<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Auth Posture — Email Deliverability &amp; Spoofability Audit · auth-posture · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/app-rowb-auth-posture-audit/auth-posture.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] auth-posture: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/app-rowb-auth-posture-audit/auth-posture#chg-chg_01a0d124-4f13-7238-b500-ef842f33f491</link><guid isPermaLink="true">https://verifymcp.io/servers/app-rowb-auth-posture-audit/auth-posture#chg-chg_01a0d124-4f13-7238-b500-ef842f33f491</guid><description>Injection markers (unverified → pass). Compared against 2026-09-23.</description><pubDate>Thu, 24 Sep 2026 02:00:12 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] auth-posture: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/app-rowb-auth-posture-audit/auth-posture#chg-chg_01a0d124-4f14-7efe-a4eb-b38d5d1bbb6c</link><guid isPermaLink="true">https://verifymcp.io/servers/app-rowb-auth-posture-audit/auth-posture#chg-chg_01a0d124-4f14-7efe-a4eb-b38d5d1bbb6c</guid><description>First check of Judged manipulation (pass). Compared against 2026-09-23.</description><pubDate>Thu, 24 Sep 2026 02:00:12 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item><item><title>[SECURITY] auth-posture: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/app-rowb-auth-posture-audit/auth-posture#chg-chg_01a0d124-4f15-7e44-8138-afcab9b278f5</link><guid isPermaLink="true">https://verifymcp.io/servers/app-rowb-auth-posture-audit/auth-posture#chg-chg_01a0d124-4f15-7e44-8138-afcab9b278f5</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-09-23.</description><pubDate>Thu, 24 Sep 2026 02:00:12 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>