{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T17:46:11.383Z","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp","markdownUrl":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp.md","server":{"slug":"duty27-eu-vat","name":"EU VAT rates","registryName":"io.github.duty27/eu-vat","description":"Standard VAT rate in any EU member state on any date since 2016. Offline, no API key.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"duty27-eu-vat-mcp","type":"npm","identifier":"@duty27/eu-vat-mcp","withdrawn":false,"url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp","version":"0.1.1","transport":"stdio","scoredAt":"2026-11-06T00:35:00.250Z"},"score":{"total":87,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-06","total":87},{"date":"2026-11-05","total":87},{"date":"2026-11-04","total":86},{"date":"2026-11-03","total":86},{"date":"2026-11-02","total":85},{"date":"2026-11-01","total":85},{"date":"2026-10-31","total":84},{"date":"2026-10-30","total":84},{"date":"2026-10-29","total":83},{"date":"2026-10-28","total":83},{"date":"2026-10-27","total":82},{"date":"2026-10-26","total":82},{"date":"2026-10-25","total":82},{"date":"2026-10-24","total":81},{"date":"2026-10-23","total":86},{"date":"2026-10-22","total":85},{"date":"2026-10-21","total":82},{"date":"2026-10-20","total":82},{"date":"2026-10-19","total":82},{"date":"2026-10-18","total":82},{"date":"2026-10-17","total":82},{"date":"2026-10-16","total":82},{"date":"2026-10-15","total":82},{"date":"2026-10-14","total":82},{"date":"2026-10-13","total":49},{"date":"2026-10-12","total":49},{"date":"2026-10-08","total":49},{"date":"2026-10-07","total":49}]},"categories":[{"name":"Supply Chain Security","score":81,"verdict":"fail","reasons":["No malware found by supply-chain analysis.","CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available.","No install/post-install scripts declared.","30 of 93 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.direct","args":{"package":"zod","version":"3.25.76","severity":"high"}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"93","unhealthy":"30"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to duty27/eu-vat).","Clear OSI-approved license (MIT).","Actively maintained (last published 31 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"duty27/eu-vat"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"31"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":82,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 550 tokens (~137/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"137","items":"4","tools":"4","tokens":"550","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":77,"verdict":"partial","reasons":["Stability observed for 23 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"23"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"4"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"duty27-eu-vat-mcp","type":"npm","identifier":"@duty27/eu-vat-mcp","withdrawn":false,"score":87,"current":true,"url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp","markdownUrl":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@duty27/eu-vat-mcp"},{"label":"Version","value":"0.1.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"get_standard_rate","title":"EU standard VAT rate on a date","description":"Look up the standard VAT rate in force in one EU member state on a given day (any day since 2016-01-01). Use this for \"what was the VAT rate in Germany on 1 July 2020?\" or \"what is the VAT rate in Finland today?\". The day a rate changes is the first day of the new rate. Standard VAT rates only (not reduced rates), from 2016-01-01. Data checked against the published rates on 2026-10-04; a change made after that date appears in a newer release.","inputs":[{"name":"country","type":"string","required":true,"description":"EU member state code such as \"DE\" or \"FR\" (case does not matter). Greece is \"EL\"; \"GR\" is accepted too."},{"name":"date","type":"string","required":false,"description":"Day as YYYY-MM-DD, for example \"2020-07-01\". Optional: today (UTC) when omitted."}],"outputs":[{"name":"attribution","type":"string","required":true,"description":null},{"name":"country","type":"string","required":true,"description":null},{"name":"dataAsOf","type":"string","required":true,"description":null},{"name":"date","type":"string","required":true,"description":null},{"name":"rate","type":"number","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":195},{"name":"get_rate_history","title":"Every standard VAT rate a country has had","description":"List every standard VAT rate one EU member state has had since 2016-01-01, with the first day each one applied. Use this for \"how has the VAT rate in Ireland changed?\". Standard VAT rates only (not reduced rates), from 2016-01-01. Data checked against the published rates on 2026-10-04; a change made after that date appears in a newer release.","inputs":[{"name":"country","type":"string","required":true,"description":"EU member state code such as \"DE\" or \"FR\" (case does not matter). Greece is \"EL\"; \"GR\" is accepted too."}],"outputs":[{"name":"attribution","type":"string","required":true,"description":null},{"name":"country","type":"string","required":true,"description":null},{"name":"dataAsOf","type":"string","required":true,"description":null},{"name":"windows","type":"array","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":132},{"name":"list_rate_changes","title":"Standard VAT rate changes across the EU","description":"List the changes of the standard VAT rate across the EU, newest first, optionally for one country and/or since a date. Use this for \"which EU countries changed their VAT rate this year?\". Each change gives the old rate, the new rate, and the first day of the new rate. Standard VAT rates only (not reduced rates), from 2016-01-01. Data checked against the published rates on 2026-10-04; a change made after that date appears in a newer release.","inputs":[{"name":"country","type":"string","required":false,"description":"Only this member state (for example \"RO\"). Omit for all 27."},{"name":"since","type":"string","required":false,"description":"Only changes on or after this day, YYYY-MM-DD. Omit for all of them."}],"outputs":[{"name":"attribution","type":"string","required":true,"description":null},{"name":"changes","type":"array","required":true,"description":null},{"name":"dataAsOf","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":161},{"name":"list_countries","title":"The 27 EU member states and their codes","description":"List the 27 EU member states with the codes the other tools expect. Greece is \"EL\", the code the European Union uses (\"GR\" is also accepted). Use this to find a code. The United Kingdom and other non-EU countries are not covered.","inputs":[],"outputs":[{"name":"attribution","type":"string","required":true,"description":null},{"name":"countries","type":"array","required":true,"description":null},{"name":"dataAsOf","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":62}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T00:35:00.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[{"id":"GHSA-mrhx-c7xc-m3w5","cve":"CVE-2023-54404","severity":"high","fixAvailable":true}],"vulnerabilitiesTotal":1,"dependencies":{"nodes":93,"partial":false,"deprecated":null,"stale":30,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-07","recent":[{"id":"chg_01a1a90d-23da-7e5f-b7f4-b1ed96992e01","kind":"score.total_changed","summary":"Trust score (86 → 87)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a1a90d-23da-7e5f-b7f4-b1ed96992e01"},{"id":"chg_01a19ece-5082-78df-b6c6-3bbede7797a5","kind":"score.total_changed","summary":"Trust score (85 → 86)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a19ece-5082-78df-b6c6-3bbede7797a5"},{"id":"chg_01a19494-e8d5-7726-b0d9-0cd016f322e5","kind":"score.total_changed","summary":"Trust score (84 → 85)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a19494-e8d5-7726-b0d9-0cd016f322e5"},{"id":"chg_01a18a4a-0116-7808-99ba-b81ce45e43df","kind":"score.total_changed","summary":"Trust score (83 → 84)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a18a4a-0116-7808-99ba-b81ce45e43df"},{"id":"chg_01a17ffa-8521-79b8-a331-4ae38a40605a","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a17ffa-8521-79b8-a331-4ae38a40605a"},{"id":"chg_01a17076-b277-7c07-a0b3-14b9fb3a2cfe","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a17076-b277-7c07-a0b3-14b9fb3a2cfe"},{"id":"chg_01a16b51-33f2-76a2-aaa6-04aab4ef1551","kind":"advisory.identified","summary":"CVE-2023-54404 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a16b51-33f2-76a2-aaa6-04aab4ef1551"},{"id":"chg_01a16b51-33fb-776c-9202-449e5c086718","kind":"check.verdict","summary":"Known CVEs (pass → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a16b51-33fb-776c-9202-449e5c086718"},{"id":"chg_01a16b51-341c-708e-bbd1-aa8e4ba44d52","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a16b51-341c-708e-bbd1-aa8e4ba44d52"},{"id":"chg_01a16b51-342f-72d9-ba3d-841f0c9d4c2c","kind":"score.total_changed","summary":"Trust score (86 → 81)","materiality":"functional","direction":"regression","scoreDelta":-5,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a16b51-342f-72d9-ba3d-841f0c9d4c2c"},{"id":"chg_01a1662a-8217-7984-aab6-87bd489adfba","kind":"check.unverifiable","summary":"Security disclosure (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a1662a-8217-7984-aab6-87bd489adfba"},{"id":"chg_01a1662a-8218-7c79-8630-21a8fc5940c1","kind":"score.total_changed","summary":"Trust score (85 → 86)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a1662a-8218-7c79-8630-21a8fc5940c1"},{"id":"chg_01a16104-77de-7ec0-b9d7-6ff8d6bac8a0","kind":"check.reverified","summary":"Stability (unverified → 0.27)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a16104-77de-7ec0-b9d7-6ff8d6bac8a0"},{"id":"chg_01a16104-77e0-74f4-8006-0caf1cb1d440","kind":"score.total_changed","summary":"Trust score (82 → 85)","materiality":"functional","direction":"improvement","scoreDelta":3,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a16104-77e0-74f4-8006-0caf1cb1d440"},{"id":"chg_01a137e4-e2a6-7b5a-8629-acae9b5e2635","kind":"check.reverified","summary":"Injection markers (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a137e4-e2a6-7b5a-8629-acae9b5e2635"},{"id":"chg_01a137e4-e2a9-7530-8d88-775e360650b5","kind":"check.appeared","summary":"First check of Judged manipulation (pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a137e4-e2a9-7530-8d88-775e360650b5"},{"id":"chg_01a137e4-e2ad-72ba-b647-d0592068717d","kind":"check.reason","summary":"Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a137e4-e2ad-72ba-b647-d0592068717d"},{"id":"chg_01a137e4-e2ae-79c9-9997-c671f55b14db","kind":"check.reverified","summary":"Tool coverage (unverified → 100)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a137e4-e2ae-79c9-9997-c671f55b14db"},{"id":"chg_01a137e4-e2af-788e-88b5-86572491ace7","kind":"check.reverified","summary":"MCP protocol (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a137e4-e2af-788e-88b5-86572491ace7"},{"id":"chg_01a137e4-e36c-7409-9e56-847185429796","kind":"check.appeared","summary":"First check of Schema quality (fail)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp#chg-chg_01a137e4-e36c-7409-9e56-847185429796"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp","markdown":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp.md","changelogJson":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/duty27-eu-vat/duty27-eu-vat-mcp.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@duty27/eu-vat-mcp"},{"label":"Socket report","href":"https://socket.dev/npm/package/@duty27/eu-vat-mcp"},{"label":"Repository","href":"https://github.com/duty27/eu-vat"},{"label":"Website","href":"https://duty27.com/vat-rates/history"}]}}