docs(wiki): JS Recon's TruffleHog engine
The JS Reconnaissance page documents the engine (merge, rules V1/V2, the
kept validators, the sidecar's hardening and network rule, the exclusion
list and its re-review on upgrade, the coverage reasons, the new Secret
properties) and the Phase 0 regex fixes. Settings reference, registry and
MCP reference regenerated for the two new fields; key validation is
tighten-only for Rules of Engagement.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: regenerate MCP API reference for the route exposure v3 settings
docs: route exposure agent parts (plan A1)
A Broken Access Control section and "Route exposure findings" subsections
for Path Traversal and RCE with the three switches; the scan page says what
the agent does with its results; the settings pages are regenerated for the
three new fields (758 stored, 690 settable).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: Route Exposure Scan page, settings registry and MCP reference
A new Route-Exposure-Scan page (linked from Home and the sidebar), its Red
Zone tab, its rows in the pipeline workflow, graph, mute-rules and export
pages, the regenerated settings registry and counts (755 stored, 687 settable
over MCP), and the MCP API reference, whose update_recon_settings text names
the settable count.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: the queue retries a passing start error, parks a start with no answer, and fails a spawn that could not run (plan 12.6, 12.9)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: Stop is asynchronous, ends only its own scan's tools and applies the mute rules (plan 12.3, 12.4)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: regenerate the MCP API reference for list_findings' gate blockers (plan 10.5)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: regenerate the MCP API reference for the two IP attribution settings (plan 11)
update_recon_settings now counts 675 settable fields.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: regenerate MCP API reference (list_findings disposition, plan 10.3)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: regenerate MCP API reference (graph_summary graph_data_missing warning, plan 09.4)
docs: regenerate MCP API reference (graph_summary coverage block, plan 09.2)
docs: JS recon is no scanModules phase (regenerated references)
Regenerated MCP-API-Reference.md and Project-Settings-Registry.md:
preflight_scope_check names JS recon by its own switch, and the registry
meanings of jsReconEnabled, jsluiceEnabled, jsReconAiSdkDetectionEnabled,
jsReconMaxFiles and scanModules say what the pipeline does.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: regenerate MCP API reference
get_attack_surface_overview, list_exploit_paths and get_blast_radius now
leave out what a person judged a false positive and what the Priority Board
resolved, as the client report does.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(mcp): regenerate the API reference for list_graph_views mayNeedUpdate
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(mcp): regenerate the API reference for nested wildcards and the org model
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(mcp): regenerate the API reference for the scope groups
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: regenerate settings and MCP references for OpenAPI import
PR #203 adds six project columns. Regenerate the Project Settings Registry
and the MCP API reference, and restate the narrative counts: 741 stored
parameters, 673 writable over MCP.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: deserialization skill switches (OOB/timing/scope/runtimes/exec/PHAR)
Document the seven project switches for the Insecure Deserialization skill, the
three confirmation channels they gate, and the regenerated settings + MCP pages.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
docs: serialized-object Jev ranking; the complete AI in Pipeline hook list
TypeSafe Jev gains its serialized-object ranking section and the five
Jev-only hooks everywhere the count appears. Serialized Object Detection
covers form fields, one candidate per format per value, the honest ceiling
of the in-memory corpus, and the Jev ranking. Screenshots regenerated: the AI
in Pipeline panel with every hook card, the Jev token card, and the
Serialized Object Scan card. MCP API reference and settings registry
regenerated.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(mcp): 5,000 findings per mute or unmute call, no daily budget
MCP Server and the generated MCP API Reference follow the new limits: one
call names up to 5,000 findings, a token makes at most 200 mute or unmute
calls a minute, and the daily mute budget is gone.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(jev): the four Jev-only hooks in shadow mode
- TypeSafe-Jev: page-type labels, FFuf base-path ranking, Hakrawler seed
order and tool health (what Jev is asked, the result, cache, on failure),
a Shadow mode section, the two-level switch, the data each sends to
TypeSafe, cost and limits, the preflight kinds, log tags and
troubleshooting; the refusal text and the preset rule corrected
- AI-in-the-Recon-Pipeline, Recon-Pipeline-Workflow, AI-Model-Providers,
Global-Settings and Home name the Jev-only hooks where they list Jev's
- screenshots retaken: the AI in Pipeline panel with the Jev-only cards,
and the TypeSafe AI (Jev) section with its new intro
- Project-Settings-Reference counts (726 stored, 659 settable);
Project-Settings-Registry and MCP-API-Reference regenerated
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: TypeSafe AI (Jev) provider, the LLM | Jev engine on four recon AI hooks
- AI-in-the-Recon-Pipeline: engine choice, the four hooks and what each may do,
why the false-positive filter has no Jev option, the three-level model, how a
bad answer is contained, failure behaviour, and the third-party data note
- AI-Model-Providers: the TypeSafe AI (Jev) section (one token, pinned model,
not a chat model)
- Global-Settings: the Jev check spends a trace of credit
- generated: MCP API reference, settings registry and reference (4 new settable
fields, preflight aiHooks)
docs(settings): ffufSmartFuzzMaxBasePaths caps smart-fuzz base paths
Regenerated Project-Settings-Registry and MCP-API-Reference for the new
settable field (651 settable, 718 stored), and described the cap and the
random pick in the narrative Project-Settings-Reference FFuf section.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(triage): hardening notes for reviews, verdicts, stops and Ask agent
get_finding_triage returns review text (fix lever included) only with
includeQuotes and separates host proof from finding proof; a proven finding
takes a raising review; evidence redacts credential headers and shows the
nuclei matcher and GVM port/solution type; an agent image older than the
webapp refuses MCP verdicts (agent_outdated); an agent's stop reaches every
open tab; Ask agent fences the node name as untrusted. MCP API reference
regenerated.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: Multi mute, Models by feature and the three-layer Priority Board
Multi mute on Muted Nodes and the Red Zone, Models by feature in Global
Settings and on every feature page that asks for a model, the settings
that retire the per-project CypherFix model, and the Priority Board's
rules, review and decision layers with the MCP review and run tools.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(mcp): schedule pause on rescope, live agent check, badge that follows
- update_project_scope: a batch that gains hosts pauses the project's
scheduled scans (pausedSchedules); resume them in the Scans tab
- an agent session counts as busy only while the agent confirms it
- the Preset applied badge follows a rename and is cleared by a delete;
badges from before presets dropped two switches show again
- regenerate MCP-API-Reference.md
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(mcp): recon presets and project rescope over MCP
Document the preset tools (list, create, update, delete, apply) and
update_project_scope, their three permissions and profile ticks, the
settings-surface counts and compare-and-swap, the stale-form 409, the
agent-written preset badge and the presets no longer carrying the MCP
sandbox switch. Regenerate the MCP API reference and the settings
registry page from the committed code.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(mcp): regenerate the API reference for the nodeId field
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>