<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.cyanheads/openfec-mcp-server · openfec · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] openfec: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_01a0853b-7c02-7dfa-81a9-2e5295958140</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_01a0853b-7c02-7dfa-81a9-2e5295958140</guid><description>Stability (0.97 → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 08:14:23 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] openfec: Tool “openfec_search_committees” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_01a05605-24ec-7107-a182-3645cdb0d842</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_01a05605-24ec-7107-a182-3645cdb0d842</guid><description>Tool “openfec_search_committees” rewrote its description, which is the text the model reads. Compared against 2026-08-30.</description><pubDate>Mon, 31 Aug 2026 04:12:52 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] openfec: Tool “openfec_search_candidates” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_01a05605-24ea-7874-823e-1ffa797bd268</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_01a05605-24ea-7874-823e-1ffa797bd268</guid><description>Tool “openfec_search_candidates” rewrote its description, which is the text the model reads. Compared against 2026-08-30.</description><pubDate>Mon, 31 Aug 2026 04:12:52 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] openfec: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_01a037c2-b9d5-775e-a23c-8f3523e24bb8</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_01a037c2-b9d5-775e-a23c-8f3523e24bb8</guid><description>Stability (0.97 → pass). Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 07:11:43 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] openfec: Transport (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019feaba-3adc-749b-a29f-ab1cd0013d07</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019feaba-3adc-749b-a29f-ab1cd0013d07</guid><description>Transport (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 08:11:41 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] openfec: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 12 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019feaba-3adc-7978-87ed-5f7d496d1500</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019feaba-3adc-7978-87ed-5f7d496d1500</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 12 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 08:11:41 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] openfec: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019feaba-3adb-7076-ac59-a11e1054b75a</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019feaba-3adb-7076-ac59-a11e1054b75a</guid><description>HSTS header (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 08:11:41 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] openfec: Transport (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019fe06d-1afd-7e7b-92d6-84a3c128d128</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019fe06d-1afd-7e7b-92d6-84a3c128d128</guid><description>Transport (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 08:11:14 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] openfec: Stability (0.40 → unverified)</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019fe06d-1aff-7538-b518-623f2bdcc3db</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019fe06d-1aff-7538-b518-623f2bdcc3db</guid><description>Stability (0.40 → unverified). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 08:11:14 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] openfec: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019fe06d-1aff-7988-8531-d4fd7f0d02c8</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019fe06d-1aff-7988-8531-d4fd7f0d02c8</guid><description>HSTS header (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 08:11:14 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] openfec: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019fe06d-1b00-7303-aae0-cfd703d445b4</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019fe06d-1b00-7303-aae0-cfd703d445b4</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 08:11:14 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] openfec: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019fe06d-1b01-79be-aad5-b5945eaee3de</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfec-mcp-server/openfec#chg-chg_019fe06d-1b01-79be-aad5-b5945eaee3de</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 08:11:14 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item></channel></rss>