{
 "server": "dev.kamy/kamy",
 "url": "https://mcp.kamy.dev/mcp",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 59,
 "tools_ever_seen": 62,
 "drift_events": 62,
 "findings_by_severity": {
  "high": 40,
  "critical": 7
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 59,
  "ran_at": "2026-10-23T06:17:43.230Z"
 },
 "current_tools": [
  "ask_kamy",
  "attest_artifact",
  "bulk_signature_requests",
  "convert_document",
  "create_envelope",
  "create_schedule",
  "create_signature_request",
  "create_template",
  "create_webhook",
  "delete_schedule",
  "edit_pdf",
  "extract_document",
  "extract_from_render",
  "get_account",
  "get_envelope",
  "get_job",
  "get_provenance_chain",
  "get_render",
  "get_render_pages",
  "get_signature_certificate",
  "get_signature_request",
  "get_signature_template",
  "get_started",
  "get_template_schema",
  "get_template_version",
  "get_upload",
  "list_renders",
  "list_schedules",
  "list_signature_requests",
  "list_signature_templates",
  "list_template_versions",
  "list_templates",
  "list_webhooks",
  "merge_pdfs",
  "pki_sign_pdf",
  "preview_field_placement",
  "publish_template",
  "record_agent_action",
  "remind_signature",
  "render_async",
  "render_batch",
  "render_docx",
  "render_html",
  "render_pdf",
  "render_pptx",
  "render_xlsx",
  "rollback_template",
  "scan_tool_description",
  "split_pdf",
  "test_webhook",
  "trace_record",
  "trace_record_batch",
  "trace_search",
  "update_template",
  "upload_file",
  "validate_payload",
  "verify_attestation",
  "verify_mcp_server",
  "verify_pdf_signature"
 ],
 "drift": [
  {
   "tool": "list_templates",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_template_schema",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_template",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "update_template",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "publish_template",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "rollback_template",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_template_versions",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_template_version",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_pdf",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_docx",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_pptx",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_xlsx",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_html",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert_document",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "merge_pdfs",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "split_pdf",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "edit_pdf",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "upload_file",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_upload",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "validate_payload",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "extract_document",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ask_kamy",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_signature_request",
   "kind": "mutated",
   "severity": "critical",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_envelope",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_signature_requests",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_signature_certificate",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_signature_request",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_envelope",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "remind_signature",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "bulk_signature_requests",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "preview_field_placement",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_signature_templates",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_signature_template",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "pki_sign_pdf",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "verify_pdf_signature",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "attest_artifact",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "verify_attestation",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "record_agent_action",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_provenance_chain",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "trace_record",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "trace_record_batch",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "trace_search",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "verify_mcp_server",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "scan_tool_description",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_started",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_account",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_renders",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_render",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_render_pages",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "extract_from_render",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_async",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_job",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_batch",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_schedule",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_schedules",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_schedule",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_webhook",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_webhooks",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "test_webhook",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "install_sdk",
   "kind": "removed",
   "severity": "info",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "generate_integration_code",
   "kind": "removed",
   "severity": "info",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_api_key_instructions",
   "kind": "removed",
   "severity": "info",
   "detected_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "findings": [
  {
   "tool": "get_template_schema",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_template",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "you start cutting versions. Requires a Kamy API key with the `templates:write` scope; without a key, returns dashboa",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_template",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'update_template'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "update_template",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "another account, return 403. Requires a Kamy API key with the `templates:write` scope; without a key, returns dashboa",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "update_template",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'publish_template'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "publish_template",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "atestVersion, publishedAt }. Requires a Kamy API key with the `templates:write` scope; without a key, returns dashboa",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "publish_template",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'update_template'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "rollback_template",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "kes a template UUID or slug. Requires a Kamy API key with the `templates:write` scope; without a key, returns dashboa",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "rollback_template",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'publish_template'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_template_versions",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ad-only and spends no quota. Requires a Kamy API key with the `templates:read` scope; without a key, returns dashboar",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_template_versions",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'publish_template'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_template_version",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ad-only and spends no quota. Requires a Kamy API key with the `templates:read` scope; without a key, returns dashboar",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_template_version",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'rollback_template'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_pdf",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "before this fails with 402. Requires a Kamy API key with the `render` scope; without a key, returns dashboard setup",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_pdf",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_template_schema'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_docx",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "r against the monthly quota. Requires a Kamy API key with the `render` scope; without a key, returns dashboard setup",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_docx",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_template_schema'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_pptx",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "r against the monthly quota. Requires a Kamy API key with the `render` scope; without a key, returns dashboard setup",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_pptx",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_xlsx",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "r against the monthly quota. Requires a Kamy API key with the `render` scope; without a key, returns dashboard setup",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_xlsx",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_html",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ile step is the shared cost. Requires a Kamy API key with the `render` scope; without a key, returns dashboard setup",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_html",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert_document",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ravel through the tool call. Requires a Kamy API key with the `render` scope; without a key, returns dashboard setup",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "convert_document",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "merge_pdfs",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ed as one additional render. Requires a Kamy API key with the `render` scope; without a key, returns dashboard setup",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "merge_pdfs",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "split_pdf",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "_pdf or the signature tools. Requires a Kamy API key with the `render` scope; without a key, returns dashboard setup",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "split_pdf",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'merge_pdfs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "edit_pdf",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ather than failing the call. Requires a Kamy API key with the `render` scope; without a key, returns dashboard setup",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "edit_pdf",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "upload_file",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ted MIME types are accepted. Requires a Kamy API key with the `uploads:write` scope; without a key, returns dashboard",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "upload_file",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_upload",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ad-only and spends no quota. Requires a Kamy API key with the `uploads:read` scope; without a key, returns dashboard",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_upload",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'upload_file'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "validate_payload",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "the data before render_pdf. Requires a Kamy API key.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "validate_payload",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_signature_request",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "inputSchema.properties.placedFields.items.properties.anchor.description",
   "evidence": "s. If the text is not on that page the field silently falls back to the raw x/y — call preview_field_placement first t",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_signature_request",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "PDF to a signer for e-signature when a Kamy API key is configured. Without a key, returns dashboard setup instructio",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_signature_request",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_envelope",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "th a sign_url per recipient. Requires a Kamy API key with the `signatures:write` scope; without a key, returns dashbo",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_envelope",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_signature_request'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_signature_request",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ad-only and spends no quota. Requires a Kamy API key with the `signatures:read` scope; without a key, returns dashboa",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_signature_request",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_signature_request'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_envelope",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ad-only and spends no quota. Requires a Kamy API key with the `signatures:read` scope; without a key, returns dashboa",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_envelope",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_envelope'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "remind_signature",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "description",
   "evidence": "Retry-After header, while the envelope form silently skips capped recipients and reports skipped_reason per row, so r",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "remind_signature",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "e-reminder auto-cadence cap. Requires a Kamy API key with the `signatures:write` scope; without a key, returns dashbo",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "bulk_signature_requests",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ining rows come back failed. Requires a Kamy API key with the `signatures:write` scope; without a key, returns dashbo",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "bulk_signature_requests",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_envelope'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "preview_field_placement",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "inputSchema.properties.placedFields.items.properties.anchor.description",
   "evidence": "s. If the text is not on that page the field silently falls back to the raw x/y — call preview_field_placement first t",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "preview_field_placement",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "is to re-render. Read-only. Requires a Kamy API key with the `signatures:read` scope; without a key, returns dashboa",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "preview_field_placement",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_signature_request'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_signature_templates",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ad-only and spends no quota. Requires a Kamy API key with the `signatures:read` scope; without a key, returns dashboa",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_signature_templates",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_templates'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_signature_template",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ad-only and spends no quota. Requires a Kamy API key with the `signatures:read` scope; without a key, returns dashboa",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_signature_template",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_signature_request'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "pki_sign_pdf",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "gn an existing render with PAdES when a Kamy API key is configured. Without a key, returns dashboard setup instructio",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "pki_sign_pdf",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "verify_pdf_signature",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'verify_attestation'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "attest_artifact",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ther the content is correct. Requires a Kamy API key.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "attest_artifact",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_provenance_chain'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "verify_attestation",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "e — like the extract_document verify URL, no API key is required, so a recipient can confirm an artifact independentl",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "verify_attestation",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'extract_document'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "record_agent_action",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": ", recorded_at, verify_url }. Requires a Kamy API key.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "record_agent_action",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_provenance_chain'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_provenance_chain",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "n across the run. Read-only. Requires a Kamy API key.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_provenance_chain",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'attest_artifact'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "trace_record",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": ", recorded_at, verify_url }. Requires a Kamy API key with the trace:record scope; each call consumes monthly Trace qu",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "trace_record",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'trace_search'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "trace_record_batch",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ify_url }] } in input order. Requires a Kamy API key with the `trace:record` scope; without a key, returns dashboard",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "trace_record_batch",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'trace_record'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "trace_search",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "in the dashboard. Read-only. Requires a Kamy API key with the trace:read scope.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "verify_mcp_server",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "description",
   "evidence": "ll' case, where a server you already trusted silently rewrites a tool's description or input schema. Pass server_url a",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "verify_mcp_server",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ther than clearing anything. Requires a Kamy API key.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "scan_tool_description",
   "detector": "exfiltration_pattern",
   "severity": "critical",
   "field": "description",
   "evidence": "uctions addressed at the reading model, data-exfiltration hints, attempts to override your system prompt or hide content.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "scan_tool_description",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "pass in and fetches nothing. Requires a Kamy API key.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_started",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "document in one call: the steps to create an API key in the dashboard, and — when you name a `framework` — the instal",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_started",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_templates'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_account",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "tatus, the plan's limits (renders per month, API keys, seats, custom templates, overage pricing, priority queue), mon",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_account",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_batch'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_renders",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_render'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_render",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_render_pages",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "extract_from_render",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_async",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "description",
   "evidence": "r-quota call fails here with 402 rather than silently queueing.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_async",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_job",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_render'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "render_batch",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_schedule",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'render_pdf'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_schedule",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "deleted by mistake, so confirm with the user before calling this on a schedule you did not just create. If the intent is only to",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_schedule",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_renders'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_webhook",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_renders'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_webhooks",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "description",
   "evidence": "er's own server returned, so this is where a silently broken endpoint shows up as a 4xx or 5xx. Signing secrets are ne",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_webhooks",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_webhook'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "test_webhook",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_webhook'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 59,
   "ran_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "status": "OK",
   "n_tools": 14,
   "ran_at": "2026-08-14T06:17:15.856Z"
  }
 ]
}