{
 "server": "io.github.nirholas/threews-pumpfun",
 "url": "https://three.ws/api/pump-fun-mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 19,
 "tools_ever_seen": 19,
 "drift_events": 19,
 "findings_by_severity": {
  "high": 6,
  "low": 1
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 19,
  "ran_at": "2026-09-01T00:17:50.751Z"
 },
 "current_tools": [
  "get_bonding_curve",
  "get_coin_intel",
  "get_oracle_conviction",
  "get_token_details",
  "get_token_holders",
  "get_token_trades",
  "kol_leaderboard",
  "pumpfun_bot_status",
  "pumpfun_first_claims",
  "pumpfun_list_claims",
  "pumpfun_quote_swap",
  "pumpfun_upload_metadata",
  "pumpfun_vanity_mint",
  "pumpfun_watch_claims",
  "pumpfun_watch_whales",
  "sns_resolve",
  "sns_reverseLookup",
  "social_cashtag_sentiment",
  "social_x_post_impact"
 ],
 "drift": [
  {
   "tool": "get_token_details",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "get_bonding_curve",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "get_token_trades",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "get_token_holders",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "pumpfun_vanity_mint",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "pumpfun_watch_whales",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "pumpfun_list_claims",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "pumpfun_watch_claims",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "pumpfun_first_claims",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "sns_resolve",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "sns_reverseLookup",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "social_cashtag_sentiment",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "kol_leaderboard",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "pumpfun_quote_swap",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "social_x_post_impact",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "get_coin_intel",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "get_oracle_conviction",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "pumpfun_upload_metadata",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "pumpfun_bot_status",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-09-01T00:17:50.751Z"
  }
 ],
 "findings": [
  {
   "tool": "get_bonding_curve",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'pumpfun_quote_swap'",
   "seen_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "pumpfun_quote_swap",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_bonding_curve'",
   "seen_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "social_x_post_impact",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "impact. Fetches post metadata via oEmbed (no API key) and computes price delta from the pump.fun bonding curve in a ±",
   "seen_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "social_x_post_impact",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.postUrl.description",
   "evidence": "https://x.com/user/status/123",
   "seen_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "get_coin_intel",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_oracle_conviction'",
   "seen_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "get_oracle_conviction",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_coin_intel'",
   "seen_at": "2026-09-01T00:17:50.751Z"
  },
  {
   "tool": "pumpfun_upload_metadata",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "launch flow. Requires a valid bearer token (API key). Image may be a public HTTPS URL or a base64 data URI (max 10 M",
   "seen_at": "2026-09-01T00:17:50.751Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 19,
   "ran_at": "2026-09-01T00:17:50.751Z"
  }
 ]
}