{"status":"healthy","ready":true,"activeCount":1,"maxCount":50,"idleTimeoutMs":3600000,"servers":[{"id":"619fea19-3fdd-4756-a6fb-e7640bf6412d","name":"rickycambrian/geo_mcp_server","status":"running","uptimeMs":2649066,"idleMs":2644057,"securityScore":85,"requestCount":2,"errorCount":0}],"kfdb":{"total":3463,"byRegistry":{"npm":1982,"pypi":475,"docker":104,"git":1338},"bySecurityScore":{"perfect":2,"safe":84,"moderate":49,"notScored":120},"byGatewaySecurityScore":{"excellent":1620,"good":278,"acceptable":0,"review":12,"notScored":1553},"byDeploymentType":{"localTool":263,"apiWrapper":2417,"hostedService":3,"remoteMcp":629,"unknown":151},"gatewayCompatible":2781,"gatewayIncompatible":682,"enriched":3459,"enrichedV3":0,"enrichedV4":29,"unenriched":4,"runnable":2676,"gatewaySafe":1904,"gatewayRejected":12,"packageMismatchDetected":55,"bySharingPolicy":{"isolated":3299,"poolable":134,"singleton":30},"lastSync":"2026-06-10T23:11:54.766Z","lastSyncDurationMs":592573,"startupComplete":true},"securityPosture":{"mode":"tee","tpm":{"pcrPolicyPreferred":true,"legacyFallbackAllowedUntil":"2026-06-30T23:59:59Z","legacyFallbackUsedCount":0,"legacyFallbackUsedKeys":[],"envFallbackUsedCount":0,"envFallbackUsedKeys":[],"envFallbackMismatchCount":0,"envFallbackMismatchKeys":[],"guardian":{"deviceAccessOk":true,"lastDeviceCheckAt":"2026-06-10T10:54:27Z","lastDeviceFixAt":null,"lastDeviceFixResult":"noop"},"recovery":{"needed":0,"fixed":0,"failed":0,"enabled":true,"lastAttemptAt":"2026-06-10T10:54:21Z","lastResult":"noop","lastReason":"all_contexts_healthy","lastRecoverySource":null,"lastSigningKeyRotated":true,"lastSigningKeyRotationAt":"2026-06-08T23:08:41Z","lastSigningKeyRotationReason":"continuity_material_unavailable"}},"attestationAvailability":{"teeEnabled":true,"canGenerateReports":true,"reportReasonCode":null,"reportConsecutiveFailures":0,"reportRetryAttempts":1},"keySources":{"jwtSecret":"tpm_pcr","gatewaySecretKey":"tpm_pcr","proofSigningKey":"tpm_pcr","vaultEncryptionKey":"derived_from_gateway_key"},"crossGatewayTrust":{"mode":"strict","state":"trusted","attestationUrl":"https://agents.rickydata.org/api/attestation/report","challengeUrl":"https://agents.rickydata.org/api/attestation/challenge","expectedJwksHashTrunc16":"f49890f412381e716dc1e2c2384e95c9","attestedJwksHashTrunc16":"f49890f412381e716dc1e2c2384e95c9","lastCheckedAt":"2026-06-11T06:12:30.121Z","lastError":null,"reasonCode":"trusted","attestationAgeMs":111,"nonceBound":true,"counterRollbackDetected":false,"policyHashTrunc16":"b9f5590827931827b37abea79795ae9d","counts":{"trusted":1173,"degraded_no_attestation":0,"degraded_hash_mismatch":0,"off":0,"unknown":0},"attestationModeRejectCount":0,"attestationModeDegradedCount":0,"strictShadowWouldRejectCount":0,"strictShadowLastWouldRejectState":null,"strictShadowLastWouldRejectReasonCode":null,"strictRejectNonTrustedEnabled":true,"lastTrustedAt":"2026-06-11T06:12:30.121Z","bootstrapCompleted":true,"trustRefreshFailuresConsecutive":0,"strictRejectBeforeFirstTrustedCount":0,"strictRejectWhileRefreshInFlightCount":0},"secretRelease":{"mode":"enforced","decisionsTotal":36,"trustedCount":36,"degradedCount":0,"unavailableCount":0,"guardErrorCount":0,"wouldBlockTotal":0,"wouldBlockDegradedCount":0,"wouldBlockUnavailableCount":0,"lastDecisionAt":"2026-06-11T05:29:06.416Z","lastState":"trusted","lastReasonCode":"trusted","lastWouldBlock":false,"lastWouldBlockReasonCode":null},"degraded":false,"degradedReasons":[],"sandboxControl":{"enabled":true,"controlMode":"socket-fallback","configuredNetworkPolicy":"restricted","effectiveNetworkPolicy":"restricted","securityOptionsEnforced":{"readOnly":true,"noNewPrivileges":true,"capDropAll":true},"allowBareProcess":false,"bareProcessRejectedCount":0,"runtimeProfile":"session_permissive_isolated","egress":{"enforcementEnabled":true,"rulesApplied":0,"rulesFailed":7},"sandboxd":{"enabled":true,"mode":"permissive","version":"0.1.0","binaryPath":"/usr/local/bin/sandboxd","shadowMismatches":0,"fallbackCount":0,"lastError":null,"lastPlanAt":"2026-06-11T05:29:01.460Z","lastRunAt":"2026-06-11T05:29:01.460Z"}}},"securityMetrics":{"keySourceDistribution":{"tpm_pcr":3,"derived_from_gateway_key":1},"legacyTpmFallbackUsageCount":0,"envTpmFallbackUsageCount":0,"envTpmFallbackMismatchCount":0,"tpmRecovery":{"needed":0,"fixed":0,"failed":0,"enabled":true,"lastResult":"noop","lastReason":"all_contexts_healthy","lastAttemptAt":"2026-06-10T10:54:21Z","lastRecoverySource":null,"lastSigningKeyRotated":true,"lastSigningKeyRotationAt":"2026-06-08T23:08:41Z","lastSigningKeyRotationReason":"continuity_material_unavailable"},"tpmGuardian":{"deviceCheckTotal":0,"deviceFixTotal":0,"deviceFixFailed":0},"attestationAvailability":{"teeEnabled":true,"canGenerateReports":true,"reportReasonCode":null,"reportConsecutiveFailures":0,"reportRetryAttempts":1},"crossGatewayTrust":{"state":"trusted","mode":"strict","strictShadowWouldRejectCount":0,"strictShadowLastWouldRejectState":null,"strictShadowLastWouldRejectReasonCode":null,"lastTrustedAt":"2026-06-11T06:12:30.121Z","bootstrapCompleted":true,"trustRefreshFailuresConsecutive":0,"strictRejectBeforeFirstTrustedCount":0,"strictRejectWhileRefreshInFlightCount":0},"degraded":{"active":false,"reasons":[]},"secretRelease":{"mode":"enforced","decisionsTotal":36,"trustedCount":36,"degradedCount":0,"unavailableCount":0,"guardErrorCount":0,"wouldBlockTotal":0,"wouldBlockDegradedCount":0,"wouldBlockUnavailableCount":0,"lastDecisionAt":"2026-06-11T05:29:06.416Z","lastState":"trusted","lastReasonCode":"trusted","lastWouldBlock":false,"lastWouldBlockReasonCode":null},"authShadow":{"invalidBearerDowngradeTotal":0,"invalidBearerDowngradeByRoute":{}},"mcpIsolationShadow":{"policyComparisonTotal":22,"policyDivergenceTotal":0,"policyDivergenceBySharingPolicy":{},"anonymousNoSessionTotal":0,"sharedSafetyOverrideTotal":0,"sharedSafetyOverrideByReason":{},"sharedSafetyLastOverrideReason":null}},"secretEncryption":{"model":"hkdf+sign-to-derive","signToDeriveAvailable":true,"sessionCacheEntries":0,"description":"User secrets support HKDF (platform-managed) and Sign-to-Derive (user-controlled, zero-knowledge) encryption."},"secretMigration":{"generatedAt":"2026-06-11T06:13:10.531Z","persistenceEnabled":true,"hkdf":{"disk":{"walletBuckets":96,"secretFiles":58,"unreadableEntries":0},"memoryWallets":14,"memoryServers":1,"memorySecrets":1},"signToDerive":{"disk":{"walletBuckets":1,"serverFiles":5,"unreadableEntries":0},"memoryWallets":0,"memoryServers":0,"memorySecrets":0},"overlap":{"comparable":false,"dualPathWallets":null,"reason":"HKDF and sign-to-derive wallet bucket names use different derivation domains, so aggregate scans cannot safely infer wallet overlap without plaintext wallet context."},"scanErrors":[]},"warmup":{"phase":"idle","progress":"idle","errors":0},"discovery":{"working":342,"runtimeVerified":24,"listedOnly":318,"probeFailed":8,"failed":405,"total":747},"requestMetrics":{"success":1101,"errors":0,"buckets":61,"userSuccess":1099,"userErrors":0,"totalSuccess":19936,"totalErrors":0,"totalUserSuccess":19910,"totalUserErrors":0},"timestamp":"2026-06-11T06:13:10.533Z"}