<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.cyanheads/openfoodfacts-mcp-server · openfoodfacts · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] openfoodfacts: Tool “off_get_product” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a0b0bd-cbf6-7202-93bd-cce4c3cdf56d</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a0b0bd-cbf6-7202-93bd-cce4c3cdf56d</guid><description>Tool “off_get_product” rewrote its description, which is the text the model reads. Compared against 2026-09-17.</description><pubDate>Thu, 17 Sep 2026 19:00:23 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] openfoodfacts: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a0b087-1009-7637-8a3f-523e2738d645</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a0b087-1009-7637-8a3f-523e2738d645</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-09-17.</description><pubDate>Thu, 17 Sep 2026 18:00:36 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item><item><title>[SECURITY] openfoodfacts: Tool “off_search_products” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a0b087-1003-7ea8-aa1f-f5d10b54a511</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a0b087-1003-7ea8-aa1f-f5d10b54a511</guid><description>Tool “off_search_products” rewrote its description, which is the text the model reads. Compared against 2026-09-17.</description><pubDate>Thu, 17 Sep 2026 18:00:36 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] openfoodfacts: Tool “off_browse_taxonomy” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a0b087-0ffe-789d-a422-55d8691d43c8</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a0b087-0ffe-789d-a422-55d8691d43c8</guid><description>Tool “off_browse_taxonomy” rewrote its description, which is the text the model reads. Compared against 2026-09-17.</description><pubDate>Thu, 17 Sep 2026 18:00:36 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] openfoodfacts: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a083b4-5547-7be1-9c39-0057c234f5b6</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a083b4-5547-7be1-9c39-0057c234f5b6</guid><description>Stability (0.97 → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 01:07:08 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] openfoodfacts: Tool “off_browse_taxonomy” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a0371b-2c7f-7d30-be80-7d3025997f96</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a0371b-2c7f-7d30-be80-7d3025997f96</guid><description>Tool “off_browse_taxonomy” rewrote its description, which is the text the model reads. Compared against 2026-08-25.</description><pubDate>Tue, 25 Aug 2026 04:08:42 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] openfoodfacts: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a03675-3463-7b01-8b18-f8c1dc767805</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_01a03675-3463-7b01-8b18-f8c1dc767805</guid><description>Stability (0.97 → pass). Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 01:07:25 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] openfoodfacts: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fe935-f43a-7bd1-ba47-b3424eda8be8</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fe935-f43a-7bd1-ba47-b3424eda8be8</guid><description>HSTS header (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 01:07:35 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] openfoodfacts: Transport (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fe935-f440-75da-8d8c-922f4075e605</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fe935-f440-75da-8d8c-922f4075e605</guid><description>Transport (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 01:07:35 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] openfoodfacts: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fe935-f442-7f1f-9c85-de6c5ff07e44</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fe935-f442-7f1f-9c85-de6c5ff07e44</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 01:07:35 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] openfoodfacts: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fdee9-155d-711d-9bf3-6a3116da492c</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fdee9-155d-711d-9bf3-6a3116da492c</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 01:07:25 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] openfoodfacts: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fdee9-155b-7788-a5d3-d00a20737d7b</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fdee9-155b-7788-a5d3-d00a20737d7b</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 01:07:25 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] openfoodfacts: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fdee9-155b-7221-b41a-441334fe101c</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fdee9-155b-7221-b41a-441334fe101c</guid><description>HSTS header (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 01:07:25 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] openfoodfacts: Transport (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fdee9-155a-7097-8329-57805a660a9f</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fdee9-155a-7097-8329-57805a660a9f</guid><description>Transport (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 01:07:25 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] openfoodfacts: Stability (0.40 → unverified)</title><link>https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fdee9-155a-7c81-b403-99fe9969808c</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-openfoodfacts-mcp-server/openfoodfacts#chg-chg_019fdee9-155a-7c81-b403-99fe9969808c</guid><description>Stability (0.40 → unverified). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 01:07:25 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item></channel></rss>