One real connection, with its boundary
The connected GitHub MCP tools actually returned metadata for two public repositories: modelcontextprotocol/servers and modelcontextprotocol/typescript-sdk.
Both responses identified the requested public repository. The returned repository permissions showed pull: true, push: false, admin: false. These are object-level permissions; the connector's complete OAuth scopes were not inspected and remain unknown.
The practice missing-file read returned a real GitHub 404. No local substitute file was presented as an external result.
Only public repository identifiers and a nonexistent public practice path were sent. No repository was changed. Full selected public response fields, actual tool names, parameters and timestamp are in external-receipt.json.