<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>com.punchlistworks/site · punchlistworks · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] punchlistworks: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a0b281-7594-7954-bb30-8ee9485785be</link><guid isPermaLink="true">https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a0b281-7594-7954-bb30-8ee9485785be</guid><description>Injection markers (unverified → pass). Compared against 2026-09-17.</description><pubDate>Fri, 18 Sep 2026 03:13:43 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] punchlistworks: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 7 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a0b281-7595-7507-9312-d63297584ce1</link><guid isPermaLink="true">https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a0b281-7595-7507-9312-d63297584ce1</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 7 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-09-17.</description><pubDate>Fri, 18 Sep 2026 03:13:43 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] punchlistworks: Stability (unverified → fail)</title><link>https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a0ad5a-e555-764a-9932-7362937e5411</link><guid isPermaLink="true">https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a0ad5a-e555-764a-9932-7362937e5411</guid><description>Stability (unverified → fail). Compared against 2026-09-16.</description><pubDate>Thu, 17 Sep 2026 03:13:30 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] punchlistworks: Transport (fail → pass)</title><link>https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a0a835-0fa1-7bd3-9404-f88b1f6d0a8c</link><guid isPermaLink="true">https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a0a835-0fa1-7bd3-9404-f88b1f6d0a8c</guid><description>Transport (fail → pass). Compared against 2026-09-15.</description><pubDate>Wed, 16 Sep 2026 03:14:04 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] punchlistworks: HTTPS (fail → pass)</title><link>https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a0894f-34cf-732e-964a-64621c1991c3</link><guid isPermaLink="true">https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a0894f-34cf-732e-964a-64621c1991c3</guid><description>HTTPS (fail → pass). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 03:14:24 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] punchlistworks: Transport (pass → fail)</title><link>https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a07f03-4129-715a-928d-219c0098a34a</link><guid isPermaLink="true">https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a07f03-4129-715a-928d-219c0098a34a</guid><description>Transport (pass → fail). Compared against 2026-09-07.</description><pubDate>Tue, 08 Sep 2026 03:15:14 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] punchlistworks: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a07f03-4129-7ba0-8ca7-8942cff2cd56</link><guid isPermaLink="true">https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a07f03-4129-7ba0-8ca7-8942cff2cd56</guid><description>Tool safety (pass → unverified). Compared against 2026-09-07.</description><pubDate>Tue, 08 Sep 2026 03:15:14 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] punchlistworks: Stability (0.03 → unverified)</title><link>https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a07f03-412a-7065-bd4c-52b5a805a5b2</link><guid isPermaLink="true">https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a07f03-412a-7065-bd4c-52b5a805a5b2</guid><description>Stability (0.03 → unverified). Compared against 2026-09-07.</description><pubDate>Tue, 08 Sep 2026 03:15:14 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] punchlistworks: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a07f03-412a-7550-b60c-4f73d7e39026</link><guid isPermaLink="true">https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a07f03-412a-7550-b60c-4f73d7e39026</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.). Compared against 2026-09-07.</description><pubDate>Tue, 08 Sep 2026 03:15:14 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] punchlistworks: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a07f03-412b-76bd-aa92-5dfef04bd691</link><guid isPermaLink="true">https://verifymcp.io/servers/com-punchlistworks-site/punchlistworks#chg-chg_01a07f03-412b-76bd-aa92-5dfef04bd691</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-09-07.</description><pubDate>Tue, 08 Sep 2026 03:15:14 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item></channel></rss>