<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.cyanheads/usaspending-mcp-server · usaspending · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] usaspending: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_01a08535-250c-76d2-ac9c-4342d91b0ae2</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_01a08535-250c-76d2-ac9c-4342d91b0ae2</guid><description>Stability (0.97 → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 08:07:27 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] usaspending: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 18 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019feab3-fbc4-71df-bf75-6c66dff08c0b</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019feab3-fbc4-71df-bf75-6c66dff08c0b</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 18 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 08:04:51 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] usaspending: Stability (unverified → fail)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019feab3-fbc1-7d9e-8411-cb6c4ceb3f0f</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019feab3-fbc1-7d9e-8411-cb6c4ceb3f0f</guid><description>Stability (unverified → fail). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 08:04:51 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] usaspending: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019feab3-fbc3-708d-8189-a6e1f7da4efa</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019feab3-fbc3-708d-8189-a6e1f7da4efa</guid><description>HSTS header (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 08:04:51 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] usaspending: Transport (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019feab3-fbc3-7d13-9cc3-f37c248abfb3</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019feab3-fbc3-7d13-9cc3-f37c248abfb3</guid><description>Transport (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 08:04:51 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] usaspending: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fe067-185b-7a8b-9d35-c7048fdcf7fb</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fe067-185b-7a8b-9d35-c7048fdcf7fb</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 08:04:40 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] usaspending: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fe067-185a-717f-96cc-79c3df806b06</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fe067-185a-717f-96cc-79c3df806b06</guid><description>HSTS header (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 08:04:40 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] usaspending: Transport (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fe067-1859-7b7c-be3a-2dc99db577d2</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fe067-1859-7b7c-be3a-2dc99db577d2</guid><description>Transport (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 08:04:40 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] usaspending: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fe067-185a-76f4-96bc-4a1676148eb5</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fe067-185a-76f4-96bc-4a1676148eb5</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 08:04:40 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] usaspending: Stability (fail → unverified)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fe067-1858-7d90-a5b0-fe887676fc28</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fe067-1858-7d90-a5b0-fe887676fc28</guid><description>Stability (fail → unverified). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 08:04:40 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] usaspending: Stability (unverified → fail)</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fa52b-dbd8-7b7c-bbb4-88cc5c3648b0</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fa52b-dbd8-7b7c-bbb4-88cc5c3648b0</guid><description>Stability (unverified → fail). Compared against 2026-07-26.</description><pubDate>Mon, 27 Jul 2026 20:02:22 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] usaspending: Tool “usaspending_autocomplete” was removed</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fa52b-dbd9-74f2-9e12-56282466ef22</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fa52b-dbd9-74f2-9e12-56282466ef22</guid><description>Tool “usaspending_autocomplete” was removed. Compared against 2026-07-27.</description><pubDate>Mon, 27 Jul 2026 20:02:22 GMT</pubDate><category>security</category><category>regression</category><category>tool.removed</category></item><item><title>[SECURITY] usaspending: Tool “usaspending_spending_by_category” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fa52b-dbdd-7d50-b39c-a7c0d7b2e1c8</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fa52b-dbdd-7d50-b39c-a7c0d7b2e1c8</guid><description>Tool “usaspending_spending_by_category” rewrote its description, which is the text the model reads. Compared against 2026-07-27.</description><pubDate>Mon, 27 Jul 2026 20:02:22 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] usaspending: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fa52b-dbdf-7cdc-9482-18ac4e283d95</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fa52b-dbdf-7cdc-9482-18ac4e283d95</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-07-27.</description><pubDate>Mon, 27 Jul 2026 20:02:22 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item><item><title>[SECURITY] usaspending: Tool “usaspending_spending_over_time” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fa4f3-dd4b-78e7-b8c4-6d9e8008c755</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-usaspending-mcp-server/usaspending#chg-chg_019fa4f3-dd4b-78e7-b8c4-6d9e8008c755</guid><description>Tool “usaspending_spending_over_time” rewrote its description, which is the text the model reads. Compared against 2026-07-27.</description><pubDate>Mon, 27 Jul 2026 19:01:13 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item></channel></rss>