# One real connection, with its boundary

The connected GitHub MCP tools actually returned metadata for two public repositories: `modelcontextprotocol/servers` and `modelcontextprotocol/typescript-sdk`.

Both responses identified the requested public repository. The returned repository permissions showed `pull: true`, `push: false`, `admin: false`. These are object-level permissions; the connector's complete OAuth scopes were not inspected and remain unknown.

The practice missing-file read returned a real GitHub 404. No local substitute file was presented as an external result.

Only public repository identifiers and a nonexistent public practice path were sent. No repository was changed. Full selected public response fields, actual tool names, parameters and timestamp are in `external-receipt.json`.