{
  "entrypoint_kind": "library_api",
  "entrypoint_detail": "MCP StreamableHTTPHandler v1.3.0 (stateless) on 127.0.0.1:18080",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": ["go-1.23", "mcp-server-vulnerable"],
  "proof_artifacts": [
    "artifacts/request_attacker.txt",
    "artifacts/response_attacker.json",
    "artifacts/status_attacker.txt",
    "artifacts/response_tool_call.json",
    "artifacts/status_tool_call.txt",
    "artifacts/response_localhost.json",
    "artifacts/status_localhost.txt",
    "logs/server.log"
  ],
  "notes": "MCP server v1.3.0 lacks DNS rebinding protection, accepts requests with arbitrary Host headers"
}