<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.cyanheads/fema-mcp-server · fema · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] fema: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_01a0bb78-2ec9-70e8-b4e9-b1f126dd74dc</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_01a0bb78-2ec9-70e8-b4e9-b1f126dd74dc</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-09-19.</description><pubDate>Sat, 19 Sep 2026 21:00:10 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item><item><title>[SECURITY] fema: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_01a0859c-9807-76c9-9875-584772503e2c</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_01a0859c-9807-76c9-9875-584772503e2c</guid><description>Stability (0.97 → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 10:00:27 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] fema: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_01a0385d-5b09-7b94-be46-e1578dff25d6</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_01a0385d-5b09-7b94-be46-e1578dff25d6</guid><description>Stability (0.97 → pass). Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 10:00:37 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] fema: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_01a031ed-fca8-7b86-863a-6d4f596ca2c2</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_01a031ed-fca8-7b86-863a-6d4f596ca2c2</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-08-23.</description><pubDate>Mon, 24 Aug 2026 04:01:15 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item><item><title>[SECURITY] fema: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019feb1f-4d80-765b-a3e1-a5bfc5db79e7</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019feb1f-4d80-765b-a3e1-a5bfc5db79e7</guid><description>HSTS header (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 10:02:04 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] fema: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 8 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019feb1f-4d81-7ad0-bccc-0b3f2943cb02</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019feb1f-4d81-7ad0-bccc-0b3f2943cb02</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 8 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 10:02:04 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] fema: Transport (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019feb1f-4d81-743c-9168-39e7f4d14915</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019feb1f-4d81-743c-9168-39e7f4d14915</guid><description>Transport (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 10:02:04 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] fema: Stability (0.40 → unverified)</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019fe0d2-751e-763e-b480-5f3c0f883881</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019fe0d2-751e-763e-b480-5f3c0f883881</guid><description>Stability (0.40 → unverified). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 10:01:56 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] fema: Transport (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019fe0d2-751d-79c1-95a5-03243386c21f</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019fe0d2-751d-79c1-95a5-03243386c21f</guid><description>Transport (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 10:01:56 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] fema: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019fe0d2-751e-7c0c-8fe8-964005cd2ae2</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019fe0d2-751e-7c0c-8fe8-964005cd2ae2</guid><description>HSTS header (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 10:01:56 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] fema: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019fe0d2-751f-780a-831d-6878d163658d</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019fe0d2-751f-780a-831d-6878d163658d</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 10:01:56 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] fema: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019fe0d2-7520-7c65-9fc7-b35a2dc8ada1</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-fema-mcp-server/fema#chg-chg_019fe0d2-7520-7c65-9fc7-b35a2dc8ada1</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 10:01:56 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item></channel></rss>