{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T16:32:40.667Z","url":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2","markdownUrl":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2.md","server":{"slug":"com-aditumdata-mcp","name":"Aditum","registryName":"com.aditumdata/mcp","description":"Read industrial data sources, pipelines, data-health incidents and datasets in Aditum.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"aditum-mcp-2","type":"pypi","identifier":"aditum-mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2","version":"0.1.0","transport":"stdio","scoredAt":"2026-11-06T04:30:39.292Z"},"score":{"total":38,"tier":"low","status":"scored","weekDelta":15,"history":[{"date":"2026-11-06","total":38},{"date":"2026-11-05","total":38},{"date":"2026-11-04","total":38},{"date":"2026-11-03","total":38},{"date":"2026-11-02","total":38},{"date":"2026-11-01","total":38},{"date":"2026-10-31","total":38},{"date":"2026-10-30","total":23}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","Runs hatchling.build at install time, a recognised build step with no custom scripting around it.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.allowlisted","args":{"tool":"hatchling.build","hooks":"build_backend"}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":19,"verdict":"fail","reasons":["Repository check failed: no source repository is declared.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (Apache-2.0).","Actively maintained (last published 6 days ago).","Security-disclosure policy not yet verified: we couldn't inspect the source repository."],"codes":[{"code":"provenance.repo_none","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"Apache-2.0"}},{"code":"maintenance.recent","args":{"age_days":"6"}},{"code":"disclosure.repo_inconclusive","args":{"reason":"repo_not_github"}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright), so the captured schema is incomplete."],"codes":[{"code":"schema.sandbox_tools_unlisted","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: one of the two schema captures we compare could not list the server's tools (the server declared tools, or its tool listing failed outright). Comparing them would report every tool as removed, or find nothing to compare at all."],"codes":[{"code":"stability.insufficient_history","args":{"reason":"tools_unlisted"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright)."],"codes":[{"code":"toolquality.sandbox_tools_unlisted","args":{}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright)."],"codes":[{"code":"toolsafety.sandbox_tools_unlisted","args":{}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["Security-disclosure policy not yet verified: we couldn't inspect the source repository.","Schema quality not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright), so the captured schema is incomplete.","Stability not yet verified: one of the two schema captures we compare could not list the server's tools (the server declared tools, or its tool listing failed outright). Comparing them would report every tool as removed, or find nothing to compare at all.","Tool coverage not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright).","Tool safety not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright)."],"malware":[],"components":[{"slug":"aditum-mcp","type":"npm","identifier":"aditum-mcp","withdrawn":false,"score":38,"current":false,"url":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp","markdownUrl":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp.md"},{"slug":"aditum-mcp-2","type":"pypi","identifier":"aditum-mcp","withdrawn":false,"score":38,"current":true,"url":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2","markdownUrl":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2.md"}],"facts":[{"label":"Registry","value":"pypi"},{"label":"Package","value":"aditum-mcp"},{"label":"Version","value":"0.1.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T04:30:39.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[{"hook":"build_backend","tier":"allowlisted"}],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-30","recent":[{"id":"chg_01a19033-db61-701f-be7b-54588890c997","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2#chg-chg_01a19033-db61-701f-be7b-54588890c997"},{"id":"chg_01a19033-db62-7089-b5a0-64a372437494","kind":"score.total_changed","summary":"Trust score (23 → 38)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2#chg-chg_01a19033-db62-7089-b5a0-64a372437494"},{"id":"chg_01a18e1a-846c-74f2-966d-88849e952c9e","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2#chg-chg_01a18e1a-846c-74f2-966d-88849e952c9e"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2","markdown":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2.md","changelogJson":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2/changelog.json","changelogRss":"https://verifymcp.io/servers/com-aditumdata-mcp/aditum-mcp-2.xml","external":[{"label":"PyPI project","href":"https://pypi.org/project/aditum-mcp/"},{"label":"Socket report","href":"https://socket.dev/pypi/package/aditum-mcp"},{"label":"Website","href":"https://aditumdata.com/"}]}}