<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.civdotiq/civiq · api-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/civdotiq-civiq/api-mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api-mcp: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_01a06b70-bcc6-7b53-9b9e-11b8e5df859b</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_01a06b70-bcc6-7b53-9b9e-11b8e5df859b</guid><description>Stability (0.97 → pass). Compared against 2026-09-03.</description><pubDate>Fri, 04 Sep 2026 08:02:25 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_01a037f1-3d12-7b1a-a0a7-5041efdf135c</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_01a037f1-3d12-7b1a-a0a7-5041efdf135c</guid><description>Stability (0.97 → pass). Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 08:02:31 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: DNSSEC (unverified → fail)</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fd0f1-ade2-70f6-89e7-de9778084f0d</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fd0f1-ade2-70f6-89e7-de9778084f0d</guid><description>DNSSEC (unverified → fail). Compared against 2026-08-04.</description><pubDate>Wed, 05 Aug 2026 08:02:07 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp: Transport (fail → pass)</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fd0f1-ade3-71c5-83e0-17a916e0171d</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fd0f1-ade3-71c5-83e0-17a916e0171d</guid><description>Transport (fail → pass). Compared against 2026-08-04.</description><pubDate>Wed, 05 Aug 2026 08:02:07 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 47 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fd0f1-ade3-77c3-b258-27978079eb0d</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fd0f1-ade3-77c3-b258-27978079eb0d</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 47 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-04.</description><pubDate>Wed, 05 Aug 2026 08:02:07 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api-mcp: Tool “get_district_environmental_profile” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fd0f1-ade5-7cc6-b715-4cbca8808574</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fd0f1-ade5-7cc6-b715-4cbca8808574</guid><description>Tool “get_district_environmental_profile” rewrote its description, which is the text the model reads. Compared against 2026-08-03.</description><pubDate>Wed, 05 Aug 2026 08:02:07 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api-mcp: Tool “search_lobbying” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fd0f1-ade6-72c3-aa29-ab5265f99823</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fd0f1-ade6-72c3-aa29-ab5265f99823</guid><description>Tool “search_lobbying” rewrote its description, which is the text the model reads. Compared against 2026-08-03.</description><pubDate>Wed, 05 Aug 2026 08:02:07 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api-mcp: Endpoint reachability (reachable → unreachable)</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fcbd2-6801-799e-beb5-02d94abff5d4</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fcbd2-6801-799e-beb5-02d94abff5d4</guid><description>Endpoint reachability (reachable → unreachable). Compared against 2026-08-03.</description><pubDate>Tue, 04 Aug 2026 08:09:51 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] api-mcp: DNSSEC (fail → unverified)</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fcbd2-67a2-7ee5-8a65-15a578d804e1</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fcbd2-67a2-7ee5-8a65-15a578d804e1</guid><description>DNSSEC (fail → unverified). Compared against 2026-08-03.</description><pubDate>Tue, 04 Aug 2026 08:09:51 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api-mcp: Stability (0.27 → unverified)</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fcbd2-67e1-777e-84bf-5b65a885a673</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fcbd2-67e1-777e-84bf-5b65a885a673</guid><description>Stability (0.27 → unverified). Compared against 2026-08-03.</description><pubDate>Tue, 04 Aug 2026 08:09:51 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api-mcp: Transport (pass → fail)</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fcbd2-67e6-7a6e-ace0-4ca83546fe17</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fcbd2-67e6-7a6e-ace0-4ca83546fe17</guid><description>Transport (pass → fail). Compared against 2026-08-03.</description><pubDate>Tue, 04 Aug 2026 08:09:51 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fcbd2-67e7-7417-a0d8-8f6c0dcbad9c</link><guid isPermaLink="true">https://verifymcp.io/servers/civdotiq-civiq/api-mcp#chg-chg_019fcbd2-67e7-7417-a0d8-8f6c0dcbad9c</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-08-03.</description><pubDate>Tue, 04 Aug 2026 08:09:51 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>