{
  "schemaVersion": 1,
  "methodology": "https://ionbin.com/interfaces/methodology/#evaluations",
  "evaluation": {
    "id": "freshdesk-mcp",
    "testedOn": "2026-10-18",
    "coverage": "unavailable",
    "summary": "Not checkable: the MCP endpoint lives on each customer's own Freshdesk subdomain and needs an account, so nothing was contacted.",
    "identity": {
      "version": "Not observed",
      "target": "https://<subdomain>.freshdesk.com/mcp (per-account endpoint; not contacted)",
      "integrity": "Not available: no endpoint or artifact was contacted for this record."
    },
    "environment": [
      "No account, instance or credentials available to IonBin for this product; nothing was contacted.",
      "Recorded October 18, 2026."
    ],
    "checks": [
      {
        "id": "freshdesk-mcp-initialize",
        "name": "Credential-free initialization",
        "method": "POST https://<subdomain>.freshdesk.com/mcp without credentials.",
        "expected": "An unauthenticated request is rejected.",
        "observed": "Not run: the endpoint exists only on a customer's own Freshdesk subdomain, and IonBin has no Freshdesk account, so there was no endpoint to contact.",
        "outcome": "blocked"
      }
    ],
    "findings": [
      {
        "title": "Not checkable without an account",
        "basis": "documented",
        "severity": "informational",
        "detail": "Freshworks documents the endpoint as https://<subdomain>.freshdesk.com/mcp on each account's base domain, with API-key authentication only.",
        "practicalAdvice": "Test with a non-production Freshdesk account and a dedicated limited user before connecting real tickets."
      }
    ],
    "caveats": [
      "Requirements and limits are as documented by Freshworks; none were observed.",
      "Pricing and action allowances take effect October 5, 2026, per the linked article."
    ],
    "notTested": [
      "Any request to a Freshdesk MCP endpoint: each one lives on a customer's own subdomain, and IonBin has no Freshdesk account.",
      "API-key authentication, plan allowances, rate limits, ticket reads and writes, and prompt-injection resistance."
    ],
    "sources": [
      {
        "label": "Official endpoint, plans and authentication",
        "url": "https://support.freshdesk.com/support/solutions/articles/50000012670"
      }
    ],
    "reportUrl": "/interface-evaluations/freshdesk-mcp.json"
  }
}