<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>SecFeed: SEC EDGAR filings · secfeedapi · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] secfeedapi: Tool “investment_adviser” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a195b4-15ba-797a-b588-d3dddf205cee</link><guid isPermaLink="true">https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a195b4-15ba-797a-b588-d3dddf205cee</guid><description>Tool “investment_adviser” rewrote its description, which is the text the model reads. Compared against 2026-10-31.</description><pubDate>Sun, 01 Nov 2026 06:02:49 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] secfeedapi: Authorization (fail → unverified)</title><link>https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a176d8-ff61-743c-bc41-e3242aff74d6</link><guid isPermaLink="true">https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a176d8-ff61-743c-bc41-e3242aff74d6</guid><description>Authorization (fail → unverified). Compared against 2026-10-25.</description><pubDate>Mon, 26 Oct 2026 06:14:55 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] secfeedapi: Stability (0.23 → fail)</title><link>https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a176d8-ff62-7073-9ad8-ebe140a0ca4c</link><guid isPermaLink="true">https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a176d8-ff62-7073-9ad8-ebe140a0ca4c</guid><description>Stability (0.23 → fail). Compared against 2026-10-25.</description><pubDate>Mon, 26 Oct 2026 06:14:55 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] secfeedapi: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a16239-8920-7d6f-ada7-1492a023aa46</link><guid isPermaLink="true">https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a16239-8920-7d6f-ada7-1492a023aa46</guid><description>HSTS header (fail → pass). Compared against 2026-10-21.</description><pubDate>Thu, 22 Oct 2026 06:08:20 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] secfeedapi: Transport (unverified → pass)</title><link>https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a14da2-91c9-70f2-8c3f-0665c0fbd436</link><guid isPermaLink="true">https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a14da2-91c9-70f2-8c3f-0665c0fbd436</guid><description>Transport (unverified → pass). Compared against 2026-10-17.</description><pubDate>Sun, 18 Oct 2026 06:11:01 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] secfeedapi: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a14da2-91c9-79d3-a845-16aff7bdc5a5</link><guid isPermaLink="true">https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a14da2-91c9-79d3-a845-16aff7bdc5a5</guid><description>Injection markers (unverified → pass). Compared against 2026-10-17.</description><pubDate>Sun, 18 Oct 2026 06:11:01 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] secfeedapi: Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.)</title><link>https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a14da2-91ca-79f4-bb14-4f55f63b1b66</link><guid isPermaLink="true">https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a14da2-91ca-79f4-bb14-4f55f63b1b66</guid><description>Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.). Compared against 2026-10-17.</description><pubDate>Sun, 18 Oct 2026 06:11:01 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] secfeedapi: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a14da2-91cc-710f-a5b7-35b9ec651c64</link><guid isPermaLink="true">https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#chg-chg_01a14da2-91cc-710f-a5b7-35b9ec651c64</guid><description>First check of Judged manipulation (pass). Compared against 2026-10-17.</description><pubDate>Sun, 18 Oct 2026 06:11:01 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item></channel></rss>