{
 "server": "io.github.Ainode-tech/accounting-mcp",
 "url": "https://xero.api.ainode.tech/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 9,
 "tools_ever_seen": 9,
 "drift_events": 9,
 "findings_by_severity": {
  "high": 7
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 9,
  "ran_at": "2026-10-23T12:22:17.959Z"
 },
 "current_tools": [
  "apply_categories",
  "calculate_vat",
  "categorise_expenses",
  "confirm_reconciliation",
  "draft_invoice",
  "generate_report",
  "health",
  "reconcile_transactions",
  "send_invoice"
 ],
 "drift": [
  {
   "tool": "health",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "reconcile_transactions",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "confirm_reconciliation",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "categorise_expenses",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "apply_categories",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "calculate_vat",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "draft_invoice",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "send_invoice",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "generate_report",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T12:22:17.959Z"
  }
 ],
 "findings": [
  {
   "tool": "reconcile_transactions",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key_hash.description",
   "evidence": "Customer API key hash identifying Xero token",
   "seen_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "confirm_reconciliation",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key_hash.description",
   "evidence": "Customer API key hash identifying Xero token",
   "seen_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "categorise_expenses",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key_hash.description",
   "evidence": "Customer API key hash identifying Xero token",
   "seen_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "apply_categories",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key_hash.description",
   "evidence": "Customer API key hash identifying Xero token",
   "seen_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "draft_invoice",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key_hash.description",
   "evidence": "Customer API key hash identifying Xero token",
   "seen_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "send_invoice",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key_hash.description",
   "evidence": "Customer API key hash identifying Xero token",
   "seen_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "tool": "generate_report",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.api_key_hash.description",
   "evidence": "Customer API key hash identifying Xero token",
   "seen_at": "2026-10-23T12:22:17.959Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 9,
   "ran_at": "2026-10-23T12:22:17.959Z"
  },
  {
   "status": "OK",
   "n_tools": 9,
   "ran_at": "2026-08-14T12:17:15.842Z"
  }
 ]
}