{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:25:27.603Z","url":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port","markdownUrl":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port.md","server":{"slug":"cloudcorprecords-worktrack-port","name":"io.github.CloudCorpRecords/worktrack-port","registryName":"io.github.CloudCorpRecords/worktrack-port","description":"Jira issues and Confluence pages via the REST APIs, as MCP tools.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"ghcr-io-cloudcorprecords-worktrack-port","type":"oci","identifier":"ghcr.io/cloudcorprecords/worktrack-port","withdrawn":false,"url":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port","version":"0.1.0","transport":"stdio","scoredAt":"2026-11-05T05:23:48.571Z"},"score":{"total":42,"tier":"low","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":42},{"date":"2026-11-04","total":41},{"date":"2026-11-03","total":41},{"date":"2026-11-02","total":40},{"date":"2026-11-01","total":40}]},"categories":[{"name":"Supply Chain Security","score":0,"verdict":"unverified","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Install-script risk not yet assessed.","Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.inconclusive","args":{"reason":"no_sbom_attached"}},{"code":"installscript.inconclusive","args":{"reason":"no_install_concept"}},{"code":"dephealth.inconclusive","args":{"reason":"no_sbom_attached"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 3 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"3"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":72,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 641 tokens (~53/item across 12 items; 12 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"53","items":"12","tools":"12","tokens":"641","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":13,"verdict":"partial","reasons":["Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"4"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 12 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 12 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"12"}},{"code":"toolsafety.manipulation_clean","args":{"units":"12","judged":"12"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Install-script risk not yet assessed.","Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read."],"malware":[],"components":[{"slug":"reneturcios-worktrack-port","type":"npm","identifier":"@reneturcios/worktrack-port","withdrawn":false,"score":66,"current":false,"url":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/reneturcios-worktrack-port","markdownUrl":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/reneturcios-worktrack-port.md"},{"slug":"ghcr-io-cloudcorprecords-worktrack-port","type":"oci","identifier":"ghcr.io/cloudcorprecords/worktrack-port","withdrawn":false,"score":42,"current":true,"url":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port","markdownUrl":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port.md"}],"facts":[{"label":"Registry","value":"oci"},{"label":"Package","value":"ghcr.io/cloudcorprecords/worktrack-port"},{"label":"Version","value":"0.1.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"search_issues","title":null,"description":"Search Jira issues with a JQL query.","inputs":[{"name":"jql","type":"string","required":true,"description":"The JQL (Jira Query Language) query used to search for issues."},{"name":"max_results","type":"number","required":false,"description":"Maximum number of issues to return."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":55},{"name":"get_issue","title":null,"description":"Get a Jira issue by its key.","inputs":[{"name":"issue_key","type":"string","required":true,"description":"The key of the Jira issue to retrieve (e.g. PROJ-123)."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":40},{"name":"create_issue","title":null,"description":"Create a new Jira issue in a project.","inputs":[{"name":"description","type":"string","required":false,"description":"Description text for the new issue; converted to Atlassian Document Format."},{"name":"issue_type","type":"string","required":false,"description":"Issue type name for the new issue (e.g. Task); defaults to Task when omitted."},{"name":"project_key","type":"string","required":true,"description":"Key of the Jira project in which to create the issue."},{"name":"summary","type":"string","required":true,"description":"Summary (title) of the new Jira issue."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":99},{"name":"update_issue","title":null,"description":"Update fields on an existing Jira issue.","inputs":[{"name":"description","type":"string","required":false,"description":"New description text for the issue, converted to Atlassian Document Format; when omitted, the existing description is left unchanged."},{"name":"issue_key","type":"string","required":true,"description":"The key of the Jira issue to update."},{"name":"summary","type":"string","required":false,"description":"New summary for the issue; when omitted, the existing summary is left unchanged."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":85},{"name":"add_comment","title":null,"description":"Add a comment to a Jira issue.","inputs":[{"name":"body","type":"string","required":true,"description":"Text of the comment to add; converted to Atlassian Document Format."},{"name":"issue_key","type":"string","required":true,"description":"The key of the Jira issue to comment on."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":54},{"name":"list_projects","title":null,"description":"List all Jira projects on the site.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":16},{"name":"get_project","title":null,"description":"Get a Jira project by its key.","inputs":[{"name":"project_key","type":"string","required":true,"description":"The key of the Jira project to retrieve."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":32},{"name":"search_content","title":null,"description":"Search Confluence content by text.","inputs":[{"name":"limit","type":"number","required":false,"description":"Maximum number of search results to return."},{"name":"query","type":"string","required":true,"description":"Text to search for in Confluence content."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":44},{"name":"get_page","title":null,"description":"Get a Confluence page by its ID, including its storage-format body.","inputs":[{"name":"page_id","type":"string","required":true,"description":"The ID of the Confluence page to retrieve."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":40},{"name":"create_page","title":null,"description":"Create a new Confluence page in a space.","inputs":[{"name":"content","type":"string","required":true,"description":"Body of the new page in Confluence storage format."},{"name":"space_key","type":"string","required":true,"description":"Key of the Confluence space in which to create the page."},{"name":"title","type":"string","required":true,"description":"Title of the new Confluence page."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":69},{"name":"update_page","title":null,"description":"Update an existing Confluence page with a new version.","inputs":[{"name":"content","type":"string","required":true,"description":"New body of the page in Confluence storage format."},{"name":"page_id","type":"string","required":true,"description":"The ID of the Confluence page to update."},{"name":"title","type":"string","required":true,"description":"New title for the Confluence page."},{"name":"version","type":"number","required":true,"description":"Version number to assign to the updated page (the current version incremented by one)."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":90},{"name":"list_spaces","title":null,"description":"List all Confluence spaces on the site.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":17}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T05:23:48.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-11-01","recent":[{"id":"chg_01a1aa29-ccf7-7e5a-9cc0-78532776ae2c","kind":"score.total_changed","summary":"Trust score (41 → 42)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port#chg-chg_01a1aa29-ccf7-7e5a-9cc0-78532776ae2c"},{"id":"chg_01a19fd8-c2ce-75b3-b07d-a4fc0db8f410","kind":"score.total_changed","summary":"Trust score (40 → 41)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port#chg-chg_01a19fd8-c2ce-75b3-b07d-a4fc0db8f410"},{"id":"chg_01a1995b-4cf1-7eb7-924d-3c1341aa21cd","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port#chg-chg_01a1995b-4cf1-7eb7-924d-3c1341aa21cd"},{"id":"chg_01a19959-30b8-78db-a554-3e29b8d777a3","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port#chg-chg_01a19959-30b8-78db-a554-3e29b8d777a3"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port/changelog.json"},"links":{"html":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port","markdown":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port.md","changelogJson":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port/changelog.json","changelogRss":"https://verifymcp.io/servers/cloudcorprecords-worktrack-port/ghcr-io-cloudcorprecords-worktrack-port.xml","external":[{"label":"GitHub Container Registry","href":"https://ghcr.io/cloudcorprecords/worktrack-port"},{"label":"Repository","href":"https://github.com/CloudCorpRecords/worktrack-port"}]}}