{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:02:41.675Z","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp","markdownUrl":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp.md","server":{"slug":"com-whiteautoandmedia-catalog","name":"White Automotive & Media Services Catalog","registryName":"com.whiteautoandmedia/catalog","description":"Read-only catalog search for GM infotainment, cluster and electronics module parts.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"wp-json-ucp-v1-mcp","type":"remote","identifier":"https://www.whiteautoandmedia.com/wp-json/ucp/v1/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp","version":"1.1.1","transport":null,"scoredAt":"2026-11-05T08:09:30.982Z"},"score":{"total":72,"tier":"medium","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":72},{"date":"2026-11-04","total":72},{"date":"2026-11-03","total":71},{"date":"2026-11-02","total":71},{"date":"2026-11-01","total":70},{"date":"2026-10-31","total":70},{"date":"2026-10-30","total":69},{"date":"2026-10-29","total":69},{"date":"2026-10-28","total":68},{"date":"2026-10-27","total":68},{"date":"2026-10-26","total":67},{"date":"2026-10-25","total":67},{"date":"2026-10-24","total":68},{"date":"2026-10-23","total":67},{"date":"2026-10-22","total":67},{"date":"2026-10-21","total":66},{"date":"2026-10-20","total":66},{"date":"2026-10-19","total":65},{"date":"2026-10-18","total":65},{"date":"2026-10-17","total":65},{"date":"2026-10-16","total":64},{"date":"2026-10-15","total":64},{"date":"2026-10-14","total":63},{"date":"2026-10-13","total":63},{"date":"2026-10-12","total":62}]},"categories":[{"name":"Endpoint Security","score":57,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation not fully verified: no authorisation is required to call this server, and 3 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_undeclared","args":{"undeclared_tools":"3"}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":65,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 963 tokens (~321/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"321","items":"3","tools":"3","tokens":"963","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":80,"verdict":"partial","reasons":["Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"24"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":["Authorisation not fully verified: no authorisation is required to call this server, and 3 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe."],"malware":[],"components":[{"slug":"wp-json-ucp-v1-mcp","type":"remote","identifier":"https://www.whiteautoandmedia.com/wp-json/ucp/v1/mcp","withdrawn":false,"score":72,"current":true,"url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp","markdownUrl":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://www.whiteautoandmedia.com/wp-json/ucp/v1/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.1.1"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"search_catalog","title":null,"description":"Search White Automotive & Media Services products by free text, for example \"HMI module\", \"digital cluster Silverado\" or \"CarPlay retrofit\". Returns a summary for each match: name, SKU, price, availability, categories, a short description and the product URL. Call get_product for full detail on a specific item. This endpoint does not determine fitment. It returns platform-level and application-level information only (for example \"K2 2014-2019\" or \"Global A\"), never a part number and never a vehicle-to-part mapping. Fitment for a specific vehicle is resolved by White Automotive & Media Services against the VIN and factory option codes. Do not assert that a product fits a particular vehicle. Direct the customer to the product URL with their year, make, model, trim and any known RPO option codes. Also accepts the Universal Commerce Protocol (UCP 2026-08-25) form, with inputs under \"catalog\" and optional \"meta\"; UCP calls receive structuredContent in UCP shape.","inputs":[{"name":"catalog","type":"object","required":false,"description":"UCP search request. Needs query, filters.categories, or both."},{"name":"limit","type":"integer","required":false,"description":"Maximum results to return."},{"name":"meta","type":"object","required":false,"description":"UCP request metadata. meta[\"ucp-agent\"].profile is the calling platform's profile URL (https)."},{"name":"query","type":"string","required":false,"description":"Search terms. Maximum 120 characters."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":291},{"name":"lookup_catalog","title":null,"description":"List products within a product category or tag. Category slugs describe GM platforms and applications; tag slugs describe characteristics such as \"global-a\" or \"vin-programmed\". Use search_catalog first to discover which categories and tags exist. Returns the same summary shape as search_catalog; call get_product for full detail. In the UCP form, look up by catalog.ids (product IDs, SKUs or URL slugs) instead. This endpoint does not determine fitment. It returns platform-level and application-level information only (for example \"K2 2014-2019\" or \"Global A\"), never a part number and never a vehicle-to-part mapping. Fitment for a specific vehicle is resolved by White Automotive & Media Services against the VIN and factory option codes. Do not assert that a product fits a particular vehicle. Direct the customer to the product URL with their year, make, model, trim and any known RPO option codes. Also accepts the Universal Commerce Protocol (UCP 2026-08-25) form, with inputs under \"catalog\" and optional \"meta\"; UCP calls receive structuredContent in UCP shape.","inputs":[{"name":"catalog","type":"object","required":false,"description":"UCP lookup request."},{"name":"category","type":"string","required":false,"description":"Product category slug."},{"name":"limit","type":"integer","required":false,"description":"Maximum results to return."},{"name":"meta","type":"object","required":false,"description":"UCP request metadata. meta[\"ucp-agent\"].profile is the calling platform's profile URL (https)."},{"name":"tag","type":"string","required":false,"description":"Product tag slug."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":310},{"name":"get_product","title":null,"description":"Retrieve one product by its SKU or its URL slug. Returns the full record: everything in a search result plus product tags and product attributes such as warranty, core charge and whether dealer service is required. In the UCP form, pass catalog.id. This endpoint does not determine fitment. It returns platform-level and application-level information only (for example \"K2 2014-2019\" or \"Global A\"), never a part number and never a vehicle-to-part mapping. Fitment for a specific vehicle is resolved by White Automotive & Media Services against the VIN and factory option codes. Do not assert that a product fits a particular vehicle. Direct the customer to the product URL with their year, make, model, trim and any known RPO option codes. Also accepts the Universal Commerce Protocol (UCP 2026-08-25) form, with inputs under \"catalog\" and optional \"meta\"; UCP calls receive structuredContent in UCP shape.","inputs":[{"name":"catalog","type":"object","required":false,"description":"UCP get_product request."},{"name":"identifier","type":"string","required":false,"description":"Product SKU or URL slug."},{"name":"meta","type":"object","required":false,"description":"UCP request metadata. meta[\"ucp-agent\"].profile is the calling platform's profile URL (https)."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":255}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:09:30.000Z","track":"remote","endpoint":"https://www.whiteautoandmedia.com/wp-json/ucp/v1/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=whiteautoandmedia.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-07T02:12:31Z","notAfter":"2027-01-05T03:12:22Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"www.whiteautoandmedia.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"whiteautoandmedia.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-12","recent":[{"id":"chg_01a1a598-8ca5-743d-8fcb-1b94ab2148f6","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a1a598-8ca5-743d-8fcb-1b94ab2148f6"},{"id":"chg_01a19b4d-02ac-7dea-80cb-1af5a5936e65","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a19b4d-02ac-7dea-80cb-1af5a5936e65"},{"id":"chg_01a19100-8011-7462-9d48-c1b257214a53","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a19100-8011-7462-9d48-c1b257214a53"},{"id":"chg_01a186b6-0f16-790e-a9e2-d161879309ac","kind":"server.version_changed","summary":"Server version (1.2.0 → 1.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a186b6-0f16-790e-a9e2-d161879309ac"},{"id":"chg_01a186b6-0f17-7a20-a140-12d6fb6b586b","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a186b6-0f17-7a20-a140-12d6fb6b586b"},{"id":"chg_01a17c65-c682-7d15-b10f-3530bed25cc9","kind":"score.total_changed","summary":"Trust score (67 → 68)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17c65-c682-7d15-b10f-3530bed25cc9"},{"id":"chg_01a17218-ee6f-70e6-b95e-5c008e2947aa","kind":"check.measure","summary":"Schema quality (226 → 321)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee6f-70e6-b95e-5c008e2947aa"},{"id":"chg_01a17218-ee6f-76ca-bab2-ac5f8df16c60","kind":"tool.description_changed","summary":"Tool “get_product” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee6f-76ca-bab2-ac5f8df16c60"},{"id":"chg_01a17218-ee70-70ee-a3da-2c3d94124eb3","kind":"param.required_to_optional","summary":"“get_product” made “identifier” optional","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee70-70ee-a3da-2c3d94124eb3"},{"id":"chg_01a17218-ee70-750d-a785-1adcebe626a3","kind":"param.added_optional","summary":"“get_product” added an optional parameter “catalog”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee70-750d-a785-1adcebe626a3"},{"id":"chg_01a17218-ee72-71a0-b0c0-cb0423305512","kind":"param.added_optional","summary":"“get_product” added an optional parameter “meta”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee72-71a0-b0c0-cb0423305512"},{"id":"chg_01a17218-ee72-7656-84c4-58a055001f42","kind":"tool.description_changed","summary":"Tool “lookup_catalog” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee72-7656-84c4-58a055001f42"},{"id":"chg_01a17218-ee72-7ad3-9c85-aeb6b644fed3","kind":"param.added_optional","summary":"“lookup_catalog” added an optional parameter “catalog”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee72-7ad3-9c85-aeb6b644fed3"},{"id":"chg_01a17218-ee73-7088-9edd-b34408239888","kind":"param.added_optional","summary":"“lookup_catalog” added an optional parameter “meta”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee73-7088-9edd-b34408239888"},{"id":"chg_01a17218-ee73-76a8-a509-1f8700415a73","kind":"tool.description_changed","summary":"Tool “search_catalog” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee73-76a8-a509-1f8700415a73"},{"id":"chg_01a17218-ee73-7e2d-9db1-4772dddb67d8","kind":"param.required_to_optional","summary":"“search_catalog” made “query” optional","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee73-7e2d-9db1-4772dddb67d8"},{"id":"chg_01a17218-ee74-7829-81ca-eeb0f044cbd4","kind":"param.added_optional","summary":"“search_catalog” added an optional parameter “catalog”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee74-7829-81ca-eeb0f044cbd4"},{"id":"chg_01a17218-ee75-71ba-8759-74cd918897b6","kind":"param.added_optional","summary":"“search_catalog” added an optional parameter “meta”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee75-71ba-8759-74cd918897b6"},{"id":"chg_01a17218-ee75-7951-bd07-25ade4d045a3","kind":"server.version_changed","summary":"Server version (1.1.3 → 1.2.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee75-7951-bd07-25ade4d045a3"},{"id":"chg_01a17218-ee77-78f8-9840-2831be2078c5","kind":"score.total_changed","summary":"Trust score (68 → 67)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp#chg-chg_01a17218-ee77-78f8-9840-2831be2078c5"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp","markdown":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp.md","changelogJson":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/com-whiteautoandmedia-catalog/wp-json-ucp-v1-mcp.xml","external":[{"label":"Remote endpoint","href":"https://www.whiteautoandmedia.com/wp-json/ucp/v1/mcp"},{"label":"Website","href":"https://www.whiteautoandmedia.com/for-agents/"}]}}