{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T07:32:16.027Z","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo","markdownUrl":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo.md","server":{"slug":"com-firstpassmemo-listing-check","name":"FirstPass Memo listing check","registryName":"com.firstpassmemo/listing-check","description":"Red-flag check for business-for-sale listings: payback, asking multiple, flags, seller questions.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"firstpassmemo","type":"remote","identifier":"https://firstpassmemo.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo","version":"1.0.0","transport":null,"scoredAt":"2026-11-05T10:25:45.989Z"},"score":{"total":82,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":82},{"date":"2026-11-04","total":81},{"date":"2026-11-03","total":81},{"date":"2026-11-02","total":80},{"date":"2026-11-01","total":80},{"date":"2026-10-31","total":79},{"date":"2026-10-30","total":79},{"date":"2026-10-29","total":79},{"date":"2026-10-28","total":78},{"date":"2026-10-27","total":78},{"date":"2026-10-26","total":77},{"date":"2026-10-25","total":77},{"date":"2026-10-24","total":76},{"date":"2026-10-23","total":76},{"date":"2026-10-22","total":75},{"date":"2026-10-21","total":75},{"date":"2026-10-20","total":74},{"date":"2026-10-19","total":74},{"date":"2026-10-18","total":73},{"date":"2026-10-17","total":73},{"date":"2026-10-16","total":72},{"date":"2026-10-15","total":72},{"date":"2026-10-14","total":72},{"date":"2026-10-13","total":71},{"date":"2026-10-12","total":71}]},"categories":[{"name":"Endpoint Security","score":74,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":72,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 345 tokens (~172/item across 2 items; 2 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"172","items":"2","tools":"2","tokens":"345","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":80,"verdict":"partial","reasons":["Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"24"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 2 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 3 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"2"}},{"code":"toolsafety.manipulation_clean","args":{"units":"3","judged":"3"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"firstpassmemo","type":"remote","identifier":"https://firstpassmemo.com/mcp","withdrawn":false,"score":82,"current":true,"url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo","markdownUrl":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo.md"}],"facts":[{"label":"Endpoint","value":"https://firstpassmemo.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"check_listing","title":"Check a business-for-sale listing for red flags","description":"Runs FirstPass Memo's 33 published red-flag rules on a small online-business listing (SaaS, content site, ecommerce, Amazon FBA, newsletter, app; roughly $10k-$150k) from Flippa, Empire Flippers, Acquire.com or any broker. Pass the listing text the user provides and/or the key numbers. Returns payback in months, the asking multiple vs comparable listings, every flag that fired (severity, why it matters, link to the rule) and questions to ask the seller. Screening only: not advice, a valuation or verification. Does not fetch URLs.","inputs":[{"name":"age_months","type":"number","required":false,"description":"Months the business has been making money."},{"name":"asking_price","type":"number","required":false,"description":"Asking price in USD. Overrides any price found in the text."},{"name":"category","type":"string","required":false,"description":"Business type."},{"name":"listing_text","type":"string","required":false,"description":"Listing text pasted by the user (asking price, profit, revenue, age, traffic, churn, etc.). Max 20,000 characters."},{"name":"monthly_profit","type":"number","required":false,"description":"Average monthly net profit in USD."},{"name":"monthly_revenue","type":"number","required":false,"description":"Average monthly revenue in USD."},{"name":"traffic_sources","type":"string","required":false,"description":"Traffic mix, e.g. 'Organic search 70%, Direct 20%, Social 10%'."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":268},{"name":"list_rules","title":"List the 33 FirstPass red-flag rules","description":"Returns the 33 published rules the checker uses (code, title, group, severity, when it fires, explainer URL).","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":34}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T10:25:45.000Z","track":"remote","endpoint":"https://firstpassmemo.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=firstpassmemo.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-07T00:16:48Z","notAfter":"2027-01-05T01:16:45Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"firstpassmemo.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"firstpassmemo.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-12","recent":[{"id":"chg_01a1ab3e-401b-79b2-82f2-67806b6b844f","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a1ab3e-401b-79b2-82f2-67806b6b844f"},{"id":"chg_01a1a0e7-8b3b-763b-83fe-fef9aac35a7c","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a1a0e7-8b3b-763b-83fe-fef9aac35a7c"},{"id":"chg_01a19696-9383-7adb-9e13-887eb05b7f7f","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a19696-9383-7adb-9e13-887eb05b7f7f"},{"id":"chg_01a18721-a7cb-73c5-b45d-a173fa86c3db","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a18721-a7cb-73c5-b45d-a173fa86c3db"},{"id":"chg_01a17cd4-99ec-739f-8275-08e20bf5cf37","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a17cd4-99ec-739f-8275-08e20bf5cf37"},{"id":"chg_01a17287-6a1a-754f-b9ab-869b00d56ff0","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a17287-6a1a-754f-b9ab-869b00d56ff0"},{"id":"chg_01a1683b-521c-73b3-a1b4-7c7a05a5b8ff","kind":"score.total_changed","summary":"Trust score (75 → 76)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a1683b-521c-73b3-a1b4-7c7a05a5b8ff"},{"id":"chg_01a15ded-24c5-7e81-8288-c5fb83d0186f","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a15ded-24c5-7e81-8288-c5fb83d0186f"},{"id":"chg_01a1539f-541e-7533-9473-4647f0ee7fdd","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a1539f-541e-7533-9473-4647f0ee7fdd"},{"id":"chg_01a14950-7e18-7d77-8321-cb5ab8ebd2fc","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a14950-7e18-7d77-8321-cb5ab8ebd2fc"},{"id":"chg_01a139e0-ea2c-7d17-9198-484adf35e087","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a139e0-ea2c-7d17-9198-484adf35e087"},{"id":"chg_01a134b7-c033-78c3-bc1c-144a2830b03f","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-13","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a134b7-c033-78c3-bc1c-144a2830b03f"},{"id":"chg_01a12e67-32ff-718c-af4b-764d7a316728","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-12","url":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo#chg-chg_01a12e67-32ff-718c-af4b-764d7a316728"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo","markdown":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo.md","changelogJson":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo/changelog.json","changelogRss":"https://verifymcp.io/servers/com-firstpassmemo-listing-check/firstpassmemo.xml","external":[{"label":"Remote endpoint","href":"https://firstpassmemo.com/mcp"},{"label":"Website","href":"https://firstpassmemo.com/tools/ai-listing-check/"}]}}