{
  "count": 100,
  "findings": [
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-27T00:17:17.571Z"
    },
    {
      "server": "com.a2awire/a2awire",
      "tool": "register",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.description",
      "evidence": "a tester sent ``{\"name\": ...}``, the key was silently dropped, and the agent was created under a DIFFERENT (auto-gener",
      "seen_at": "2026-09-26T18:17:18.573Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-26T00:17:47.842Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-25T00:17:47.843Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-24T18:17:47.847Z"
    },
    {
      "server": "com.a2awire/a2awire",
      "tool": "register",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.description",
      "evidence": "a tester sent ``{\"name\": ...}``, the key was silently dropped, and the agent was created under a DIFFERENT (auto-gener",
      "seen_at": "2026-09-24T18:17:47.847Z"
    },
    {
      "server": "com.bluepillow/hotels",
      "tool": "resolve_destination",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.country.description",
      "evidence": "supported language. Unrecognized values are silently ignored (fail-open).",
      "seen_at": "2026-09-24T18:17:47.847Z"
    },
    {
      "server": "com.a2awire/a2awire",
      "tool": "register",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.description",
      "evidence": "a tester sent ``{\"name\": ...}``, the key was silently dropped, and the agent was created under a DIFFERENT (auto-gener",
      "seen_at": "2026-09-24T12:17:47.865Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-24T00:17:33.491Z"
    },
    {
      "server": "cloud.theprotocol/registry",
      "tool": "theprotocol_blockChatPrincipal",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "OurChat chat: block a principal silently (shared pair threads are left; the blocked party is told nothing",
      "seen_at": "2026-09-24T00:17:33.491Z"
    },
    {
      "server": "com.a2awire/a2awire",
      "tool": "register",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.description",
      "evidence": "a tester sent ``{\"name\": ...}``, the key was silently dropped, and the agent was created under a DIFFERENT (auto-gener",
      "seen_at": "2026-09-24T00:17:33.491Z"
    },
    {
      "server": "com.a2awire/a2awire",
      "tool": "register",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "g. name -> agent_name) — a guessed key never silently changes what registers.",
      "seen_at": "2026-09-23T06:17:42.551Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-23T00:17:42.227Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_query_records",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "name, a bank-issued label — so a name filter silently drops rows and the total reads as complete. On the invoices ro",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_create_invoice_from_data",
      "detector": "exfiltration_pattern",
      "severity": "critical",
      "field": "description",
      "evidence": "y without its id re-resolves it, which can attach the invoice to the wrong company or create a duplicate one. Creating and then",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_connectors",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "outputSchema.properties.page_count.description",
      "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_resolve_reconciliation_task",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "dismisses the match — the candidate does not silently re-surface. Each task_id resolves independently; a failure on o",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_get_own_company",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "name, a bank-issued label), so a name filter silently drops rows. Returns `anchor` (`company_id`, `registered_name`,",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_switch_workspace",
      "detector": "exfiltration_pattern",
      "severity": "critical",
      "field": "inputSchema.properties.workspace_ids.description",
      "evidence": "nection, or the whole call is refused. Never send it to name the workspace of a periods, counterparties or ack call: the",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_counterparties",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "egorizing a counterparty does not change it; do not tell the user otherwise. This tool only reads. It categorizes nothin",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_set_own_company",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": ". A caller without that role is refused, not silently ignored. well_start_close hard-gates on this anchor: a workspac",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_upsert_accounting_settings",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": ". A caller without that role is refused, not silently ignored. Changing the fiscal year start month moves the whole f",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_sum_transactions",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "y total rather than presenting a figure that silently skipped them. `partial: true` means the aggregate measured nothi",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_cash_scope",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "e any figure rather than presenting one that silently skipped them — and keep them apart, because they are different r",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_assign_missing_invoice_owners",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "e is refused (refusal_reason NOT_FOUND), not silently dropped. Closed periods are frozen: a transaction whose fiscal",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_unposted_transactions",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "A caller reading one shape against the other silently sees empty fields rather than an error. The period is named in",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_show_records",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "name, a bank-issued label — so a name filter silently drops rows and the total reads as complete. On the invoices ro",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_get_connector_coverage",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "outputSchema.properties.page_count.description",
      "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_create_company_candidate",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": ". A caller without that role is refused, not silently ignored. When the picked company already has a confirmed company",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_create_company_workspace",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": ". A caller without that role is refused, not silently ignored. Confirm the company with the user before calling.",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_retarget_connectors",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "that role or that membership is refused, not silently ignored.",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_unposted_journals",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "e rows scanned\", NOT \"every row is posted\" — do not tell the user the close can skip this step on a truncated empty read.",
      "seen_at": "2026-09-22T18:17:48.446Z"
    },
    {
      "server": "com.newscatcherapi/catchall",
      "tool": "submit_query",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.context.description",
      "evidence": "e auto-generated — do not ask for them here. Do not mention things like \"company list will be attached\".",
      "seen_at": "2026-09-22T12:17:45.334Z"
    },
    {
      "server": "com.newscatcherapi/catchall",
      "tool": "initialize_query",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.context.description",
      "evidence": "e auto-generated — do not ask for them here. Do not mention things like \"company list will be attached\". Focus on the event",
      "seen_at": "2026-09-22T12:17:45.334Z"
    },
    {
      "server": "com.newscatcherapi/catchall",
      "tool": "assign_webhook_resource",
      "detector": "exfiltration_pattern",
      "severity": "critical",
      "field": "inputSchema.properties.webhook_id.description",
      "evidence": "The webhook ID to attach the resource to.",
      "seen_at": "2026-09-22T12:17:45.334Z"
    },
    {
      "server": "io.github.CDCStream/captapi",
      "tool": "facebook_marketplace_search",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.searchLocation.description",
      "evidence": "0 UNKNOWN_LOCATION (Facebook would otherwise silently search an unrelated metro) — /v1/facebook/marketplace-location-s",
      "seen_at": "2026-09-22T12:17:45.334Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-22T00:17:41.535Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_switch_workspace",
      "detector": "exfiltration_pattern",
      "severity": "critical",
      "field": "inputSchema.properties.workspace_ids.description",
      "evidence": "nection, or the whole call is refused. Never send it to name the workspace of a periods, counterparties or ack call: the",
      "seen_at": "2026-09-21T18:17:45.738Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_sum_transactions",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "y total rather than presenting a figure that silently skipped them. `partial: true` means the aggregate measured nothi",
      "seen_at": "2026-09-21T18:17:45.738Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_cash_scope",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "e any figure rather than presenting one that silently skipped them — and keep them apart, because they are different r",
      "seen_at": "2026-09-21T18:17:45.738Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-21T00:17:43.327Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-20T18:17:44.273Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-20T00:17:43.330Z"
    },
    {
      "server": "io.github.asokore/statcite",
      "tool": "get_indicator",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.strict_source.description",
      "evidence": "ary source fails, return an error instead of silently serving the fallback source (a fallback can report a different v",
      "seen_at": "2026-09-20T00:17:43.330Z"
    },
    {
      "server": "cloud.dchub/mcp-server",
      "tool": "rank_sites",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "gap is DECLARED in missing_objectives (never silently scored 0); a candidate carrying none scores null and ranks last.",
      "seen_at": "2026-09-19T18:17:43.450Z"
    },
    {
      "server": "cloud.dchub/mcp-server",
      "tool": "find_alternatives",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.facility_id.description",
      "evidence": "ere is no `name` param; an undeclared key is silently stripped",
      "seen_at": "2026-09-19T18:17:43.450Z"
    },
    {
      "server": "cloud.dchub/mcp-server",
      "tool": "register_standing_intent",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": ". First evaluation initializes the watermark silently; growth fires the webhook; 5 straight delivery failures auto-dis",
      "seen_at": "2026-09-19T18:17:43.450Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-19T00:17:53.727Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-18T00:17:43.241Z"
    },
    {
      "server": "io.github.cnghockey/sats4ai",
      "tool": "generate_music",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "n a tag line are DROPPED by the model, which silently shortens the song. Don't want to write lyrics? Set lyricsAddon:t",
      "seen_at": "2026-09-18T00:17:43.241Z"
    },
    {
      "server": "io.github.cnghockey/sats4ai",
      "tool": "text_to_speech",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.language.description",
      "evidence": ": on the Inworld/Minimax tiers this field is silently ignored — you get the chosen voice's own language (usually Engli",
      "seen_at": "2026-09-18T00:17:43.241Z"
    },
    {
      "server": "io.github.cnghockey/sats4ai",
      "tool": "translate_text",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.sourceLanguage.description",
      "evidence": ". 'German' for Spanish text) is accepted and silently mistranslates with no error. Omit it to let auto-detect work.",
      "seen_at": "2026-09-18T00:17:43.241Z"
    },
    {
      "server": "io.github.cnghockey/sats4ai",
      "tool": "epub_to_audiobook",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.selectedChapterIndices.description",
      "evidence": "rops front/back matter heuristically and can silently exclude a short (<200 char) wanted chapter near the start/end —",
      "seen_at": "2026-09-18T00:17:43.241Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_create_invoice_from_data",
      "detector": "exfiltration_pattern",
      "severity": "critical",
      "field": "description",
      "evidence": "y without its id re-resolves it, which can attach the invoice to the wrong company or create a duplicate one. Creating and then",
      "seen_at": "2026-09-17T12:17:44.067Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_connectors",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "outputSchema.properties.page_count.description",
      "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
      "seen_at": "2026-09-17T12:17:44.067Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_counterparties",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "egorizing a counterparty does not change it; do not tell the user otherwise. This tool only reads. It categorizes nothin",
      "seen_at": "2026-09-17T12:17:44.067Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_get_connector_coverage",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "outputSchema.properties.page_count.description",
      "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
      "seen_at": "2026-09-17T12:17:44.067Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_claim_statement_draft",
      "detector": "exfiltration_pattern",
      "severity": "critical",
      "field": "description",
      "evidence": "aimed, tell the user plainly and ask them to attach the file to this conversation instead — do not retry the token.",
      "seen_at": "2026-09-17T12:17:44.067Z"
    },
    {
      "server": "io.github.asokore/statcite",
      "tool": "get_indicator",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.strict_source.description",
      "evidence": "ary source fails, return an error instead of silently serving the fallback source (a fallback can report a different v",
      "seen_at": "2026-09-17T12:17:44.067Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_create_company_candidate",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": ". A caller without that role is refused, not silently ignored. When the picked company already has a confirmed company",
      "seen_at": "2026-09-17T06:17:43.739Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_create_company_workspace",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": ". A caller without that role is refused, not silently ignored. Confirm the company with the user before calling.",
      "seen_at": "2026-09-17T06:17:43.739Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_retarget_connectors",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "that role or that membership is refused, not silently ignored.",
      "seen_at": "2026-09-17T06:17:43.739Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-17T00:17:45.048Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_connectors",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "outputSchema.properties.page_count.description",
      "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
      "seen_at": "2026-09-16T12:17:17.550Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_get_own_company",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "name, a bank-issued label), so a name filter silently drops rows. Returns `anchor` (`company_id`, `registered_name`,",
      "seen_at": "2026-09-16T12:17:17.550Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_switch_workspace",
      "detector": "exfiltration_pattern",
      "severity": "critical",
      "field": "inputSchema.properties.workspace_ids.description",
      "evidence": "nection, or the whole call is refused. Never send it to name the workspace of a periods, counterparties or ack call: the",
      "seen_at": "2026-09-16T12:17:17.550Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_upsert_accounting_settings",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": ". A caller without that role is refused, not silently ignored. Changing the fiscal year start month moves the whole f",
      "seen_at": "2026-09-16T12:17:17.550Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_sum_transactions",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "y total rather than presenting a figure that silently skipped them. `partial: true` means the aggregate measured nothi",
      "seen_at": "2026-09-16T12:17:17.550Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_cash_scope",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "e any figure rather than presenting one that silently skipped them — and keep them apart, because they are different r",
      "seen_at": "2026-09-16T12:17:17.550Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_unposted_transactions",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "A caller reading one shape against the other silently sees empty fields rather than an error. The period is named in",
      "seen_at": "2026-09-16T12:17:17.550Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_get_connector_coverage",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "outputSchema.properties.page_count.description",
      "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
      "seen_at": "2026-09-16T12:17:17.550Z"
    },
    {
      "server": "cloud.dchub/mcp-server",
      "tool": "rank_sites",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "gap is DECLARED in missing_objectives (never silently scored 0); a candidate carrying none scores null and ranks last.",
      "seen_at": "2026-09-16T06:17:13.723Z"
    },
    {
      "server": "cloud.dchub/mcp-server",
      "tool": "find_alternatives",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.facility_id.description",
      "evidence": "ere is no `name` param; an undeclared key is silently stripped",
      "seen_at": "2026-09-16T06:17:13.723Z"
    },
    {
      "server": "cloud.dchub/mcp-server",
      "tool": "register_standing_intent",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": ". First evaluation initializes the watermark silently; growth fires the webhook; 5 straight delivery failures auto-dis",
      "seen_at": "2026-09-16T06:17:13.723Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-16T00:17:15.633Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_connectors",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "outputSchema.properties.page_count.description",
      "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
      "seen_at": "2026-09-16T00:17:15.633Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_resolve_reconciliation_task",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "dismisses the match — the candidate does not silently re-surface. Each task_id resolves independently; a failure on o",
      "seen_at": "2026-09-16T00:17:15.633Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_get_own_company",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "name, a bank-issued label), so a name filter silently drops rows. Returns `anchor` (`company_id`, `registered_name`,",
      "seen_at": "2026-09-16T00:17:15.633Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_switch_workspace",
      "detector": "exfiltration_pattern",
      "severity": "critical",
      "field": "inputSchema.properties.workspace_ids.description",
      "evidence": "nection, or the whole call is refused. Never send it to name the workspace of a periods, counterparties or ack call: the",
      "seen_at": "2026-09-16T00:17:15.633Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_upsert_accounting_settings",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": ". A caller without that role is refused, not silently ignored. Changing the fiscal year start month moves the whole f",
      "seen_at": "2026-09-16T00:17:15.633Z"
    },
    {
      "server": "com.meta-council/decision-intelligence",
      "tool": "estimate_cost",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.model.description",
      "evidence": "g is reported in unpriced_models rather than silently priced as the default.",
      "seen_at": "2026-09-15T06:17:13.926Z"
    },
    {
      "server": "com.meta-council/decision-intelligence",
      "tool": "create_accounting_run",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "read as 2000.00 and -1234.56 as 123456.00 -- silently, with no error, a hundred times the real figure. Tab and pipe ke",
      "seen_at": "2026-09-15T06:17:13.926Z"
    },
    {
      "server": "com.meta-council/decision-intelligence",
      "tool": "diff_portfolio_snapshots",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "wer one is allowed and disclosed rather than silently confusing: the result says whether the pair is chronological and",
      "seen_at": "2026-09-15T06:17:13.926Z"
    },
    {
      "server": "com.meta-council/decision-intelligence",
      "tool": "create_workflow_template",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.steps.items.properties.params.description",
      "evidence": "perature, instruction, ...); params would be silently ignored there, so it is refused.",
      "seen_at": "2026-09-15T06:17:13.926Z"
    },
    {
      "server": "com.meta-council/decision-intelligence",
      "tool": "update_workflow_template",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.steps.items.properties.params.description",
      "evidence": "perature, instruction, ...); params would be silently ignored there, so it is refused.",
      "seen_at": "2026-09-15T06:17:13.926Z"
    },
    {
      "server": "com.meta-council/decision-intelligence",
      "tool": "decide_approval",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "illed. Fails with a clear error, rather than silently doing nothing, if the run is no longer waiting. Requires authent",
      "seen_at": "2026-09-15T06:17:13.926Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-15T00:17:14.624Z"
    },
    {
      "server": "com.meta-council/decision-intelligence",
      "tool": "create_workflow_template",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.steps.items.properties.params.description",
      "evidence": "perature, instruction, ...); params would be silently ignored there, so it is refused.",
      "seen_at": "2026-09-14T18:17:15.048Z"
    },
    {
      "server": "com.meta-council/decision-intelligence",
      "tool": "update_workflow_template",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.steps.items.properties.params.description",
      "evidence": "perature, instruction, ...); params would be silently ignored there, so it is refused.",
      "seen_at": "2026-09-14T18:17:15.048Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-14T00:17:13.139Z"
    },
    {
      "server": "com.openshopgraph/mcp",
      "tool": "list_coupons",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "on this channel/country. Nothing is withheld silently: `total_count` is how many codes the query found before any of t",
      "seen_at": "2026-09-13T12:17:16.745Z"
    },
    {
      "server": "io.github.DigbyO/colour-memory",
      "tool": "interior_specify",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "inputSchema.properties.archive.description",
      "evidence": "ear error listing valid archives rather than silently searching everything. Omit for unrestricted cross-archive search",
      "seen_at": "2026-09-13T12:17:16.745Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-13T00:17:14.331Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_sum_transactions",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "y total rather than presenting a figure that silently skipped them. `partial: true` means the aggregate was cut short",
      "seen_at": "2026-09-12T06:17:16.254Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_cash_scope",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "e any figure rather than presenting one that silently skipped them — and keep them apart, because they are different r",
      "seen_at": "2026-09-12T06:17:16.254Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_show_records",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "name, a bank-issued label — so a name filter silently drops rows and the total reads as complete. On the invoices ro",
      "seen_at": "2026-09-12T06:17:16.254Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_get_connector_coverage",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "outputSchema.properties.page_count.description",
      "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
      "seen_at": "2026-09-12T06:17:16.254Z"
    },
    {
      "server": "app.flaim/mcp",
      "tool": "get_free_agents",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "-wide market rate. Translate ownership scope silently into that provider-wide wording; never print the ownershipScope",
      "seen_at": "2026-09-12T00:17:47.600Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_query_records",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "description",
      "evidence": "name, a bank-issued label — so a name filter silently drops rows and the total reads as complete. On the invoices ro",
      "seen_at": "2026-09-11T12:17:58.796Z"
    },
    {
      "server": "io.github.WellApp-ai/well-mcp",
      "tool": "well_list_connectors",
      "detector": "user_concealment",
      "severity": "critical",
      "field": "outputSchema.properties.page_count.description",
      "evidence": "s ordering — so paging by the array's length silently skips exactly that many catalog rows on every later request.",
      "seen_at": "2026-09-11T12:17:58.796Z"
    }
  ]
}