{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:24:17.514Z","url":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp.md","server":{"slug":"com-metruvo-fund-comparison","name":"Metruvo portfolio analysis","registryName":"com.metruvo/fund-comparison","description":"Portfolio analysis from published fund data: charges, exposure and overlap. Read-only.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"api-mcp","type":"remote","identifier":"https://metruvo.com/api/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp","version":"1.1.1","transport":null,"scoredAt":"2026-11-05T08:31:02.030Z"},"score":{"total":73,"tier":"medium","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":73},{"date":"2026-11-04","total":72},{"date":"2026-11-03","total":72},{"date":"2026-11-02","total":71},{"date":"2026-11-01","total":71},{"date":"2026-10-31","total":71},{"date":"2026-10-30","total":70},{"date":"2026-10-29","total":70},{"date":"2026-10-28","total":69},{"date":"2026-10-27","total":69},{"date":"2026-10-26","total":68}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":63,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 544 tokens (~136/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"136","items":"4","tools":"4","tokens":"544","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":33,"verdict":"partial","reasons":["Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"10"}}]},{"name":"Tool Coverage","score":80,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","40% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"40"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"4"}},{"code":"toolsafety.manipulation_clean","args":{"units":"5","judged":"5"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"api-mcp","type":"remote","identifier":"https://metruvo.com/api/mcp","withdrawn":false,"score":73,"current":true,"url":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://metruvo.com/api/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.1.1"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"search_funds","title":null,"description":"Search the published instrument catalogue by name, ISIN or ticker; includes currency and listing identifiers. Returns checkUrl: a shareable link to the same result.","inputs":[{"name":"limit","type":"integer","required":false,"description":null},{"name":"query","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":55},{"name":"xray_portfolio","title":null,"description":"Analyze free-preview ETF overlap/concentration findings, known ongoing charges and regional/sector exposures from published evidence. Identify each holding with exactly one ISIN or ticker; a ticker can be ambiguous across exchanges. Use positive relative weights, values in one base currency, or omit all amounts for equal weights. Never mix weights and values. At most 10 distinct tickers per call. Dates, coverage and all data gaps accompany the result. Returns checkUrl: a shareable link to the same result.","inputs":[{"name":"baseCurrency","type":"string","required":false,"description":null},{"name":"holdings","type":"array","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":124},{"name":"compare_funds","title":null,"description":"Analyze two ETFs as a 50/50 portfolio, with overlap and issuer facts including dated ongoing charges side by side, and each fund's own region and sector exposure. Identify each side with exactly one ISIN or ticker; a ticker can be ambiguous across exchanges. Unknown facts remain null. Returns checkUrl: a shareable link to the same result.","inputs":[{"name":"isinA","type":"string","required":false,"description":"ISIN with a valid check digit."},{"name":"isinB","type":"string","required":false,"description":"ISIN with a valid check digit."},{"name":"tickerA","type":"string","required":false,"description":"Exchange ticker, e.g. VWCE or SWDA.L; may match listings on several exchanges."},{"name":"tickerB","type":"string","required":false,"description":"Exchange ticker, e.g. VWCE or SWDA.L; may match listings on several exchanges."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":164},{"name":"rank_funds","title":null,"description":"Sort 2 to 10 funds by up to three published facts: ongoing charge, US share, pairwise overlap and holdings count. Rows follow the criteria in order. A missing fact sorts last and stays null; it is never estimated. Rates are decimal fractions (0.07 = 7%). Analysis based on published fund data. Returns checkUrl: a shareable link to the same result.","inputs":[{"name":"criteria","type":"array","required":true,"description":null},{"name":"isins","type":"array","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":104}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:31:01.000Z","track":"remote","endpoint":"https://metruvo.com/api/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=metruvo.com","issuer":"CN=YR1,O=Let's Encrypt,C=US","notBefore":"2026-09-14T14:30:42Z","notAfter":"2026-12-13T14:30:41Z","keyType":"RSA","keyBits":2048,"isCa":false},{"subject":"CN=YR1,O=Let's Encrypt,C=US","issuer":"CN=Root YR,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":true},{"subject":"CN=Root YR,O=ISRG,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"RSA","keyBits":4096,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"metruvo.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"metruvo.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":308},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-26","recent":[{"id":"chg_01a1aad5-35b3-7b57-a99e-e3dc55b5eeb5","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp#chg-chg_01a1aad5-35b3-7b57-a99e-e3dc55b5eeb5"},{"id":"chg_01a1a086-effd-79ac-8667-b60720dcce61","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp#chg-chg_01a1a086-effd-79ac-8667-b60720dcce61"},{"id":"chg_01a19111-10da-799e-a57d-5e76e9816821","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp#chg-chg_01a19111-10da-799e-a57d-5e76e9816821"},{"id":"chg_01a186c9-f3ab-7ded-a249-6c670b06a003","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp#chg-chg_01a186c9-f3ab-7ded-a249-6c670b06a003"},{"id":"chg_01a17c77-b7ea-7191-913a-ed6393387df5","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp#chg-chg_01a17c77-b7ea-7191-913a-ed6393387df5"},{"id":"chg_01a17c77-b7ea-7778-99e6-b643182dea7f","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp#chg-chg_01a17c77-b7ea-7778-99e6-b643182dea7f"},{"id":"chg_01a17a71-73a1-726c-81ba-7aa53f6f3a96","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp#chg-chg_01a17a71-73a1-726c-81ba-7aa53f6f3a96"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp","markdown":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp.md","changelogJson":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/com-metruvo-fund-comparison/api-mcp.xml","external":[{"label":"Remote endpoint","href":"https://metruvo.com/api/mcp"},{"label":"Website","href":"https://metruvo.com/mcp"}]}}