{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:08:59.388Z","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp","markdownUrl":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp.md","server":{"slug":"com-oneover-mcp","name":"OneOver","registryName":"com.oneover/mcp","description":"Chat, image, video, and audio models from many vendors behind one remote MCP server and one key.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"functions-v1-mcp","type":"remote","identifier":"https://api.oneover.com/functions/v1/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp","version":"2.0.0","transport":null,"scoredAt":"2026-11-05T07:21:11.867Z"},"score":{"total":81,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":81},{"date":"2026-11-04","total":80},{"date":"2026-11-03","total":80},{"date":"2026-11-02","total":79},{"date":"2026-11-01","total":79},{"date":"2026-10-31","total":79},{"date":"2026-10-30","total":78},{"date":"2026-10-29","total":78},{"date":"2026-10-28","total":77},{"date":"2026-10-27","total":77},{"date":"2026-10-26","total":76},{"date":"2026-10-25","total":76},{"date":"2026-10-24","total":75},{"date":"2026-10-23","total":75},{"date":"2026-10-22","total":74},{"date":"2026-10-21","total":74},{"date":"2026-10-20","total":71}]},"categories":[{"name":"Endpoint Security","score":94,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC.","The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.rfc9728_invoke","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}},{"code":"auth.registration_dcr_only","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":60,"verdict":"fail","reasons":["71% of prompts and resources have a non-trivial description (not blank, and not just the item's name).","AI-judged instruction clarity (fair).","Tool/resource definitions use about 944 tokens (~39/item across 24 items; 18 tools + 6 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.descriptions","args":{"pct":"71"}},{"code":"schema.ai_quality","args":{"band":"fair"}},{"code":"schema.footprint_lean","args":{"avg":"39","items":"24","tools":"18","tokens":"944","resources":"6"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":47,"verdict":"fail","reasons":["Stability check failed: schema churn in the 16 days we've observed: 1 tool removals, 0 breaking changes, 0 auth/transport breaks, 0 additions."],"codes":[{"code":"stability.churn","args":{"days":"16","added":"0","breaks":"0","removed":"1","auth_transport":"0"}}]},{"name":"Tool Coverage","score":72,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","17% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"17"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.","An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_declared","args":{"pct":"100","annotated":"2","destructive":"2"}},{"code":"toolsafety.manipulation_clean","args":{"units":"19","judged":"19"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.","Supports UI / widget rendering."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}},{"code":"cap.ui_supported","args":{}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"functions-v1-mcp","type":"remote","identifier":"https://api.oneover.com/functions/v1/mcp","withdrawn":false,"score":81,"current":true,"url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp","markdownUrl":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://api.oneover.com/functions/v1/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"required"},{"label":"Version","value":"2.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"chat","title":"Chat with a model","description":"Stateless chat completion across any text model in your org catalog.","inputs":[{"name":"max_tokens","type":"number","required":false,"description":null},{"name":"messages","type":"array","required":true,"description":"Conversation turns"},{"name":"model","type":"string","required":true,"description":"Text model ID"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":46},{"name":"generate_image","title":"Generate an image","description":"Generate an image from a text prompt.","inputs":[{"name":"aspect_ratio","type":"string","required":false,"description":null},{"name":"model","type":"string","required":true,"description":null},{"name":"negative_prompt","type":"string","required":false,"description":null},{"name":"prompt","type":"string","required":true,"description":null},{"name":"resolution_tier","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":55},{"name":"generate_video","title":"Generate a video","description":"Submit an async video generation job. Returns request_id. If a video card is shown it updates itself and you do not need to poll. Otherwise poll with check_video.","inputs":[{"name":"aspect_ratio","type":"string","required":false,"description":null},{"name":"duration","type":"number","required":false,"description":null},{"name":"generate_audio","type":"boolean","required":false,"description":null},{"name":"model","type":"string","required":true,"description":null},{"name":"prompt","type":"string","required":false,"description":null},{"name":"reference_image","type":"string","required":false,"description":"Base64-encoded image"},{"name":"resolution","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":99},{"name":"check_video","title":"Check video job status","description":"Poll a video job until complete or failed. Shows text only. Do not call it repeatedly while a video card is on screen, because that card updates itself.","inputs":[{"name":"request_id","type":"string","required":true,"description":"UUID from generate_video"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":52},{"name":"generate_audio","title":"Generate speech or music","description":"Generate speech or music audio.","inputs":[{"name":"audio_kind","type":"string","required":false,"description":null},{"name":"duration_seconds","type":"number","required":false,"description":null},{"name":"model","type":"string","required":true,"description":null},{"name":"prompt","type":"string","required":true,"description":null},{"name":"voice","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":51},{"name":"list_models","title":"List available models","description":"List models visible to your organization.","inputs":[{"name":"type","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":22},{"name":"get_usage","title":"Get credit balance and usage","description":"Get org credit balance or usage reporting.","inputs":[{"name":"days","type":"number","required":false,"description":null},{"name":"limit","type":"number","required":false,"description":null},{"name":"view","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":37},{"name":"run_app","title":"Run a OneOver app","description":"Run a Play app (upscale, transform, etc.) against a prompt.","inputs":[{"name":"app_id","type":"string","required":true,"description":null},{"name":"model","type":"string","required":false,"description":null},{"name":"prompt","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":46},{"name":"list_assets","title":"List library assets","description":"List API-generated library assets.","inputs":[{"name":"limit","type":"number","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":21},{"name":"create_run","title":"Start a durable run","description":"Start a durable OneOver run. It keeps going after the client disconnects. Poll with get_run.","inputs":[{"name":"background","type":"boolean","required":false,"description":null},{"name":"input","type":"object","required":false,"description":null},{"name":"modality","type":"string","required":false,"description":null},{"name":"model","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":57},{"name":"get_run","title":"Read a run","description":"Read a durable run and the events after a cursor.","inputs":[{"name":"after","type":"number","required":false,"description":null},{"name":"run_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":34},{"name":"get_job","title":"Check a generation job","description":"Poll a unified generation job by request_id.","inputs":[{"name":"request_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":25},{"name":"build_create","title":"Start a Code Studio build","description":"Start a Code Studio build: describe a page or small web app and OneOver writes the files. Returns build_id and build_project_id right away; the build keeps running. If a build card is shown it updates itself. Otherwise poll with build_status. The finished page is saved to the account library.","inputs":[{"name":"model","type":"string","required":false,"description":"Optional model id. Defaults to build-default."},{"name":"prompt","type":"string","required":true,"description":"What to build"},{"name":"title","type":"string","required":false,"description":"Optional name for the project"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":106},{"name":"build_iterate","title":"Iterate on a Code Studio build","description":"Send a follow-up instruction to an existing build. Only one build can run on a project at a time.","inputs":[{"name":"build_project_id","type":"string","required":true,"description":null},{"name":"model","type":"string","required":false,"description":null},{"name":"prompt","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":54},{"name":"build_status","title":"Check a build","description":"State of a build: running, complete, failed or stopped, plus file list, credits charged, and the share link once published.","inputs":[{"name":"build_project_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":44},{"name":"build_get_files","title":"Read build files","description":"Read the files of a build. Pass path to read one file.","inputs":[{"name":"build_project_id","type":"string","required":true,"description":null},{"name":"path","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":39},{"name":"build_stop","title":"Stop a build","description":"Stop a running build. Files already written are kept. Safe to call twice.","inputs":[{"name":"build_id","type":"string","required":true,"description":"build_id from build_create or build_iterate"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":41},{"name":"build_publish","title":"Publish a build","description":"Publish a build to an unlisted share link at oneover.com/p/<slug>. Needs an HTML file.","inputs":[{"name":"build_project_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":39}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T07:21:11.000Z","track":"remote","endpoint":"https://api.oneover.com/functions/v1/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=api.oneover.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-28T22:58:57Z","notAfter":"2027-01-26T23:58:55Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"api.oneover.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"oneover.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"enforced_validated","label":"Enforced and verified","gate":"invoke","gateLabel":"On tool calls","status":200,"authorizationServers":["https://oneover.com"]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-20","recent":[{"id":"chg_01a1aa95-45d0-7d0c-8281-71ee66c6e1a4","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a1aa95-45d0-7d0c-8281-71ee66c6e1a4"},{"id":"chg_01a1a04b-0bad-73d7-9b83-4a7430096728","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a1a04b-0bad-73d7-9b83-4a7430096728"},{"id":"chg_01a190cb-6aaa-7cbc-9736-faf06ff93c25","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a190cb-6aaa-7cbc-9736-faf06ff93c25"},{"id":"chg_01a18681-ac52-76cd-ba45-8d7811f37c63","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a18681-ac52-76cd-ba45-8d7811f37c63"},{"id":"chg_01a17c33-3311-7d2a-8868-e49353fb1482","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a17c33-3311-7d2a-8868-e49353fb1482"},{"id":"chg_01a171e7-37bb-72b6-9028-7bc5dc9949c0","kind":"score.total_changed","summary":"Trust score (75 → 76)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a171e7-37bb-72b6-9028-7bc5dc9949c0"},{"id":"chg_01a1679a-bbaf-7b8e-9621-79382e03f1d1","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a1679a-bbaf-7b8e-9621-79382e03f1d1"},{"id":"chg_01a15d4d-c941-7888-ac60-692eef32896e","kind":"check.reverified","summary":"Stability (unverified → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c941-7888-ac60-692eef32896e"},{"id":"chg_01a15d4d-c942-7ba9-9534-0bb63ab18736","kind":"check.verdict","summary":"Authorization (fail → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c942-7ba9-9534-0bb63ab18736"},{"id":"chg_01a15d4d-c943-72e7-8232-24d00daa37f1","kind":"check.appeared","summary":"First check of Authorization (partial)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c943-72e7-8232-24d00daa37f1"},{"id":"chg_01a15d4d-c944-791c-969f-890f0e1deeca","kind":"check.verdict","summary":"MCP protocol (fail → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c944-791c-969f-890f0e1deeca"},{"id":"chg_01a15d4d-c944-7dea-bcfd-b0ec4ed51fda","kind":"tool.destructive_set","summary":"Tool “build_publish” is now declared destructive","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c944-7dea-bcfd-b0ec4ed51fda"},{"id":"chg_01a15d4d-c945-752b-bbcd-d174dec87c1b","kind":"tool.title_changed","summary":"Tool “build_publish” changed its title (Publish a build to an unlisted link → Publish a build)","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c945-752b-bbcd-d174dec87c1b"},{"id":"chg_01a15d4d-c946-7061-a230-ec1d17af4c2a","kind":"tool.destructive_set","summary":"Tool “build_stop” is now declared destructive","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c946-7061-a230-ec1d17af4c2a"},{"id":"chg_01a15d4d-c946-75c5-a955-27630a52cb25","kind":"tool.removed","summary":"Tool “create_topup” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c946-75c5-a955-27630a52cb25"},{"id":"chg_01a15d4d-c946-7b82-8090-80885469e91b","kind":"protocol.version_changed","summary":"MCP protocol version (2025-03-26 → 2025-11-25)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c946-7b82-8090-80885469e91b"},{"id":"chg_01a15d4d-c947-72f0-b3ad-cdd2700cc3bd","kind":"server.breaking_without_version_bump","summary":"A breaking change shipped without a version bump (still 2.0.0)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c947-72f0-b3ad-cdd2700cc3bd"},{"id":"chg_01a15d4d-c947-7e6a-afd0-6bf88af60001","kind":"score.total_changed","summary":"Trust score (71 → 74)","materiality":"functional","direction":"improvement","scoreDelta":3,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a15d4d-c947-7e6a-afd0-6bf88af60001"},{"id":"chg_01a1574a-477a-7631-8ffd-b851f939f15b","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp#chg-chg_01a1574a-477a-7631-8ffd-b851f939f15b"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp","markdown":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp.md","changelogJson":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/com-oneover-mcp/functions-v1-mcp.xml","external":[{"label":"Remote endpoint","href":"https://api.oneover.com/functions/v1/mcp"},{"label":"Authorisation metadata","href":"https://api.oneover.com/.well-known/oauth-protected-resource/functions/v1/mcp"},{"label":"Website","href":"https://oneover.com/developers/mcp"}]}}