{
 "server": "dev.mcphost/mcphost",
 "url": "https://mcphost.dev/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 18,
 "tools_ever_seen": 18,
 "drift_events": 18,
 "findings_by_severity": {
  "high": 2
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 18,
  "ran_at": "2026-10-23T06:17:43.230Z"
 },
 "current_tools": [
  "billing.plans",
  "host.errors",
  "host.feedback.list",
  "host.feedback.send",
  "host.help.get",
  "host.help.search",
  "host.quickstart",
  "host.redeem",
  "host.resume",
  "host.state.get",
  "host.state.list",
  "host.state.set",
  "host.tool_call",
  "host.tool_publish",
  "host.tool_share",
  "host.tool_test",
  "host.whoami",
  "signup"
 ],
 "drift": [
  {
   "tool": "signup",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.quickstart",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.help.search",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.help.get",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.errors",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.redeem",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "billing.plans",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.whoami",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.tool_publish",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.tool_call",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.tool_test",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.state.set",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.state.get",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.state.list",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.tool_share",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.feedback.send",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.feedback.list",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.resume",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "findings": [
  {
   "tool": "signup",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "the redeem call, if it leaks, carries a dead credential. The raw-key path (handoff omitted) stays fully supported.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "signup",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.quickstart",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.help.search",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.help.get",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.help.search'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.errors",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.redeem",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.whoami'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "billing.plans",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.whoami",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ng key_age_s and key_rotated_at for auditing credential hygiene.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.whoami",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.tool_publish",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.quickstart'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.tool_call",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.quickstart'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.tool_test",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.quickstart'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.state.set",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.state.get",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.state.list",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.tool_share",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.feedback.send",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.feedback.list",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "host.resume",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'host.redeem'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 18,
   "ran_at": "2026-10-23T06:17:43.230Z"
  }
 ]
}