🔴 GDELT Briefings (Intel)1C 1H 0M
CRIT~/.hermes/config.yaml mcp_servers.gdelt.headers
GDELT MCP bearer token stored plaintext in Hermes config; re-verified present on 2026…
HIGH~/.hermes/config.yaml GDELT bearer token (line 180
mcp_servers.gdelt.headers.Authorization: Bearer <REDACTED> in plaintext config…
🔴 ONOS MK5 Victor (Trading)1C 1H 1M
CRITOnos-M5-MK3-Victor/.env HL_PRIVATE_KEY (wallet 0x2
Plaintext agent-wallet private key on disk, mtime 2026-07-16 <REDACTED>…
HIGHOnos-M5-MK3-Victor/alpha_telemetry.db
Newest backup Jul 2; newest data Jul 26; today Aug 23 = 55 days of gate-relevant hist…
MEDOnos-M5-MK3-Victor/alpha_telemetry.db
No rows since 2026-07-26 12:07 (28-day write gap) while -shm sidecar was touched Aug …
LOWOnos-M5-MK3-Victor/alpha_telemetry.db-shm/-wal
-shm 32KB mtime Aug 20 vs db mtime Jul 29; -wal 0 bytes; journal_mode=delete so sidec…
LOWOnos-M5-MK3-Victor/alpha_telemetry.db
147811 of 5397648 rows (2.7%) have valid=0; freelist_count=0 so no wasted space…
🔴 FlowLedger / ml-ntwx (Commerce)1C 0H 0M
CRITml-ntwx/flowledger/docker-compose.yml (RUNPOD_API_
Live keys at HEAD lines ~35/59/60; pushed to GitHub in 4b5bb37 2026-08-04 <REDACTED>…
🔴 Conway MK1 (Experiments)1C 0H 0M
CRITconway-mk1/.env CON_AGENT_PRIVKEY
Agent wallet private key plaintext at conway-mk1/.env mtime 2026-07-30 <REDACTED>…
🔴 Chrono Wallet (Wallets)1C 0H 0M
CRITchrono-wallet/.env WDK_SEED_PHRASE
Multi-chain seed phrase (ETH/ARB/TRON/BTC/SOL scope) plaintext, mtime 2026-04-23 <RED…
🔴 Kronos CTS (Trading)1C 0H 1M
CRITkronos-cts/.env tracked in git HEAD
git ls-files confirms .env TRACKED; history adds at 59df177(2026-04-20) + bcf8d38(202…
MED~/Developer/kronos-cts/.env (+ worktrees, services
.env NOW gitignored (verified) — but 18 secret-history hits remain in git history; F-…
🟠 Hawk-Forge Lab (Intel)0C 2H 2M
HIGHhttps://forge-api.ml-nightworx.io/mcp
initialize AND tools/list return 200 with zero auth; full DoD contract-search tool su…
HIGHforge-api /mcp protocolVersion
Hard-pinned 2024-11-05 regardless of client offer of 2025-06-18; 2025-era clients exp…
MEDforge.ml-nightworx.io
Source-of-truth workshop site: no sitemap/robots (fallback), no meta description, OG,…
MEDagentic-moat/.env FORGE_DATA_GOV_API_KEY
Active gov-data key on disk, mtime 2026-08-15, no git exposure found <REDACTED>…
🟠 ASI-Evolve (Trading)0C 1H 0M
HIGH~/Developer/ml-ntwx/ASI-Evolve/.env
OPENAI_API_KEY in .env; repo is a git repo; .gitignore lacks .env so one 'git add -A'…
🟠 NIGHTHAWK/HAWK glass (Intel)0C 1H 0M
HIGHhawk.ml-nightworx.io
Pay-Bridge card live with QR + 'Open Pay-Bridge' CTA; PAY_BRIDGE_ENABLED=false per br…
🟠 AAAS Catalogue (Glass)0C 1H 0M
HIGHaaas.ml-nightworx.io
llms.txt lists 3 dead children: moat (522), oasisproperty (404), legal777 (NXDOMAIN);…
🟠 Agentic Moat (legacy) (Commerce)0C 1H 0M
HIGHagentic-moat-dashboard.web.app
Retired Firebase dashboard still serves 200 'Agentic Moat — ML-NIGHTWORX Ops Dashboar…
🟠 Studio Ops Glass (Platform)0C 1H 0M
HIGHSKIP studio.ml-nightworx.io
NXDOMAIN confirmed while wiki claims LIVE G18 status — stale wiki claim…
🟠 Model Routing (Platform)0C 1H 0M
HIGHOPENROUTER_API_KEY sprawl (6+ files incl. Download
Key referenced by name in .zshrc, ~/.hermes/.env, kronos-ew-cycle/.env, two scaffold …
🟠 FlowLedger (Platform)0C 1H 0M
HIGHflowledger/.env ANTHROPIC_API_KEY (standalone)
.env correctly gitignored but key age ~4.5 months matches compose leak vintage <REDAC…
🟠 CUBBY Combined MCP (Intel)0C 1H 0M
HIGHanalytics-product/combined-mcp/server.js
Zero auth enforcement on MCP endpoint — tools/call publicly callable if exposed. CORS…
🟠 Gmail MCP (Platform)0C 1H 0M
HIGHanalytics-product/gmail-mcp/server.js
Gmail MCP with domain-wide delegation but zero auth check on incoming requests.…
🟠 HAWK Analytics MCP (Intel)0C 1H 0M
HIGHanalytics-product/hawk-mcp/server.js
NIGHTHAWK-specific MCP with zero auth; exposes GA4 property data for NIGHTHAWK proper…
🟠 DOME V1/CUBBY (Glass)0C 1H 1M
HIGHhttps://dome.ml-nightworx.io/.well-known/mcp/serve
Discovery file 200 OK advertises MCP tools/capabilities, but POST /api and /mcp both …
MEDdome.ml-nightworx.io
Advertised endpoint https://dome.ml-nightworx.io/api returns HTML SPA fallback (not J…
🟠 PayBridge x402 (Commerce)0C 1H 1M
HIGHpaybridge-api /mcp protocolVersion
Server returns 2025-03-26 even when client offers 2024-11-05 — violates spec downgrad…
MEDhttps://paybridge-api.ml-nightworx.io/mcp
Prior evidence '/mcp 404' was GET-only; POST MCP is fully LIVE (mcp-1.1.1-paybridge 0…
🟡 NTWX Runtime MCP 1.1 (Platform)0C 0H 1M
MEDruntime-mcp.ml-nightworx.io (ntwx-mcp-1.1 + runtim
NXDOMAIN reconfirmed live 2026-08-23 for both inventory entries; inventory already fl…
🟡 LV2 Stripe (Commerce)0C 0H 1M
MEDlv2.ml-nightworx.io
23 unique buy.stripe.com links vs ~205 product-name mentions across 5 sizes x collect…
🟡 Reflector/DOME V2 (Glass)0C 0H 1M
MEDreflector.ml-nightworx.io
No meta description, no OG tags, no copyright, no contact email; title 'Reflector Cli…
🟡 Analytics/CUBBY (Glass)0C 0H 1M
MEDanalytics.ml-nightworx.io
'CUBBY HOUSE Analytics' ops dashboard publicly reachable, no auth wall observed, no r…
🟡 sleep.* (unknown) (Experiments)0C 0H 1M
MEDsleep.ml-nightworx.io
Purpose undocumented in brief ('purpose unknown'); Next.js app serving HTML fallbacks…
🟡 ONOS (Trading)0C 0H 1M
MEDonos-mk2.ml-nightworx.io
Title is bare 'Streamlit' with Streamlit/Snowflake Apache license text as first conte…
🟡 Hermes Internal DBs (Platform)0C 0H 1M
MED~/.hermes/state.db, cron/executions.db, verificati
All three healthy (quick_check ok) but have zero backups; state.db is 110 MB of irrep…
🟡 Backup Infrastructure (Trading)0C 0H 1M
MEDbackup infrastructure
Only backups are two one-off Jul-2 snapshots sitting in the same directory as the pri…
🟡 Agentic Moat (GCP) (Commerce)0C 0H 1M
MEDagentic-moat GOOGLE_APPLICATION_CREDENTIALS dangli
.env references SA key path; target file absent on disk <REDACTED>…
🟢 Cursor Cloud Internal (Platform)0C 0H 0M
LOWcursor-cloud + cursor-subscriptions
Cursor-internal servers have no externally probeable endpoint from this Mac; subscrip…
🟢 Walrus/MemWal (parked) (Platform)0C 0H 0M
LOWWalrus/MemWal mock fixture
Inventory itself marks simulation-only; no file located on Mac. Plan skip-list exclud…
🟢 MCP Client Configs (Platform)0C 0H 0M
LOW~/.claude.json + ~/.cursor/mcp.json
claude.json mcpServers empty everywhere; cursor/mcp.json absent. No secret exposure o…
🟢 NTWX Portfolio (Glass)0C 0H 0M
LOWntwx.ml-nightworx.io
Corporate root has no copyright line, no contact email, no OG tags despite being bran…
🟢 Agency888 (Glass)0C 0H 0M
LOWagency888.ml-nightworx.io
Copyright says '© 2025 AGENCY888' (stale year) and contact placeholder 'you@company.c…
🟢 Infra-AEO (Intel)0C 0H 0M
LOWinfra-aeo.ml-nightworx.io
Contact placeholder 'you@company.com' visible on production AEO site…
🟢 REM Vertical (Glass)0C 0H 0M
LOWrem.ml-nightworx.io
Contact email is personal mark@ml-nightworx.com; llms.txt present; otherwise stronges…
🟢 Kronos family (Trading)0C 0H 0M
LOW~/kronos_telemetry.db
0 bytes, mtime Jun 28, file(1) says empty, sqlite opens zero-page db with no tables…
🟢 Stripe/CF/Bot tokens (Commerce)0C 0H 0M
LOWCLOUDFLARE_API_TOKEN / TELEGRAM_BOT_TOKEN / Stripe
No disk values found; dashboard/Worker-secret held per SOP <REDACTED>…
🟢 Claude Code / cloudflared (Platform)0C 0H 0M
LOWClaude session keys / cloudflared cert.pem
Tool-managed creds in default locations <REDACTED>…
🟢 dash.ml-nightworx.io (Archive)0C 0H 0M
INFOSKIP dash.ml-nightworx.io
NXDOMAIN confirmed — consistent with records…
🟡 Business Profile MCP (Intel)0C 0H 1M
MEDanalytics-product/business-mcp/server.js
API key referenced in config but no req.header enforcement found in route handlers.…
🟡 Search Console MCP (Intel)0C 0H 1M
MEDanalytics-product/search-mcp/server.js
GSC search data MCP, no auth enforcement. GSC_SERVICE_ACCOUNT_KEY referenced via env.…
🟡 Dashboards MCP (Glass)0C 0H 1M
MEDanalytics-product/dashboards-mcp/server.js
Dashboard data MCP, no auth enforcement found.…
🟡 Generic MCP Template (Platform)0C 0H 1M
MEDanalytics-product/mcp-server/server.js
Generic MCP server template; role unclear vs other specialized servers.…
🟡 GA4 Key Location (Intel)0C 0H 1M
MEDanalytics-product/.env.example
GA4_SERVICE_ACCOUNT_KEY path points to ~/Downloads/ml-ntwx-il-v1-cba997061bc0.json — …
🟢 Google MCP Compatibility (Platform)0C 0H 0M
INFOanalytics-product (all servers)
All 8 servers self-declare as MCP 1.0 pattern: POST /mcp for initialize/tools/list/to…
🟡 InfraDOME (Intel)0C 0H 2M
MED~/Developer/infradome/specs/mcp_server_kuzu.py
Inventory cites InfraDOME FastMCP stdio command; no infradome dir or mcp_server_kuzu.…
MEDinfradome.ml-nightworx.io
sitemap.xml+robots.txt are HTML SPA fallbacks (soft-404); no meta description, OG, co…
🟡 Estate-wide AEO (Glass)0C 0H 2M
MEDestate-wide (12 hosts)
SPA soft-404 pattern: /.env and /debug return 200 HTML on reflector/hawk/nighthawk/nt…
MEDestate-wide (13 hosts)
13 of 23 hosts have NO valid sitemap.xml; 14 lack robots.txt; 10 lack meta descriptio…
🟢 NIGHTHAWK (Intel)0C 0H 0M
LOWnighthawk-api.ml-nightworx.io /feeds/* + /api/keys
Bearer auth correctly enforced on feeds and key endpoints; no unauthenticated surface…
LOWnighthawk-api.ml-nightworx.io
API host 401s all discovery paths incl. robots.txt — acceptable for API but no public…