<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>XFish Horgász Webáruház · app-mcpapi-php · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php/changelog.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] app-mcpapi-php: HTTPS (unverified → fail)</title><link>https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fae9b-e930-77f9-a6a2-3a7229e1ff83</link><guid isPermaLink="true">https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fae9b-e930-77f9-a6a2-3a7229e1ff83</guid><description>HTTPS (unverified → fail). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 16:01:21 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] app-mcpapi-php: Transport (fail → pass)</title><link>https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fae9b-e930-7e6a-b6ee-62fb434a2693</link><guid isPermaLink="true">https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fae9b-e930-7e6a-b6ee-62fb434a2693</guid><description>Transport (fail → pass). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 16:01:21 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] app-mcpapi-php: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fae9b-e931-7568-9874-876eff67e9dc</link><guid isPermaLink="true">https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fae9b-e931-7568-9874-876eff67e9dc</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 16:01:21 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] app-mcpapi-php: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fa954-d7b3-722c-9b7e-4cdacfa19bbf</link><guid isPermaLink="true">https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fa954-d7b3-722c-9b7e-4cdacfa19bbf</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 15:25:37 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] app-mcpapi-php: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fa954-d7b2-708a-a75e-bebcfa939f0e</link><guid isPermaLink="true">https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fa954-d7b2-708a-a75e-bebcfa939f0e</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 15:25:37 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] app-mcpapi-php: Stability (0.03 → unverified)</title><link>https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fa954-d7b1-7b3f-93eb-9eabffc19a21</link><guid isPermaLink="true">https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fa954-d7b1-7b3f-93eb-9eabffc19a21</guid><description>Stability (0.03 → unverified). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 15:25:37 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] app-mcpapi-php: HTTPS (fail → unverified)</title><link>https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fa954-d7b1-70cb-afd2-2169e94ce0c9</link><guid isPermaLink="true">https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fa954-d7b1-70cb-afd2-2169e94ce0c9</guid><description>HTTPS (fail → unverified). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 15:25:37 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] app-mcpapi-php: Transport (pass → fail)</title><link>https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fa954-d7b1-76d9-a7cd-e0858275282f</link><guid isPermaLink="true">https://verifymcp.io/servers/hu-xfish-webshop/app-mcpapi-php#chg-chg_019fa954-d7b1-76d9-a7cd-e0858275282f</guid><description>Transport (pass → fail). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 15:25:37 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item></channel></rss>