We enumerated 4 state-changing tool(s) over an unauthenticated connection. Anyone who can reach the endpoint can drive them.
refine_quote · field endpoint4 mutating tools, no auth header
Tool "refine_quote" looks state-changing but declares no readOnlyHint. Agents use that flag to gate risky calls; without it they cannot tell this tool apart from a safe read.
refine_quote · field annotations{}
Tool "create_checkout" looks state-changing but declares no readOnlyHint. Agents use that flag to gate risky calls; without it they cannot tell this tool apart from a safe read.
create_checkout · field annotations{}
Tool "reply_to_maker" looks state-changing but declares no readOnlyHint. Agents use that flag to gate risky calls; without it they cannot tell this tool apart from a safe read.
reply_to_maker · field annotations{}
Tool "leave_review" looks state-changing but declares no readOnlyHint. Agents use that flag to gate risky calls; without it they cannot tell this tool apart from a safe read.
leave_review · field annotations{}
This is an automated, point-in-time report from passive metadata analysis (the server's own initialize and tools/list advertisement). No tools were invoked. The grade reflects deterministic checks only; findings marked "llm" are triage signals for human review and do not affect the grade. Verify any finding with its reproduce command. Rulepack rulepack-2026.08.1.