{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T15:58:35.208Z","url":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics","markdownUrl":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics.md","server":{"slug":"cloudcorprecords-productmetrics","name":"io.github.CloudCorpRecords/productmetrics","registryName":"io.github.CloudCorpRecords/productmetrics","description":"PostHog projects, insights, flags and experiments as MCP tools.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"reneturcios-productmetrics","type":"npm","identifier":"@reneturcios/productmetrics","withdrawn":false,"url":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics","version":"0.1.0","transport":"stdio","scoredAt":"2026-11-05T08:05:51.810Z"},"score":{"total":65,"tier":"medium","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":65},{"date":"2026-11-04","total":65},{"date":"2026-11-03","total":65},{"date":"2026-11-02","total":50}]},"categories":[{"name":"Supply Chain Security","score":81,"verdict":"fail","reasons":["No malware found by supply-chain analysis.","CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available.","No install/post-install scripts declared.","30 of 93 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.direct","args":{"package":"zod","version":"3.25.76","severity":"high"}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"93","unhealthy":"30"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 3 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"3"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":78,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Tool/resource definitions use about 886 tokens (~73/item across 12 items; 12 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_lean","args":{"avg":"73","items":"12","tools":"12","tokens":"886","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 12 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 12 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"12"}},{"code":"toolsafety.manipulation_clean","args":{"units":"12","judged":"12"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"malware":[],"components":[{"slug":"reneturcios-productmetrics","type":"npm","identifier":"@reneturcios/productmetrics","withdrawn":false,"score":65,"current":true,"url":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics","markdownUrl":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics.md"},{"slug":"ghcr-io-cloudcorprecords-productmetrics","type":"oci","identifier":"ghcr.io/cloudcorprecords/productmetrics","withdrawn":false,"score":42,"current":false,"url":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/ghcr-io-cloudcorprecords-productmetrics","markdownUrl":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/ghcr-io-cloudcorprecords-productmetrics.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@reneturcios/productmetrics"},{"label":"Version","value":"0.1.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"list_projects","title":null,"description":"List PostHog projects the API key can access.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":19},{"name":"get_project","title":null,"description":"Retrieve a PostHog project by ID, or the configured default project.","inputs":[{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project to retrieve; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":55},{"name":"list_insights","title":null,"description":"List insights in a PostHog project.","inputs":[{"name":"limit","type":"number","required":false,"description":"Optional maximum number of insights to return, sent as the limit query parameter."},{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project to list insights from; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":73},{"name":"get_insight","title":null,"description":"Retrieve a single PostHog insight by ID.","inputs":[{"name":"insight_id","type":"string","required":true,"description":"The ID of the PostHog insight to retrieve."},{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project the insight belongs to; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":71},{"name":"query_insight","title":null,"description":"Run a PostHog insight and return its query results.","inputs":[{"name":"insight_id","type":"string","required":true,"description":"The ID of the PostHog insight to run; the request forces a refresh with refresh=true."},{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project the insight belongs to; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":82},{"name":"run_hogql_query","title":null,"description":"Run a HogQL query against a PostHog project.","inputs":[{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project to run the query against; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."},{"name":"query","type":"string","required":true,"description":"The HogQL query text to run against the project."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":75},{"name":"list_feature_flags","title":null,"description":"List feature flags in a PostHog project.","inputs":[{"name":"limit","type":"number","required":false,"description":"Optional maximum number of feature flags to return, sent as the limit query parameter."},{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project to list feature flags from; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":76},{"name":"get_feature_flag","title":null,"description":"Retrieve a single PostHog feature flag by ID.","inputs":[{"name":"flag_id","type":"string","required":true,"description":"The ID of the PostHog feature flag to retrieve."},{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project the flag belongs to; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":73},{"name":"create_feature_flag","title":null,"description":"Create a feature flag in a PostHog project.","inputs":[{"name":"active","type":"boolean","required":false,"description":"Optional initial active state of the new feature flag."},{"name":"key","type":"string","required":true,"description":"The unique key of the new feature flag."},{"name":"name","type":"string","required":false,"description":"Optional human-readable name for the new feature flag."},{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project to create the flag in; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":102},{"name":"update_feature_flag","title":null,"description":"Update a PostHog feature flag by ID.","inputs":[{"name":"active","type":"boolean","required":false,"description":"Optional new active state: true activates the flag, false deactivates it."},{"name":"flag_id","type":"string","required":true,"description":"The ID of the PostHog feature flag to update."},{"name":"name","type":"string","required":false,"description":"Optional new human-readable name for the flag; omitted fields are left unchanged."},{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project the flag belongs to; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":115},{"name":"list_experiments","title":null,"description":"List experiments in a PostHog project.","inputs":[{"name":"limit","type":"number","required":false,"description":"Optional maximum number of experiments to return, sent as the limit query parameter."},{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project to list experiments from; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":74},{"name":"get_experiment","title":null,"description":"Retrieve a single PostHog experiment by ID.","inputs":[{"name":"experiment_id","type":"string","required":true,"description":"The ID of the PostHog experiment to retrieve."},{"name":"project_id","type":"string","required":false,"description":"Optional ID of the PostHog project the experiment belongs to; when omitted, the POSTHOG_PROJECT_ID environment fallback is used."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":71}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:05:51.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[{"id":"GHSA-mrhx-c7xc-m3w5","cve":"CVE-2023-54404","severity":"high","fixAvailable":true}],"vulnerabilitiesTotal":1,"dependencies":{"nodes":93,"partial":false,"deprecated":null,"stale":30,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-11-02","recent":[{"id":"chg_01a1a06f-7397-79c9-ba45-be9aefa42632","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics#chg-chg_01a1a06f-7397-79c9-ba45-be9aefa42632"},{"id":"chg_01a1a06f-7398-7f0b-a960-85fa5da859ca","kind":"score.total_changed","summary":"Trust score (50 → 65)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics#chg-chg_01a1a06f-7398-7f0b-a960-85fa5da859ca"},{"id":"chg_01a19a25-920b-7d8c-abc1-46ef1fe287d2","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics#chg-chg_01a19a25-920b-7d8c-abc1-46ef1fe287d2"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics/changelog.json"},"links":{"html":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics","markdown":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics.md","changelogJson":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics/changelog.json","changelogRss":"https://verifymcp.io/servers/cloudcorprecords-productmetrics/reneturcios-productmetrics.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@reneturcios/productmetrics"},{"label":"Socket report","href":"https://socket.dev/npm/package/@reneturcios/productmetrics"},{"label":"Repository","href":"https://github.com/CloudCorpRecords/productmetrics"}]}}