<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>BrazilMCP · api · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api/changelog.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fb380-1544-7023-a4af-6e1a79531096</link><guid isPermaLink="true">https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fb380-1544-7023-a4af-6e1a79531096</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-07-29.</description><pubDate>Thu, 30 Jul 2026 14:49:03 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api: Transport (fail → pass)</title><link>https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fb380-1543-7882-92da-f026ed6ec566</link><guid isPermaLink="true">https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fb380-1543-7882-92da-f026ed6ec566</guid><description>Transport (fail → pass). Compared against 2026-07-29.</description><pubDate>Thu, 30 Jul 2026 14:49:03 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] api: HSTS header (unverified → fail)</title><link>https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fae63-4f17-71d4-9477-67c6b136bc0d</link><guid isPermaLink="true">https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fae63-4f17-71d4-9477-67c6b136bc0d</guid><description>HSTS header (unverified → fail). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 14:59:31 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] api: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fae63-4f18-786c-9c30-9b9b58aeeb18</link><guid isPermaLink="true">https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fae63-4f18-786c-9c30-9b9b58aeeb18</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 14:59:31 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api: Transport (Transport check failed: declared streamable-http, but the endpoint returned HTTP 502.)</title><link>https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fae63-4f18-718f-80e9-fd4af65e2411</link><guid isPermaLink="true">https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fae63-4f18-718f-80e9-fd4af65e2411</guid><description>Transport (Transport check failed: declared streamable-http, but the endpoint returned HTTP 502.). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 14:59:31 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api: TLS certificate (unverified → pass)</title><link>https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fae63-4f17-79eb-b357-fbb5af82512e</link><guid isPermaLink="true">https://verifymcp.io/servers/dev-brazilmcp-brazilmcp/api#chg-chg_019fae63-4f17-79eb-b357-fbb5af82512e</guid><description>TLS certificate (unverified → pass). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 14:59:31 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item></channel></rss>