{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:22:48.774Z","url":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs","markdownUrl":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs.md","server":{"slug":"cn-com-grapecity-spreadjs","name":"GrapeCity SpreadJS","registryName":"cn.com.grapecity/spreadjs","description":"GrapeCity Software MCP for SpreadJS docs, examples, and product assistance.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mcp-spreadjs","type":"remote","identifier":"https://mcp.grapecity.com.cn/mcp/spreadjs","withdrawn":false,"url":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs","version":"1.0.0-beta.2","transport":null,"scoredAt":"2026-11-05T04:23:12.903Z"},"score":{"total":23,"tier":"low","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":23},{"date":"2026-11-04","total":23},{"date":"2026-11-03","total":23},{"date":"2026-11-02","total":23},{"date":"2026-11-01","total":23},{"date":"2026-10-31","total":23},{"date":"2026-10-30","total":23},{"date":"2026-10-29","total":23},{"date":"2026-10-28","total":23},{"date":"2026-10-27","total":23},{"date":"2026-10-26","total":23},{"date":"2026-10-25","total":23},{"date":"2026-10-24","total":23},{"date":"2026-10-23","total":23},{"date":"2026-10-22","total":23},{"date":"2026-10-21","total":23},{"date":"2026-10-20","total":23},{"date":"2026-10-19","total":23},{"date":"2026-10-18","total":23},{"date":"2026-10-17","total":23},{"date":"2026-10-16","total":23},{"date":"2026-10-15","total":23},{"date":"2026-10-14","total":23},{"date":"2026-10-13","total":23},{"date":"2026-10-12","total":23},{"date":"2026-10-10","total":23},{"date":"2026-10-09","total":23},{"date":"2026-10-04","total":23},{"date":"2026-10-03","total":23},{"date":"2026-10-02","total":23}]},"categories":[{"name":"Endpoint Security","score":57,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the whole tool list to see what that exposes.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_unlisted","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":0,"verdict":"fail","reasons":["Transport check failed: the endpoint responded but didn't complete an MCP handshake over streamable-http."],"codes":[{"code":"transport.not_mcp","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list."],"codes":[{"code":"schema.unreachable","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list."],"codes":[{"code":"toolquality.unreachable","args":{}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list."],"codes":[{"code":"toolsafety.unreachable","args":{}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Capabilities not yet verified: we couldn't read the endpoint's capabilities."],"codes":[{"code":"cap.unreachable","args":{}}]}],"inconclusive":["Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the whole tool list to see what that exposes.","Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.","Stability not yet verified: not enough scan history yet (needs a 30-day window).","Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.","Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.","Capabilities not yet verified: we couldn't read the endpoint's capabilities."],"malware":[],"components":[{"slug":"mcp-spreadjs","type":"remote","identifier":"https://mcp.grapecity.com.cn/mcp/spreadjs","withdrawn":false,"score":23,"current":true,"url":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs","markdownUrl":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs.md"}],"facts":[{"label":"Endpoint","value":"https://mcp.grapecity.com.cn/mcp/spreadjs"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.0-beta.2"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T04:23:12.000Z","track":"remote","endpoint":"https://mcp.grapecity.com.cn/mcp/spreadjs","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_256_GCM_SHA384","chainError":null,"certificates":[{"subject":"CN=*.grapecity.com.cn,O=西安葡萄城软件有限公司,L=西安市,ST=陕西省,C=CN","issuer":"CN=GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1,O=DigiCert\\, Inc.,C=US","notBefore":"2026-07-17T00:00:00Z","notAfter":"2027-01-31T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":false},{"subject":"CN=GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1,O=DigiCert\\, Inc.,C=US","issuer":"CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US","notBefore":"2022-12-15T00:00:00Z","notAfter":"2032-12-14T23:59:59Z","keyType":"RSA","keyBits":4096,"isCa":true},{"subject":"CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US","issuer":"CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US","notBefore":"2024-01-18T00:00:00Z","notAfter":"2031-11-09T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"mcp.grapecity.com.cn.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"cn.","outcome":"verified","label":"Verified"},{"zone":"com.cn.","outcome":"verified","label":"Verified"},{"zone":"grapecity.com.cn.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":302},"transports":[{"transport":"streamable-http","outcome":"not_mcp","label":"Not MCP","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-07-26","recent":[{"id":"chg_01a0e641-600b-7149-ac30-48759045686a","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-09-28","url":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs#chg-chg_01a0e641-600b-7149-ac30-48759045686a"},{"id":"chg_01a0d6ca-80a8-7864-9579-3361b0dd1d69","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-09-25","url":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs#chg-chg_01a0d6ca-80a8-7864-9579-3361b0dd1d69"},{"id":"chg_01a03c44-6383-7f2f-979d-73235cbf6ae2","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-26","url":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs#chg-chg_01a03c44-6383-7f2f-979d-73235cbf6ae2"},{"id":"chg_019fef03-2071-736b-a9b6-5f1043abba34","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-11","url":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs#chg-chg_019fef03-2071-736b-a9b6-5f1043abba34"},{"id":"chg_019fb847-ee79-7d39-b4d0-11c748c0ab6c","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-07-31","url":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs#chg-chg_019fb847-ee79-7d39-b4d0-11c748c0ab6c"},{"id":"chg_019fa458-3d55-7458-aad1-3fdb1a9ae016","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-07-27","url":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs#chg-chg_019fa458-3d55-7458-aad1-3fdb1a9ae016"},{"id":"chg_019f9f58-2d71-7874-aea8-1689cdd44a97","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-07-26","url":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs#chg-chg_019f9f58-2d71-7874-aea8-1689cdd44a97"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs/changelog.json"},"links":{"html":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs","markdown":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs.md","changelogJson":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs/changelog.json","changelogRss":"https://verifymcp.io/servers/cn-com-grapecity-spreadjs/mcp-spreadjs.xml","external":[{"label":"Remote endpoint","href":"https://mcp.grapecity.com.cn/mcp/spreadjs"},{"label":"Authorisation metadata","href":"https://mcp.grapecity.com.cn/.well-known/oauth-protected-resource/mcp/spreadjs"}]}}