{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T15:53:50.366Z","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp","markdownUrl":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp.md","server":{"slug":"es-veridexia-veridex-mcp","name":"VERIDEX","registryName":"es.veridexia/veridex-mcp","description":"Verify Spanish companies by CIF: registry data, status and BORME filings, paid per call over x402.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mcp","type":"remote","identifier":"https://mcp.veridexia.es/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp","version":"0.1.1","transport":null,"scoredAt":"2026-11-05T08:43:05.264Z"},"score":{"total":83,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":83},{"date":"2026-11-04","total":82},{"date":"2026-11-03","total":82},{"date":"2026-11-02","total":81},{"date":"2026-11-01","total":81},{"date":"2026-10-31","total":81},{"date":"2026-10-30","total":80},{"date":"2026-10-29","total":80},{"date":"2026-10-28","total":79},{"date":"2026-10-27","total":79},{"date":"2026-10-26","total":78},{"date":"2026-10-25","total":78},{"date":"2026-10-24","total":77},{"date":"2026-10-23","total":77},{"date":"2026-10-22","total":76},{"date":"2026-10-21","total":76},{"date":"2026-10-20","total":75},{"date":"2026-10-19","total":75},{"date":"2026-10-18","total":74},{"date":"2026-10-17","total":74},{"date":"2026-10-16","total":74},{"date":"2026-10-15","total":73},{"date":"2026-10-14","total":73},{"date":"2026-10-13","total":72},{"date":"2026-10-12","total":72},{"date":"2026-10-10","total":71},{"date":"2026-10-09","total":70}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":67,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 639 tokens (~213/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"213","items":"3","tools":"3","tokens":"639","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":93,"verdict":"partial","reasons":["Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"28"}}]},{"name":"Tool Coverage","score":71,"verdict":"fail","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","0% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"0"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"mcp","type":"remote","identifier":"https://mcp.veridexia.es/mcp","withdrawn":false,"score":83,"current":true,"url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp","markdownUrl":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp.md"}],"facts":[{"label":"Endpoint","value":"https://mcp.veridexia.es/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"0.1.1"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"verify_company_by_cif","title":"Verify a Spanish company by CIF","description":"Verify a Spanish company by its CIF and get its registry data, status in the BORME, recent published acts and an explainable 0-100 risk score.\n\nThis is an x402-paid endpoint. The first call returns ok=false with error.code='payment_required' and a complete `payment` challenge (price, network, asset, receiving address). Settle that challenge with a wallet you control and call again with the resulting base64 payload in `x_payment`; the same call then returns the company.\n\nErrors are typed: 'not_found' (valid CIF, no record — you are not charged), 'source_unavailable' (upstream registry down — not charged, safe to retry), 'invalid_request' (malformed CIF), 'rate_limited' (quota), 'transport_error' (the API was unreachable). Do not retry a 402 without changing the payment.","inputs":[{"name":"cif","type":"string","required":true,"description":null},{"name":"idempotency_key","type":null,"required":false,"description":null},{"name":"x_payment","type":null,"required":false,"description":null}],"outputs":[{"name":"cif","type":"string","required":false,"description":"The CIF as requested."},{"name":"company","type":null,"required":false,"description":null},{"name":"error","type":null,"required":false,"description":null},{"name":"guidance","type":"string","required":false,"description":"What to do next, in one sentence, for the calling agent."},{"name":"mock","type":"boolean","required":false,"description":"True when the facts are synthetic, never true for a real source."},{"name":"ok","type":"boolean","required":true,"description":null},{"name":"payment","type":null,"required":false,"description":null},{"name":"provenance","type":null,"required":false,"description":null},{"name":"recent_acts","type":"array","required":false,"description":null},{"name":"risk","type":null,"required":false,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":211},{"name":"get_veridex_info","title":"VERIDEX service information and pricing","description":"Describe the VERIDEX service: what it does, its price, the settlement network and asset, the receiving address and the available endpoints.\n\nReads the public discovery manifest at /.well-known/x402. Needs no credentials and costs nothing. Call this before verifying if you need to know what a verification costs or where the payment goes.","inputs":[],"outputs":[{"name":"asset","type":"string","required":false,"description":null},{"name":"asset_decimals","type":null,"required":false,"description":null},{"name":"asset_symbol","type":"string","required":false,"description":null},{"name":"description","type":"string","required":false,"description":null},{"name":"endpoints","type":"array","required":false,"description":null},{"name":"error","type":null,"required":false,"description":null},{"name":"how_to_pay","type":"string","required":false,"description":null},{"name":"manifest_version","type":"string","required":false,"description":null},{"name":"name","type":"string","required":false,"description":null},{"name":"network","type":"string","required":false,"description":null},{"name":"ok","type":"boolean","required":true,"description":null},{"name":"pay_to","type":"string","required":false,"description":null},{"name":"price","type":"string","required":false,"description":null},{"name":"raw_manifest","type":"object","required":false,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":77},{"name":"health_check","title":"VERIDEX API health and today's traffic","description":"Check whether the VERIDEX API is up, and see today's demand: uptime, the number of verification calls served today and the distinct callers.\n\nFree and unauthenticated. The request count excludes the service's own healthchecks and local tests, so it answers 'is anyone using this?' rather than 'is the process alive?'. Useful before starting a paid flow.","inputs":[],"outputs":[{"name":"api_url","type":"string","required":false,"description":null},{"name":"checked_at","type":"string","required":false,"description":null},{"name":"error","type":null,"required":false,"description":null},{"name":"latency_ms","type":null,"required":false,"description":null},{"name":"ok","type":"boolean","required":true,"description":null},{"name":"reachable","type":"boolean","required":false,"description":null},{"name":"requests_today","type":null,"required":false,"description":null},{"name":"status","type":"string","required":false,"description":"'ok' when the API is serving."},{"name":"unique_agents_today","type":null,"required":false,"description":null},{"name":"uptime_seconds","type":null,"required":false,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":82}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:43:05.000Z","track":"remote","endpoint":"https://mcp.veridexia.es/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=mcp.veridexia.es","issuer":"CN=YR1,O=Let's Encrypt,C=US","notBefore":"2026-10-07T16:46:54Z","notAfter":"2027-01-05T16:46:53Z","keyType":"RSA","keyBits":4096,"isCa":false},{"subject":"CN=YR1,O=Let's Encrypt,C=US","issuer":"CN=Root YR,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":true},{"subject":"CN=Root YR,O=ISRG,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"RSA","keyBits":4096,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"mcp.veridexia.es.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"es.","outcome":"verified","label":"Verified"},{"zone":"veridexia.es.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-09","recent":[{"id":"chg_01a1aae0-3ec5-7c3c-9b3d-e79b3263baaa","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a1aae0-3ec5-7c3c-9b3d-e79b3263baaa"},{"id":"chg_01a1a091-8643-7c2e-b8d2-cbaca8908819","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a1a091-8643-7c2e-b8d2-cbaca8908819"},{"id":"chg_01a19119-579a-72ee-bed2-32253a42fd51","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a19119-579a-72ee-bed2-32253a42fd51"},{"id":"chg_01a186d1-5855-7707-9df4-e994645ccbf0","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a186d1-5855-7707-9df4-e994645ccbf0"},{"id":"chg_01a17c7d-d3a3-7d81-977a-2c0a86bcd4ba","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a17c7d-d3a3-7d81-977a-2c0a86bcd4ba"},{"id":"chg_01a17230-1de5-7cc3-b18e-90852d2b1794","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a17230-1de5-7cc3-b18e-90852d2b1794"},{"id":"chg_01a167e2-5c52-7101-804d-a17279f9b640","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a167e2-5c52-7101-804d-a17279f9b640"},{"id":"chg_01a15d95-aa22-7e3c-9aef-97f37c39a73d","kind":"score.total_changed","summary":"Trust score (75 → 76)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a15d95-aa22-7e3c-9aef-97f37c39a73d"},{"id":"chg_01a15347-bb7e-7335-8fc8-f6fbf7169baf","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a15347-bb7e-7335-8fc8-f6fbf7169baf"},{"id":"chg_01a143dd-a143-787a-b67f-02a02f8c0e31","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a143dd-a143-787a-b67f-02a02f8c0e31"},{"id":"chg_01a13990-1074-7bea-a149-7c5634fe14a1","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a13990-1074-7bea-a149-7c5634fe14a1"},{"id":"chg_01a12e34-bdd9-7628-8cb1-24f0a069356d","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-12","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a12e34-bdd9-7628-8cb1-24f0a069356d"},{"id":"chg_01a12680-feb9-7b3d-9883-5b8f057e004e","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-10","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a12680-feb9-7b3d-9883-5b8f057e004e"},{"id":"chg_01a12131-f248-7db7-a124-5e3c3b4b685d","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-09","url":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp#chg-chg_01a12131-f248-7db7-a124-5e3c3b4b685d"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp","markdown":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp.md","changelogJson":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/es-veridexia-veridex-mcp/mcp.xml","external":[{"label":"Remote endpoint","href":"https://mcp.veridexia.es/mcp"},{"label":"Repository","href":"https://github.com/Habib4862/veridex-mcp"},{"label":"Website","href":"https://veridexia.es/"}]}}