{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T19:30:11.783Z","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp","markdownUrl":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp.md","server":{"slug":"any1tan-wattscalc-mcp","name":"Watts Calculator","registryName":"io.github.any1tan/wattscalc-mcp","description":"Watts, volts, amps, kWh and electricity cost calculator tools for AI assistants.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"wattscalc-mcp","type":"mcpb","identifier":"https://github.com/any1tan/wattscalc-mcp/releases/download/v1.0.0/wattscalc-mcp.mcpb","withdrawn":false,"url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp","version":"1.0.0","transport":"stdio","scoredAt":"2026-11-05T07:10:42.281Z"},"score":{"total":16,"tier":"low","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":16},{"date":"2026-11-04","total":16},{"date":"2026-11-03","total":16},{"date":"2026-11-02","total":16},{"date":"2026-11-01","total":16},{"date":"2026-10-31","total":16},{"date":"2026-10-30","total":16},{"date":"2026-10-29","total":16},{"date":"2026-10-28","total":16},{"date":"2026-10-27","total":16},{"date":"2026-10-26","total":16},{"date":"2026-10-25","total":16},{"date":"2026-10-24","total":5},{"date":"2026-10-23","total":5},{"date":"2026-10-22","total":5},{"date":"2026-10-21","total":5},{"date":"2026-10-20","total":5},{"date":"2026-10-19","total":5},{"date":"2026-10-18","total":5},{"date":"2026-10-17","total":5},{"date":"2026-10-16","total":5},{"date":"2026-10-15","total":5},{"date":"2026-10-14","total":5},{"date":"2026-10-13","total":5}]},"categories":[{"name":"Supply Chain Security","score":23,"verdict":"partial","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs were checked across the 92 of 92 dependencies we could resolve, so this covers what we could see, not the whole tree.","No install/post-install scripts declared.","30 of 92 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.tree_partial","args":{"seen":"92","resolved":"92"}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"92","unhealthy":"30"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 22 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"22"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no schema to assess."],"codes":[{"code":"schema.sandbox_failed","args":{"reason":"bundle_digest_mismatch","status":"unsupported"}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no schema to compare."],"codes":[{"code":"stability.sandbox_failed","args":{"reason":"bundle_digest_mismatch","status":"unsupported"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no tool definitions to assess."],"codes":[{"code":"toolquality.sandbox_failed","args":{"reason":"bundle_digest_mismatch","status":"unsupported"}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no tool text to scan."],"codes":[{"code":"toolsafety.sandbox_failed","args":{"reason":"bundle_digest_mismatch","status":"unsupported"}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Protocol version not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we never saw its MCP handshake."],"codes":[{"code":"cap.sandbox_failed","args":{"reason":"bundle_digest_mismatch","status":"unsupported"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Schema quality not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no schema to assess.","Stability not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no schema to compare.","Tool coverage not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no tool definitions to assess.","Tool safety not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no tool text to scan.","Protocol version not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we never saw its MCP handshake."],"malware":[],"components":[{"slug":"wattscalc-mcp","type":"mcpb","identifier":"https://github.com/any1tan/wattscalc-mcp/releases/download/v1.0.0/wattscalc-mcp.mcpb","withdrawn":false,"score":16,"current":true,"url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp","markdownUrl":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp.md"}],"facts":[{"label":"Registry","value":"mcpb"},{"label":"Package","value":"https://github.com/any1tan/wattscalc-mcp/releases/download/v1.0.0/wattscalc-mcp.mcpb"},{"label":"Version","value":"1.0.0"},{"label":"Transport","value":"stdio"},{"label":"SHA-256","value":"9adcdbb1c3fea55de4bf76a4cec99d85fb2d20536919e0bb5492bbcd523368ab"}],"install":{"available":true,"bundleSha256":"9adcdbb1c3fea55de4bf76a4cec99d85fb2d20536919e0bb5492bbcd523368ab"},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T07:10:42.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":92,"partial":false,"deprecated":null,"stale":30,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-13","recent":[{"id":"chg_01a171e6-6d29-7f08-938d-9b69acf3bac7","kind":"check.reverified","summary":"Provenance (unverified → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a171e6-6d29-7f08-938d-9b69acf3bac7"},{"id":"chg_01a171e6-6d2a-7c95-a562-3c3cfcd4db00","kind":"check.reverified","summary":"Install scripts (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a171e6-6d2a-7c95-a562-3c3cfcd4db00"},{"id":"chg_01a171e6-6d2b-76d1-b008-ac65197824a0","kind":"check.reverified","summary":"Known CVEs (unverified → partial)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a171e6-6d2b-76d1-b008-ac65197824a0"},{"id":"chg_01a171e6-6d2b-7c24-b824-934c1f1aff64","kind":"check.reverified","summary":"License (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a171e6-6d2b-7c24-b824-934c1f1aff64"},{"id":"chg_01a171e6-6d2c-74b6-8f0e-7de4c3ca3a6f","kind":"check.reverified","summary":"Maintenance (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a171e6-6d2c-74b6-8f0e-7de4c3ca3a6f"},{"id":"chg_01a171e6-6d2c-7d4c-bc24-5c01b30864eb","kind":"check.reverified","summary":"Dependency health (unverified → 0.85)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a171e6-6d2c-7d4c-bc24-5c01b30864eb"},{"id":"chg_01a171e6-6d2d-72fd-89a4-a41ee0a2b970","kind":"license.changed","summary":"Licence (MIT)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a171e6-6d2d-72fd-89a4-a41ee0a2b970"},{"id":"chg_01a171e6-6d2d-7a34-9b34-103593f5f95c","kind":"score.total_changed","summary":"Trust score (5 → 16)","materiality":"functional","direction":"improvement","scoreDelta":11,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a171e6-6d2d-7a34-9b34-103593f5f95c"},{"id":"chg_01a13c55-b4cc-7b98-96a5-4e0e67bf5769","kind":"check.reason","summary":"Stability (Stability not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no schema to compare.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a13c55-b4cc-7b98-96a5-4e0e67bf5769"},{"id":"chg_01a13c55-b4cd-7c6e-b54e-5a1806aea18f","kind":"check.reason","summary":"Tool safety (Tool safety not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no tool text to scan.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a13c55-b4cd-7c6e-b54e-5a1806aea18f"},{"id":"chg_01a13c55-b4ce-74ab-ac78-398e45dca9ca","kind":"check.reason","summary":"Schema quality (Schema quality not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no schema to assess.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a13c55-b4ce-74ab-ac78-398e45dca9ca"},{"id":"chg_01a13c55-b4ce-7973-af8c-787ebe9ab0f5","kind":"check.reason","summary":"Capabilities (Protocol version not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we never saw its MCP handshake.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a13c55-b4ce-7973-af8c-787ebe9ab0f5"},{"id":"chg_01a13c55-b4ce-7e54-af91-5fa61aed9c22","kind":"check.reason","summary":"Tool coverage (Tool coverage not yet verified: the bundle we downloaded does not match the SHA-256 its registry entry declares, and we do not run a bundle that fails that check, so we have no tool definitions to assess.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a13c55-b4ce-7e54-af91-5fa61aed9c22"},{"id":"chg_01a136da-76bb-7863-9438-9982b270fb90","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-13","url":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp#chg-chg_01a136da-76bb-7863-9438-9982b270fb90"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp","markdown":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp.md","changelogJson":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/any1tan-wattscalc-mcp/wattscalc-mcp.xml","external":[{"label":"Repository","href":"https://github.com/any1tan/wattscalc-mcp"},{"label":"Website","href":"https://wattscalc.com/"}]}}