<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.cyanheads/pentest-mcp-server · pentest · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] pentest: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a084c3-31c0-7210-9963-10a791096d06</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a084c3-31c0-7210-9963-10a791096d06</guid><description>Stability (0.97 → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 06:02:59 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] pentest: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a03783-faae-7e1d-82a8-b41ce952f5d8</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a03783-faae-7e1d-82a8-b41ce952f5d8</guid><description>Stability (0.97 → pass). Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 06:03:11 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] pentest: Tool “pentest_map_techniques” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7e-72f1-9d7f-54d8eef9de98</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7e-72f1-9d7f-54d8eef9de98</guid><description>Tool “pentest_map_techniques” rewrote its description, which is the text the model reads. Compared against 2026-08-21.</description><pubDate>Sat, 22 Aug 2026 01:03:55 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] pentest: Tool “pentest_lookup_technique” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7d-7db6-a7b3-e4e759d3e1f9</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7d-7db6-a7b3-e4e759d3e1f9</guid><description>Tool “pentest_lookup_technique” rewrote its description, which is the text the model reads. Compared against 2026-08-21.</description><pubDate>Sat, 22 Aug 2026 01:03:55 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] pentest: Tool “pentest_lookup_group” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7d-77f4-8089-c879b2589f63</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7d-77f4-8089-c879b2589f63</guid><description>Tool “pentest_lookup_group” rewrote its description, which is the text the model reads. Compared against 2026-08-21.</description><pubDate>Sat, 22 Aug 2026 01:03:55 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] pentest: Tool “pentest_guide” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7c-72f6-b764-5692ea2af712</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7c-72f6-b764-5692ea2af712</guid><description>Tool “pentest_guide” rewrote its description, which is the text the model reads. Compared against 2026-08-21.</description><pubDate>Sat, 22 Aug 2026 01:03:55 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] pentest: Tool “pentest_generate_payloads” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7b-7584-8497-b738737b0e01</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7b-7584-8497-b738737b0e01</guid><description>Tool “pentest_generate_payloads” rewrote its description, which is the text the model reads. Compared against 2026-08-21.</description><pubDate>Sat, 22 Aug 2026 01:03:55 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] pentest: Tool “pentest_encode” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7a-7794-8d63-6a888dcd74b7</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb7a-7794-8d63-6a888dcd74b7</guid><description>Tool “pentest_encode” rewrote its description, which is the text the model reads. Compared against 2026-08-21.</description><pubDate>Sat, 22 Aug 2026 01:03:55 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] pentest: Tool “pentest_analyze_response” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb79-72d8-a909-d757e883d3df</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_01a026fe-eb79-72d8-a909-d757e883d3df</guid><description>Tool “pentest_analyze_response” rewrote its description, which is the text the model reads. Compared against 2026-08-21.</description><pubDate>Sat, 22 Aug 2026 01:03:55 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] pentest: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fea43-f506-7754-a289-302d2b2b6661</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fea43-f506-7754-a289-302d2b2b6661</guid><description>HSTS header (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 06:02:29 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] pentest: Transport (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fea43-f507-795d-886b-de0f82b15374</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fea43-f507-795d-886b-de0f82b15374</guid><description>Transport (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 06:02:29 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] pentest: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 7 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fea43-f508-79ec-8ca8-99df3eae1d97</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fea43-f508-79ec-8ca8-99df3eae1d97</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 7 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 06:02:29 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] pentest: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fdff7-0e4f-7343-aa29-2a9beebbe030</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fdff7-0e4f-7343-aa29-2a9beebbe030</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 06:02:18 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] pentest: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fdff7-0e4b-729c-a6be-9436a308e1c9</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fdff7-0e4b-729c-a6be-9436a308e1c9</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 06:02:18 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] pentest: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fdff7-0e4a-7bf2-a245-a56d04e3f081</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fdff7-0e4a-7bf2-a245-a56d04e3f081</guid><description>HSTS header (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 06:02:18 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] pentest: Stability (0.40 → unverified)</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fdff7-0e49-7eb7-9a76-9049df8a3c91</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fdff7-0e49-7eb7-9a76-9049df8a3c91</guid><description>Stability (0.40 → unverified). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 06:02:18 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] pentest: Transport (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fdff7-0e48-7bcb-9511-18acce09eac5</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-pentest-mcp-server/pentest#chg-chg_019fdff7-0e48-7bcb-9511-18acce09eac5</guid><description>Transport (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 06:02:18 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item></channel></rss>