<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Heista · api-mcp-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/co-heista-api/api-mcp-mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api-mcp-mcp: Transport (unverified → pass)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb08-7292-b262-d85cc83fd299</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb08-7292-b262-d85cc83fd299</guid><description>Transport (unverified → pass). Compared against 2026-09-25.</description><pubDate>Sat, 26 Sep 2026 04:15:19 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp-mcp: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb09-7b9d-bb54-e87db667d7ff</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb09-7b9d-bb54-e87db667d7ff</guid><description>Injection markers (unverified → pass). Compared against 2026-09-25.</description><pubDate>Sat, 26 Sep 2026 04:15:19 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp-mcp: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb0a-730f-8533-1fadccf9145e</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb0a-730f-8533-1fadccf9145e</guid><description>HSTS header (fail → pass). Compared against 2026-09-25.</description><pubDate>Sat, 26 Sep 2026 04:15:19 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp-mcp: Authorization (fail → pass)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb0a-786b-8442-27f061303ba2</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb0a-786b-8442-27f061303ba2</guid><description>Authorization (fail → pass). Compared against 2026-09-25.</description><pubDate>Sat, 26 Sep 2026 04:15:19 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp-mcp: Stability (unverified → pass)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb0c-763a-937a-467025baaf11</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb0c-763a-937a-467025baaf11</guid><description>Stability (unverified → pass). Compared against 2026-09-25.</description><pubDate>Sat, 26 Sep 2026 04:15:19 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp-mcp: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb11-7517-8d9b-1394601f9668</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0dbec-bb11-7517-8d9b-1394601f9668</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-09-14.</description><pubDate>Sat, 26 Sep 2026 04:15:19 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item><item><title>[SECURITY] api-mcp-mcp: Authorization (pass → fail)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91ae-7290-81d7-682be6447ca1</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91ae-7290-81d7-682be6447ca1</guid><description>Authorization (pass → fail). Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 04:03:05 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp-mcp: Stability (pass → unverified)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91af-730d-847e-f7494849ccb3</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91af-730d-847e-f7494849ccb3</guid><description>Stability (pass → unverified). Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 04:03:05 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api-mcp-mcp: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91af-7881-9e29-d67d9aeaf419</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91af-7881-9e29-d67d9aeaf419</guid><description>Tool safety (pass → unverified). Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 04:03:05 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api-mcp-mcp: Transport (pass → unverified)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91af-7d5a-89f5-85279e2c46e6</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91af-7d5a-89f5-85279e2c46e6</guid><description>Transport (pass → unverified). Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 04:03:05 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api-mcp-mcp: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91b0-72d3-a5bd-0cc1cf47d54d</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91b0-72d3-a5bd-0cc1cf47d54d</guid><description>HSTS header (pass → fail). Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 04:03:05 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp-mcp: Endpoint reachability (reachable → behind authorisation)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91b1-763d-8579-58cd716c7046</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0a33b-91b1-763d-8579-58cd716c7046</guid><description>Endpoint reachability (reachable → behind authorisation). Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 04:03:05 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] api-mcp-mcp: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a03716-1489-7819-aed8-9efb10b790a3</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a03716-1489-7819-aed8-9efb10b790a3</guid><description>Stability (0.97 → pass). Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 04:03:08 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp-mcp: Tool “fleet_analytics_overview” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a03716-148b-71de-9bf7-70c222b36dd6</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a03716-148b-71de-9bf7-70c222b36dd6</guid><description>Tool “fleet_analytics_overview” rewrote its description, which is the text the model reads. Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 04:03:08 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api-mcp-mcp: New tool “creative_delete_draft”, which the server declares destructive</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a03716-148e-7c27-803d-1871c22f7728</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a03716-148e-7c27-803d-1871c22f7728</guid><description>New tool “creative_delete_draft”, which the server declares destructive. Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 04:03:08 GMT</pubDate><category>security</category><category>neutral</category><category>tool.added</category></item><item><title>[SECURITY] api-mcp-mcp: New tool “creative_update_slug”, which the server declares destructive</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a03716-148f-778d-b9bc-4fa7e7fe8aad</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a03716-148f-778d-b9bc-4fa7e7fe8aad</guid><description>New tool “creative_update_slug”, which the server declares destructive. Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 04:03:08 GMT</pubDate><category>security</category><category>neutral</category><category>tool.added</category></item><item><title>[SECURITY] api-mcp-mcp: Tool “read_brand_document” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0227c-a4fb-7478-8970-b5e388d72f58</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_01a0227c-a4fb-7478-8970-b5e388d72f58</guid><description>Tool “read_brand_document” rewrote its description, which is the text the model reads. Compared against 2026-08-20.</description><pubDate>Fri, 21 Aug 2026 04:03:09 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api-mcp-mcp: New tool “creative_publish_article”, which the server declares destructive</title><link>https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_019faf5a-4741-7966-85e4-b5e2bedeb861</link><guid isPermaLink="true">https://verifymcp.io/servers/co-heista-api/api-mcp-mcp#chg-chg_019faf5a-4741-7966-85e4-b5e2bedeb861</guid><description>New tool “creative_publish_article”, which the server declares destructive. Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 19:29:17 GMT</pubDate><category>security</category><category>neutral</category><category>tool.added</category></item></channel></rss>