Raw scan report

Sophos — the complete, unedited output of the deterministic mcptrustchecker engine v1.9.0, scanned . Every finding, capability tag and score component below is exactly what the engine produced — no AI, no post-processing.

← Back to the scan page
{
  "tool": {
    "name": "mcptrustchecker",
    "version": "1.9.0",
    "methodologyVersion": "mcptrustchecker-1.9"
  },
  "target": {
    "id": "@rijul170/sophos-mcp",
    "source": {
      "kind": "package",
      "origin": "@rijul170/sophos-mcp"
    },
    "server": {
      "name": "@rijul170/sophos-mcp"
    }
  },
  "grade": "A",
  "score": {
    "score": 96,
    "threatScore": 100,
    "grade": "A",
    "band": "A",
    "categorySubtotals": {
      "injection": 0,
      "exfiltration": 0,
      "permissions": 0,
      "supply-chain": 0,
      "network": 0,
      "hygiene": 0
    },
    "vector": [
      {
        "kind": "client",
        "term": "capability-exposure",
        "level": "moderate",
        "label": "capability blast radius (moderate) — client exposure if the model is manipulated",
        "appliedPenalty": 3
      },
      {
        "kind": "client",
        "term": "verification-discount",
        "level": "repo",
        "label": "publisher verification (public source) — no provenance, but the source is public and inspectable",
        "appliedPenalty": 1
      },
      {
        "kind": "client",
        "term": "coverage-honesty",
        "level": "source",
        "label": "inspection depth (source) — how much of the target the scan could see",
        "appliedPenalty": 0
      }
    ],
    "gatesFired": [],
    "methodologyVersion": "mcptrustchecker-1.9"
  },
  "capability": {
    "level": "moderate",
    "reasons": [
      "ingests untrusted external content (a prompt-injection entry point)",
      "reads sensitive or local data"
    ],
    "tags": [
      "untrusted-input",
      "sensitive-source"
    ]
  },
  "coverage": {
    "level": "source",
    "inputs": {
      "toolSurface": true,
      "implementationSource": true,
      "packageMetadata": true,
      "liveTransport": false
    },
    "caveats": [
      "Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command \"npx -y <package>\"."
    ]
  },
  "findings": [],
  "toxicFlows": [],
  "capabilities": [
    {
      "tool": "sophos_get_account_health",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_regional_health_scores",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_health_scores_history",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_snooze_health_check",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_account_access_tokens",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_account_access_token",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_account_access_token",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_revoke_account_access_token",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_alerts",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_search_alerts",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_alert",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_take_alert_action",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_acknowledge_alert",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_allowed_items",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_allowed_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_allowed_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_allowed_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_allowed_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_blocked_items",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_blocked_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_blocked_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_blocked_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_blocked_addresses",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_block_addresses_bulk",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_unblock_addresses_bulk",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_audit_events",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_audit_event",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_authenticate",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_whoami",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_quotes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_quote",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_partner_level",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_cases",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_case",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_case",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_case",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_case",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_case_impacted_entities",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_case_mitre_summary",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_case_detections",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_case_detection",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_cloud_security_profiles",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_cloud_security_profile",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_cloud_security_profile",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_cloud_security_profile_name",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_cloud_security_profiles",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_cloud_security_default_contents",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_start_detections_query",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_detections_query_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_detections_query_results",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_detection_counts",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_start_detections_group_query",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_detections_group_query_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_detections_group_results",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_users",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_user",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_user",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_user",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_user",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_add_user_to_groups",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_remove_user_from_groups",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_user_groups",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_user_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_user_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_user_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_user_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_users_in_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_add_users_to_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_remove_users_from_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_list_locations",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_get_location",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_create_location",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_update_location",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_delete_location",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_list_policies",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_get_policy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_create_policy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_update_policy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_delete_policy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_list_custom_domains",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_get_custom_domain",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_create_custom_domain",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_update_custom_domain",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_dns_delete_custom_domain",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_search_quarantine",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_quarantine_message",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_preview_quarantine_message",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_quarantine_message_urls",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_quarantine_attachments",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_release_quarantine_messages",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_quarantine_messages",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_strip_quarantine_attachments",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_reattach_quarantine_attachments",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_download_quarantine_attachments",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"download\""
        ]
      }
    },
    {
      "tool": "sophos_get_quarantine_download_status",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"download\""
        ]
      }
    },
    {
      "tool": "sophos_search_post_delivery_quarantine",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_preview_post_delivery_quarantine_message",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_post_delivery_quarantine_attachments",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_release_post_delivery_quarantine_messages",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_post_delivery_quarantine_messages",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_download_post_delivery_quarantine_attachments",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"download\""
        ]
      }
    },
    {
      "tool": "sophos_get_post_delivery_quarantine_download_status",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"download\""
        ]
      }
    },
    {
      "tool": "sophos_clawback_email",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_clawback_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_mailboxes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_mailbox",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_mailbox",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_bulk_add_mailboxes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_mailbox",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_mailbox",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_bulk_delete_mailboxes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_manage_mailbox_aliases",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_manage_mailbox_delegates",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_manage_mailbox_dl_owners",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_request_bulk_sender_privilege",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_endpoints",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_endpoint",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_isolate_endpoint",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_deisolate_endpoint",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_isolation_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_tamper_protection",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_set_tamper_protection",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_endpoint",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_bulk_delete_endpoints",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_scan_endpoint",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_force_update_check",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_request_forensic_logs",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_forensic_log_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_request_memory_dump",
      "tags": [
        "sensitive-source"
      ],
      "reasons": {
        "sensitive-source": [
          "keyword \"dump\""
        ]
      }
    },
    {
      "tool": "sophos_get_memory_dump_status",
      "tags": [
        "sensitive-source"
      ],
      "reasons": {
        "sensitive-source": [
          "keyword \"dump\""
        ]
      }
    },
    {
      "tool": "sophos_get_adaptive_attack_protection",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_adaptive_attack_protection",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_bulk_isolate_endpoints",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_peripherals",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_peripheral",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_endpoint_migrations",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_start_migration",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_migration_job",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_accept_migration",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_migration_endpoints",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_installer_downloads",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"download\""
        ]
      }
    },
    {
      "tool": "sophos_list_exploit_mitigation_apps",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_exploit_mitigation_app",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_exploit_mitigation_app",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_exploit_mitigation_app",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_exploit_mitigation_app",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_exploit_mitigation_categories",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_detected_exploits",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_detected_exploit",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_firewalls",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_firewall",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_firewall",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_approve_firewall",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_check_firmware_upgrades",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_apply_firmware_upgrade",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_cancel_firmware_upgrade",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_firewall_groups",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_firewall_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_firewall_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_firewall_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_firewall_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_firewall_group_sync_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_mdr_threat_feed",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_mdr_threat_feed_settings",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_mdr_threat_feed_indicators",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_search_mdr_threat_feed_indicators",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_mdr_threat_feed_indicators",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_all_mdr_threat_feed_indicators",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_firewall_transaction",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_endpoint_groups",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_endpoint_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_endpoint_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_endpoint_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_add_endpoints_to_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_endpoint_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_group_endpoints",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_remove_endpoints_from_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_ips_exclusions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_ips_exclusion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_ips_exclusion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_ips_exclusion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_ips_exclusion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_isolation_exclusions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_isolation_exclusion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_create_isolation_exclusion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_update_isolation_exclusion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_delete_isolation_exclusion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_licenses",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_firewall_licenses",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_run_live_query",
      "tags": [
        "sensitive-source"
      ],
      "reasons": {
        "sensitive-source": [
          "keyword \"sql_query\""
        ]
      }
    },
    {
      "tool": "sophos_run_saved_live_query",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_live_query_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_live_query_results",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_cancel_live_query_run",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_live_query_runs",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_live_query_endpoint_statuses",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_saved_live_queries",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_saved_live_query",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_list_live_query_categories",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "sophos_get_live_query_category",
      "tags": [],
      "reasons": {}
    }
  ],
  "surfaceDigest": "c8b64085404e27395370faa0168f3750764717382e500f28211b87bb3a97b3de",
  "stats": {
    "tools": 200,
    "prompts": 0,
    "resources": 0,
    "findingsBySeverity": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0,
      "info": 0
    }
  }
}