<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>CostPilot · mcp-costpilot · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/com-mcpgatepro-costpilot/mcp-costpilot.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] mcp-costpilot: HSTS header (unverified → fail)</title><link>https://verifymcp.io/servers/com-mcpgatepro-costpilot/mcp-costpilot#chg-chg_019fdb3f-4ce6-71e2-a706-e5518eae6745</link><guid isPermaLink="true">https://verifymcp.io/servers/com-mcpgatepro-costpilot/mcp-costpilot#chg-chg_019fdb3f-4ce6-71e2-a706-e5518eae6745</guid><description>HSTS header (unverified → fail). Compared against 2026-08-06.</description><pubDate>Fri, 07 Aug 2026 08:03:06 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] mcp-costpilot: TLS certificate (unverified → pass)</title><link>https://verifymcp.io/servers/com-mcpgatepro-costpilot/mcp-costpilot#chg-chg_019fdb3f-4ce7-7345-b6bf-961a47c1b6e6</link><guid isPermaLink="true">https://verifymcp.io/servers/com-mcpgatepro-costpilot/mcp-costpilot#chg-chg_019fdb3f-4ce7-7345-b6bf-961a47c1b6e6</guid><description>TLS certificate (unverified → pass). Compared against 2026-08-06.</description><pubDate>Fri, 07 Aug 2026 08:03:06 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] mcp-costpilot: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/com-mcpgatepro-costpilot/mcp-costpilot#chg-chg_019fdb3f-4ce7-7d0c-9f96-32ede8f2a204</link><guid isPermaLink="true">https://verifymcp.io/servers/com-mcpgatepro-costpilot/mcp-costpilot#chg-chg_019fdb3f-4ce7-7d0c-9f96-32ede8f2a204</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-08-06.</description><pubDate>Fri, 07 Aug 2026 08:03:06 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] mcp-costpilot: Transport (Transport check failed: declared streamable-http, but the endpoint redirected instead of responding directly.)</title><link>https://verifymcp.io/servers/com-mcpgatepro-costpilot/mcp-costpilot#chg-chg_019fdb3f-4ce8-724a-876a-29bb82eb0b5e</link><guid isPermaLink="true">https://verifymcp.io/servers/com-mcpgatepro-costpilot/mcp-costpilot#chg-chg_019fdb3f-4ce8-724a-876a-29bb82eb0b5e</guid><description>Transport (Transport check failed: declared streamable-http, but the endpoint redirected instead of responding directly.). Compared against 2026-08-06.</description><pubDate>Fri, 07 Aug 2026 08:03:06 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>