{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T16:32:49.734Z","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify","markdownUrl":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify.md","server":{"slug":"com-datahubz-attest-verify","name":"Attest by DataHubz (verify only)","registryName":"com.datahubz/attest-verify","description":"Verify Attest agreements, stamp codes, receipts, proofs and SHA-256 fingerprints, with no sign-in.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mcp-verify","type":"remote","identifier":"https://attest.datahubz.com/mcp/verify","withdrawn":false,"url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify","version":"1.0.0","transport":null,"scoredAt":"2026-11-06T07:14:04.048Z"},"score":{"total":82,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-06","total":82},{"date":"2026-11-05","total":81},{"date":"2026-11-04","total":81},{"date":"2026-11-03","total":81},{"date":"2026-11-02","total":80},{"date":"2026-11-01","total":80},{"date":"2026-10-31","total":79},{"date":"2026-10-30","total":79},{"date":"2026-10-29","total":78},{"date":"2026-10-28","total":78},{"date":"2026-10-27","total":77},{"date":"2026-10-26","total":77},{"date":"2026-10-25","total":76},{"date":"2026-10-24","total":76},{"date":"2026-10-23","total":75},{"date":"2026-10-22","total":75},{"date":"2026-10-21","total":74},{"date":"2026-10-20","total":74},{"date":"2026-10-19","total":74},{"date":"2026-10-18","total":73},{"date":"2026-10-17","total":73},{"date":"2026-10-16","total":72},{"date":"2026-10-15","total":72},{"date":"2026-10-14","total":71}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":62,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 556 tokens (~556/item across 1 items; 1 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"556","items":"1","tools":"1","tokens":"556","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":77,"verdict":"partial","reasons":["Stability observed for 23 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"23"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 1 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 2 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"2","judged":"2"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"mcp-verify","type":"remote","identifier":"https://attest.datahubz.com/mcp/verify","withdrawn":false,"score":82,"current":true,"url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify","markdownUrl":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify.md"}],"facts":[{"label":"Endpoint","value":"https://attest.datahubz.com/mcp/verify"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"verify_record","title":"Verify an Attest record","description":"Checks whether a signed document, an agreement, a receipt or a Share proof is genuine, and what it says.\nIt runs the same public check anyone can run at attest.datahubz.com/verify, with no account.\nIt takes one of: an agreement ID (agr_...), the verification code printed on the signed copy, at the foot of every page and on its signature stamps (ATT-XXXX-XXXX), a receipt ID (rcpt_...), a Share proof ID (azk_...), or a SHA-256 fingerprint (64 hex characters) of a file.\nFor a signed agreement it returns its status, each signer's name and signing time, whether every passkey signature checks out, and its blockchain anchor (on Horizen or Base, as the record names). A private agreement is reported as private: its parties verify it through zero-knowledge proofs instead.\nIt takes a file's fingerprint, never the file itself: the SHA-256 can be computed on the person's device (for example shasum -a 256 file.pdf), or the file dropped on attest.datahubz.com/verify, where it is fingerprinted in the browser and never uploaded.\nText people typed (titles, notes, names, claims) comes only in untrustedText fields, apart from Attest's own wording. Email addresses, wherever they appear, were typed by people too (a sender chooses the signers' addresses) and are unverified input.","inputs":[{"name":"query","type":"string","required":true,"description":"An agreement ID, an ATT-XXXX-XXXX verification code, a receipt ID, a proof ID, or a SHA-256 fingerprint."}],"outputs":[{"name":"agreement","type":"object","required":false,"description":null},{"name":"found","type":"boolean","required":true,"description":null},{"name":"link","type":"string","required":true,"description":"The page on attest.datahubz.com where anyone can see this check run again."},{"name":"matches","type":"object","required":false,"description":null},{"name":"proof","type":"object","required":false,"description":null},{"name":"receipt","type":"object","required":false,"description":null},{"name":"summary","type":"string","required":true,"description":"The result in one or two plain sentences, in Attest's words (no typed text), safe to repeat to the person."},{"name":"type","type":"string","required":true,"description":"What was checked."},{"name":"untrustedText","type":"object","required":false,"description":"Unverified text people typed into Attest (titles, notes, names, file names, claims, reasons), some of it by other parties; Attest didn't write it and doesn't check it."},{"name":"verified","type":"boolean","required":true,"description":"True only when every check passed; summary says what that means for this record."}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":335}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T07:14:04.000Z","track":"remote","endpoint":"https://attest.datahubz.com/mcp/verify","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=attest.datahubz.com","issuer":"CN=YR1,O=Let's Encrypt,C=US","notBefore":"2026-09-19T16:20:49Z","notAfter":"2026-12-18T16:20:48Z","keyType":"RSA","keyBits":2048,"isCa":false},{"subject":"CN=YR1,O=Let's Encrypt,C=US","issuer":"CN=Root YR,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":true},{"subject":"CN=Root YR,O=ISRG,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"RSA","keyBits":4096,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"attest.datahubz.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"datahubz.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":308},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-14","recent":[{"id":"chg_01a1afb5-1aae-7a1a-988b-b68e5b908b60","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a1afb5-1aae-7a1a-988b-b68e5b908b60"},{"id":"chg_01a1a042-b7fa-738f-a0fe-30a52fb1f2fd","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a1a042-b7fa-738f-a0fe-30a52fb1f2fd"},{"id":"chg_01a195f5-dcfd-72fb-9a78-ccaff6401d63","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a195f5-dcfd-72fb-9a78-ccaff6401d63"},{"id":"chg_01a18baa-0974-72a3-b47f-6e0d551121c2","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a18baa-0974-72a3-b47f-6e0d551121c2"},{"id":"chg_01a1815c-6b25-78a8-be68-eba9eb56f1b2","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a1815c-6b25-78a8-be68-eba9eb56f1b2"},{"id":"chg_01a1770b-d0dc-7229-9331-ccfc7c9188b0","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a1770b-d0dc-7229-9331-ccfc7c9188b0"},{"id":"chg_01a171e4-d462-790a-84a1-d49debf4fd2c","kind":"tool.description_changed","summary":"Tool “verify_record” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a171e4-d462-790a-84a1-d49debf4fd2c"},{"id":"chg_01a16cbe-5128-721b-a56e-76465baefb84","kind":"score.total_changed","summary":"Trust score (75 → 76)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a16cbe-5128-721b-a56e-76465baefb84"},{"id":"chg_01a16272-2a77-72b5-8741-0e6e580ee512","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a16272-2a77-72b5-8741-0e6e580ee512"},{"id":"chg_01a152ff-0057-796a-ae25-9cd94d9bb413","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a152ff-0057-796a-ae25-9cd94d9bb413"},{"id":"chg_01a14dd8-7af4-79a2-88fe-e1ae0857579c","kind":"tool.description_changed","summary":"Tool “verify_record” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a14dd8-7af4-79a2-88fe-e1ae0857579c"},{"id":"chg_01a148b2-4fa3-7190-8383-54fca6da0312","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a148b2-4fa3-7190-8383-54fca6da0312"},{"id":"chg_01a13e64-bc6d-7d7e-9cef-d88f63559ea2","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a13e64-bc6d-7d7e-9cef-d88f63559ea2"},{"id":"chg_01a13e64-bc70-71b3-9285-81a29a9c0ce7","kind":"tool.description_changed","summary":"Tool “verify_record” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a13e64-bc70-71b3-9285-81a29a9c0ce7"},{"id":"chg_01a13e64-bc72-7f19-b081-433e1ff3be52","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a13e64-bc72-7f19-b081-433e1ff3be52"},{"id":"chg_01a13aed-b259-77e2-8995-f3db35ef65bc","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify#chg-chg_01a13aed-b259-77e2-8995-f3db35ef65bc"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify","markdown":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify.md","changelogJson":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify/changelog.json","changelogRss":"https://verifymcp.io/servers/com-datahubz-attest-verify/mcp-verify.xml","external":[{"label":"Remote endpoint","href":"https://attest.datahubz.com/mcp/verify"},{"label":"Repository","href":"https://github.com/DataHubz/attest-mcp"},{"label":"Website","href":"https://attest.datahubz.com/docs/connector#verify-only"}]}}