{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T15:46:40.900Z","url":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel","markdownUrl":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel.md","server":{"slug":"cloudcorprecords-cloudpanel","name":"io.github.CloudCorpRecords/cloudpanel","registryName":"io.github.CloudCorpRecords/cloudpanel","description":"Azure subscriptions, resource groups, resources and VMs via ARM REST as MCP tools.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"ghcr-io-cloudcorprecords-cloudpanel","type":"oci","identifier":"ghcr.io/cloudcorprecords/cloudpanel","withdrawn":false,"url":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel","version":"0.1.0","transport":"stdio","scoredAt":"2026-11-05T08:53:22.370Z"},"score":{"total":40,"tier":"low","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":40},{"date":"2026-11-04","total":39},{"date":"2026-11-03","total":39},{"date":"2026-11-02","total":38}]},"categories":[{"name":"Supply Chain Security","score":0,"verdict":"unverified","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Install-script risk not yet assessed.","Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.inconclusive","args":{"reason":"no_sbom_attached"}},{"code":"installscript.inconclusive","args":{"reason":"no_install_concept"}},{"code":"dephealth.inconclusive","args":{"reason":"no_sbom_attached"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 3 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"3"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":72,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 559 tokens (~55/item across 10 items; 10 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"55","items":"10","tools":"10","tokens":"559","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":10,"verdict":"partial","reasons":["Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"3"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":75,"verdict":"fail","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; \"delete_resource_group\" implies \"delete\" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.","An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_undeclared","args":{"pct":"0","tool":"delete_resource_group","verb":"delete","declared":"none","annotated":"0","destructive":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"10","judged":"10"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Install-script risk not yet assessed.","Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read."],"malware":[],"components":[{"slug":"reneturcios-cloudpanel","type":"npm","identifier":"@reneturcios/cloudpanel","withdrawn":false,"score":64,"current":false,"url":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/reneturcios-cloudpanel","markdownUrl":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/reneturcios-cloudpanel.md"},{"slug":"ghcr-io-cloudcorprecords-cloudpanel","type":"oci","identifier":"ghcr.io/cloudcorprecords/cloudpanel","withdrawn":false,"score":40,"current":true,"url":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel","markdownUrl":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel.md"}],"facts":[{"label":"Registry","value":"oci"},{"label":"Package","value":"ghcr.io/cloudcorprecords/cloudpanel"},{"label":"Version","value":"0.1.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"list_subscriptions","title":null,"description":"List Azure subscriptions visible to the token.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":17},{"name":"get_subscription","title":null,"description":"Get one Azure subscription by ID.","inputs":[{"name":"subscription_id","type":"string","required":true,"description":"The ID of the Azure subscription to retrieve."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":31},{"name":"list_resource_groups","title":null,"description":"List resource groups in an Azure subscription.","inputs":[{"name":"subscription_id","type":"string","required":true,"description":"The ID of the Azure subscription whose resource groups to list."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":36},{"name":"get_resource_group","title":null,"description":"Get one Azure resource group.","inputs":[{"name":"resource_group","type":"string","required":true,"description":"The name of the resource group to retrieve."},{"name":"subscription_id","type":"string","required":true,"description":"The ID of the Azure subscription containing the resource group."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":49},{"name":"create_resource_group","title":null,"description":"Create or update an Azure resource group.","inputs":[{"name":"location","type":"string","required":true,"description":"The Azure region (location) for the resource group, e.g. 'eastus'."},{"name":"resource_group","type":"string","required":true,"description":"The name of the resource group to create or update."},{"name":"subscription_id","type":"string","required":true,"description":"The ID of the Azure subscription in which to create the resource group."},{"name":"tags","type":"object","required":false,"description":"Optional tags to apply to the resource group, as a key-value object."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":101},{"name":"delete_resource_group","title":null,"description":"Delete an Azure resource group.","inputs":[{"name":"resource_group","type":"string","required":true,"description":"The name of the resource group to delete."},{"name":"subscription_id","type":"string","required":true,"description":"The ID of the Azure subscription containing the resource group."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":49},{"name":"list_resources","title":null,"description":"List resources in a subscription or one resource group.","inputs":[{"name":"resource_group","type":"string","required":false,"description":"Optional name of a resource group to scope the listing to; omit to list resources across the whole subscription."},{"name":"subscription_id","type":"string","required":true,"description":"The ID of the Azure subscription whose resources to list."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":64},{"name":"get_resource","title":null,"description":"Get one Azure resource by its full type path.","inputs":[{"name":"resource_group","type":"string","required":true,"description":"The name of the resource group containing the resource."},{"name":"resource_name","type":"string","required":true,"description":"The name of the resource to retrieve."},{"name":"resource_provider","type":"string","required":true,"description":"The Azure resource provider namespace, e.g. 'Microsoft.Compute'."},{"name":"resource_type","type":"string","required":true,"description":"The resource type within the provider namespace, e.g. 'virtualMachines'."},{"name":"subscription_id","type":"string","required":true,"description":"The ID of the Azure subscription containing the resource."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":109},{"name":"list_virtual_machines","title":null,"description":"List virtual machines in a subscription or resource group.","inputs":[{"name":"resource_group","type":"string","required":false,"description":"Optional name of a resource group to scope the listing to; omit to list virtual machines across the whole subscription."},{"name":"subscription_id","type":"string","required":true,"description":"The ID of the Azure subscription whose virtual machines to list."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":68},{"name":"list_locations","title":null,"description":"List Azure locations available to a subscription.","inputs":[{"name":"subscription_id","type":"string","required":true,"description":"The ID of the Azure subscription whose available locations to list."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":35}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:53:22.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-11-02","recent":[{"id":"chg_01a1aae9-a954-72dd-abcf-0ac256a2213b","kind":"score.total_changed","summary":"Trust score (39 → 40)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel#chg-chg_01a1aae9-a954-72dd-abcf-0ac256a2213b"},{"id":"chg_01a1a098-c002-74fc-a040-3941aa9c9b4f","kind":"score.total_changed","summary":"Trust score (38 → 39)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel#chg-chg_01a1a098-c002-74fc-a040-3941aa9c9b4f"},{"id":"chg_01a199b7-61ef-76b8-828f-51a2a9b6144f","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel#chg-chg_01a199b7-61ef-76b8-828f-51a2a9b6144f"},{"id":"chg_01a19993-52e4-7c27-8095-45c4ff1f8310","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel#chg-chg_01a19993-52e4-7c27-8095-45c4ff1f8310"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel/changelog.json"},"links":{"html":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel","markdown":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel.md","changelogJson":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel/changelog.json","changelogRss":"https://verifymcp.io/servers/cloudcorprecords-cloudpanel/ghcr-io-cloudcorprecords-cloudpanel.xml","external":[{"label":"GitHub Container Registry","href":"https://ghcr.io/cloudcorprecords/cloudpanel"},{"label":"Repository","href":"https://github.com/CloudCorpRecords/cloudpanel"}]}}