Deskhand · api-mcp · changes | VerifyMCPRecorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.https://verifymcp.io[SECURITY] api-mcp: Tool “draft_email” rewrote its description, which is the text the model readshttps://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a1a5ce-684c-7ab4-b25d-08dbd35295dbhttps://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a1a5ce-684c-7ab4-b25d-08dbd35295dbTool “draft_email” rewrote its description, which is the text the model reads. Compared against 2026-11-03.Wed, 04 Nov 2026 09:05:30 GMTsecurityneutraltool.description_changed[SECURITY] api-mcp: HSTS header (fail → pass)https://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a19144-2d2f-7e17-ad3e-5e6e2782a18bhttps://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a19144-2d2f-7e17-ad3e-5e6e2782a18bHSTS header (fail → pass). Compared against 2026-10-30.Sat, 31 Oct 2026 09:22:06 GMTsecurityimprovementcheck.verdict[SECURITY] api-mcp: Transport (unverified → pass)https://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a18c1e-a6a0-7ea3-97f1-093fbb02b083https://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a18c1e-a6a0-7ea3-97f1-093fbb02b083Transport (unverified → pass). Compared against 2026-10-29.Fri, 30 Oct 2026 09:23:01 GMTsecurityimprovementcheck.reverified[SECURITY] api-mcp: Injection markers (unverified → pass)https://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a18c1e-a6a2-736b-8202-5c442e876d0chttps://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a18c1e-a6a2-736b-8202-5c442e876d0cInjection markers (unverified → pass). Compared against 2026-10-29.Fri, 30 Oct 2026 09:23:01 GMTsecurityimprovementcheck.reverified[SECURITY] api-mcp: Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.)https://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a18c1e-a6a2-79db-a1c5-5fa20488e3a8https://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a18c1e-a6a2-79db-a1c5-5fa20488e3a8Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.). Compared against 2026-10-29.Fri, 30 Oct 2026 09:23:01 GMTsecurityneutralcheck.reason[SECURITY] api-mcp: First check of Judged manipulation (pass)https://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a18c1e-a6a3-70f4-94e2-835b236da477https://verifymcp.io/servers/com-grain64-deskhand-deskhand/api-mcp#chg-chg_01a18c1e-a6a3-70f4-94e2-835b236da477First check of Judged manipulation (pass). Compared against 2026-10-29.Fri, 30 Oct 2026 09:23:01 GMTsecurityneutralcheck.appeared