<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>FinChiefs research · api-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/com-finchiefs-research/api-mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api-mcp: Tool “get_central_bank_meetings” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a19e7e-02cc-7c91-a279-6d5992ffc1ca</link><guid isPermaLink="true">https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a19e7e-02cc-7c91-a279-6d5992ffc1ca</guid><description>Tool “get_central_bank_meetings” rewrote its description, which is the text the model reads. Compared against 2026-11-02.</description><pubDate>Mon, 02 Nov 2026 23:00:20 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api-mcp: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a19dd9-5756-79c0-963c-9e273514da1f</link><guid isPermaLink="true">https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a19dd9-5756-79c0-963c-9e273514da1f</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-11-02.</description><pubDate>Mon, 02 Nov 2026 20:00:28 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item><item><title>[SECURITY] api-mcp: Transport (unverified → pass)</title><link>https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a16c52-6fe6-76e7-90c0-b2c94a846eae</link><guid isPermaLink="true">https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a16c52-6fe6-76e7-90c0-b2c94a846eae</guid><description>Transport (unverified → pass). Compared against 2026-10-23.</description><pubDate>Sat, 24 Oct 2026 05:11:44 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a16c52-6fe7-7978-9a14-7b5342e0519c</link><guid isPermaLink="true">https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a16c52-6fe7-7978-9a14-7b5342e0519c</guid><description>Injection markers (unverified → pass). Compared against 2026-10-23.</description><pubDate>Sat, 24 Oct 2026 05:11:44 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a16c52-6fe8-72ce-8cee-3cf3fce58cd0</link><guid isPermaLink="true">https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a16c52-6fe8-72ce-8cee-3cf3fce58cd0</guid><description>First check of Judged manipulation (pass). Compared against 2026-10-23.</description><pubDate>Sat, 24 Oct 2026 05:11:44 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item><item><title>[SECURITY] api-mcp: Authorization (Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.)</title><link>https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a16c52-6fe8-7d39-81f1-ab24e8947274</link><guid isPermaLink="true">https://verifymcp.io/servers/com-finchiefs-research/api-mcp#chg-chg_01a16c52-6fe8-7d39-81f1-ab24e8947274</guid><description>Authorization (Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.). Compared against 2026-10-23.</description><pubDate>Sat, 24 Oct 2026 05:11:44 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>