{"schema_version":"verify.agent_sprawl.audit_export.v1","generated_at":"2026-09-08T04:20:25.935417+00:00","organizations":[{"id":"2dc778db-4d05-4040-9c70-f987267cd594","name":"Demo Organization","created_at":"2026-07-31T05:12:17.280710+00:00"}],"projects":[{"id":"d7f611d7-8258-4665-9848-e1d9cbbee74c","organization_id":"2dc778db-4d05-4040-9c70-f987267cd594","name":"agent-platform","source_type":"demo","source_url":"https://github.com/example/agent-platform","agent_count":5,"scan_count":1,"latest_scan_at":"2026-07-31T05:12:17.289974+00:00","created_at":"2026-07-31T05:12:17.287186+00:00","updated_at":"2026-07-31T05:12:17.287191+00:00"}],"agents":[{"id":"945b8de4-bc82-4799-8aa3-6be380440834","organization_id":"2dc778db-4d05-4040-9c70-f987267cd594","project_id":"d7f611d7-8258-4665-9848-e1d9cbbee74c","project":"agent-platform","name":"claims-workflow-agent","kind":"mcp_server","owner":"Revenue Ops","purpose":null,"source_path":".vscode/mcp.json","source_url":null,"status":"unreviewed","risk_score":77,"risk_level":"critical","tools_count":2,"data_classes":["phi"],"last_scanned_at":"2026-07-31T05:12:17.349103+00:00","recommended_action":"Require approval before production use because write, admin, or execute access, code execution capability, phi data access.","tools":[{"id":"3a5193f3-13fe-41a6-b9ef-971dcd916c60","name":"run_claim_transform","category":"code_exec","action_type":"execute","target":"claims sandbox","raw_config":{}},{"id":"6bc4b152-2f8a-4f59-946b-fd529fcb4978","name":"score_claim","category":"database","action_type":"write","target":"claims database","raw_config":{}}],"data_access":[{"id":"2b365aa9-80fd-48d4-bba3-922f86d27427","data_class":"phi","location":"claims database","evidence":"Healthcare claims payloads"}],"findings":[{"id":"34867e93-934b-447c-9a46-c3835a70369c","severity":"critical","code":"DATA_PHI","title":"PHI data access","description":"Agent appears to access phi data.","evidence":"Healthcare claims payloads","created_at":"2026-07-31T05:12:17.350833+00:00"},{"id":"426ab01c-a64b-426c-b0b0-f8ad9a9e3df3","severity":"critical","code":"TOOL_CODE_EXEC","title":"Code execution capability","description":"Agent exposes a tool that can execute commands or code.","evidence":"run_claim_transform","created_at":"2026-07-31T05:12:17.350769+00:00"},{"id":"54d7548f-6f76-463d-8a2b-c6a8f7ebcc7c","severity":"high","code":"TOOL_WRITE_ACCESS","title":"Write, admin, or execute access","description":"Agent can mutate systems, administer resources, or execute operations.","evidence":"score_claim, run_claim_transform","created_at":"2026-07-31T05:12:17.350798+00:00"},{"id":"b886b943-2c85-4914-a294-20fe1215748b","severity":"medium","code":"TOOL_DATABASE","title":"Database access","description":"Agent has database capability that should be inventoried.","evidence":"score_claim","created_at":"2026-07-31T05:12:17.350815+00:00"}],"snapshots":[{"id":"bb02f6d9-1efa-4c2d-8222-5dbafe0f4fff","config_hash":"6a3afa820d3fb731c437fb94dff142524435259638ae7c78164bc79d22284515","drift":{"configHashChanged":true,"previousConfigHash":"809504d937516dc273606d9d97b1e100ebeb0afc362264685fc8610d239ddf73","currentConfigHash":"6a3afa820d3fb731c437fb94dff142524435259638ae7c78164bc79d22284515","riskDelta":35,"changes":[{"type":"tool_added","severity":"high","tool":"run_claim_transform","message":"Agent gained access to run_claim_transform."},{"type":"tool_action_changed","severity":"high","tool":"score_claim","previous":"read","current":"write","message":"Tool score_claim changed from read to write."},{"type":"risk_score_increased","severity":"high","previous":42,"current":77,"message":"Risk score increased by 35."}]},"created_at":"2026-07-31T05:12:17.349103+00:00"}],"raw_config":{"scope":"claims:read claims:write"}},{"id":"49ed8e77-6b27-4ad3-8222-c31d438cfb0a","organization_id":"2dc778db-4d05-4040-9c70-f987267cd594","project_id":"d7f611d7-8258-4665-9848-e1d9cbbee74c","project":"agent-platform","name":"github-write-mcp","kind":"mcp_server","owner":null,"purpose":null,"source_path":".cursor/mcp.json","source_url":null,"status":"unreviewed","risk_score":49,"risk_level":"medium","tools_count":1,"data_classes":["confidential"],"last_scanned_at":"2026-07-31T05:12:17.318461+00:00","recommended_action":"Require approval before production use because repository write access, confidential data access, no assigned owner.","tools":[{"id":"f828cf51-a232-4303-ae29-2874ac3cf760","name":"github","category":"code_repo","action_type":"write","target":"github.com/example/platform","raw_config":{}}],"data_access":[{"id":"e1e1d643-5568-42fa-9366-6dd1188e6aac","data_class":"confidential","location":"repo contents","evidence":"MCP server can write repository content"}],"findings":[{"id":"164ac8f8-2b46-4dee-9922-9a3361144f31","severity":"medium","code":"TOOL_CODE_REPO","title":"Code Repo access","description":"Agent has code repo capability that should be inventoried.","evidence":"github","created_at":"2026-07-31T05:12:17.322652+00:00"},{"id":"60872d4f-f1bc-40d6-b22a-096de3e6ae09","severity":"medium","code":"NO_OWNER","title":"No owner assigned","description":"Agent has no accountable owner in the registry.","evidence":".cursor/mcp.json","created_at":"2026-07-31T05:12:17.322678+00:00"},{"id":"d1000613-310a-4f10-b6de-404af9a0b389","severity":"high","code":"TOOL_WRITE_ACCESS","title":"Write, admin, or execute access","description":"Agent can mutate systems, administer resources, or execute operations.","evidence":"github","created_at":"2026-07-31T05:12:17.322622+00:00"},{"id":"df0015a7-a17c-4e25-aba6-7873754f2018","severity":"medium","code":"DATA_CONFIDENTIAL","title":"CONFIDENTIAL data access","description":"Agent appears to access confidential data.","evidence":"MCP server can write repository content","created_at":"2026-07-31T05:12:17.322666+00:00"}],"snapshots":[{"id":"fb5ccbfc-1b7d-496e-beac-ca1653c203a0","config_hash":"81134dea85af8a83f0379fd171295762af7157f1dd64e4b79485b6ac0de84ab4","drift":{"configHashChanged":false,"previousConfigHash":null,"currentConfigHash":"81134dea85af8a83f0379fd171295762af7157f1dd64e4b79485b6ac0de84ab4","riskDelta":49,"changes":[{"type":"agent_discovered","severity":"info","message":"Agent github-write-mcp discovered."}]},"created_at":"2026-07-31T05:12:17.318461+00:00"}],"raw_config":{"command":"npx","args":["github-mcp-server"],"GITHUB_TOKEN":"[REDACTED]"}},{"id":"df21ff79-485d-4a82-942c-33748fdad508","organization_id":"2dc778db-4d05-4040-9c70-f987267cd594","project_id":"d7f611d7-8258-4665-9848-e1d9cbbee74c","project":"agent-platform","name":"slack-incident-bot","kind":"slack_bot","owner":"Platform","purpose":null,"source_path":"package.json","source_url":null,"status":"unreviewed","risk_score":31,"risk_level":"medium","tools_count":1,"data_classes":["internal"],"last_scanned_at":"2026-07-31T05:12:17.372576+00:00","recommended_action":"Review owner, data access, and tool permissions before approval.","tools":[{"id":"c3dbcb50-6460-4e97-a68c-e9223a4555ab","name":"post_incident","category":"email","action_type":"write","target":"Slack incident channel","raw_config":{}}],"data_access":[{"id":"009af3f4-da7c-48c4-81fd-bac94d3af96d","data_class":"internal","location":"incident channel","evidence":"Internal incident summaries"}],"findings":[{"id":"3d99c30e-5431-45c6-b6dd-4baebea611e4","severity":"medium","code":"TOOL_EMAIL","title":"Email access","description":"Agent has email capability that should be inventoried.","evidence":"post_incident","created_at":"2026-07-31T05:12:17.374232+00:00"},{"id":"a174b579-273d-4464-ac7a-04a3137db740","severity":"high","code":"TOOL_WRITE_ACCESS","title":"Write, admin, or execute access","description":"Agent can mutate systems, administer resources, or execute operations.","evidence":"post_incident","created_at":"2026-07-31T05:12:17.374205+00:00"},{"id":"c8f881e3-169a-4051-9397-0dc56c9b48b9","severity":"low","code":"DATA_INTERNAL","title":"INTERNAL data access","description":"Agent appears to access internal data.","evidence":"Internal incident summaries","created_at":"2026-07-31T05:12:17.374248+00:00"}],"snapshots":[{"id":"4631fffa-b131-44f0-af4b-06194027f717","config_hash":"5196bbc8686830cd45a778164a3c5710d328702549d5a3f1836843156f97b338","drift":{"configHashChanged":false,"previousConfigHash":null,"currentConfigHash":"5196bbc8686830cd45a778164a3c5710d328702549d5a3f1836843156f97b338","riskDelta":31,"changes":[{"type":"agent_discovered","severity":"info","message":"Agent slack-incident-bot discovered."}]},"created_at":"2026-07-31T05:12:17.372576+00:00"}],"raw_config":{"script":"node incident-bot.js"}},{"id":"2b14b07e-0698-4a28-a7a0-faeea4cfd16d","organization_id":"2dc778db-4d05-4040-9c70-f987267cd594","project_id":"d7f611d7-8258-4665-9848-e1d9cbbee74c","project":"agent-platform","name":"browser-research-bot","kind":"manual","owner":null,"purpose":null,"source_path":"README.md","source_url":null,"status":"unreviewed","risk_score":18,"risk_level":"low","tools_count":1,"data_classes":["unknown"],"last_scanned_at":"2026-07-31T05:12:17.361619+00:00","recommended_action":"Review owner, data access, and tool permissions before approval.","tools":[{"id":"cb6242c4-bdd2-41b8-a3f7-9c6b685a9661","name":"web_search","category":"browser","action_type":"read","target":"web","raw_config":{}}],"data_access":[{"id":"a65781a8-f2a2-4562-a02d-930407135048","data_class":"unknown","location":"web","evidence":"Research automation needs review"}],"findings":[{"id":"470ef9ea-37bf-462e-84ae-f13252e48962","severity":"medium","code":"NO_OWNER","title":"No owner assigned","description":"Agent has no accountable owner in the registry.","evidence":"README.md","created_at":"2026-07-31T05:12:17.363312+00:00"},{"id":"977acf5d-9eb2-4178-ac1a-906a9b91d484","severity":"low","code":"TOOL_BROWSER","title":"Browser access","description":"Agent has browser capability that should be inventoried.","evidence":"web_search","created_at":"2026-07-31T05:12:17.363285+00:00"}],"snapshots":[{"id":"288917fd-e87f-47ab-b479-3b77ecd8b3b4","config_hash":"dc45a78c9f202de76dda105719250cbb0b153e245c6e5c5b655e2354c84aa204","drift":{"configHashChanged":false,"previousConfigHash":null,"currentConfigHash":"dc45a78c9f202de76dda105719250cbb0b153e245c6e5c5b655e2354c84aa204","riskDelta":18,"changes":[{"type":"agent_discovered","severity":"info","message":"Agent browser-research-bot discovered."}]},"created_at":"2026-07-31T05:12:17.361619+00:00"}],"raw_config":{"notes":"research agent"}},{"id":"de7896dc-0b0a-4d1f-ae3a-e3bf4907870f","organization_id":"2dc778db-4d05-4040-9c70-f987267cd594","project_id":"d7f611d7-8258-4665-9848-e1d9cbbee74c","project":"agent-platform","name":"readonly-docs-helper","kind":"coding_agent","owner":"Docs Team","purpose":null,"source_path":"AGENTS.md","source_url":null,"status":"unreviewed","risk_score":8,"risk_level":"low","tools_count":1,"data_classes":["public"],"last_scanned_at":"2026-07-31T05:12:17.337007+00:00","recommended_action":"Approve for monitored use.","tools":[{"id":"b3176f9d-3b00-460e-93fe-94a35a0c7b47","name":"docs_search","category":"network","action_type":"read","target":"docs.example.com","raw_config":{}}],"data_access":[{"id":"bb630a8f-8ee9-46f5-9446-83ec7869868d","data_class":"public","location":"docs site","evidence":"Read-only public docs search"}],"findings":[{"id":"25792e27-e76e-4f80-85b3-4c48158f4a02","severity":"low","code":"TOOL_NETWORK","title":"Network access","description":"Agent has network capability that should be inventoried.","evidence":"docs_search","created_at":"2026-07-31T05:12:17.339212+00:00"}],"snapshots":[{"id":"f400e8bc-c552-4970-acd2-b35ddb65d60f","config_hash":"9a2de27917ec54877e6fc2f812c5306cd48955915384fe28680e29a3f2d790aa","drift":{"configHashChanged":false,"previousConfigHash":null,"currentConfigHash":"9a2de27917ec54877e6fc2f812c5306cd48955915384fe28680e29a3f2d790aa","riskDelta":8,"changes":[{"type":"agent_discovered","severity":"info","message":"Agent readonly-docs-helper discovered."}]},"created_at":"2026-07-31T05:12:17.337007+00:00"}],"raw_config":{"mode":"read_only"}}],"summary":{"schema_version":"verify.agent_sprawl.summary.v1","generated_at":"2026-09-08T04:20:26.136818+00:00","total_agents":5,"unreviewed_agents":5,"high_risk_agents":0,"risk_level_high_agents":0,"critical_risk_agents":1,"agents_with_drift":0,"agents_drifted_in_latest_scan":0,"agents_with_recorded_drift":1,"estimated_monthly_spend":0.0,"latest_scans":[{"id":"b352bbfc-fc1c-472f-b00e-88b55a369ef3","project_id":"d7f611d7-8258-4665-9848-e1d9cbbee74c","project":"agent-platform","source_type":"demo","status":"complete","summary":{"agents_seen":5,"created":5,"updated":0,"high_risk":0,"critical_risk":1,"agents_with_drift":0},"started_at":"2026-07-31T05:12:17.289974+00:00","finished_at":"2026-07-31T05:12:17.369094+00:00"}]}}