{
 "server": "in.termal/termalin-web",
 "url": "https://termal.in/api/v1/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 18,
 "tools_ever_seen": 18,
 "drift_events": 18,
 "findings_by_severity": {
  "high": 4
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 18,
  "ran_at": "2026-10-23T06:17:43.230Z"
 },
 "current_tools": [
  "alerts_list",
  "backup_create",
  "backup_list",
  "data_query",
  "data_schema",
  "data_tables",
  "generate_password",
  "hosts_list",
  "job_list",
  "job_start",
  "job_status",
  "job_stop",
  "server_metrics",
  "sftp_list",
  "sftp_read",
  "sftp_write",
  "ssh_exec",
  "ssh_exec_many"
 ],
 "drift": [
  {
   "tool": "hosts_list",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "generate_password",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ssh_exec",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ssh_exec_many",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "job_start",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "job_status",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "job_stop",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "job_list",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "server_metrics",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "backup_create",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "backup_list",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "alerts_list",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "sftp_list",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "sftp_read",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "sftp_write",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data_query",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data_tables",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data_schema",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "findings": [
  {
   "tool": "generate_password",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "name",
   "evidence": "generate_password",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ssh_exec",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "de. Runs keyless over Termalin's tunnel — no SSH key, and the server needs no open inbound port. Each call is a fresh",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ssh_exec",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "ssh_exec_many",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "job_start",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "job_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "job_stop",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "job_list",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "server_metrics",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "backup_create",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "backup_list",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "sftp_list",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "sftp_read",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "sftp_write",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data_query",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "un a database query on one of your servers — passwordless. It executes the engine's own client on the host over Termal",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data_query",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data_tables",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "keys of a database on one of your servers — passwordless, over the same local-client path as data_query.",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data_tables",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "tool": "data_schema",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'hosts_list'",
   "seen_at": "2026-10-23T06:17:43.230Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 18,
   "ran_at": "2026-10-23T06:17:43.230Z"
  },
  {
   "status": "OK",
   "n_tools": 6,
   "ran_at": "2026-08-14T12:17:15.842Z"
  }
 ]
}