{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:51:32.746Z","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo","markdownUrl":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo.md","server":{"slug":"app-myrlo-creator-tools","name":"Myrlo","registryName":"app.myrlo/creator-tools","description":"Create and edit Myrlo characters, stories, and worlds, with review before every change saves.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"myrlo","type":"remote","identifier":"https://myrlo.app/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo","version":"0.1.0","transport":null,"scoredAt":"2026-11-05T03:08:07.608Z"},"score":{"total":39,"tier":"low","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":39},{"date":"2026-11-04","total":39},{"date":"2026-11-03","total":39},{"date":"2026-11-02","total":39},{"date":"2026-11-01","total":39},{"date":"2026-10-31","total":39},{"date":"2026-10-30","total":39},{"date":"2026-10-29","total":39},{"date":"2026-10-28","total":39},{"date":"2026-10-27","total":39},{"date":"2026-10-26","total":39},{"date":"2026-10-25","total":39},{"date":"2026-10-24","total":39},{"date":"2026-10-23","total":39},{"date":"2026-10-22","total":39},{"date":"2026-10-21","total":39},{"date":"2026-10-20","total":39},{"date":"2026-10-19","total":39},{"date":"2026-10-18","total":39},{"date":"2026-10-17","total":39},{"date":"2026-10-16","total":26},{"date":"2026-10-15","total":39}]},"categories":[{"name":"Endpoint Security","score":97,"verdict":"partial","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC is configured correctly; the domain's records validate against the full chain to the root.","The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.rfc9728","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.validated","args":{}},{"code":"auth.registration_dcr_only","args":{}}]},{"name":"Transport & Reachability","score":0,"verdict":"unverified","reasons":["Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http."],"codes":[{"code":"transport.auth_gated","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema blocked by authentication: the endpoint requires auth we don't have to read it."],"codes":[{"code":"schema.auth_gated","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools."],"codes":[{"code":"toolquality.auth_gated","args":{}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools."],"codes":[{"code":"toolsafety.auth_gated","args":{}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Capabilities blocked by authentication: the endpoint requires auth we don't have to read them."],"codes":[{"code":"cap.auth_gated","args":{}}]}],"inconclusive":["Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http.","Schema blocked by authentication: the endpoint requires auth we don't have to read it.","Stability not yet verified: not enough scan history yet (needs a 30-day window).","Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.","Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.","Capabilities blocked by authentication: the endpoint requires auth we don't have to read them."],"malware":[],"components":[{"slug":"myrlo","type":"remote","identifier":"https://myrlo.app/mcp","withdrawn":false,"score":39,"current":true,"url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo","markdownUrl":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo.md"}],"facts":[{"label":"Endpoint","value":"https://myrlo.app/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"required"},{"label":"Version","value":"0.1.0"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T03:08:07.000Z","track":"remote","endpoint":"https://myrlo.app/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=myrlo.app","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-27T15:49:07Z","notAfter":"2027-01-25T16:47:54Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"secure","label":"Secure","name":"myrlo.app.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"app.","outcome":"verified","label":"Verified"},{"zone":"myrlo.app.","outcome":"verified","label":"Verified"},{"zone":"myrlo.app.","outcome":"verified","label":"Verified"}]},"auth":{"outcome":"enforced_validated","label":"Enforced and verified","gate":"connect","gateLabel":"On connection","status":401,"authorizationServers":["https://myrlo.app/oauth"]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"auth_gated","label":"Auth required","status":401,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-15","recent":[{"id":"chg_01a147d1-b2ec-727b-bea5-daa968f0a946","kind":"check.unverifiable","summary":"Transport (fail → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a147d1-b2ec-727b-bea5-daa968f0a946"},{"id":"chg_01a147d1-b2ed-73be-bf02-4e624b5ec228","kind":"check.reverified","summary":"Authorization (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a147d1-b2ed-73be-bf02-4e624b5ec228"},{"id":"chg_01a147d1-b2ed-7c13-8e59-e7271aad50ed","kind":"check.reason","summary":"Tool safety (Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a147d1-b2ed-7c13-8e59-e7271aad50ed"},{"id":"chg_01a147d1-b2ee-765e-84fd-c52c1cff1185","kind":"check.reason","summary":"Tool coverage (Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a147d1-b2ee-765e-84fd-c52c1cff1185"},{"id":"chg_01a147d1-b2ee-7bc6-a3dd-3f2a6ddc32a5","kind":"check.reason","summary":"Schema quality (Schema blocked by authentication: the endpoint requires auth we don't have to read it.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a147d1-b2ee-7bc6-a3dd-3f2a6ddc32a5"},{"id":"chg_01a147d1-b2ef-729f-b053-59fc3bcac28b","kind":"check.reason","summary":"Capabilities (Capabilities blocked by authentication: the endpoint requires auth we don't have to read them.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a147d1-b2ef-729f-b053-59fc3bcac28b"},{"id":"chg_01a147d1-b2ef-7791-9aa6-761c8aee1db7","kind":"score.total_changed","summary":"Trust score (26 → 39)","materiality":"functional","direction":"improvement","scoreDelta":13,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a147d1-b2ef-7791-9aa6-761c8aee1db7"},{"id":"chg_01a142ad-ceb9-71c6-83c9-874f566fb698","kind":"check.reverified","summary":"Transport (unverified → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a142ad-ceb9-71c6-83c9-874f566fb698"},{"id":"chg_01a142ad-cebb-7d52-8203-1fe02fc5a496","kind":"check.unverifiable","summary":"Authorization (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a142ad-cebb-7d52-8203-1fe02fc5a496"},{"id":"chg_01a142ad-cec1-7883-9bf5-c4174bc3f815","kind":"check.reason","summary":"Tool safety (Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a142ad-cec1-7883-9bf5-c4174bc3f815"},{"id":"chg_01a142ad-cf27-772f-92bf-50e2edc43a42","kind":"check.reason","summary":"Tool coverage (Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a142ad-cf27-772f-92bf-50e2edc43a42"},{"id":"chg_01a142ad-cf2f-7f25-b31a-2a7446df328d","kind":"check.reason","summary":"Capabilities (Capabilities not yet verified: we couldn't read the endpoint's capabilities.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a142ad-cf2f-7f25-b31a-2a7446df328d"},{"id":"chg_01a142ad-cf7b-7ac0-8443-efd5631f282f","kind":"check.reason","summary":"Schema quality (Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a142ad-cf7b-7ac0-8443-efd5631f282f"},{"id":"chg_01a142ad-cf7c-7296-ab30-38155c76b949","kind":"score.total_changed","summary":"Trust score (39 → 26)","materiality":"functional","direction":"regression","scoreDelta":-13,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a142ad-cf7c-7296-ab30-38155c76b949"},{"id":"chg_01a14082-0204-7112-a9fe-5327ccc5c3e7","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo#chg-chg_01a14082-0204-7112-a9fe-5327ccc5c3e7"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo/changelog.json"},"links":{"html":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo","markdown":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo.md","changelogJson":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo/changelog.json","changelogRss":"https://verifymcp.io/servers/app-myrlo-creator-tools/myrlo.xml","external":[{"label":"Remote endpoint","href":"https://myrlo.app/mcp"},{"label":"Repository","href":"https://github.com/BrandonDiaz/myrlo-cursor-plugin"},{"label":"Website","href":"https://myrlo.app/"}]}}