication: none. This tool works with no credentials.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ask_business",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_businesses'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ask_business_freeform",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "uthentication: none. This tool works with no credentials.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ask_business_freeform",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_businesses'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_escalation",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "uthentication: none. This tool works with no credentials.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_escalation",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ask_business'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_commitment",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "uthentication: none. This tool works with no credentials.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_commitment",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'commit_order'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_rate_card",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "uthentication: none. This tool works with no credentials.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_rate_card",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_businesses'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "request_quote",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "uthentication: none. This tool works with no credentials.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "request_quote",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_businesses'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_availability",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "uthentication: none. This tool works with no credentials.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_availability",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_businesses'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "commit_order",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "t POST /api/v1/agents/register, exchange the credentials at POST /api/v1/agents/token.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "commit_order",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_businesses'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "cancel_order",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'check_escalation'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "reschedule_order",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'check_escalation'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "request_order_change",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'check_escalation'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "contact_business",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "t POST /api/v1/agents/register, exchange the credentials at POST /api/v1/agents/token, and send the result as an Authori",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "contact_business",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'search_businesses'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_replies",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "d` and `token` from contact_business are the credential for this call. No bearer token is needed.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "check_replies",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'contact_business'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "send_followup",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'contact_business'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 17,
   "ran_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "status": "OK",
   "n_tools": 17,
   "ran_at": "2026-08-14T00:17:15.846Z"
  }
 ]
}