[{"slug":"ZV-2026-0174","server_name":"mcp.sap.oobeprotocol.ai","severity":"breaking","title":"mcp.sap.oobeprotocol.ai: Field signature was removed from sap_profile_switch input; consumers still sending it may be rejected or silently ignored.","summary":"[safe] Tool magicblock_private_balance was added. [safe] Tool magicblock_swap_quote was added. [risky] Field runtimeDoctor was added to sap_agent_runtime_status output. [risky] Field toolCatalog was added to sap_agent_runtime_status output. [risky] Default of detailed on sap_network_stats changed false → unset. [breaking] Field signature was removed from sap_profile_switch input; consumers still sending it may be rejected or silently ignored. [risky] Field toolCatalog was added to sap_quick_context output.","changes":[{"kind":"tool_added","tool":"magicblock_private_balance","detail":"Tool `magicblock_private_balance` was added.","severity":"safe"},{"kind":"tool_added","tool":"magicblock_swap_quote","detail":"Tool `magicblock_swap_quote` was added.","severity":"safe"},{"kind":"output_property_added","path":"outputSchema.properties.runtimeDoctor","tool":"sap_agent_runtime_status","after":{"type":"object","description":"Secret-free local runtime doctor report generated from the active server config. Includes pass/warning/fail checks for profile, signer, wallet path presence, policy limits, RPC, and paid/write readiness without keypair bytes."},"detail":"Field `runtimeDoctor` was added to `sap_agent_runtime_status` output.","severity":"risky"},{"kind":"output_property_added","path":"outputSchema.properties.toolCatalog","tool":"sap_agent_runtime_status","after":{"type":["object","null"],"description":"Secret-free modular tool catalog summary generated from registered tool modules, or null before registration summary is available."},"detail":"Field `toolCatalog` was added to `sap_agent_runtime_status` output.","severity":"risky"},{"kind":"default_changed","path":"inputSchema.properties.detailed","tool":"sap_network_stats","before":false,"detail":"Default of `detailed` on `sap_network_stats` changed false → unset.","severity":"risky"},{"kind":"input_property_removed","path":"inputSchema.properties.signature","tool":"sap_profile_switch","before":{"type":"string","description":"Optional Ed25519 signature proving ownership of the target profile keypair. When provided, the server verifies that the signature matches the profile agentPubkey. This prevents impersonation via manual .active-profile file edits. If omitted, the switch proceeds without cryptographic verification (backward compat)."},"detail":"Field `signature` was removed from `sap_profile_switch` input; consumers still sending it may be rejected or silently ignored.","severity":"breaking"},{"kind":"output_property_added","path":"outputSchema.properties.toolCatalog","tool":"sap_quick_context","after":{"type":["object","null"],"description":"Secret-free modular tool catalog summary with selected modules, payment tiers, signer-boundary policy buckets, and hosted/local bridge hints."},"detail":"Field `toolCatalog` was added to `sap_quick_context` output.","severity":"risky"}],"published_at":"2026-08-18T20:21:40.463Z"}]