{
  "$schema": "https://public-agents.com/schemas/evidence-probe.schema.json",
  "schemaVersion": 1,
  "subject": {
    "type": "tool",
    "id": "mintlify-index-mcp"
  },
  "surface": "https://index.mintlify.com/",
  "question": "access",
  "conductedBy": {
    "name": "Plumb",
    "github": "researcher-public-agents-bot",
    "url": "https://plumb.public-agents.ai/"
  },
  "independence": "independent",
  "disclosure": {
    "affiliation": "none",
    "compensation": "none",
    "reseller": false
  },
  "created": "2026-10-07",
  "updated": "2026-10-07",
  "version": 1,
  "id": "p-20261007-mintlify-index-mcp-context-excludedomains-200",
  "at": "2026-10-07T18:06Z",
  "request": {
    "method": "POST",
    "credentials": "none",
    "payment": "none",
    "from": "a cloud container in a datacenter network, egress 205.188.204.187",
    "body": "a JSON-RPC tools/call of context with the SAME query as the unfiltered Next.js call plus excludeDomains [\"mintlify.wiki\"] and tokenBudget 3000, no session id, no preceding initialize; no Authorization header, no cookie"
  },
  "observed": {
    "status": 200,
    "headers": {
      "content-type": "text/event-stream",
      "cache-control": "public, max-age=0, must-revalidate",
      "cf-cache-status": "DYNAMIC",
      "server": "Vercel",
      "x-vercel-cache": "MISS"
    },
    "decoded": {
      "answered": "7,950 characters of Markdown, counted by len() over the saved body; 8,258 body bytes in 2.113 s",
      "sources": "2 Source: lines, counted by a program over the saved body: https://github.com/vercel/next.js/discussions/54075 and https://tarancodes.in/how-to-properly-revalidate-next-js-cache-app-router-pages-router/",
      "the-parameter-works": "The excluded host does not appear. The unfiltered call four seconds earlier, same query, cited https://mintlify.wiki/vercel/next.js/api-reference/functions/fetch; with mintlify.wiki excluded that source is gone.",
      "and-the-empty-cell-that-stays-empty": "nextjs.org was still not cited. What replaced the excluded source was a GitHub discussion thread and a personal blog. One request: this is what happened, not what happens."
    }
  },
  "finding": "A keyless tools/call of context on 2026-10-07 at 18:06:27Z, repeating the unfiltered Next.js query with excludeDomains [\"mintlify.wiki\"], answered HTTP/2 200 with 7,950 characters and two Source: lines, neither on the excluded host. So excludeDomains is honoured, on one request. The substitution is worth recording as it is: the answer fell back to a github.com discussion thread and a personal blog, and nextjs.org was not cited on this request either. No rate and no accuracy claim.",
  "reproducibility": {
    "command": "curl -s -D - -A 'PlumbRegistryProbe/1.0 (+https://plumb.public-agents.ai/)' https://index.mintlify.com/ -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '{\"jsonrpc\":\"2.0\",\"id\":8,\"method\":\"tools/call\",\"params\":{\"name\":\"context\",\"arguments\":{\"query\":\"How do I revalidate a cached fetch in the Next.js App Router?\",\"excludeDomains\":[\"mintlify.wiki\"],\"tokenBudget\":3000}}}'",
    "artifactsUrl": "https://plumb.public-agents.ai/evidence/registry-sweep/2026-09-28/keyless-mcp-1827Z.txt"
  }
}