io.github.AvatarGaia/canvas-mcp · api-mcp-canvas · changes | VerifyMCPRecorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.https://verifymcp.io[SECURITY] api-mcp-canvas: Tool “canvas_action” rewrote its description, which is the text the model readshttps://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d90a-7f39-977e-1446028c6843https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d90a-7f39-977e-1446028c6843Tool “canvas_action” rewrote its description, which is the text the model reads. Compared against 2026-09-12.Sun, 13 Sep 2026 09:14:22 GMTsecurityneutraltool.description_changed[SECURITY] api-mcp-canvas: HSTS header (unverified → fail)https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d903-789d-820f-82715e639fcahttps://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d903-789d-820f-82715e639fcaHSTS header (unverified → fail). Compared against 2026-09-12.Sun, 13 Sep 2026 09:14:22 GMTsecurityregressioncheck.reverified[SECURITY] api-mcp-canvas: Transport (fail → pass)https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d904-7163-ad85-2edfaff73db4https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d904-7163-ad85-2edfaff73db4Transport (fail → pass). Compared against 2026-09-12.Sun, 13 Sep 2026 09:14:22 GMTsecurityimprovementcheck.verdict[SECURITY] api-mcp-canvas: Injection markers (unverified → pass)https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d904-77ea-b1d4-79e4359a04b6https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d904-77ea-b1d4-79e4359a04b6Injection markers (unverified → pass). Compared against 2026-09-12.Sun, 13 Sep 2026 09:14:22 GMTsecurityimprovementcheck.reverified[SECURITY] api-mcp-canvas: TLS certificate (unverified → pass)https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d904-7e63-b415-e5c007bf5dd2https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d904-7e63-b415-e5c007bf5dd2TLS certificate (unverified → pass). Compared against 2026-09-12.Sun, 13 Sep 2026 09:14:22 GMTsecurityimprovementcheck.reverified[SECURITY] api-mcp-canvas: First check of Judged manipulation (pass)https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d905-7b92-a5d8-63a3dc651057https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d905-7b92-a5d8-63a3dc651057First check of Judged manipulation (pass). Compared against 2026-09-12.Sun, 13 Sep 2026 09:14:22 GMTsecurityneutralcheck.appeared[SECURITY] api-mcp-canvas: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 13 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)https://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d906-7771-bf47-405aa0f8b29fhttps://verifymcp.io/servers/avatargaia-canvas-mcp/api-mcp-canvas#chg-chg_01a09a0b-d906-7771-bf47-405aa0f8b29fAuthorization (Authorisation not fully verified: no authorisation is required to call this server, and 13 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-09-12.Sun, 13 Sep 2026 09:14:22 GMTsecurityneutralcheck.reason