{
 "server": "io.github.ariekogan/ateam-mcp",
 "url": "https://mcp.ateam-ai.com/mcp",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 47,
 "tools_ever_seen": 47,
 "drift_events": 36,
 "findings_by_severity": {
  "high": 27,
  "low": 1,
  "critical": 1
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 47,
  "ran_at": "2026-08-15T00:17:15.838Z"
 },
 "current_tools": [
  "ateam_auth",
  "ateam_bootstrap",
  "ateam_build_and_run",
  "ateam_chain_status",
  "ateam_conversation",
  "ateam_create_connector",
  "ateam_create_plugin",
  "ateam_delete_connector",
  "ateam_delete_skill",
  "ateam_delete_solution",
  "ateam_design_advisor",
  "ateam_get_chain",
  "ateam_get_connector_source",
  "ateam_get_examples",
  "ateam_get_solution",
  "ateam_get_spec",
  "ateam_get_widget_catalog",
  "ateam_get_workflows",
  "ateam_github_diff",
  "ateam_github_list_versions",
  "ateam_github_log",
  "ateam_github_patch",
  "ateam_github_promote",
  "ateam_github_pull",
  "ateam_github_push",
  "ateam_github_read",
  "ateam_github_rollback",
  "ateam_github_status",
  "ateam_github_write",
  "ateam_list_solutions",
  "ateam_patch",
  "ateam_redeploy",
  "ateam_show_skill_minimal",
  "ateam_show_solution_minimal",
  "ateam_spec_search",
  "ateam_status_all",
  "ateam_sync_all",
  "ateam_test_abort",
  "ateam_test_connector",
  "ateam_test_notification",
  "ateam_test_pipeline",
  "ateam_test_skill",
  "ateam_test_status",
  "ateam_test_voice",
  "ateam_upload_connector",
  "ateam_verify",
  "ateam_verify_consistency"
 ],
 "drift": [
  {
   "tool": "ateam_bootstrap",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_auth",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_spec",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_workflows",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_examples",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_design_advisor",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_spec_search",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_build_and_run",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_skill",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_notification",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_conversation",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_pipeline",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_voice",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_patch",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_solution",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_list_solutions",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_delete_solution",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_delete_skill",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_delete_connector",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_show_skill_minimal",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_show_solution_minimal",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_create_connector",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_create_plugin",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_upload_connector",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_status",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_chain",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_chain_status",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_widget_catalog",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_abort",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_connector",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_connector_source",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_verify",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_github_push",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_github_pull",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_github_status",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_github_read",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-08-15T00:17:15.838Z"
  }
 ],
 "findings": [
  {
   "tool": "ateam_auth",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "ent variables (ADAS_API_KEY) are configured, you MUST call ateam_auth explicitly — env vars alone are not sufficient.",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_auth",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ying, testing, etc.). The user can get their API key at https://mcp.ateam-ai.com/get-api-key. Only global endpoints (",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_auth",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://mcp.ateam-ai.com/get-api-key.",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_spec",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_get_widget_catalog'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_design_advisor",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_get_spec'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_spec_search",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_get_spec'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_build_and_run",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_patch'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_skill",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_test_status'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_notification",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "n the response). Auth: forwards your authed api_key to Core (no master-secret involvement). Tenant is pinned by the",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_notification",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_test_skill'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_conversation",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_get_chain'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_patch",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "policy.guardrails.never_push\": [\"Never share passwords\"] } - Add a tool: updates: { \"tools_push\": [{ name: \"conn.tool\"",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_solution",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_show_skill_minimal'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_delete_solution",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_github_pull'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_delete_skill",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_github_pull'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_delete_connector",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_build_and_run'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_show_skill_minimal",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_get_solution'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_create_connector",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_create_plugin'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_create_plugin",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "LUGINS[] + PLUGIN_MANIFESTS{} in server.js), you MUST add this plugin there (copy the render block from the manifest.j",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_create_plugin",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_get_spec'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_upload_connector",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "description",
   "evidence": "he GitHub base. • Pre-fix bug: github:true silently read from `main` even when patches were on `dev`. Now: defaults",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_upload_connector",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_github_patch'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_test_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_test_skill'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_chain",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "aring two runs). Auth: forwards your authed api_key. Tenant scoped by the key itself. Actor scoping: you can only in",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_chain",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_test_status'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_chain_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_conversation'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_widget_catalog",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "in the solution. Auth: forwards your authed api_key to Core (no master-secret involvement). Tenant scope is pinned b",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_get_widget_catalog",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_get_spec'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  },
  {
   "tool": "ateam_github_push",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'ateam_build_and_run'",
   "seen_at": "2026-08-15T00:17:15.838Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 47,
   "ran_at": "2026-08-15T00:17:15.838Z"
  }
 ]
}