{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T20:55:21.806Z","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp.md","server":{"slug":"com-omnicost-catalog","name":"Omnicost","registryName":"com.omnicost/catalog","description":"Construction unit prices with source and date for Spain, the US and the EU. OAuth or API key.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"api-mcp","type":"remote","identifier":"https://omnicost.com/api/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp","version":"1.1.0","transport":null,"scoredAt":"2026-11-05T06:24:16.371Z"},"score":{"total":39,"tier":"low","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":39},{"date":"2026-11-04","total":39},{"date":"2026-11-03","total":72},{"date":"2026-11-02","total":71},{"date":"2026-11-01","total":71},{"date":"2026-10-31","total":36},{"date":"2026-10-30","total":36},{"date":"2026-10-29","total":36}]},"categories":[{"name":"Endpoint Security","score":97,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC.","The authorisation server supports Client ID Metadata Documents, the current MCP client-registration mechanism."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.rfc9728","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}},{"code":"auth.registration_cimd","args":{}}]},{"name":"Transport & Reachability","score":0,"verdict":"unverified","reasons":["Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http."],"codes":[{"code":"transport.auth_gated","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema blocked by authentication: the endpoint requires auth we don't have to read it."],"codes":[{"code":"schema.auth_gated","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools."],"codes":[{"code":"toolquality.auth_gated","args":{}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools."],"codes":[{"code":"toolsafety.auth_gated","args":{}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Capabilities blocked by authentication: the endpoint requires auth we don't have to read them."],"codes":[{"code":"cap.auth_gated","args":{}}]}],"inconclusive":["Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http.","Schema blocked by authentication: the endpoint requires auth we don't have to read it.","Stability not yet verified: not enough scan history yet (needs a 30-day window).","Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.","Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.","Capabilities blocked by authentication: the endpoint requires auth we don't have to read them."],"malware":[],"components":[{"slug":"api-mcp","type":"remote","identifier":"https://omnicost.com/api/mcp","withdrawn":false,"score":39,"current":true,"url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://omnicost.com/api/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"required"},{"label":"Version","value":"1.1.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"search_catalog","title":"Search construction cost catalog","description":"Semantic search for canonical construction-cost items. Returns top-K matches with median price, vendor count, and source trust. Deprecated in structuredContent.results (kept for one release): score, category_id.","inputs":[{"name":"limit","type":"integer","required":false,"description":null},{"name":"q","type":"string","required":true,"description":"Free-text query (e.g. 'concrete HA-25 m³')"},{"name":"region","type":"string","required":false,"description":"Restrict to canonicals with at least one vendor in this region"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":97},{"name":"get_item","title":"Get catalog item","description":"Fetch a canonical item with vendor breakdown and recent price history. Returns Markdown for readability. Deprecated in structuredContent (kept for one release): item.category_id.","inputs":[{"name":"id","type":"string","required":true,"description":"Canonical id (ci_xxx)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":54},{"name":"list_categories","title":"List catalog categories","description":"Catalog categories: structuredContent.categories items are {id, name, parentId, parent} where parent is the parent category's name. Deprecated (kept for one release): id, parentId.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":48},{"name":"get_decomposition","title":"Get item cost breakdown","description":"BC3 recipe tree for an item: material+labor+machinery components per unit. Returns parent_code and component rows {child_code, factor, yield, per_unit, name, unit, unit_price, item_id}; item_id (vsku_…) can be passed back to get_decomposition. Deprecated (kept for one release): parentId, parentCode, and per component catalog_item_id and position.","inputs":[{"name":"item_id","type":"string","required":true,"description":"Canonical id or vendor SKU id (ci_xxx / vsku_xxx)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":117}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T06:24:16.000Z","track":"remote","endpoint":"https://omnicost.com/api/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=omnicost.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-30T01:05:36Z","notAfter":"2027-01-28T02:04:08Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"omnicost.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"omnicost.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"enforced_validated","label":"Enforced and verified","gate":"connect","gateLabel":"On connection","status":401,"authorizationServers":["https://omnicost.com"]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"auth_gated","label":"Auth required","status":401,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1a536-73d1-72f0-a1d0-6269cb82d8ab","kind":"check.unverifiable","summary":"Tool safety (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a1a536-73d1-72f0-a1d0-6269cb82d8ab"},{"id":"chg_01a1a536-73d2-73df-a790-fd260cfc691d","kind":"check.unverifiable","summary":"Stability (0.07 → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a1a536-73d2-73df-a790-fd260cfc691d"},{"id":"chg_01a1a536-73d2-7b09-a41e-7f7b816b3f53","kind":"check.unverifiable","summary":"Transport (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a1a536-73d2-7b09-a41e-7f7b816b3f53"},{"id":"chg_01a1a536-73d3-7156-9557-7cc7c2222ff2","kind":"check.verdict","summary":"Authorization (partial → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a1a536-73d3-7156-9557-7cc7c2222ff2"},{"id":"chg_01a1a536-73d3-7ec1-b11a-5c79bc294d5e","kind":"check.appeared","summary":"First check of Authorization (pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a1a536-73d3-7ec1-b11a-5c79bc294d5e"},{"id":"chg_01a1a536-73d5-73a7-9377-cf15aa7e6883","kind":"check.unverifiable","summary":"Capabilities (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a1a536-73d5-73a7-9377-cf15aa7e6883"},{"id":"chg_01a1a536-73d5-7961-9d17-1e38853386eb","kind":"check.unverifiable","summary":"Tool coverage (100 → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a1a536-73d5-7961-9d17-1e38853386eb"},{"id":"chg_01a1a536-73ea-7349-8884-41682e0b9cb0","kind":"capture.status_changed","summary":"Endpoint reachability (reachable → behind authorisation)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a1a536-73ea-7349-8884-41682e0b9cb0"},{"id":"chg_01a1a536-73eb-706d-ac48-e1f3c5085c4c","kind":"score.total_changed","summary":"Trust score (72 → 39)","materiality":"functional","direction":"regression","scoreDelta":-33,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a1a536-73eb-706d-ac48-e1f3c5085c4c"},{"id":"chg_01a1a012-d02c-7399-9667-665846ab1a8a","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a1a012-d02c-7399-9667-665846ab1a8a"},{"id":"chg_01a19ae6-69b4-79dc-b5c5-8ba2047ee2f3","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a19ae6-69b4-79dc-b5c5-8ba2047ee2f3"},{"id":"chg_01a19922-271a-73c9-b11d-d084a1b22f75","kind":"check.reverified","summary":"Transport (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a19922-271a-73c9-b11d-d084a1b22f75"},{"id":"chg_01a19922-271c-7271-be8a-d0fbe370bff6","kind":"check.verdict","summary":"Authorization (fail → partial)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a19922-271c-7271-be8a-d0fbe370bff6"},{"id":"chg_01a19922-271c-771b-ae5f-4b5b93aa32dc","kind":"check.reverified","summary":"Injection markers (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a19922-271c-771b-ae5f-4b5b93aa32dc"},{"id":"chg_01a19922-271c-7ce5-8e04-1dc67751e183","kind":"check.appeared","summary":"First check of Judged manipulation (pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a19922-271c-7ce5-8e04-1dc67751e183"},{"id":"chg_01a19922-271d-78a2-9090-9c31e3db8e69","kind":"check.reverified","summary":"MCP protocol (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a19922-271d-78a2-9090-9c31e3db8e69"},{"id":"chg_01a19922-2720-7211-a62f-dc59ad54f636","kind":"check.reverified","summary":"Tool coverage (unverified → 100)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a19922-2720-7211-a62f-dc59ad54f636"},{"id":"chg_01a19922-2720-7c5b-b853-80b2a0e0f58a","kind":"check.appeared","summary":"First check of Schema quality (fail)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a19922-2720-7c5b-b853-80b2a0e0f58a"},{"id":"chg_01a19922-2721-774a-98e7-66617bc2870b","kind":"check.appeared","summary":"First check of Destructive annotations (pass)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a19922-2721-774a-98e7-66617bc2870b"},{"id":"chg_01a19922-2722-7140-b486-a04fdb1b0051","kind":"check.appeared","summary":"First check of Schema quality (pass)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp#chg-chg_01a19922-2722-7140-b486-a04fdb1b0051"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp","markdown":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp.md","changelogJson":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/com-omnicost-catalog/api-mcp.xml","external":[{"label":"Remote endpoint","href":"https://omnicost.com/api/mcp"},{"label":"Repository","href":"https://github.com/sinequix/omnicost-mcp"},{"label":"Website","href":"https://omnicost.com/"}]}}