{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T19:29:49.377Z","url":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp","markdownUrl":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp.md","server":{"slug":"com-joinsandwich-directory","name":"Sandwich Public Care Directory","registryName":"com.joinsandwich/directory","description":"Read-only MCP server for Sandwich aging-parent care resources and cost data.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"sandwich-directory-mcp","type":"npm","identifier":"sandwich-directory-mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp","version":"0.1.2","transport":"stdio","scoredAt":"2026-11-05T01:11:54.889Z"},"score":{"total":37,"tier":"low","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":37},{"date":"2026-11-04","total":37},{"date":"2026-11-03","total":22}]},"categories":[{"name":"Supply Chain Security","score":81,"verdict":"fail","reasons":["No malware found by supply-chain analysis.","CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available.","No install/post-install scripts declared.","30 of 93 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.direct","args":{"package":"zod","version":"3.25.76","severity":"high"}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"93","unhealthy":"30"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 1 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"1"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright), so the captured schema is incomplete."],"codes":[{"code":"schema.sandbox_tools_unlisted","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: one of the two schema captures we compare could not list the server's tools (the server declared tools, or its tool listing failed outright). Comparing them would report every tool as removed, or find nothing to compare at all."],"codes":[{"code":"stability.insufficient_history","args":{"reason":"tools_unlisted"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright)."],"codes":[{"code":"toolquality.sandbox_tools_unlisted","args":{}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright)."],"codes":[{"code":"toolsafety.sandbox_tools_unlisted","args":{}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["Schema quality not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright), so the captured schema is incomplete.","Stability not yet verified: one of the two schema captures we compare could not list the server's tools (the server declared tools, or its tool listing failed outright). Comparing them would report every tool as removed, or find nothing to compare at all.","Tool coverage not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright).","Tool safety not yet verified: our sandbox run could not list this package's tools (it declared tools, or its tool listing failed outright)."],"malware":[],"components":[{"slug":"api-mcp","type":"remote","identifier":"https://www.joinsandwich.com/api/mcp","withdrawn":false,"score":86,"current":false,"url":"https://verifymcp.io/servers/com-joinsandwich-directory/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-joinsandwich-directory/api-mcp.md"},{"slug":"sandwich-directory-mcp","type":"npm","identifier":"sandwich-directory-mcp","withdrawn":false,"score":37,"current":true,"url":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp","markdownUrl":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"sandwich-directory-mcp"},{"label":"Version","value":"0.1.2"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T01:11:54.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[{"id":"GHSA-mrhx-c7xc-m3w5","cve":"CVE-2023-54404","severity":"high","fixAvailable":true}],"vulnerabilitiesTotal":1,"dependencies":{"nodes":93,"partial":false,"deprecated":null,"stale":30,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-11-03","recent":[{"id":"chg_01a1a41c-38a7-76ef-a586-862d300bee0d","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp#chg-chg_01a1a41c-38a7-76ef-a586-862d300bee0d"},{"id":"chg_01a1a41c-38a9-74c3-9a89-7da2a187b6cb","kind":"score.total_changed","summary":"Trust score (22 → 37)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp#chg-chg_01a1a41c-38a9-74c3-9a89-7da2a187b6cb"},{"id":"chg_01a1a27d-2ad1-7a5d-85e1-4be302cc339b","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp#chg-chg_01a1a27d-2ad1-7a5d-85e1-4be302cc339b"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp","markdown":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp.md","changelogJson":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/com-joinsandwich-directory/sandwich-directory-mcp.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/sandwich-directory-mcp"},{"label":"Socket report","href":"https://socket.dev/npm/package/sandwich-directory-mcp"},{"label":"Repository","href":"https://github.com/Terahertz-Inc/sandwich-public"},{"label":"Website","href":"https://www.joinsandwich.com/agents"}]}}