{
 "server": "io.github.lvpiggyqq/xcatcher",
 "url": "https://xcatcher.top/mcp/",
 "verdict": "high-severity findings present",
 "current_tool_count": 17,
 "tools_ever_seen": 17,
 "drift_events": 17,
 "findings_by_severity": {
  "high": 15
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 17,
  "ran_at": "2026-09-01T00:17:50.751Z"
 },
 "current_tools": [
  "cancel_task",
  "create_crawl_task",
  "get_account_balance",
  "get_direct_crawl_payment",
  "get_direct_result_preview",
  "get_direct_task_status",
  "get_result_download_url",
  "get_result_preview",
  "get_sample_result",
  "get_service_info",
  "get_task_status",
  "get_x402_quote",
  "list_crawl_tasks",
  "preflight_crawl",
  "submit_direct_crawl_payment",
  "wait_for_task",
  "x402_topup"
 ],
 "drift": [
  {
   "tool": "get_service_info",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "preflight_crawl",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_sample_result",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_account_balance",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "list_crawl_tasks",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_x402_quote",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_direct_crawl_payment",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "submit_direct_crawl_payment",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_direct_task_status",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_direct_result_preview",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "create_crawl_task",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "x402_topup",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_task_status",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "wait_for_task",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_result_preview",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_result_download_url",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "cancel_task",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-08-31T18:17:50.769Z"
  }
 ],
 "findings": [
  {
   "tool": "preflight_crawl",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.mode.description",
   "evidence": "API-key accounts use 1 point per normal handle and 10 per deep handle; d",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_account_balance",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "n the account attached to the current Bearer API key and its points balance. Use before creating a task to estimate w",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "list_crawl_tasks",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ist recent tasks owned by the current Bearer API key, newest first. Use next_before_id for cursor pagination. Read-on",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_direct_crawl_payment",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "accountless x402 path after preflight_crawl; API-key accounts use create_crawl_task instead. Normal requests use prog",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_direct_crawl_payment",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'preflight_crawl'",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "submit_direct_crawl_payment",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_direct_crawl_payment'",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_direct_task_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_task_status'",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_direct_result_preview",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "result_preview for an accountless x402 task; API-key accounts use get_result_preview. Use offset for pagination; the",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_direct_result_preview",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_result_preview'",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "create_crawl_task",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_task_status'",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_task_status",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "Get API-key account task status by task_id (read-only); accountless x402 tas",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_task_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_direct_task_status'",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "wait_for_task",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'create_crawl_task'",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_result_preview",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "Return up to 100 result rows from an API-key account task as native structured JSON for direct agent analysis",
   "seen_at": "2026-08-31T18:17:50.769Z"
  },
  {
   "tool": "get_result_preview",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_direct_result_preview'",
   "seen_at": "2026-08-31T18:17:50.769Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 17,
   "ran_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "status": "OK",
   "n_tools": 17,
   "ran_at": "2026-08-31T18:17:50.769Z"
  }
 ]
}