{
 "server": "io.github.Licium-ai/licium",
 "url": "https://www.licium.ai/mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 26,
 "tools_ever_seen": 26,
 "drift_events": 45,
 "findings_by_severity": {
  "high": 14
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 26,
  "ran_at": "2026-09-30T12:17:28.427Z"
 },
 "current_tools": [
  "agent_register",
  "bounties_list",
  "bounty_attachments_get",
  "bounty_counter",
  "bounty_get",
  "bounty_pledge",
  "bounty_post",
  "bounty_self_gate",
  "bounty_subscribe",
  "bounty_withdraw",
  "capabilities_list",
  "capability_call",
  "capability_get",
  "capability_price_notices",
  "capability_register",
  "capability_version_publish",
  "check_received_work",
  "get_rows",
  "get_source",
  "list_sources",
  "needs_intake",
  "request_source",
  "search_mcp_directory",
  "source_report",
  "submission_post",
  "work_alert_subscribe"
 ],
 "drift": [
  {
   "tool": "list_sources",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "get_source",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "get_rows",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "request_source",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "check_received_work",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "search_mcp_directory",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "capabilities_list",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "capability_get",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "capability_register",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "capability_version_publish",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "capability_call",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "capability_price_notices",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounties_list",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "needs_intake",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_get",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_attachments_get",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_post",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_self_gate",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_pledge",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_counter",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_subscribe",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "work_alert_subscribe",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "source_report",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "agent_register",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "submission_post",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_withdraw",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "check_received_work",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-16T12:17:36.530Z"
  },
  {
   "tool": "bounty_self_gate",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-16T12:17:36.530Z"
  },
  {
   "tool": "submission_post",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-16T12:17:36.530Z"
  },
  {
   "tool": "check_received_work",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "needs_intake",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "bounty_attachments_get",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "bounty_post",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "bounty_self_gate",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "submission_post",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "check_received_work",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "search_mcp_directory",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "capabilities_list",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "capability_get",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "capability_register",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "capability_version_publish",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "capability_call",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "capability_price_notices",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "bounty_post",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "work_alert_subscribe",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-14T18:17:15.840Z"
  }
 ],
 "findings": [
  {
   "tool": "check_received_work",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "nonymous saves also return a one-time delete_credential. File content, filenames, and verbatim source_context are never",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "capability_call",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ent_key outside bounties, or balance with an api_key for a Stripe-topped-up wallet. Retries require the same idempote",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "capability_price_notices",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ed recently. Supply the buyer's agent_key or api_key; price remains separate from quality.",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_post",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "vide agent_key so it can be sent as a Bearer credential.",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_post",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agent_register'",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_pledge",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "vide agent_key so it can be sent as a Bearer credential.",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_pledge",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agent_register'",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "bounty_counter",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agent_register'",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "work_alert_subscribe",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agent_register'",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "submission_post",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "or final work with the agent key in a Bearer credential.",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "submission_post",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agent_register'",
   "seen_at": "2026-08-21T00:17:08.139Z"
  },
  {
   "tool": "check_received_work",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "nonymous saves also return a one-time delete_credential. File content, filenames, and verbatim source_context are never",
   "seen_at": "2026-08-16T12:17:36.530Z"
  },
  {
   "tool": "submission_post",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "or final work with the agent key in a Bearer credential.",
   "seen_at": "2026-08-16T12:17:36.530Z"
  },
  {
   "tool": "submission_post",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agent_register'",
   "seen_at": "2026-08-16T12:17:36.530Z"
  },
  {
   "tool": "check_received_work",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "nonymous saves also return a one-time delete_credential. File content, filenames, and verbatim source_context are never",
   "seen_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "bounty_post",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "vide agent_key so it can be sent as a Bearer credential.",
   "seen_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "bounty_post",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agent_register'",
   "seen_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "submission_post",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "or final work with the agent key in a Bearer credential.",
   "seen_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "submission_post",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agent_register'",
   "seen_at": "2026-08-15T12:17:15.842Z"
  },
  {
   "tool": "capability_call",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ent_key outside bounties, or balance with an api_key for a Stripe-topped-up wallet. Retries require the same idempote",
   "seen_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "capability_price_notices",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ed recently. Supply the buyer's agent_key or api_key; price remains separate from quality.",
   "seen_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "bounty_post",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "vide agent_key so it can be sent as a Bearer credential.",
   "seen_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "bounty_post",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agent_register'",
   "seen_at": "2026-08-14T18:17:15.840Z"
  },
  {
   "tool": "work_alert_subscribe",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'agent_register'",
   "seen_at": "2026-08-14T18:17:15.840Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-30T12:17:28.427Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-30T06:17:16.989Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-30T00:17:25.036Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-29T18:17:30.989Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-29T06:17:25.449Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-29T00:17:04.800Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-28T18:17:12.275Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-28T12:17:18.806Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-28T06:17:17.668Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-28T00:17:17.464Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-27T18:17:18.196Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-27T12:17:18.475Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-27T06:17:17.888Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-27T00:17:17.571Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-26T18:17:18.573Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-26T12:17:18.093Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-26T06:17:18.674Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-26T00:17:47.842Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-25T12:17:47.883Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-25T06:17:47.829Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-25T00:17:47.843Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-24T18:17:47.847Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-24T12:17:47.865Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-24T06:17:47.841Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-23T12:17:44.750Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-23T06:17:42.551Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-23T00:17:42.227Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-22T18:17:48.446Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-22T12:17:45.334Z"
  },
  {
   "status": "OK",
   "n_tools": 26,
   "ran_at": "2026-09-22T00:17:41.535Z"
  }
 ]
}