From 7fef4a90ad523aa5719528c2cae4581655d6ee09 Mon Sep 17 00:00:00 2001 From: Jino Tesauro Date: Tue, 25 Aug 2026 15:29:37 -0500 Subject: [PATCH] docs(mcp): state that active_* summary counts ignore verified status finding_summary and risk_summary return active_* counts alongside separate verified_findings and active_verified_findings counts. The page documented the parameters but never said what the active_* counts include, leaving it ambiguous whether verification narrows them. It does not: the active_* counts cover every active finding regardless of verification, and the Enforce Verified Status system settings do not restrict them. Adds a note saying so to both tool sections. --- docs/content/metrics_reports/ai/mcp_server_pro.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/docs/content/metrics_reports/ai/mcp_server_pro.md b/docs/content/metrics_reports/ai/mcp_server_pro.md index ad0fcc5a13a..43a0bb2bb8b 100644 --- a/docs/content/metrics_reports/ai/mcp_server_pro.md +++ b/docs/content/metrics_reports/ai/mcp_server_pro.md @@ -397,6 +397,11 @@ get_findings({ **Description:** Retrieve aggregate finding metrics in a single call, rather than fetching findings and counting them. Returns counts by severity, average priority and risk score, average finding age, and the most common CWEs. +> **Note on counts:** The `active_*` counts cover every active finding, whether or not it has +> been verified. Verified findings are reported separately as `verified_findings` and +> `active_verified_findings`, so one call gives you both views. The **Enforce Verified Status** +> system settings do not narrow these counts. + **Parameters:** **product_id** (Optional) @@ -436,6 +441,11 @@ finding_summary({ **Description:** Retrieve the aggregate risk posture for a single product, including average priority, risk score, active finding counts, and business criticality. +> **Note on counts:** The `active_*` counts cover every active finding, whether or not it has +> been verified. Verified findings are reported separately as `verified_findings` and +> `active_verified_findings`, so one call gives you both views. The **Enforce Verified Status** +> system settings do not narrow these counts. + **Parameters:** **product_id** (Required)