{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T16:32:29.939Z","url":"https://verifymcp.io/servers/com-sansglu-places/mcp","markdownUrl":"https://verifymcp.io/servers/com-sansglu-places/mcp.md","server":{"slug":"com-sansglu-places","name":"Sansglu","registryName":"com.sansglu/places","description":"Find gluten-free and celiac-friendly restaurants, bakeries and cafés in any city, on a map.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mcp","type":"remote","identifier":"https://mcp.sansglu.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-sansglu-places/mcp","version":"1.0.0","transport":null,"scoredAt":"2026-11-06T09:14:39.621Z"},"score":{"total":69,"tier":"medium","status":"scored","weekDelta":4,"history":[{"date":"2026-11-06","total":69},{"date":"2026-11-05","total":68},{"date":"2026-11-04","total":68},{"date":"2026-11-03","total":67},{"date":"2026-11-02","total":67},{"date":"2026-11-01","total":66},{"date":"2026-10-31","total":66},{"date":"2026-10-30","total":65},{"date":"2026-10-29","total":65},{"date":"2026-10-28","total":64},{"date":"2026-10-27","total":64},{"date":"2026-10-26","total":63},{"date":"2026-10-25","total":63},{"date":"2026-10-24","total":62},{"date":"2026-10-23","total":62},{"date":"2026-10-22","total":62},{"date":"2026-10-21","total":61},{"date":"2026-10-20","total":61}]},"categories":[{"name":"Endpoint Security","score":63,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.inconclusive","args":{"reason":"plaintext_status","status":"405"}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":41,"verdict":"fail","reasons":["0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).","AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 503 tokens (~167/item across 3 items; 2 tools + 1 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.descriptions","args":{"pct":"0"}},{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"167","items":"3","tools":"2","tokens":"503","resources":"1"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":57,"verdict":"partial","reasons":["Stability observed for 17 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"17"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 2 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"2"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a current MCP spec version (2026-07-28).","Supports UI / widget rendering."],"codes":[{"code":"protocol.current","args":{"version":"2026-07-28"}},{"code":"cap.ui_supported","args":{}}]}],"inconclusive":["HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement."],"malware":[],"components":[{"slug":"mcp","type":"remote","identifier":"https://mcp.sansglu.com/mcp","withdrawn":false,"score":69,"current":true,"url":"https://verifymcp.io/servers/com-sansglu-places/mcp","markdownUrl":"https://verifymcp.io/servers/com-sansglu-places/mcp.md"}],"facts":[{"label":"Endpoint","value":"https://mcp.sansglu.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"find_gluten_free_places","title":"Find gluten-free places","description":"Use this when someone asks where to eat gluten-free or with celiac disease, in a place they name or near them. People ask it like \"gluten free restaurants in Chicago\", \"where can I eat with celiac disease in Paris\", \"dedicated gluten-free bakery near me\", \"gluten free pizza in Brooklyn\", \"celiac friendly tacos in Austin\" or \"I'm celiac and visiting Tokyo next month, where should I eat?\". Returns places from Sansglu's gluten-free database on a map, each with its gluten-free label and its own website as the source. Do not use for recipes, packaged foods or grocery brands, ingredients, booking tables, hotels, symptoms or other medical questions.","inputs":[{"name":"label_filter","type":"string","required":false,"description":"Use \"dedicated_gf\" only when the person asks for fully gluten-free (dedicated) places."},{"name":"limit","type":"integer","required":false,"description":"How many places to return. Use 8 for trip planning."},{"name":"query","type":"string","required":true,"description":"What the person asked for and the area they named, in their words, for example \"dedicated gluten-free bakery in Austin\" or \"Nami Nori Williamsburg\". Never a street address or coordinates."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":248},{"name":"check_place_gluten_free_status","title":"Check a place","description":"Use this when someone asks about one named restaurant, bakery or café, like \"is Nami Nori gluten free?\", \"can I eat at this bakery with celiac?\" or \"does this place have a gluten-free menu?\". Returns Sansglu's gluten-free label and the place's own website as the source, or says Sansglu has no record. Do not use to find new places, and never for packaged foods, grocery products, brands or ingredients (cereal, sauces, beer).","inputs":[{"name":"query","type":"string","required":true,"description":"What the person asked for and the area they named, in their words, for example \"dedicated gluten-free bakery in Austin\" or \"Nami Nori Williamsburg\". Never a street address or coordinates."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":158}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T09:14:39.000Z","track":"remote","endpoint":"https://mcp.sansglu.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=sansglu.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-19T01:33:29Z","notAfter":"2027-01-17T02:33:26Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"mcp.sansglu.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"sansglu.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"inconclusive","label":"Inconclusive","status":405},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-20","recent":[{"id":"chg_01a1b023-8297-7d01-896f-c32e8b21fe59","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a1b023-8297-7d01-896f-c32e8b21fe59"},{"id":"chg_01a1a5d8-82dd-77cf-98da-6980165693ec","kind":"score.total_changed","summary":"Trust score (67 → 68)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a1a5d8-82dd-77cf-98da-6980165693ec"},{"id":"chg_01a19b89-5025-7240-b6c2-831b0b77cce3","kind":"score.total_changed","summary":"Trust score (66 → 67)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a19b89-5025-7240-b6c2-831b0b77cce3"},{"id":"chg_01a1913c-d1d1-7898-b50e-ead5af6cfa08","kind":"score.total_changed","summary":"Trust score (65 → 66)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a1913c-d1d1-7898-b50e-ead5af6cfa08"},{"id":"chg_01a186f4-046b-795d-a92f-59e2ea3277c7","kind":"score.total_changed","summary":"Trust score (64 → 65)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a186f4-046b-795d-a92f-59e2ea3277c7"},{"id":"chg_01a17ca4-bf58-7bf6-9d28-2194a3316321","kind":"score.total_changed","summary":"Trust score (63 → 64)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a17ca4-bf58-7bf6-9d28-2194a3316321"},{"id":"chg_01a17257-c334-73a8-a68d-0ec8c4ac1a5d","kind":"score.total_changed","summary":"Trust score (62 → 63)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a17257-c334-73a8-a68d-0ec8c4ac1a5d"},{"id":"chg_01a162e3-efbf-7a38-970d-aa8cce28d438","kind":"score.total_changed","summary":"Trust score (61 → 62)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a162e3-efbf-7a38-970d-aa8cce28d438"},{"id":"chg_01a15dbd-4dc5-7f14-b67f-38484cfb782e","kind":"check.measure","summary":"Schema quality (137 → 167)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a15dbd-4dc5-7f14-b67f-38484cfb782e"},{"id":"chg_01a15dbd-4dc6-7b29-8f40-59cddbb5b137","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a15dbd-4dc6-7b29-8f40-59cddbb5b137"},{"id":"chg_01a15dbd-4dc7-70f1-a517-2b5aa121e0c2","kind":"server.instructions_changed","summary":"The server rewrote its instructions, which are the text every model session reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a15dbd-4dc7-70f1-a517-2b5aa121e0c2"},{"id":"chg_01a15b1d-65be-7a06-bc02-be2dd58a3690","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/com-sansglu-places/mcp#chg-chg_01a15b1d-65be-7a06-bc02-be2dd58a3690"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-sansglu-places/mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-sansglu-places/mcp","markdown":"https://verifymcp.io/servers/com-sansglu-places/mcp.md","changelogJson":"https://verifymcp.io/servers/com-sansglu-places/mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/com-sansglu-places/mcp.xml","external":[{"label":"Remote endpoint","href":"https://mcp.sansglu.com/mcp"},{"label":"Website","href":"https://sansglu.com/"}]}}