<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>GF Agent Toll · gfpick-agent-api · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] gfpick-agent-api: Transport (fail → pass)</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-881e-75a6-a1f8-3de25fd7d403</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-881e-75a6-a1f8-3de25fd7d403</guid><description>Transport (fail → pass). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] gfpick-agent-api: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-881f-77c5-a2f6-162eccbf4b0f</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-881f-77c5-a2f6-162eccbf4b0f</guid><description>Injection markers (unverified → pass). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] gfpick-agent-api: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 21 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-881f-7be8-98f2-4737819a7e9b</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-881f-7be8-98f2-4737819a7e9b</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 21 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] gfpick-agent-api: Tool “gf.agent_budget” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8821-7b5c-a217-0bd63342db62</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8821-7b5c-a217-0bd63342db62</guid><description>Tool “gf.agent_budget” rewrote its description, which is the text the model reads. Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] gfpick-agent-api: Tool “gf.agent_commerce_status” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8826-780f-8174-1f84bebf042e</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8826-780f-8174-1f84bebf042e</guid><description>Tool “gf.agent_commerce_status” rewrote its description, which is the text the model reads. Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] gfpick-agent-api: Tool “gf.execute” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8827-70f5-928f-1a90624b8809</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8827-70f5-928f-1a90624b8809</guid><description>Tool “gf.execute” rewrote its description, which is the text the model reads. Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] gfpick-agent-api: Tool “gf.list_services” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-882c-7814-ae7e-0e49a2168006</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-882c-7814-ae7e-0e49a2168006</guid><description>Tool “gf.list_services” rewrote its description, which is the text the model reads. Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] gfpick-agent-api: Tool “gf.search_capabilities” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8833-7368-b0ad-52ad41c1faf9</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8833-7368-b0ad-52ad41c1faf9</guid><description>Tool “gf.search_capabilities” rewrote its description, which is the text the model reads. Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] gfpick-agent-api: Tool “gf.payment_status” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-882d-7e67-a146-38843cd08e35</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-882d-7e67-a146-38843cd08e35</guid><description>Tool “gf.payment_status” rewrote its description, which is the text the model reads. Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] gfpick-agent-api: Tool “gf.quote” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-882f-7b33-b26b-2de363c44c0d</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-882f-7b33-b26b-2de363c44c0d</guid><description>Tool “gf.quote” rewrote its description, which is the text the model reads. Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] gfpick-agent-api: Tool “gf.revenue_intelligence” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8832-74cf-9523-8556cf2d56fc</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8832-74cf-9523-8556cf2d56fc</guid><description>Tool “gf.revenue_intelligence” rewrote its description, which is the text the model reads. Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] gfpick-agent-api: Tool “gf.settlement_status” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8836-753c-9954-3b25c46ab4ce</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8836-753c-9954-3b25c46ab4ce</guid><description>Tool “gf.settlement_status” rewrote its description, which is the text the model reads. Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] gfpick-agent-api: Tool “gf.universal_status” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8837-7144-8d17-c2f621456cb2</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8837-7144-8d17-c2f621456cb2</guid><description>Tool “gf.universal_status” rewrote its description, which is the text the model reads. Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] gfpick-agent-api: A breaking change shipped without a version bump (still 2.3.1)</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8838-76b6-bb68-9844f1e34428</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a08943-8838-76b6-bb68-9844f1e34428</guid><description>A breaking change shipped without a version bump (still 2.3.1). Compared against 2026-09-08.</description><pubDate>Thu, 10 Sep 2026 03:01:39 GMT</pubDate><category>security</category><category>regression</category><category>server.breaking_without_version_bump</category></item><item><title>[SECURITY] gfpick-agent-api: Transport (pass → fail)</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a0841d-13b1-765f-b810-d38e982aed04</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a0841d-13b1-765f-b810-d38e982aed04</guid><description>Transport (pass → fail). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 03:01:33 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] gfpick-agent-api: Stability (0.27 → unverified)</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a0841d-13b2-7596-a8dd-f8b22e21c6ef</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a0841d-13b2-7596-a8dd-f8b22e21c6ef</guid><description>Stability (0.27 → unverified). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 03:01:33 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] gfpick-agent-api: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a0841d-13b2-79c1-97db-727f453055a6</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a0841d-13b2-79c1-97db-727f453055a6</guid><description>Tool safety (pass → unverified). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 03:01:33 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] gfpick-agent-api: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a0841d-13b2-7e8a-af0c-da9c39e57c76</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a0841d-13b2-7e8a-af0c-da9c39e57c76</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 03:01:33 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] gfpick-agent-api: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a0841d-13b8-74ae-87d9-c01bff86afa1</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a0841d-13b8-74ae-87d9-c01bff86afa1</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 03:01:33 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] gfpick-agent-api: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a05af2-81e8-7024-862a-b4c86353259a</link><guid isPermaLink="true">https://verifymcp.io/servers/hamadalmajdouie-rgb-gf-agent-toll/gfpick-agent-api#chg-chg_01a05af2-81e8-7024-862a-b4c86353259a</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-08-31.</description><pubDate>Tue, 01 Sep 2026 03:10:37 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item></channel></rss>