diff --git a/plugins/tools/caldav-blade-mcp.json b/plugins/tools/caldav-blade-mcp.json
index 46f2c0b..b8bcd1e 100644
--- a/plugins/tools/caldav-blade-mcp.json
+++ b/plugins/tools/caldav-blade-mcp.json
@@ -3,7 +3,7 @@
   "title": "Calendar (CalDAV)",
   "description": "CalDAV calendar operations \u2014 protocol-level access to any CalDAV server",
   "tagline": "Universal calendar access over the CalDAV protocol",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "author": "groupthink-dev",
   "license": "MIT",
   "icon": "/icons/caldav-blade-mcp.svg",
@@ -81,7 +81,7 @@
         "scope_filtering": "none",
         "field_projection": "none",
         "deterministic_ordering": "unsorted",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
@@ -92,7 +92,7 @@
         "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "stable",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
@@ -103,7 +103,7 @@
         "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "unsorted",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
@@ -122,10 +122,10 @@
       "description": "Search events by text, attendee email, or location. Optional calendar and date scope.",
       "risk_class": "read_only",
       "granularity": {
-        "scope_filtering": "client-side",
+        "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "unsorted",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
@@ -136,7 +136,7 @@
         "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "unsorted",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
@@ -147,7 +147,7 @@
         "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "unsorted",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
@@ -158,7 +158,7 @@
         "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "stable",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
diff --git a/plugins/tools/syncthing-blade-mcp.json b/plugins/tools/syncthing-blade-mcp.json
index 8b13e58..08e26d7 100644
--- a/plugins/tools/syncthing-blade-mcp.json
+++ b/plugins/tools/syncthing-blade-mcp.json
@@ -4,7 +4,7 @@
   "title": "Syncthing",
   "description": "Syncthing replication management MCP \u2014 multi-instance, token-efficient output, safe disk-space reclamation. Read and control access to Syncthing's REST API with a focus on replication awareness: knowing which folders are fully replicated across devices so you can confidently reclaim local disk space.",
   "tagline": "Mesh file sync with replication-aware disk reclamation",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "author": "groupthink-dev",
   "license": "MIT",
   "icon": "/icons/syncthing-blade-mcp.svg",
@@ -254,7 +254,7 @@
         "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "stable",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
@@ -265,7 +265,7 @@
         "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "stable",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
@@ -287,7 +287,7 @@
         "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "stable",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
@@ -298,7 +298,7 @@
         "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "stable",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {
diff --git a/plugins/tools/tailscale-blade-mcp.json b/plugins/tools/tailscale-blade-mcp.json
index de71f0e..0fdb099 100644
--- a/plugins/tools/tailscale-blade-mcp.json
+++ b/plugins/tools/tailscale-blade-mcp.json
@@ -3,7 +3,7 @@
   "title": "Tailscale",
   "description": "Tailscale network monitoring and security — device inventory, ACL policy review, DNS configuration, auth key auditing, users, and audit logs",
   "tagline": "Monitor and secure your tailnet — devices, ACLs, keys, DNS, and audit trail",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "author": "groupthink-dev",
   "license": "MIT",
   "icon": "/icons/tailscale-blade-mcp.svg",
@@ -104,7 +104,7 @@
         "scope_filtering": "server-side",
         "field_projection": "none",
         "deterministic_ordering": "stable",
-        "audit_surface": "minimal"
+        "audit_surface": "structured"
       }
     },
     {