{
 "server": "eu.tracepass/tracepass",
 "url": "https://ai.tracepass.eu/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 7,
 "tools_ever_seen": 7,
 "drift_events": 8,
 "findings_by_severity": {
  "low": 6,
  "high": 2
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 7,
  "ran_at": "2026-10-25T06:17:42.965Z"
 },
 "current_tools": [
  "tracepass_epcis",
  "tracepass_passport_fields",
  "tracepass_passport_parties",
  "tracepass_passports",
  "tracepass_products",
  "tracepass_scope",
  "tracepass_templates"
 ],
 "drift": [
  {
   "tool": "tracepass_passports",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-25T06:17:42.965Z"
  },
  {
   "tool": "tracepass_products",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_passports",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_passport_fields",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_passport_parties",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_epcis",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_templates",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_scope",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "findings": [
  {
   "tool": "tracepass_passports",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://doi.org/",
   "seen_at": "2026-10-25T06:17:42.965Z"
  },
  {
   "tool": "tracepass_passports",
   "detector": "oversized_description",
   "severity": "low",
   "field": "description",
   "evidence": "8926 chars",
   "seen_at": "2026-10-25T06:17:42.965Z"
  },
  {
   "tool": "tracepass_passports",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://doi.org/",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_passports",
   "detector": "oversized_description",
   "severity": "low",
   "field": "description",
   "evidence": "8839 chars",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_passport_fields",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "orded in the passport's audit trail with the credential that made it (API key or connected app) and this MCP channel. `",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_passport_parties",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://doi.org/",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_scope",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "acts. This is not legal advice; never write 'you must' — use product-type phrasing ('LMT batteries need a passport fro",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "tracepass_scope",
   "detector": "oversized_description",
   "severity": "low",
   "field": "description",
   "evidence": "4033 chars",
   "seen_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 7,
   "ran_at": "2026-10-25T06:17:42.965Z"
  },
  {
   "status": "OK",
   "n_tools": 7,
   "ran_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-08-14T06:17:15.856Z"
  }
 ]
}