{"status":"healthy","ready":true,"activeCount":1,"maxCount":50,"idleTimeoutMs":3600000,"servers":[{"id":"619fea19-3fdd-4756-a6fb-e7640bf6412d","name":"rickycambrian/geo_mcp_server","status":"running","uptimeMs":6336366,"idleMs":2966115,"securityScore":85,"requestCount":12,"errorCount":0}],"kfdb":{"total":3553,"byRegistry":{"npm":2030,"pypi":491,"docker":105,"git":1364},"bySecurityScore":{"perfect":5,"safe":255,"moderate":78,"notScored":205},"byGatewaySecurityScore":{"excellent":1618,"good":284,"acceptable":0,"review":12,"notScored":1639},"byDeploymentType":{"localTool":267,"apiWrapper":2417,"hostedService":3,"remoteMcp":629,"unknown":237},"gatewayCompatible":2846,"gatewayIncompatible":707,"enriched":3549,"enrichedV3":0,"enrichedV4":29,"unenriched":4,"runnable":2732,"gatewaySafe":1909,"gatewayRejected":13,"packageMismatchDetected":57,"bySharingPolicy":{"isolated":3389,"poolable":134,"singleton":30},"lastSync":"2026-07-26T15:06:55.849Z","lastSyncDurationMs":8967,"startupComplete":true},"securityPosture":{"mode":"tee","tpm":{"pcrPolicyPreferred":true,"legacyFallbackAllowedUntil":"2026-06-30T23:59:59Z","legacyFallbackUsedCount":0,"legacyFallbackUsedKeys":[],"envFallbackUsedCount":0,"envFallbackUsedKeys":[],"envFallbackMismatchCount":0,"envFallbackMismatchKeys":[],"guardian":{"deviceAccessOk":true,"lastDeviceCheckAt":"2026-07-25T17:13:40Z","lastDeviceFixAt":null,"lastDeviceFixResult":"noop"},"recovery":{"needed":0,"fixed":0,"failed":0,"enabled":true,"lastAttemptAt":"2026-07-25T17:13:34Z","lastResult":"noop","lastReason":"all_contexts_healthy","lastRecoverySource":null,"lastSigningKeyRotated":true,"lastSigningKeyRotationAt":"2026-07-16T03:14:36Z","lastSigningKeyRotationReason":"continuity_material_unavailable"}},"attestationAvailability":{"teeEnabled":true,"canGenerateReports":true,"reportReasonCode":null,"reportConsecutiveFailures":0,"reportRetryAttempts":1},"keySources":{"jwtSecret":"tpm_pcr","gatewaySecretKey":"tpm_pcr","proofSigningKey":"tpm_pcr","vaultEncryptionKey":"derived_from_gateway_key"},"crossGatewayTrust":{"mode":"strict","state":"trusted","attestationUrl":"https://agents.rickydata.org/api/attestation/report","challengeUrl":"https://agents.rickydata.org/api/attestation/challenge","expectedJwksHashTrunc16":"89030e9a1aef9024d7df8a068dc138bb","attestedJwksHashTrunc16":"89030e9a1aef9024d7df8a068dc138bb","lastCheckedAt":"2026-07-26T15:07:18.244Z","lastError":null,"reasonCode":"trusted","attestationAgeMs":151,"nonceBound":true,"counterRollbackDetected":false,"policyHashTrunc16":"794ad005d3efb49b314cc1bb457633a9","counts":{"trusted":1319,"degraded_no_attestation":0,"degraded_hash_mismatch":5,"off":0,"unknown":0},"attestationModeRejectCount":0,"attestationModeDegradedCount":0,"strictShadowWouldRejectCount":0,"strictShadowLastWouldRejectState":null,"strictShadowLastWouldRejectReasonCode":null,"strictRejectNonTrustedEnabled":true,"lastTrustedAt":"2026-07-26T15:07:18.244Z","bootstrapCompleted":true,"trustRefreshFailuresConsecutive":0,"strictRejectBeforeFirstTrustedCount":0,"strictRejectWhileRefreshInFlightCount":0},"secretRelease":{"mode":"enforced","decisionsTotal":154,"trustedCount":150,"degradedCount":4,"unavailableCount":0,"guardErrorCount":0,"wouldBlockTotal":4,"wouldBlockDegradedCount":4,"wouldBlockUnavailableCount":0,"lastDecisionAt":"2026-07-26T15:04:53.523Z","lastState":"trusted","lastReasonCode":"trusted","lastWouldBlock":false,"lastWouldBlockReasonCode":null},"degraded":false,"degradedReasons":[],"sandboxControl":{"enabled":true,"controlMode":"socket-fallback","configuredNetworkPolicy":"restricted","effectiveNetworkPolicy":"restricted","securityOptionsEnforced":{"readOnly":true,"noNewPrivileges":true,"capDropAll":true},"allowBareProcess":false,"bareProcessRejectedCount":0,"runtimeProfile":"session_permissive_isolated","egress":{"enforcementEnabled":true,"rulesApplied":81,"rulesFailed":0},"sandboxd":{"enabled":true,"mode":"enforced","version":"0.1.0","binaryPath":"/usr/local/bin/sandboxd","shadowMismatches":0,"fallbackCount":0,"lastError":null,"lastPlanAt":"2026-07-26T15:04:53.990Z","lastRunAt":"2026-07-26T15:04:53.990Z"}}},"securityMetrics":{"keySourceDistribution":{"tpm_pcr":3,"derived_from_gateway_key":1},"legacyTpmFallbackUsageCount":0,"envTpmFallbackUsageCount":0,"envTpmFallbackMismatchCount":0,"tpmRecovery":{"needed":0,"fixed":0,"failed":0,"enabled":true,"lastResult":"noop","lastReason":"all_contexts_healthy","lastAttemptAt":"2026-07-25T17:13:34Z","lastRecoverySource":null,"lastSigningKeyRotated":true,"lastSigningKeyRotationAt":"2026-07-16T03:14:36Z","lastSigningKeyRotationReason":"continuity_material_unavailable"},"tpmGuardian":{"deviceCheckTotal":0,"deviceFixTotal":0,"deviceFixFailed":0},"attestationAvailability":{"teeEnabled":true,"canGenerateReports":true,"reportReasonCode":null,"reportConsecutiveFailures":0,"reportRetryAttempts":1},"crossGatewayTrust":{"state":"trusted","mode":"strict","strictShadowWouldRejectCount":0,"strictShadowLastWouldRejectState":null,"strictShadowLastWouldRejectReasonCode":null,"lastTrustedAt":"2026-07-26T15:07:18.244Z","bootstrapCompleted":true,"trustRefreshFailuresConsecutive":0,"strictRejectBeforeFirstTrustedCount":0,"strictRejectWhileRefreshInFlightCount":0},"degraded":{"active":false,"reasons":[]},"secretRelease":{"mode":"enforced","decisionsTotal":154,"trustedCount":150,"degradedCount":4,"unavailableCount":0,"guardErrorCount":0,"wouldBlockTotal":4,"wouldBlockDegradedCount":4,"wouldBlockUnavailableCount":0,"lastDecisionAt":"2026-07-26T15:04:53.523Z","lastState":"trusted","lastReasonCode":"trusted","lastWouldBlock":false,"lastWouldBlockReasonCode":null},"authShadow":{"invalidBearerDowngradeTotal":0,"invalidBearerDowngradeByRoute":{}},"mcpIsolationShadow":{"policyComparisonTotal":46,"policyDivergenceTotal":0,"policyDivergenceBySharingPolicy":{},"anonymousNoSessionTotal":0,"sharedSafetyOverrideTotal":0,"sharedSafetyOverrideByReason":{},"sharedSafetyLastOverrideReason":null}},"secretEncryption":{"model":"hkdf+sign-to-derive","signToDeriveAvailable":true,"sessionCacheEntries":0,"description":"User secrets support HKDF (platform-managed) and Sign-to-Derive (wallet-authorized) encryption at rest; authorized runtimes can use plaintext during a session."},"secretMigration":{"generatedAt":"2026-07-26T15:07:33.351Z","persistenceEnabled":true,"hkdf":{"disk":{"walletBuckets":98,"secretFiles":59,"unreadableEntries":0},"memoryWallets":9,"memoryServers":3,"memorySecrets":6},"signToDerive":{"disk":{"walletBuckets":2,"serverFiles":6,"unreadableEntries":0},"memoryWallets":0,"memoryServers":0,"memorySecrets":0},"overlap":{"comparable":false,"dualPathWallets":null,"reason":"HKDF and sign-to-derive wallet bucket names use different derivation domains, so aggregate scans cannot safely infer wallet overlap without plaintext wallet context."},"scanErrors":[]},"warmup":{"phase":"idle","progress":"idle","errors":0},"discovery":{"working":344,"runtimeVerified":24,"listedOnly":320,"probeFailed":8,"failed":405,"total":749},"requestMetrics":{"success":1962,"errors":0,"buckets":61,"userSuccess":1956,"userErrors":0,"totalSuccess":25256,"totalErrors":3,"totalUserSuccess":25094,"totalUserErrors":3},"timestamp":"2026-07-26T15:07:33.354Z"}