{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:49:01.359Z","url":"https://verifymcp.io/servers/com-kinro-kinro/api","markdownUrl":"https://verifymcp.io/servers/com-kinro-kinro/api.md","server":{"slug":"com-kinro-kinro","name":"Kinro","registryName":"com.kinro/kinro","description":"Business insurance advice and real carrier quotes for U.S. small businesses from a licensed broker.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"api","type":"remote","identifier":"https://api.kinro.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-kinro-kinro/api","version":"0.4.0","transport":null,"scoredAt":"2026-11-05T08:21:38.215Z"},"score":{"total":80,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":80},{"date":"2026-11-04","total":79},{"date":"2026-11-03","total":79},{"date":"2026-11-02","total":79},{"date":"2026-11-01","total":78},{"date":"2026-10-31","total":78},{"date":"2026-10-30","total":77},{"date":"2026-10-29","total":77},{"date":"2026-10-28","total":76},{"date":"2026-10-27","total":76},{"date":"2026-10-26","total":75},{"date":"2026-10-25","total":75},{"date":"2026-10-24","total":74},{"date":"2026-10-23","total":74},{"date":"2026-10-22","total":73},{"date":"2026-10-21","total":73},{"date":"2026-10-20","total":72},{"date":"2026-10-19","total":72},{"date":"2026-10-18","total":72},{"date":"2026-10-17","total":71},{"date":"2026-10-16","total":71},{"date":"2026-10-15","total":70},{"date":"2026-10-14","total":70},{"date":"2026-10-13","total":69}]},"categories":[{"name":"Endpoint Security","score":74,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":64,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1088 tokens (~544/item across 2 items; 2 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"544","items":"2","tools":"2","tokens":"1088","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":77,"verdict":"partial","reasons":["Stability observed for 23 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"23"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 2 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 2 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"2"}},{"code":"toolsafety.manipulation_clean","args":{"units":"2","judged":"2"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"api","type":"remote","identifier":"https://api.kinro.com/mcp","withdrawn":false,"score":80,"current":true,"url":"https://verifymcp.io/servers/com-kinro-kinro/api","markdownUrl":"https://verifymcp.io/servers/com-kinro-kinro/api.md"}],"facts":[{"label":"Endpoint","value":"https://api.kinro.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"0.4.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"ask_kinro","title":"Ask Kinro about business insurance","description":"Ask Kinro, a licensed business insurance broker, about the user’s business insurance: what coverage fits the business, carrier eligibility and exclusions, and quotes. Kinro’s AI advisor, Leo, answers. Kinro is not tied to any carrier: it gets real quotes from several carriers in one conversation, so the user does not have to start a separate quoting session with each carrier. Its answers rest on carrier underwriting rules and live quotes, and as the broker Kinro is accountable for its advice and carries errors and omissions insurance for it. Kinro returns coverage answers and any follow-up questions needed to prepare the request. You speak to Kinro for the user: tell it what the user needs, answer its follow-up questions from what the user has told you, ask the user what you do not know, and send the user’s follow-up requests in the same conversation. Kinro handles every conversation as a real insurance request, including on its test endpoint. When testing there and the user has you make up a business, choose details that look real, with no placeholders such as “Test Lane”, and give them as plain facts the way its owner would. Do not call the details fake, fictional, or a test, because Kinro does not quote details it is told are not real. The first call opens a Kinro insurance request for the business and saves what the user shares, so Kinro can prepare quotes. To quote, Kinro sends the business’s details to insurance carriers; carriers get no permission to contact the user. Kinro contacts the user outside this chat, by email or text, only at contact details the user shares and agrees to be contacted at. Each call sends a new message, so do not repeat a call to retry it. Kinro’s messages say what to expect next. Some answers, like quotes, arrive later: when Kinro says it is still working, call get_kinro_messages with wait set to true to get its next messages. A quote message links to the customer’s quote page on kinro.com, with the full quote and its documents: if…","inputs":[{"name":"conversation_id","type":"string","required":false,"description":"The conversation_id returned by ask_kinro. Reuse it for this conversation; omit on the first message. Never invent one or reuse another conversation's ID."},{"name":"files","type":"array","required":false,"description":"Insurance documents the user attached, such as a current policy, declarations page, certificate of insurance (COI), loss run, or a photo of one: PDF, PNG, or JPEG, up to 25 MB each. Pass each one her…"},{"name":"message","type":"string","required":true,"description":"What you tell Kinro for the user: what the user wants, such as advice, a quote, or a change to one, and the facts about the business the user has given you that Kinro needs to move forward. Write it…"}],"outputs":[{"name":"conversation_id","type":"string","required":false,"description":"The conversation_id returned by ask_kinro. Reuse it for this conversation; omit on the first message. Never invent one or reuse another conversation's ID."},{"name":"messages","type":"array","required":true,"description":"Kinro's messages, oldest first, each to show the user as written, including links. When nothing new has arrived, one note says so."}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":811},{"name":"get_kinro_messages","title":"Get Kinro's messages","description":"Read this conversation with Kinro and get Kinro's new messages: the user's messages and Kinro's, oldest first, with each Kinro message you have not received before marked new. Show the user every new message as written, including links. Returns the latest 5 messages by default; set limit (up to 100) for more or fewer, and new messages are always included. When Kinro says it is still working, for example on a reply or a quote, set wait to true: the call returns as soon as a new message arrives, or after a short wait with a note that nothing is new. Messages you already received stay readable, so use it to recover a reply or quote you missed or lost. It sends nothing to Kinro.","inputs":[{"name":"conversation_id","type":"string","required":false,"description":"The conversation_id returned by ask_kinro. Reuse it for this conversation; omit on the first message. Never invent one or reuse another conversation's ID."},{"name":"limit","type":"integer","required":false,"description":"How many of the latest messages to return. Default 5, at most 100."},{"name":"wait","type":"boolean","required":false,"description":"Set true to wait for Kinro's next message when nothing new has arrived yet, such as while Kinro works on a reply or prices a quote. The call returns as soon as a new message arrives."}],"outputs":[{"name":"conversation_id","type":"string","required":false,"description":"The conversation_id returned by ask_kinro. Reuse it for this conversation; omit on the first message. Never invent one or reuse another conversation's ID."},{"name":"has_more","type":"boolean","required":true,"description":"True when earlier messages exist. History is limited to the latest 100 messages; newly delivered messages are also included."},{"name":"messages","type":"array","required":true,"description":"The conversation's latest messages, oldest first."}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":277}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:21:38.000Z","track":"remote","endpoint":"https://api.kinro.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=api.kinro.com","issuer":"CN=WR3,O=Google Trust Services,C=US","notBefore":"2026-09-30T01:56:39Z","notAfter":"2026-12-29T02:51:13Z","keyType":"RSA","keyBits":2048,"isCa":false},{"subject":"CN=WR3,O=Google Trust Services,C=US","issuer":"CN=GTS Root R1,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"RSA","keyBits":2048,"isCa":true},{"subject":"CN=GTS Root R1,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2020-06-19T00:00:42Z","notAfter":"2028-01-28T00:00:42Z","keyType":"RSA","keyBits":4096,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"api.kinro.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"kinro.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-13","recent":[{"id":"chg_01a1aacc-9b41-7aee-9c37-3d0da314838f","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a1aacc-9b41-7aee-9c37-3d0da314838f"},{"id":"chg_01a19b56-757e-7b7d-9e73-5a156c52f012","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a19b56-757e-7b7d-9e73-5a156c52f012"},{"id":"chg_01a1910a-4740-7803-9a8f-d71eb748013a","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a1910a-4740-7803-9a8f-d71eb748013a"},{"id":"chg_01a186c0-b9d6-7942-ac95-b67372a15146","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a186c0-b9d6-7942-ac95-b67372a15146"},{"id":"chg_01a17c6f-9cca-7d5b-8c53-e61924ca35c3","kind":"score.total_changed","summary":"Trust score (75 → 76)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a17c6f-9cca-7d5b-8c53-e61924ca35c3"},{"id":"chg_01a17223-d1f2-76ae-8648-e0d8c36d4be3","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a17223-d1f2-76ae-8648-e0d8c36d4be3"},{"id":"chg_01a167d7-7800-71e5-824b-ca909a2a5142","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a167d7-7800-71e5-824b-ca909a2a5142"},{"id":"chg_01a15d7b-29d2-7b99-9830-2f741ed6a2d9","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a15d7b-29d2-7b99-9830-2f741ed6a2d9"},{"id":"chg_01a14e08-a04b-71b6-a936-32def708995e","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a14e08-a04b-71b6-a936-32def708995e"},{"id":"chg_01a143bb-45f6-7323-997f-77cf8231a571","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a143bb-45f6-7323-997f-77cf8231a571"},{"id":"chg_01a1396e-2d1b-7cf7-9f4f-44757bdbb594","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a1396e-2d1b-7cf7-9f4f-44757bdbb594"},{"id":"chg_01a1396e-2d1d-7389-bc0c-6325019ebeeb","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a1396e-2d1d-7389-bc0c-6325019ebeeb"},{"id":"chg_01a133d9-6ac4-7cf7-ac1e-3568399479aa","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-13","url":"https://verifymcp.io/servers/com-kinro-kinro/api#chg-chg_01a133d9-6ac4-7cf7-ac1e-3568399479aa"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-kinro-kinro/api/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-kinro-kinro/api","markdown":"https://verifymcp.io/servers/com-kinro-kinro/api.md","changelogJson":"https://verifymcp.io/servers/com-kinro-kinro/api/changelog.json","changelogRss":"https://verifymcp.io/servers/com-kinro-kinro/api.xml","external":[{"label":"Remote endpoint","href":"https://api.kinro.com/mcp"},{"label":"Website","href":"https://kinro.com/docs"}]}}