<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.dorianfields/x402-cite-check · hermes-earn · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] hermes-earn: HSTS header (unverified → fail)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1484d-aad2-7200-b3da-e754720d2150</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1484d-aad2-7200-b3da-e754720d2150</guid><description>HSTS header (unverified → fail). Compared against 2026-10-16.</description><pubDate>Sat, 17 Oct 2026 05:20:11 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] hermes-earn: Transport (fail → pass)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1484d-aad3-7395-9aad-e0a7a7206aec</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1484d-aad3-7395-9aad-e0a7a7206aec</guid><description>Transport (fail → pass). Compared against 2026-10-16.</description><pubDate>Sat, 17 Oct 2026 05:20:11 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] hermes-earn: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1484d-aad4-7573-b352-e802f5867237</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1484d-aad4-7573-b352-e802f5867237</guid><description>Injection markers (unverified → pass). Compared against 2026-10-16.</description><pubDate>Sat, 17 Oct 2026 05:20:11 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] hermes-earn: TLS certificate (unverified → pass)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1484d-aad4-79fd-8353-ddb1bc04c24a</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1484d-aad4-79fd-8353-ddb1bc04c24a</guid><description>TLS certificate (unverified → pass). Compared against 2026-10-16.</description><pubDate>Sat, 17 Oct 2026 05:20:11 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] hermes-earn: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1484d-aad5-7175-bfce-bacd68f078a6</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1484d-aad5-7175-bfce-bacd68f078a6</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-10-16.</description><pubDate>Sat, 17 Oct 2026 05:20:11 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] hermes-earn: Stability (0.37 → unverified)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-31d9-7e42-9c2c-c79b5feab915</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-31d9-7e42-9c2c-c79b5feab915</guid><description>Stability (0.37 → unverified). Compared against 2026-10-15.</description><pubDate>Fri, 16 Oct 2026 05:28:48 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] hermes-earn: HSTS header (fail → unverified)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-322b-728a-b66f-9101c091e601</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-322b-728a-b66f-9101c091e601</guid><description>HSTS header (fail → unverified). Compared against 2026-10-15.</description><pubDate>Fri, 16 Oct 2026 05:28:48 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] hermes-earn: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-322d-7b7e-a837-6bd47989cfa0</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-322d-7b7e-a837-6bd47989cfa0</guid><description>Tool safety (pass → unverified). Compared against 2026-10-15.</description><pubDate>Fri, 16 Oct 2026 05:28:48 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] hermes-earn: TLS certificate (pass → unverified)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-322e-7887-a529-c029c0c86c85</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-322e-7887-a529-c029c0c86c85</guid><description>TLS certificate (pass → unverified). Compared against 2026-10-15.</description><pubDate>Fri, 16 Oct 2026 05:28:48 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] hermes-earn: Transport (pass → fail)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-3233-75f7-ac34-b823a7309edb</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-3233-75f7-ac34-b823a7309edb</guid><description>Transport (pass → fail). Compared against 2026-10-15.</description><pubDate>Fri, 16 Oct 2026 05:28:48 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] hermes-earn: Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-3233-7d89-8290-a2a1648fab64</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-3233-7d89-8290-a2a1648fab64</guid><description>Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.). Compared against 2026-10-15.</description><pubDate>Fri, 16 Oct 2026 05:28:48 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] hermes-earn: Endpoint reachability (reachable → unreachable)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-323c-76de-b9f4-124563bf1cc0</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a1432f-323c-76de-b9f4-124563bf1cc0</guid><description>Endpoint reachability (reachable → unreachable). Compared against 2026-10-15.</description><pubDate>Fri, 16 Oct 2026 05:28:48 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] hermes-earn: HSTS header (unverified → fail)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-1368-7b8e-8722-a53b66b175bf</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-1368-7b8e-8722-a53b66b175bf</guid><description>HSTS header (unverified → fail). Compared against 2026-10-13.</description><pubDate>Wed, 14 Oct 2026 05:28:22 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] hermes-earn: DNSSEC (unverified → fail)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-136c-71c4-a6ca-6b677a10690b</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-136c-71c4-a6ca-6b677a10690b</guid><description>DNSSEC (unverified → fail). Compared against 2026-10-13.</description><pubDate>Wed, 14 Oct 2026 05:28:22 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] hermes-earn: Transport (fail → pass)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-136e-7254-8fa3-b3599193c448</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-136e-7254-8fa3-b3599193c448</guid><description>Transport (fail → pass). Compared against 2026-10-13.</description><pubDate>Wed, 14 Oct 2026 05:28:22 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] hermes-earn: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-136f-7588-a6a6-23920e41bec0</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-136f-7588-a6a6-23920e41bec0</guid><description>Injection markers (unverified → pass). Compared against 2026-10-13.</description><pubDate>Wed, 14 Oct 2026 05:28:22 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] hermes-earn: TLS certificate (unverified → pass)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-1370-728e-a373-eed71b4897c1</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-1370-728e-a373-eed71b4897c1</guid><description>TLS certificate (unverified → pass). Compared against 2026-10-13.</description><pubDate>Wed, 14 Oct 2026 05:28:22 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] hermes-earn: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-1371-71a5-9747-90b7ccfcc47d</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a138e2-1371-71a5-9747-90b7ccfcc47d</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-10-13.</description><pubDate>Wed, 14 Oct 2026 05:28:22 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] hermes-earn: DNSSEC (fail → unverified)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-1445-74d8-afee-b382e667ee1d</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-1445-74d8-afee-b382e667ee1d</guid><description>DNSSEC (fail → unverified). Compared against 2026-10-04.</description><pubDate>Wed, 07 Oct 2026 00:52:32 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] hermes-earn: HSTS header (fail → unverified)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-14a3-7b7d-882d-dd10e619d05d</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-14a3-7b7d-882d-dd10e619d05d</guid><description>HSTS header (fail → unverified). Compared against 2026-10-04.</description><pubDate>Wed, 07 Oct 2026 00:52:32 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] hermes-earn: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-14ae-760c-8488-c7aa2cecf75f</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-14ae-760c-8488-c7aa2cecf75f</guid><description>Tool safety (pass → unverified). Compared against 2026-10-04.</description><pubDate>Wed, 07 Oct 2026 00:52:32 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] hermes-earn: TLS certificate (pass → unverified)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-14b0-7a83-bebe-71582935a17a</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-14b0-7a83-bebe-71582935a17a</guid><description>TLS certificate (pass → unverified). Compared against 2026-10-04.</description><pubDate>Wed, 07 Oct 2026 00:52:32 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] hermes-earn: Transport (pass → fail)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-14b2-74b3-814e-fe6f30ab336e</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-14b2-74b3-814e-fe6f30ab336e</guid><description>Transport (pass → fail). Compared against 2026-10-04.</description><pubDate>Wed, 07 Oct 2026 00:52:32 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] hermes-earn: Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-1573-7b49-a4cf-3f20f4fd489d</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-1573-7b49-a4cf-3f20f4fd489d</guid><description>Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.). Compared against 2026-10-04.</description><pubDate>Wed, 07 Oct 2026 00:52:32 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] hermes-earn: Endpoint reachability (reachable → unreachable)</title><link>https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-1577-779f-b220-e1ad64b419a0</link><guid isPermaLink="true">https://verifymcp.io/servers/dorianfields-x402-cite-check/hermes-earn#chg-chg_01a113d9-1577-779f-b220-e1ad64b419a0</guid><description>Endpoint reachability (reachable → unreachable). Compared against 2026-10-04.</description><pubDate>Wed, 07 Oct 2026 00:52:32 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item></channel></rss>