<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>com.tunnelpowered/knowledge-base · api-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api-mcp: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0cca7-d600-73ec-b720-f50b1596cf34</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0cca7-d600-73ec-b720-f50b1596cf34</guid><description>HSTS header (fail → pass). Compared against 2026-09-22.</description><pubDate>Wed, 23 Sep 2026 05:05:46 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: Transport (fail → pass)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0cca7-d601-7343-89c0-c54c7ff15f88</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0cca7-d601-7343-89c0-c54c7ff15f88</guid><description>Transport (fail → pass). Compared against 2026-09-22.</description><pubDate>Wed, 23 Sep 2026 05:05:46 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0cca7-d601-7914-b2cb-c8c7c2d5e01b</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0cca7-d601-7914-b2cb-c8c7c2d5e01b</guid><description>Injection markers (unverified → pass). Compared against 2026-09-22.</description><pubDate>Wed, 23 Sep 2026 05:05:46 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp: Stability (unverified → pass)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0cca7-d601-7eda-bb8f-f6ffb8090e06</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0cca7-d601-7eda-bb8f-f6ffb8090e06</guid><description>Stability (unverified → pass). Compared against 2026-09-22.</description><pubDate>Wed, 23 Sep 2026 05:05:46 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 17 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0cca7-d602-757b-a707-1279df7fa790</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0cca7-d602-757b-a707-1279df7fa790</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 17 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-09-22.</description><pubDate>Wed, 23 Sep 2026 05:05:46 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api-mcp: Stability (pass → unverified)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba1-7cb8-b1bc-56590b2292bd</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba1-7cb8-b1bc-56590b2292bd</guid><description>Stability (pass → unverified). Compared against 2026-09-21.</description><pubDate>Tue, 22 Sep 2026 05:05:30 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api-mcp: Transport (pass → fail)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba2-7df9-8d88-69eed5b2036a</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba2-7df9-8d88-69eed5b2036a</guid><description>Transport (pass → fail). Compared against 2026-09-21.</description><pubDate>Tue, 22 Sep 2026 05:05:30 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba3-7517-b70e-b49825a0e8e5</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba3-7517-b70e-b49825a0e8e5</guid><description>Tool safety (pass → unverified). Compared against 2026-09-21.</description><pubDate>Tue, 22 Sep 2026 05:05:30 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api-mcp: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba3-7af7-a017-8056570a7d78</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba3-7af7-a017-8056570a7d78</guid><description>HSTS header (pass → fail). Compared against 2026-09-21.</description><pubDate>Tue, 22 Sep 2026 05:05:30 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba4-7114-89a3-251187af8a38</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba4-7114-89a3-251187af8a38</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.). Compared against 2026-09-21.</description><pubDate>Tue, 22 Sep 2026 05:05:30 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api-mcp: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba5-752a-85ab-f9443bb4c6c9</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a0c781-3ba5-752a-85ab-f9443bb4c6c9</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-09-21.</description><pubDate>Tue, 22 Sep 2026 05:05:30 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] api-mcp: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a04199-81ad-7cdc-9f5d-141983f93941</link><guid isPermaLink="true">https://verifymcp.io/servers/com-tunnelpowered-knowledge-base/api-mcp#chg-chg_01a04199-81ad-7cdc-9f5d-141983f93941</guid><description>Stability (0.97 → pass). Compared against 2026-08-26.</description><pubDate>Thu, 27 Aug 2026 05:02:54 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item></channel></rss>