{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:31:01.124Z","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer","markdownUrl":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer.md","server":{"slug":"co-civai-nova-mcp-bgpt-cardpeer","name":"Cardpeer MCP by Nova (CIVAI)","registryName":"co.civai.nova/mcp-bgpt-cardpeer","description":"Find trading cards, compare listings, and check market prices.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mcp-agents-mcp-bgpt-cardpeer","type":"remote","identifier":"https://nova.civai.co/mcp/agents/mcp-bgpt-cardpeer","withdrawn":false,"url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer","version":"1.0.0","transport":null,"scoredAt":"2026-11-05T09:23:36.999Z"},"score":{"total":73,"tier":"medium","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":73},{"date":"2026-11-04","total":23},{"date":"2026-11-03","total":75},{"date":"2026-11-02","total":74}]},"categories":[{"name":"Endpoint Security","score":83,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.challenge_only_invoke","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":66,"verdict":"fail","reasons":["100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).","AI-judged instruction clarity (poor).","Tool/resource definitions use about 80 tokens (~20/item across 4 items; 1 tools + 3 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.descriptions","args":{"pct":"100"}},{"code":"schema.ai_quality","args":{"band":"poor"}},{"code":"schema.footprint_lean","args":{"avg":"20","items":"4","tools":"1","tokens":"80","resources":"3"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"fail","reasons":["Stability check failed: schema churn in the 3 days we've observed: 6 tool removals, 0 breaking changes, 0 auth/transport breaks, 1 additions."],"codes":[{"code":"stability.churn","args":{"days":"3","added":"1","breaks":"0","removed":"6","auth_transport":"0"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name)."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 1 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 2 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"2","judged":"2"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"mcp-agents-mcp-bgpt-cardpeer","type":"remote","identifier":"https://nova.civai.co/mcp/agents/mcp-bgpt-cardpeer","withdrawn":false,"score":73,"current":true,"url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer","markdownUrl":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer.md"}],"facts":[{"label":"Endpoint","value":"https://nova.civai.co/mcp/agents/mcp-bgpt-cardpeer"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"required (not validated)"},{"label":"Version","value":"1.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"bgpt_cardpeer","title":null,"description":"🛠️ Cardpeer MCP","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":18}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T09:23:36.000Z","track":"remote","endpoint":"https://nova.civai.co/mcp/agents/mcp-bgpt-cardpeer","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=api.vearn.co","issuer":"CN=YR2,O=Let's Encrypt,C=US","notBefore":"2026-10-18T07:48:13Z","notAfter":"2027-01-16T07:48:12Z","keyType":"RSA","keyBits":2048,"isCa":false},{"subject":"CN=YR2,O=Let's Encrypt,C=US","issuer":"CN=Root YR,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":true},{"subject":"CN=Root YR,O=ISRG,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"RSA","keyBits":4096,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"nova.civai.co.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"co.","outcome":"verified","label":"Verified"},{"zone":"civai.co.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"challenged_unvalidated","label":"Challenged, unverified","gate":"invoke","gateLabel":"On tool calls","status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":400,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-11-02","recent":[{"id":"chg_01a1ab05-59b9-7ba9-acd5-bd8dfd064470","kind":"check.reverified","summary":"Stability (unverified → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59b9-7ba9-acd5-bd8dfd064470"},{"id":"chg_01a1ab05-59bb-7162-a659-930463983682","kind":"check.reverified","summary":"Authorization (unverified → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59bb-7162-a659-930463983682"},{"id":"chg_01a1ab05-59bd-70b4-997d-69631e050da9","kind":"check.verdict","summary":"Transport (fail → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59bd-70b4-997d-69631e050da9"},{"id":"chg_01a1ab05-59bd-7dc6-8387-5776b3064572","kind":"check.reverified","summary":"Injection markers (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59bd-7dc6-8387-5776b3064572"},{"id":"chg_01a1ab05-59bf-7c6d-b7f7-386cd01e4c5d","kind":"check.reverified","summary":"Tool coverage (unverified → 100)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59bf-7c6d-b7f7-386cd01e4c5d"},{"id":"chg_01a1ab05-59c0-72da-a555-cafc106cbe64","kind":"check.reverified","summary":"Schema quality (unverified → 100)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c0-72da-a555-cafc106cbe64"},{"id":"chg_01a1ab05-59c0-7ab4-aa31-866b3d447188","kind":"check.measure","summary":"Schema quality (100 → 20)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c0-7ab4-aa31-866b3d447188"},{"id":"chg_01a1ab05-59c1-7060-9412-745579b8214b","kind":"check.reverified","summary":"MCP protocol (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c1-7060-9412-745579b8214b"},{"id":"chg_01a1ab05-59c2-7007-9c9d-af642da19883","kind":"check.measure","summary":"Schema quality (good → poor)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c2-7007-9c9d-af642da19883"},{"id":"chg_01a1ab05-59c2-7d61-9a88-25b2f2f73977","kind":"capture.status_changed","summary":"Endpoint reachability (not serving MCP → reachable)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c2-7d61-9a88-25b2f2f73977"},{"id":"chg_01a1ab05-59c3-76b4-ab07-d1f0229a0107","kind":"tool.removed","summary":"Tool “get_pricing” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c3-76b4-ab07-d1f0229a0107"},{"id":"chg_01a1ab05-59c3-7c3b-bd6d-1c9c3c8e6496","kind":"tool.removed","summary":"Tool “get_product” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c3-7c3b-bd6d-1c9c3c8e6496"},{"id":"chg_01a1ab05-59c4-72ea-b560-805b4fb2185b","kind":"tool.removed","summary":"Tool “list_series” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c4-72ea-b560-805b4fb2185b"},{"id":"chg_01a1ab05-59c4-7a6c-93df-d150efe70d15","kind":"tool.removed","summary":"Tool “list_sets” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c4-7a6c-93df-d150efe70d15"},{"id":"chg_01a1ab05-59c5-7017-91b6-026b85c2d6a7","kind":"tool.removed","summary":"Tool “search_cards” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c5-7017-91b6-026b85c2d6a7"},{"id":"chg_01a1ab05-59c5-7aa4-992c-67fd43cb8d4b","kind":"tool.removed","summary":"Tool “search_listings” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c5-7aa4-992c-67fd43cb8d4b"},{"id":"chg_01a1ab05-59c6-70c9-b04d-a6381f94c92f","kind":"tool.added","summary":"New tool “bgpt_cardpeer”","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c6-70c9-b04d-a6381f94c92f"},{"id":"chg_01a1ab05-59c6-75cd-8d0f-d7a187e3f130","kind":"server.breaking_without_version_bump","summary":"A breaking change shipped without a version bump (still 1.0.0)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c6-75cd-8d0f-d7a187e3f130"},{"id":"chg_01a1ab05-59c6-7a3d-9101-8ead33f335ca","kind":"score.total_changed","summary":"Trust score (23 → 73)","materiality":"functional","direction":"improvement","scoreDelta":50,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1ab05-59c6-7a3d-9101-8ead33f335ca"},{"id":"chg_01a1a5d8-6ca6-7cd5-a044-a0c803a3e427","kind":"check.verdict","summary":"Transport (pass → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer#chg-chg_01a1a5d8-6ca6-7cd5-a044-a0c803a3e427"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer/changelog.json"},"links":{"html":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer","markdown":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer.md","changelogJson":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer/changelog.json","changelogRss":"https://verifymcp.io/servers/co-civai-nova-mcp-bgpt-cardpeer/mcp-agents-mcp-bgpt-cardpeer.xml","external":[{"label":"Remote endpoint","href":"https://nova.civai.co/mcp/agents/mcp-bgpt-cardpeer"},{"label":"Website","href":"https://nova.civai.co/agent/mcp-bgpt-cardpeer"}]}}