{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T18:55:38.148Z","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp.md","server":{"slug":"com-howitspread-howitspread","name":"How It Spread","registryName":"com.howitspread/howitspread","description":"Viral precedents with sourced, dated spread timelines and a Spread Score. Each answer cites a case.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"api-mcp","type":"remote","identifier":"https://howitspread.com/api/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp","version":"1.2.2","transport":null,"scoredAt":"2026-11-05T02:08:54.806Z"},"score":{"total":81,"tier":"high trust","status":"scored","weekDelta":4,"history":[{"date":"2026-11-05","total":81},{"date":"2026-11-04","total":80},{"date":"2026-11-03","total":80},{"date":"2026-11-02","total":79},{"date":"2026-11-01","total":79},{"date":"2026-10-31","total":78},{"date":"2026-10-30","total":78},{"date":"2026-10-29","total":77},{"date":"2026-10-28","total":77},{"date":"2026-10-27","total":76},{"date":"2026-10-26","total":76},{"date":"2026-10-25","total":75},{"date":"2026-10-24","total":75},{"date":"2026-10-23","total":74},{"date":"2026-10-22","total":74},{"date":"2026-10-21","total":74},{"date":"2026-10-20","total":73},{"date":"2026-10-19","total":71}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":75,"verdict":"fail","reasons":["100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).","AI-judged instruction clarity (fair).","Tool/resource definitions use about 355 tokens (~71/item across 5 items; 3 tools + 2 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.descriptions","args":{"pct":"100"}},{"code":"schema.ai_quality","args":{"band":"fair"}},{"code":"schema.footprint_lean","args":{"avg":"71","items":"5","tools":"3","tokens":"355","resources":"2"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":57,"verdict":"partial","reasons":["Stability observed for 17 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"17"}}]},{"name":"Tool Coverage","score":89,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","67% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"67"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"5","judged":"5"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.","Supports UI / widget rendering."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}},{"code":"cap.ui_supported","args":{}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"api-mcp","type":"remote","identifier":"https://howitspread.com/api/mcp","withdrawn":false,"score":81,"current":true,"url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://howitspread.com/api/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.2.2"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"search_cases","title":"Search viral cases","description":"Search the How It Spread library of viral cases (films, products, memes, campaigns) by text, kind, mechanic or platform. Returns each case's Spread Score, dates, platforms, mechanics, an image URL and the case URL to cite.","inputs":[{"name":"kind","type":"string","required":false,"description":null},{"name":"limit","type":"number","required":false,"description":null},{"name":"mechanic","type":"string","required":false,"description":"A spread mechanic id; list_mechanics defines them."},{"name":"platform","type":"string","required":false,"description":"A platform the case spread on."},{"name":"query","type":"string","required":false,"description":"Free text: a brand, product, film, format or idea."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":122},{"name":"get_case","title":"Read a case","description":"One case: its dated spread timeline (seed, first amplifier, platform jumps, press, peak), Spread Score and citation. Fields that need sign-in come back locked, with the case URL where the full record is.","inputs":[{"name":"slug","type":"string","required":true,"description":"The case slug from search_cases."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":65},{"name":"list_mechanics","title":"List spread mechanics","description":"The closed vocabulary of spread mechanics, each defined, with how many cases use it.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":26}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T02:08:54.000Z","track":"remote","endpoint":"https://howitspread.com/api/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=*.howitspread.com","issuer":"CN=YR1,O=Let's Encrypt,C=US","notBefore":"2026-10-20T04:22:10Z","notAfter":"2027-01-18T04:22:09Z","keyType":"RSA","keyBits":2048,"isCa":false},{"subject":"CN=YR1,O=Let's Encrypt,C=US","issuer":"CN=Root YR,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":true},{"subject":"CN=Root YR,O=ISRG,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"RSA","keyBits":4096,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"howitspread.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"howitspread.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":308},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-19","recent":[{"id":"chg_01a1a977-5e33-7e95-8760-f385f32cf4b4","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a1a977-5e33-7e95-8760-f385f32cf4b4"},{"id":"chg_01a19f2b-3d80-7c07-a57e-6ab16d59ce00","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a19f2b-3d80-7c07-a57e-6ab16d59ce00"},{"id":"chg_01a194de-29fa-7036-8a05-c1509d58e057","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a194de-29fa-7036-8a05-c1509d58e057"},{"id":"chg_01a18a91-3357-70dc-818a-65ad3e146a4c","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a18a91-3357-70dc-818a-65ad3e146a4c"},{"id":"chg_01a18043-7dd1-7c3a-b333-f8a52aee2ab6","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a18043-7dd1-7c3a-b333-f8a52aee2ab6"},{"id":"chg_01a175f7-f2d3-726a-b6da-19ea0f3eb4f3","kind":"score.total_changed","summary":"Trust score (75 → 76)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a175f7-f2d3-726a-b6da-19ea0f3eb4f3"},{"id":"chg_01a16bab-1ad2-7a8a-9cfd-ad1d2f3baafa","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a16bab-1ad2-7a8a-9cfd-ad1d2f3baafa"},{"id":"chg_01a16204-972e-7311-9e08-c09a677f072c","kind":"tool.description_changed","summary":"Tool “get_case” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a16204-972e-7311-9e08-c09a677f072c"},{"id":"chg_01a16204-972f-7228-ba94-eb02c0b20019","kind":"server.version_changed","summary":"Server version (1.2.0 → 1.2.2)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a16204-972f-7228-ba94-eb02c0b20019"},{"id":"chg_01a16204-972f-784a-af2e-8c13de8c5da3","kind":"server.instructions_changed","summary":"The server rewrote its instructions, which are the text every model session reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a16204-972f-784a-af2e-8c13de8c5da3"},{"id":"chg_01a15c37-c9c8-770d-ae21-e46681cc6d6c","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a15c37-c9c8-770d-ae21-e46681cc6d6c"},{"id":"chg_01a15829-4763-73c8-b83e-45a7f2cb2ecb","kind":"check.measure","summary":"Schema quality (105 → 73)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a15829-4763-73c8-b83e-45a7f2cb2ecb"},{"id":"chg_01a15829-4763-79a3-8295-2f948cacf255","kind":"check.appeared","summary":"First check of Capabilities (pass)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a15829-4763-79a3-8295-2f948cacf255"},{"id":"chg_01a15829-4764-73ca-b56e-81a53b3d7df4","kind":"check.measure","summary":"Schema quality (good → fair)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a15829-4764-73ca-b56e-81a53b3d7df4"},{"id":"chg_01a15829-4764-7a1c-83d5-d18a211d3f14","kind":"check.appeared","summary":"First check of Schema quality (100)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a15829-4764-7a1c-83d5-d18a211d3f14"},{"id":"chg_01a15829-4764-7ea0-aaa2-cf36c8d07ccd","kind":"resource.added","summary":"New resource “case-view”","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a15829-4764-7ea0-aaa2-cf36c8d07ccd"},{"id":"chg_01a15829-4765-738b-8867-324882086cd6","kind":"resource.added","summary":"New resource “case-view-chatgpt”","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a15829-4765-738b-8867-324882086cd6"},{"id":"chg_01a15829-4765-7874-a604-904c829c47c5","kind":"server.version_changed","summary":"Server version (1.1.0 → 1.2.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a15829-4765-7874-a604-904c829c47c5"},{"id":"chg_01a15829-4765-7d9a-9afc-f410fc041578","kind":"capability.enabled","summary":"The server now declares the “resources” capability","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a15829-4765-7d9a-9afc-f410fc041578"},{"id":"chg_01a15829-4766-74d2-a8c5-27000c99ace8","kind":"score.total_changed","summary":"Trust score (71 → 73)","materiality":"functional","direction":"improvement","scoreDelta":2,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp#chg-chg_01a15829-4766-74d2-a8c5-27000c99ace8"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp","markdown":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp.md","changelogJson":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/com-howitspread-howitspread/api-mcp.xml","external":[{"label":"Remote endpoint","href":"https://howitspread.com/api/mcp"},{"label":"Website","href":"https://howitspread.com/mcp"}]}}