<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Mutator · mutator · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/app-mutator-mutator/mutator.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] mutator: Authorization (partial → pass)</title><link>https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0fac8-2eeb-7625-844e-abcacc457fad</link><guid isPermaLink="true">https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0fac8-2eeb-7625-844e-abcacc457fad</guid><description>Authorization (partial → pass). Compared against 2026-10-01.</description><pubDate>Fri, 02 Oct 2026 04:03:38 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] mutator: Authorization (fail → pass)</title><link>https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e21f-bba4-75dc-bfcd-92c6736b76f9</link><guid isPermaLink="true">https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e21f-bba4-75dc-bfcd-92c6736b76f9</guid><description>Authorization (fail → pass). Compared against 2026-09-26.</description><pubDate>Sun, 27 Sep 2026 09:08:45 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] mutator: First check of Authorization (partial)</title><link>https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e21f-bba5-7e56-97a7-7994097a9ad5</link><guid isPermaLink="true">https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e21f-bba5-7e56-97a7-7994097a9ad5</guid><description>First check of Authorization (partial). Compared against 2026-09-26.</description><pubDate>Sun, 27 Sep 2026 09:08:45 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item><item><title>[SECURITY] mutator: Endpoint reachability (reachable → behind authorisation)</title><link>https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e21f-bba6-765d-b955-2b7db8459d06</link><guid isPermaLink="true">https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e21f-bba6-765d-b955-2b7db8459d06</guid><description>Endpoint reachability (reachable → behind authorisation). Compared against 2026-09-26.</description><pubDate>Sun, 27 Sep 2026 09:08:45 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] mutator: Transport (unverified → pass)</title><link>https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e10f-736f-7554-ad9b-86c349da2eb3</link><guid isPermaLink="true">https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e10f-736f-7554-ad9b-86c349da2eb3</guid><description>Transport (unverified → pass). Compared against 2026-09-26.</description><pubDate>Sun, 27 Sep 2026 04:11:21 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] mutator: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e10f-736f-7db5-99c2-8cbf5a83cef9</link><guid isPermaLink="true">https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e10f-736f-7db5-99c2-8cbf5a83cef9</guid><description>Injection markers (unverified → pass). Compared against 2026-09-26.</description><pubDate>Sun, 27 Sep 2026 04:11:21 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] mutator: Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.)</title><link>https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e10f-7370-74a3-a48c-dc5644c7f22f</link><guid isPermaLink="true">https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e10f-7370-74a3-a48c-dc5644c7f22f</guid><description>Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.). Compared against 2026-09-26.</description><pubDate>Sun, 27 Sep 2026 04:11:21 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] mutator: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e10f-7370-7a74-be13-c08aa8f3272f</link><guid isPermaLink="true">https://verifymcp.io/servers/app-mutator-mutator/mutator#chg-chg_01a0e10f-7370-7a74-be13-c08aa8f3272f</guid><description>First check of Judged manipulation (pass). Compared against 2026-09-26.</description><pubDate>Sun, 27 Sep 2026 04:11:21 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item></channel></rss>