<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>AgentExec WebMCP &amp; Base L2 Gateway · api · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/har50-gateway/api.xml" rel="self" type="application/rss+xml"/><item><title>[CRITICAL] api: Authorization (unverified → fail)</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e591-7bb4-a93a-efb5005c9e5a</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e591-7bb4-a93a-efb5005c9e5a</guid><description>Authorization (unverified → fail). Compared against 2026-09-13.</description><pubDate>Mon, 14 Sep 2026 14:00:12 GMT</pubDate><category>critical</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] api: Tool “dry_run_simulation” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e597-7730-b969-728ce50b58b5</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e597-7730-b969-728ce50b58b5</guid><description>Tool “dry_run_simulation” rewrote its description, which is the text the model reads. Compared against 2026-09-14.</description><pubDate>Mon, 14 Sep 2026 14:00:12 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api: Tool “execute_onchain_intent” is now declared destructive</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e598-72eb-8fec-dfc7d4a06799</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e598-72eb-8fec-dfc7d4a06799</guid><description>Tool “execute_onchain_intent” is now declared destructive. Compared against 2026-09-14.</description><pubDate>Mon, 14 Sep 2026 14:00:12 GMT</pubDate><category>security</category><category>neutral</category><category>tool.destructive_set</category></item><item><title>[SECURITY] api: Tool “execute_onchain_intent” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e598-78a8-b508-09c853f8ac5f</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e598-78a8-b508-09c853f8ac5f</guid><description>Tool “execute_onchain_intent” rewrote its description, which is the text the model reads. Compared against 2026-09-14.</description><pubDate>Mon, 14 Sep 2026 14:00:12 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api: Tool “get_smart_account_info” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e598-7d5d-9e82-54b31eecf1fe</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e598-7d5d-9e82-54b31eecf1fe</guid><description>Tool “get_smart_account_info” rewrote its description, which is the text the model reads. Compared against 2026-09-14.</description><pubDate>Mon, 14 Sep 2026 14:00:12 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api: Tool “issue_session_key” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e59a-74bd-87b9-6336025f7b22</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e59a-74bd-87b9-6336025f7b22</guid><description>Tool “issue_session_key” rewrote its description, which is the text the model reads. Compared against 2026-09-14.</description><pubDate>Mon, 14 Sep 2026 14:00:12 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e59b-706b-b117-5f6b22de1c9c</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a0a037-e59b-706b-b117-5f6b22de1c9c</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-09-14.</description><pubDate>Mon, 14 Sep 2026 14:00:12 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item><item><title>[SECURITY] api: Transport (fail → pass)</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a09bb6-638e-7ea8-adea-4f4f5eb8fc5f</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a09bb6-638e-7ea8-adea-4f4f5eb8fc5f</guid><description>Transport (fail → pass). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 17:00:16 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] api: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a09bb6-6394-771b-97f5-9eba600357a2</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a09bb6-6394-771b-97f5-9eba600357a2</guid><description>Injection markers (unverified → pass). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 17:00:16 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a09bb6-6395-7ea5-a0a3-938adbd6b2b0</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a09bb6-6395-7ea5-a0a3-938adbd6b2b0</guid><description>First check of Judged manipulation (pass). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 17:00:16 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item><item><title>[SECURITY] api: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a09bb6-6397-7c04-a58e-bf4dc27957fc</link><guid isPermaLink="true">https://verifymcp.io/servers/har50-gateway/api#chg-chg_01a09bb6-6397-7c04-a58e-bf4dc27957fc</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 17:00:16 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>