reap / rules / recon: capability surface
Tool capability inventory (3 tools)
mcp-tool-capability-surface ASI09 Human-Agent Trust Exploitation severity: info
What it detects
Full reported tool inventory, paginated, for asset tracking and cross-run diffing. ASI09.
On a successful tools/list, records the full tool inventory plus a dangerous-tools subset for asset-inventory/diffing purposes.
applies to MCP endpoints
Why it matters
Inventory for asset tracking and drift detection — an observability concern, not a vulnerability.
Example finding
INFO mcp-tool-capability-surface HIGH CONFIDENCE Tool capability inventory (3 tools) Full tool surface exposed by this endpoint, for asset-inventory and diffing purposes. Evidence POST /mcp → 200
from a scan of reap-range, bad target
On reap-range
| insecure target | bad/mcp · Info (full inventory) |
| correct target | silent on good/mcp; surface counts appear in the report header |
Run only this check
reap -t https://your-host/mcp --authorized --include mcp-tool-capability-surface
Not installed? Install REAP. Only scan systems you own or are authorised to test. Reference: docs/PROBES.md.