<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Vendo AI · api · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api: Transport (pass → fail)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a09a43-803e-79a0-a052-71c7f2f52590</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a09a43-803e-79a0-a052-71c7f2f52590</guid><description>Transport (pass → fail). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 10:15:09 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] api: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a09a43-8040-7ab3-827f-044549cfd97d</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a09a43-8040-7ab3-827f-044549cfd97d</guid><description>Tool safety (pass → unverified). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 10:15:09 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a09a43-8041-718d-8d33-71979742edad</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a09a43-8041-718d-8d33-71979742edad</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 10:15:09 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a09a43-8042-7d61-8ae8-66028654bcaf</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a09a43-8042-7d61-8ae8-66028654bcaf</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 10:15:09 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] api: Transport (fail → pass)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a0951e-540f-752c-aa93-87e816ca6193</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a0951e-540f-752c-aa93-87e816ca6193</guid><description>Transport (fail → pass). Compared against 2026-09-11.</description><pubDate>Sat, 12 Sep 2026 10:16:27 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] api: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a0951e-5413-7158-8e66-6a61477125de</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a0951e-5413-7158-8e66-6a61477125de</guid><description>Injection markers (unverified → pass). Compared against 2026-09-11.</description><pubDate>Sat, 12 Sep 2026 10:16:27 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a0951e-5413-76c5-a856-4c1675df4543</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a0951e-5413-76c5-a856-4c1675df4543</guid><description>First check of Judged manipulation (pass). Compared against 2026-09-11.</description><pubDate>Sat, 12 Sep 2026 10:16:27 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item><item><title>[SECURITY] api: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 149 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a0951e-5413-7b08-bc19-2e8cebc278e2</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a0951e-5413-7b08-bc19-2e8cebc278e2</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 149 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-09-11.</description><pubDate>Sat, 12 Sep 2026 10:16:27 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a085a9-3263-7894-a574-7dee6e4664e0</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_01a085a9-3263-7894-a574-7dee6e4664e0</guid><description>HSTS header (fail → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 10:14:13 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] api: Transport (pass → fail)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_019fb2e6-fe94-730c-a9c8-d04070e67e00</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_019fb2e6-fe94-730c-a9c8-d04070e67e00</guid><description>Transport (pass → fail). Compared against 2026-07-29.</description><pubDate>Thu, 30 Jul 2026 12:01:50 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] api: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_019fb2e6-fe94-78e2-a319-ee2ee68b0f8f</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_019fb2e6-fe94-78e2-a319-ee2ee68b0f8f</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-07-29.</description><pubDate>Thu, 30 Jul 2026 12:01:50 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_019fb2e6-fe95-7d0a-a52a-cebae2a2e52d</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_019fb2e6-fe95-7d0a-a52a-cebae2a2e52d</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-07-29.</description><pubDate>Thu, 30 Jul 2026 12:01:50 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] api: Authorization (fail → unverified)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_019fadda-f67a-722d-8b96-309d068b3607</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_019fadda-f67a-722d-8b96-309d068b3607</guid><description>Authorization (fail → unverified). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 12:30:36 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api: Transport (unverified → pass)</title><link>https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_019fadda-f67a-788f-ab27-0fa5ea18f8f3</link><guid isPermaLink="true">https://verifymcp.io/servers/com-vendo-ai-vendo-ai/api#chg-chg_019fadda-f67a-788f-ab27-0fa5ea18f8f3</guid><description>Transport (unverified → pass). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 12:30:36 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item></channel></rss>