{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T17:20:49.552Z","url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp.md","server":{"slug":"com-terravaulthq-licenses","name":"TerraVault","registryName":"com.terravaulthq/licenses","description":"U.S. state cannabis license lookups, licensed stores nearby, CA recalls. Read-only, no key.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"api-mcp","type":"remote","identifier":"https://terravaulthq.com/api/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp","version":"1.0.0","transport":null,"scoredAt":"2026-11-06T04:22:10.963Z"},"score":{"total":76,"tier":"medium","status":"scored","weekDelta":3,"history":[{"date":"2026-11-06","total":76},{"date":"2026-11-05","total":76},{"date":"2026-11-04","total":75},{"date":"2026-11-03","total":75},{"date":"2026-11-02","total":74},{"date":"2026-11-01","total":74},{"date":"2026-10-31","total":73},{"date":"2026-10-30","total":73},{"date":"2026-10-29","total":72},{"date":"2026-10-28","total":72},{"date":"2026-10-27","total":72},{"date":"2026-10-26","total":71},{"date":"2026-10-25","total":71}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":75,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 839 tokens (~119/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"119","items":"7","tools":"7","tokens":"839","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":40,"verdict":"partial","reasons":["Stability observed for 12 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"12"}}]},{"name":"Tool Coverage","score":94,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","83% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"83"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"7"}},{"code":"toolsafety.manipulation_clean","args":{"units":"8","judged":"8"}}]},{"name":"Capabilities","score":40,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-03-26"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"api-mcp","type":"remote","identifier":"https://terravaulthq.com/api/mcp","withdrawn":false,"score":76,"current":true,"url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://terravaulthq.com/api/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"lookup_license","title":"Look up a license","description":"Look up a cannabis or hemp business license by license number or business name on the state lists TerraVault reads (CA, CO, CT, DC, FL, IL, MA, MD, ME, MN, MO, NJ, NV, NY, OH, OR, VT, WA). Returns the license type, status as the state prints it, city and county, the date the list was read, the state's own record link and the TerraVault page. Never returns phone numbers, emails or owner details.","inputs":[{"name":"query","type":"string","required":true,"description":"A license number (e.g. C10-0000123-LIC) or part of a business name."},{"name":"state","type":"string","required":false,"description":"Optional two-letter state code."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":151},{"name":"licensed_near","title":"Licensed stores near a place","description":"Find licensed cannabis stores and delivery services near a ZIP code, or near a city in a given state, nearest first, from the state's own license lists. Each result has its distance, how the distance was measured, and its TerraVault page. A result of kind \"maker\" is a New York microbusiness that sells only what it grows and makes itself. A license is not a promise a store is open or has an item.","inputs":[{"name":"city","type":"string","required":false,"description":"City name; give state too."},{"name":"kind","type":"string","required":false,"description":null},{"name":"limit","type":"integer","required":false,"description":null},{"name":"miles","type":"integer","required":false,"description":null},{"name":"state","type":"string","required":false,"description":"Two-letter state code, needed with city."},{"name":"zip","type":"string","required":false,"description":"US ZIP code."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":155},{"name":"organic_growers","title":"OCal organic-standard growers","description":"List cannabis growers and distributors certified under OCal, California's comparable-to-organic standard, from the state's own list, with links to their TerraVault license pages where the name matches. Optional city or county filter. California only.","inputs":[{"name":"city","type":"string","required":false,"description":"Optional California city."},{"name":"county","type":"string","required":false,"description":"Optional California county, e.g. Humboldt."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":81},{"name":"state_license_counts","title":"License counts for a state","description":"Count the active cannabis licenses on one state's list, by license type, with the date the list was last read and the state agency that publishes it.","inputs":[{"name":"state","type":"string","required":true,"description":"Two-letter state code."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":50},{"name":"check_recall","title":"Check a California cannabis recall","description":"Check a cannabis package or license against California's own cannabis recall list. Give the package UID, a batch number with its maker, or a license number. Answers RECALLED only on an exact match, SOLD_RECALLED_PRODUCT when the state lists the license only as a store that sold a recalled product, NOT_IN_INDEX with the date the list was read, or NOT_CHECKED when it cannot say. Never answers that a product is safe. California only.","inputs":[{"name":"batch","type":"string","required":false,"description":"The batch number on the label; give maker or licenseNumber with it."},{"name":"licenseNumber","type":"string","required":false,"description":"A California cannabis license number."},{"name":"maker","type":"string","required":false,"description":"The maker or brand named on the label."},{"name":"uid","type":"string","required":false,"description":"The track-and-trace UID printed on the package."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":167},{"name":"state_license_report","title":"Monthly license report for a state","description":"One state's monthly cannabis license report from its own published list: licenses at the start and end of the month, first seen, left and came back, by license type, county and city. Reports start October 2026. Defaults to the month in progress.","inputs":[{"name":"month","type":"string","required":false,"description":"YYYY-MM, from 2026-10."},{"name":"state","type":"string","required":true,"description":"Two-letter state code."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":88},{"name":"marys_desk","title":"Today's cannabis license and recall update","description":"Mary's Desk: TerraVault's short daily update from its own records. Licenses first seen on or gone from each state's published list since the previous update, new California cannabis recalls, and California's month-to-date license report. Every line names its source and the date it was read. Returns the latest day by default, up to the last 7.","inputs":[{"name":"days","type":"integer","required":false,"description":"How many recent daily entries to return."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":95}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T04:22:10.000Z","track":"remote","endpoint":"https://terravaulthq.com/api/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=terravaulthq.com","issuer":"CN=YE2,O=Let's Encrypt,C=US","notBefore":"2026-09-17T05:48:53Z","notAfter":"2026-12-16T05:48:52Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=YE2,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"terravaulthq.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"terravaulthq.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-25","recent":[{"id":"chg_01a1af17-bd26-7079-bbf7-e3ead149081d","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp#chg-chg_01a1af17-bd26-7079-bbf7-e3ead149081d"},{"id":"chg_01a1a9f4-eef7-7cac-ab1d-438e5b2acd3f","kind":"score.total_changed","summary":"Trust score (75 → 76)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp#chg-chg_01a1a9f4-eef7-7cac-ab1d-438e5b2acd3f"},{"id":"chg_01a19fa4-c858-7179-a60c-691f59d3027c","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp#chg-chg_01a19fa4-c858-7179-a60c-691f59d3027c"},{"id":"chg_01a19556-6310-7420-9529-e3f44263033a","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp#chg-chg_01a19556-6310-7420-9529-e3f44263033a"},{"id":"chg_01a18b09-eed4-7e8c-a7b3-4d50c573ae4b","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp#chg-chg_01a18b09-eed4-7e8c-a7b3-4d50c573ae4b"},{"id":"chg_01a17b96-8504-78ea-9539-1a7282043885","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp#chg-chg_01a17b96-8504-78ea-9539-1a7282043885"},{"id":"chg_01a17670-cb57-7c4e-9df1-9350150064fa","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp#chg-chg_01a17670-cb57-7c4e-9df1-9350150064fa"},{"id":"chg_01a174de-79dc-7216-8220-a3fa9be0471b","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp#chg-chg_01a174de-79dc-7216-8220-a3fa9be0471b"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp","markdown":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp.md","changelogJson":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/com-terravaulthq-licenses/api-mcp.xml","external":[{"label":"Remote endpoint","href":"https://terravaulthq.com/api/mcp"},{"label":"Website","href":"https://terravaulthq.com/connect/tools"}]}}