<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.cyanheads/onebusaway-mcp-server · onebusaway · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] onebusaway: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_01a084fe-a45d-7c39-b4c2-dfa7ef28b186</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_01a084fe-a45d-7c39-b4c2-dfa7ef28b186</guid><description>Stability (0.97 → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 07:07:55 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] onebusaway: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_01a037b9-e780-77b2-b550-8243c6f747f8</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_01a037b9-e780-77b2-b550-8243c6f747f8</guid><description>Stability (0.97 → pass). Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 07:02:05 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] onebusaway: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 15 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fea7a-c0a9-7c33-ba81-945051defd96</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fea7a-c0a9-7c33-ba81-945051defd96</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 15 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 07:02:21 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] onebusaway: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fea7a-c0a7-7ed5-8a00-a96afd98d05f</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fea7a-c0a7-7ed5-8a00-a96afd98d05f</guid><description>HSTS header (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 07:02:21 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] onebusaway: Transport (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fea7a-c0a9-72c4-9c7a-ba5e5ae22fb3</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fea7a-c0a9-72c4-9c7a-ba5e5ae22fb3</guid><description>Transport (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 07:02:21 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] onebusaway: Stability (0.40 → unverified)</title><link>https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fe02d-e813-7f0d-aa4d-91ac06ec0b2a</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fe02d-e813-7f0d-aa4d-91ac06ec0b2a</guid><description>Stability (0.40 → unverified). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 07:02:12 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] onebusaway: Transport (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fe02d-e810-7bca-9422-8037905cd987</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fe02d-e810-7bca-9422-8037905cd987</guid><description>Transport (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 07:02:12 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] onebusaway: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fe02d-e814-7637-9a06-0943b77d61c2</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fe02d-e814-7637-9a06-0943b77d61c2</guid><description>HSTS header (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 07:02:12 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] onebusaway: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fe02d-e815-7588-9446-da66bcc4d415</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fe02d-e815-7588-9446-da66bcc4d415</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 07:02:12 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] onebusaway: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fe02d-e817-7c83-a9f0-f33402c7ce37</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-onebusaway-mcp-server/onebusaway#chg-chg_019fe02d-e817-7c83-a9f0-f33402c7ce37</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 07:02:12 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item></channel></rss>