{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:27:47.071Z","url":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp","markdownUrl":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp.md","server":{"slug":"donniertf-hub-au-cpi-mcp","name":"Australia CPI (ABS) MCP","registryName":"io.github.donniertf-hub/au-cpi-mcp","description":"Australian Bureau of Statistics Consumer Price Index.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"au-cpi-mcp","type":"remote","identifier":"https://au-cpi-mcp.donniertf.workers.dev/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp","version":"1.1.0","transport":null,"scoredAt":"2026-11-05T06:33:40.105Z"},"score":{"total":57,"tier":"low","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":57},{"date":"2026-11-04","total":56},{"date":"2026-11-03","total":56},{"date":"2026-11-02","total":55},{"date":"2026-11-01","total":55},{"date":"2026-10-31","total":55},{"date":"2026-10-30","total":54},{"date":"2026-10-29","total":54}]},"categories":[{"name":"Endpoint Security","score":46,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation not fully verified: no authorisation is required to call this server, and 9 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.","HTTPS check failed: the endpoint is reachable over plaintext HTTP.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_undeclared","args":{"undeclared_tools":"9"}},{"code":"https.plaintext","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":57,"verdict":"fail","reasons":["AI-judged instruction clarity (fair).","Tool/resource definitions use about 363 tokens (~40/item across 9 items; 9 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"fair"}},{"code":"schema.footprint_lean","args":{"avg":"40","items":"9","tools":"9","tokens":"363","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":23,"verdict":"partial","reasons":["Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"7"}}]},{"name":"Tool Coverage","score":92,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","75% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"75"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"9"}},{"code":"toolsafety.manipulation_clean","args":{"units":"10","judged":"10"}}]},{"name":"Capabilities","score":40,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-03-26"}}]}],"inconclusive":["Authorisation not fully verified: no authorisation is required to call this server, and 9 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe."],"malware":[],"components":[{"slug":"au-cpi-mcp","type":"remote","identifier":"https://au-cpi-mcp.donniertf.workers.dev/mcp","withdrawn":false,"score":57,"current":true,"url":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp","markdownUrl":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://au-cpi-mcp.donniertf.workers.dev/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.1.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"latest_cpi","title":null,"description":"FREE. Latest ABS headline CPI observation (Australia).","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":19},{"name":"cpi_history","title":null,"description":"PRO. ABS headline CPI history from 2020.","inputs":[{"name":"access_token","type":"string","required":false,"description":"Subscriber token from /success (or Authorization: Bearer)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":39},{"name":"cpi_meta","title":null,"description":"PRO. Dataset structure/metadata for the CPI query.","inputs":[{"name":"access_token","type":"string","required":false,"description":"Subscriber token from /success (or Authorization: Bearer)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":39},{"name":"latest_groups","title":null,"description":"FREE. Latest RBA inflation expenditure-group row (summary columns).","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":21},{"name":"inflation_full_latest","title":null,"description":"PRO. Full latest G2 row as key/value.","inputs":[{"name":"access_token","type":"string","required":false,"description":"Subscriber token from /success (or Authorization: Bearer)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":39},{"name":"inflation_group","title":null,"description":"PRO. Latest value for an expenditure group name substring (e.g. Food, Housing).","inputs":[{"name":"access_token","type":"string","required":false,"description":"Subscriber token from /success (or Authorization: Bearer)"},{"name":"name","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":52},{"name":"latest_activity","title":null,"description":"FREE. Latest RBA monthly activity indicators (first columns).","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":20},{"name":"activity_full_latest","title":null,"description":"PRO. Full latest H3 activity row.","inputs":[{"name":"access_token","type":"string","required":false,"description":"Subscriber token from /success (or Authorization: Bearer)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":37},{"name":"activity_indicator","title":null,"description":"PRO. Latest + recent values for an indicator name substring.","inputs":[{"name":"access_token","type":"string","required":false,"description":"Subscriber token from /success (or Authorization: Bearer)"},{"name":"name","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":46}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T06:33:40.000Z","track":"remote","endpoint":"https://au-cpi-mcp.donniertf.workers.dev/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=donniertf.workers.dev","issuer":"CN=YE1,O=Let's Encrypt,C=US","notBefore":"2026-09-29T23:46:29Z","notAfter":"2026-12-28T23:46:28Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=YE1,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"au-cpi-mcp.donniertf.workers.dev.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"dev.","outcome":"verified","label":"Verified"},{"zone":"workers.dev.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"plaintext_served","label":"Served over HTTP","status":200},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1aa69-c228-72da-bfa9-552b62a18214","kind":"score.total_changed","summary":"Trust score (56 → 57)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp#chg-chg_01a1aa69-c228-72da-bfa9-552b62a18214"},{"id":"chg_01a1a01b-7118-7a18-b5df-c7aecd252360","kind":"score.total_changed","summary":"Trust score (55 → 56)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp#chg-chg_01a1a01b-7118-7a18-b5df-c7aecd252360"},{"id":"chg_01a190a4-b701-7485-bfb9-2e99d5dac58c","kind":"score.total_changed","summary":"Trust score (54 → 55)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp#chg-chg_01a190a4-b701-7485-bfb9-2e99d5dac58c"},{"id":"chg_01a18b81-295d-7247-81dd-11b25b1f3ec5","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp#chg-chg_01a18b81-295d-7247-81dd-11b25b1f3ec5"},{"id":"chg_01a189e4-adc8-745b-8ead-36d5bf03cc94","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp#chg-chg_01a189e4-adc8-745b-8ead-36d5bf03cc94"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp","markdown":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp.md","changelogJson":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/donniertf-hub-au-cpi-mcp/au-cpi-mcp.xml","external":[{"label":"Remote endpoint","href":"https://au-cpi-mcp.donniertf.workers.dev/mcp"},{"label":"Repository","href":"https://github.com/donniertf-hub/uk-mcp-fleet"},{"label":"Website","href":"https://au-cpi-mcp.donniertf.workers.dev/"}]}}