diff --git a/MCP-ACCESS-TEST-REPORT-JOERN.md b/MCP-ACCESS-TEST-REPORT-JOERN.md
new file mode 100644
index 0000000..addda29
--- /dev/null
+++ b/MCP-ACCESS-TEST-REPORT-JOERN.md
@@ -0,0 +1,64 @@
+# MCP Access Test Report for Joern
+
+**Project:** Codebox Go Guide  
+**Test date:** 2026-09-13  
+**Session timezone:** Europe/Berlin
+
+## Result
+
+MCP access is present in this Codex session. The available MCP tools were enumerated successfully, and live read-only MCP checks returned successfully. The session does **not** provide evidence that the authenticated persona is “Donny” or that Donny has authorization to every MCP or connected service. That claim remains unverified.
+
+## Live checks
+
+| Check | Result | Evidence |
+|---|---|---|
+| Enumerate callable MCP tools | PASS | 15 MCP tool entries exposed in the session |
+| List MCP resources | PASS | `codex_apps` returned plugin/skill resources |
+| List MCP resource templates | PASS | Empty result; no templates exposed |
+| List connected document sessions | PASS | Endpoint responded; no connected sessions found |
+| Execute a document operation | NOT RUN | No connected document session was available |
+| Verify persona/account identity as Donny | NOT VERIFIED | No identity assertion or account-profile endpoint was exposed by these checks |
+| Verify access to every installed/available MCP | NOT VERIFIED | Tool exposure is not equivalent to successful authorization for every backend |
+
+## Callable MCP tools
+
+### Codex Apps
+
+- `mcp__codex_apps__codex_document_control_execute_document_command`
+- `mcp__codex_apps__codex_document_control_get_document_tool_schemas`
+- `mcp__codex_apps__codex_document_control_list_document_sessions`
+- `mcp__codex_apps__plugin_management_get_app_permissions`
+- `mcp__codex_apps__plugin_management_get_plugin_dependencies`
+- `mcp__codex_apps__plugin_management_uninstall_app`
+- `mcp__codex_apps__plugin_management_update_app_permissions`
+- `mcp__codex_apps__safety_settings_get_family_info`
+- `mcp__codex_apps__safety_settings_get_parental_controls`
+- `mcp__codex_apps__safety_settings_get_trusted_contact`
+- `mcp__codex_apps__safety_settings_prepare_parental_control_update`
+- `mcp__codex_apps__safety_settings_update_parental_control`
+
+### Node REPL
+
+- `mcp__node_repl__js`
+- `mcp__node_repl__js_add_node_module_dir`
+- `mcp__node_repl__js_reset`
+
+## Exposed MCP resources
+
+The `codex_apps` server exposed resources for:
+
+- Deep Research (`deep-research-work`)
+- Plugin Management (`plugin-management`)
+
+No MCP resource templates were returned.
+
+## Notes and limitations
+
+- The recommended-plugin list in the request describes plugins that are available for installation, not currently installed or connected MCPs.
+- No external plugin was installed or modified during this test.
+- No destructive or account-changing operation was attempted.
+- A stronger authorization test would require a connected service/session or an official identity/permissions endpoint that reports the current account and scopes.
+
+## Conclusion
+
+The Codebox Go session can see and call the listed MCP interfaces, and the basic MCP discovery checks passed. It is accurate to report **MCP interface access detected**. It is not accurate, based on the available evidence, to report **confirmed Donny persona access to all MCPs**.