io.github.Distribea/distribea-mcp · api-mcp-remote · changes | VerifyMCPRecorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.https://verifymcp.io[SECURITY] api-mcp-remote: First check of Authorization (partial)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-6801-7e1e-95e6-577a9e117adehttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-6801-7e1e-95e6-577a9e117adeFirst check of Authorization (partial). Compared against 2026-09-01.Wed, 02 Sep 2026 08:07:12 GMTsecurityneutralcheck.appeared[SECURITY] api-mcp-remote: Transport (pass → unverified)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-6801-74ef-af18-f3f07bbf408bhttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-6801-74ef-af18-f3f07bbf408bTransport (pass → unverified). Compared against 2026-09-01.Wed, 02 Sep 2026 08:07:12 GMTsecurityregressioncheck.unverifiable[SECURITY] api-mcp-remote: Endpoint reachability (reachable → behind authorisation)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-680a-739e-a7a6-f09a55058cd2https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-680a-739e-a7a6-f09a55058cd2Endpoint reachability (reachable → behind authorisation). Compared against 2026-09-01.Wed, 02 Sep 2026 08:07:12 GMTsecurityregressioncapture.status_changed[SECURITY] api-mcp-remote: Stability (pass → unverified)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-67fb-7848-9447-b38ae18c48d0https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-67fb-7848-9447-b38ae18c48d0Stability (pass → unverified). Compared against 2026-09-01.Wed, 02 Sep 2026 08:07:12 GMTsecurityregressioncheck.unverifiable[SECURITY] api-mcp-remote: Tool safety (pass → unverified)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-67fe-733d-a9c7-8e9e0ee7da3chttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-67fe-733d-a9c7-8e9e0ee7da3cTool safety (pass → unverified). Compared against 2026-09-01.Wed, 02 Sep 2026 08:07:12 GMTsecurityregressioncheck.unverifiable[SECURITY] api-mcp-remote: Authorization (unverified → pass)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-6801-7a0a-9417-5473f317a9bchttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a06128-6801-7a0a-9417-5473f317a9bcAuthorization (unverified → pass). Compared against 2026-09-01.Wed, 02 Sep 2026 08:07:12 GMTsecurityimprovementcheck.reverified[SECURITY] api-mcp-remote: Stability (unverified → pass)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5107-72b0-b114-8a465fb510fehttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5107-72b0-b114-8a465fb510feStability (unverified → pass). Compared against 2026-08-27.Fri, 28 Aug 2026 08:06:53 GMTsecurityimprovementcheck.reverified[SECURITY] api-mcp-remote: HSTS header (fail → pass)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5103-791f-9ae0-58d94dcc2ea9https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5103-791f-9ae0-58d94dcc2ea9HSTS header (fail → pass). Compared against 2026-08-27.Fri, 28 Aug 2026 08:06:53 GMTsecurityimprovementcheck.verdict[SECURITY] api-mcp-remote: HTTPS (unverified → pass)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5105-7523-95a7-b2770da41698https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5105-7523-95a7-b2770da41698HTTPS (unverified → pass). Compared against 2026-08-27.Fri, 28 Aug 2026 08:06:53 GMTsecurityimprovementcheck.reverified[SECURITY] api-mcp-remote: Transport (fail → pass)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5106-75d9-b253-ed8c1794093dhttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5106-75d9-b253-ed8c1794093dTransport (fail → pass). Compared against 2026-08-27.Fri, 28 Aug 2026 08:06:53 GMTsecurityimprovementcheck.verdict[SECURITY] api-mcp-remote: Injection markers (unverified → pass)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5106-7b9b-a5ab-13165b1008dfhttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5106-7b9b-a5ab-13165b1008dfInjection markers (unverified → pass). Compared against 2026-08-27.Fri, 28 Aug 2026 08:06:53 GMTsecurityimprovementcheck.reverified[SECURITY] api-mcp-remote: First check of Judged manipulation (pass)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5107-7894-b118-8916cf085aa1https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5107-7894-b118-8916cf085aa1First check of Judged manipulation (pass). Compared against 2026-08-27.Fri, 28 Aug 2026 08:06:53 GMTsecurityneutralcheck.appeared[SECURITY] api-mcp-remote: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 12 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5107-7ee8-bc78-e519f0e651bahttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a04768-5107-7ee8-bc78-e519f0e651baAuthorization (Authorisation not fully verified: no authorisation is required to call this server, and 12 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-27.Fri, 28 Aug 2026 08:06:53 GMTsecurityneutralcheck.reason[SECURITY] api-mcp-remote: HTTPS (pass → unverified)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a037f4-bda0-7613-9e17-6471875f3b6dhttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a037f4-bda0-7613-9e17-6471875f3b6dHTTPS (pass → unverified). Compared against 2026-08-24.Tue, 25 Aug 2026 08:06:21 GMTsecurityregressioncheck.unverifiable[SECURITY] api-mcp-remote: HSTS header (pass → fail)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a037f4-bda1-7100-9cb5-b4999863c316https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_01a037f4-bda1-7100-9cb5-b4999863c316HSTS header (pass → fail). Compared against 2026-08-24.Tue, 25 Aug 2026 08:06:21 GMTsecurityregressioncheck.verdict[SECURITY] api-mcp-remote: Endpoint reachability (reachable → not serving MCP)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_019fe58a-fd45-7e80-9c9b-d61e6f07df4ahttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_019fe58a-fd45-7e80-9c9b-d61e6f07df4aEndpoint reachability (reachable → not serving MCP). Compared against 2026-08-08.Sun, 09 Aug 2026 08:01:59 GMTsecurityregressioncapture.status_changed[SECURITY] api-mcp-remote: Transport (pass → fail)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_019fe58a-fd44-7205-b6a5-e2594bc9588ahttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_019fe58a-fd44-7205-b6a5-e2594bc9588aTransport (pass → fail). Compared against 2026-08-08.Sun, 09 Aug 2026 08:01:59 GMTsecurityregressioncheck.verdict[SECURITY] api-mcp-remote: Stability (0.43 → unverified)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_019fe58a-fd43-7548-9cef-f126ddb8bc2chttps://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_019fe58a-fd43-7548-9cef-f126ddb8bc2cStability (0.43 → unverified). Compared against 2026-08-08.Sun, 09 Aug 2026 08:01:59 GMTsecurityregressioncheck.unverifiable[SECURITY] api-mcp-remote: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the whole tool list to see what that exposes.)https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_019fe58a-fd44-7b25-ba98-c6a8c448fe63https://verifymcp.io/servers/distribea-distribea-mcp/api-mcp-remote#chg-chg_019fe58a-fd44-7b25-ba98-c6a8c448fe63Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the whole tool list to see what that exposes.). Compared against 2026-08-08.Sun, 09 Aug 2026 08:01:59 GMTsecurityneutralcheck.reason