<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.cyanheads/met-museum-mcp-server · met-museum · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] met-museum: Tool “met_get_object” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_01a088e6-6f36-7d93-8e8e-893fdbb2e898</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_01a088e6-6f36-7d93-8e8e-893fdbb2e898</guid><description>Tool “met_get_object” rewrote its description, which is the text the model reads. Compared against 2026-09-10.</description><pubDate>Thu, 10 Sep 2026 01:19:58 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] met-museum: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_01a088ae-955b-7b9e-9b6c-b8604f231421</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_01a088ae-955b-7b9e-9b6c-b8604f231421</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 00:18:57 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item><item><title>[SECURITY] met-museum: Tool “met_search_collections” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_01a088ae-9559-79dd-b640-eb5a8ee92013</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_01a088ae-9559-79dd-b640-eb5a8ee92013</guid><description>Tool “met_search_collections” rewrote its description, which is the text the model reads. Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 00:18:57 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] met-museum: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_01a0848d-c0f7-71a4-9f7c-ae24af29a911</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_01a0848d-c0f7-71a4-9f7c-ae24af29a911</guid><description>Stability (0.97 → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 05:04:37 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] met-museum: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_01a0374e-3796-732a-8000-1bb506712f53</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_01a0374e-3796-732a-8000-1bb506712f53</guid><description>Stability (0.97 → pass). Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 05:04:27 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] met-museum: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 3 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fea0f-458c-789c-8728-9fc0df3fb0aa</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fea0f-458c-789c-8728-9fc0df3fb0aa</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 3 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 05:04:57 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] met-museum: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fea0f-458a-7618-91e0-cdbc63f1584c</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fea0f-458a-7618-91e0-cdbc63f1584c</guid><description>HSTS header (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 05:04:57 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] met-museum: Transport (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fea0f-458b-7e8d-a693-b49c87005566</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fea0f-458b-7e8d-a693-b49c87005566</guid><description>Transport (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 05:04:57 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] met-museum: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fdfc2-5aae-721b-b721-6508a375be3b</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fdfc2-5aae-721b-b721-6508a375be3b</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 05:04:44 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] met-museum: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fdfc2-5aac-70d3-b58e-22b5982fbe41</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fdfc2-5aac-70d3-b58e-22b5982fbe41</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 05:04:44 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] met-museum: Transport (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fdfc2-5aaa-7135-883e-40a8e30013fe</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fdfc2-5aaa-7135-883e-40a8e30013fe</guid><description>Transport (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 05:04:44 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] met-museum: Stability (0.40 → unverified)</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fdfc2-5aab-758b-9466-7290b326ffb7</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fdfc2-5aab-758b-9466-7290b326ffb7</guid><description>Stability (0.40 → unverified). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 05:04:44 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] met-museum: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fdfc2-5aab-7a01-9049-e334614e800a</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-met-museum-mcp-server/met-museum#chg-chg_019fdfc2-5aab-7a01-9049-e334614e800a</guid><description>HSTS header (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 05:04:44 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item></channel></rss>