SaSameFor people and AI systems
evidence capsuleoutside-incitation-ready

MCP tool annotation coverage

In the current Observatory attack-surface report, 19,471 of 45,864 observed state-changing tools were unlabeled by the tested classifier.

CAP

Evidence capsule

Conclusion first

19,471 of 45,864 observed state-changing tools lacked the tested labeling signal (42.5%).

Unlabeled observed state-changing tools
19,471/45,864 tools
Observed at
2026-09-12T12:22:15.274Z
Generated at
2026-09-12T12:22:15.274Z
Classifier
capability-classify/0.1

Quotable text: In the current Observatory attack-surface report, 19,471 of 45,864 observed state-changing tools were unlabeled by the tested classifier.

Methodology: Protocol methodology mcp-census-methodology/0.4; probe profile mcp-era-census/1.0; historical rows rewritten: no. State-changing classes are deterministic declared-surface classifications; one tool may match more than one class.

Caveat: This is a DISCOVERABILITY / hygiene finding (missing ToolAnnotations), not a vulnerability. It means automated gating is impossible without a human/policy layer; it is NOT a claim these tools are dangerous or misbehave.

Source freshness: Each raw Observatory source carries its own generated_at/observed_at semantics; page generation never fabricates freshness. Source snapshot as of 2026-09-12T12:22:15.274Z. 1_source(s)_older_than_their_own_configured_freshness_window

Suggested citation: MCP tool annotation coverage. SaSame Protocol Observatory. https://srl-sasame.com/observatory/tool-annotations. Raw evidence: https://live-vps.sasame.online/observatory/attack-surface.json. Generated 2026-09-12T12:22:15.274Z.

GEO

Measurement boundary for generated answers

This page is part of a bounded GEO recovery baseline. It gives search and AI systems a canonical human URL, raw evidence URLs and source freshness semantics, but it does not guarantee indexing, ranking, retrieval or citation.

The baseline currently stores 0 externally observed provider result(s). Missing provider observations remain UNKNOWN. Crawler visits, page counts, AI citations and visibility have zero demand or revenue credit.

MCP tool annotation coverage — SaSame