{
 "server": "dev.seekrit/remote-mcp",
 "url": "https://mcp.seekrit.dev/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 40,
 "tools_ever_seen": 40,
 "drift_events": 40,
 "findings_by_severity": {
  "high": 38
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 40,
  "ran_at": "2026-10-23T06:17:43.230Z"
 },
 "current_tools": [
  "audit",
  "billing",
  "compose_group",
  "create_app",
  "create_group",
  "delete_app",
  "delete_branch",
  "delete_env",
  "delete_group",
  "delete_secret",
  "get_started",
  "invite_member",
  "kms_disable_key",
  "kms_list_keys",
  "kms_revoke_grant",
  "list_apps",
  "list_branches",
  "list_env_groups",
  "list_envs",
  "list_group_envs",
  "list_groups",
  "list_invites",
  "list_lease_targets",
  "list_leases",
  "list_members",
  "list_orgs",
  "list_secret_versions",
  "list_secrets",
  "list_tokens",
  "local_tool_for",
  "rename_app",
  "rename_group",
  "restore_secret",
  "revoke_invite",
  "revoke_lease",
  "revoke_token",
  "setup_local_crypto",
  "signup",
  "uncompose_group",
  "whoami"
 ],
 "drift": [
  {
   "tool": "signup",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "get_started",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "setup_local_crypto",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "local_tool_for",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "whoami",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_orgs",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_apps",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_envs",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_branches",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_groups",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_group_envs",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_env_groups",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_members",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_secrets",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_secret_versions",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_tokens",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_invites",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "kms_list_keys",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_lease_targets",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_leases",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "audit",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "billing",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_app",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_group",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "compose_group",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "uncompose_group",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "invite_member",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "rename_app",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "rename_group",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "restore_secret",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_secret",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "revoke_token",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "revoke_invite",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "revoke_lease",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "kms_disable_key",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "kms_revoke_grant",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_app",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_group",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_env",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_branch",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "findings": [
  {
   "tool": "signup",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ate a seekrit workspace and your own machine credential — one call, no human, no browser. Binds the credential to this s",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "setup_local_crypto",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "y-paste .mcp.json that reuses this session's credential. Takes no arguments and returns prose plus config. Call this the",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "setup_local_crypto",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'local_tool_for'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "local_tool_for",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'setup_local_crypto'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "whoami",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "can access. Call this first: it confirms the credential works and tells you which org slug to pass (or that you can omit",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_orgs",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "List the organizations this credential can access. Use it to find the `org` slug every other tool takes",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_apps",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_apps",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_envs",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_envs",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_branches",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_branches",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_groups",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_groups",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_group_envs",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_group_envs",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_env_groups",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_env_groups",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_members",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_members",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_secrets",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_secrets",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'setup_local_crypto'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_secret_versions",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_secret_versions",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_tokens",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ganization's service tokens — the long-lived credentials that let a deployed workload fetch secrets. Metadata only: the",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_tokens",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_invites",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_invites",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "kms_list_keys",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "kms_list_keys",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_lease_targets",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ostgres, MySQL, …) against which short-lived credentials can be minted on demand instead of storing a standing password.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_lease_targets",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_leases",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "issued — the ledger of who got a short-lived credential against which target and until when. Never includes the credenti",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "list_leases",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "audit",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "audit",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "billing",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "billing",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_app",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_app",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'setup_local_crypto'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_group",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "create_group",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "compose_group",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "compose_group",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "uncompose_group",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "uncompose_group",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "invite_member",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "invite_member",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "rename_app",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "rename_app",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "rename_group",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "rename_group",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "restore_secret",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "restore_secret",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_secret",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_secret",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "revoke_token",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "revoke_token",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "revoke_invite",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "revoke_invite",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "revoke_lease",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "iting for it to expire — the leased database credential is dropped at the target immediately, so anything still holding",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "revoke_lease",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "kms_disable_key",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "kms_disable_key",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "kms_revoke_grant",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "kms_revoke_grant",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_app",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_app",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_group",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_group",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_env",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_env",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_branch",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.org.description",
   "evidence": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "delete_branch",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_orgs'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 40,
   "ran_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "status": "OK",
   "n_tools": 40,
   "ran_at": "2026-08-14T06:17:15.856Z"
  }
 ]
}