<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>GoodSign · goodsign · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/io-goodsign-goodsign/goodsign.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] goodsign: Transport (unverified → pass)</title><link>https://verifymcp.io/servers/io-goodsign-goodsign/goodsign#chg-chg_01a0c33a-9000-7a6c-958e-dc5302728ea0</link><guid isPermaLink="true">https://verifymcp.io/servers/io-goodsign-goodsign/goodsign#chg-chg_01a0c33a-9000-7a6c-958e-dc5302728ea0</guid><description>Transport (unverified → pass). Compared against 2026-09-20.</description><pubDate>Mon, 21 Sep 2026 09:09:49 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] goodsign: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/io-goodsign-goodsign/goodsign#chg-chg_01a0c33a-9001-7ac7-ba79-5adae1333f8f</link><guid isPermaLink="true">https://verifymcp.io/servers/io-goodsign-goodsign/goodsign#chg-chg_01a0c33a-9001-7ac7-ba79-5adae1333f8f</guid><description>Injection markers (unverified → pass). Compared against 2026-09-20.</description><pubDate>Mon, 21 Sep 2026 09:09:49 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] goodsign: Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.)</title><link>https://verifymcp.io/servers/io-goodsign-goodsign/goodsign#chg-chg_01a0c33a-9002-7282-9ac6-9fbd09bbd162</link><guid isPermaLink="true">https://verifymcp.io/servers/io-goodsign-goodsign/goodsign#chg-chg_01a0c33a-9002-7282-9ac6-9fbd09bbd162</guid><description>Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.). Compared against 2026-09-20.</description><pubDate>Mon, 21 Sep 2026 09:09:49 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] goodsign: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/io-goodsign-goodsign/goodsign#chg-chg_01a0c33a-9002-78b0-aebd-04e4b43bf659</link><guid isPermaLink="true">https://verifymcp.io/servers/io-goodsign-goodsign/goodsign#chg-chg_01a0c33a-9002-78b0-aebd-04e4b43bf659</guid><description>First check of Judged manipulation (pass). Compared against 2026-09-20.</description><pubDate>Mon, 21 Sep 2026 09:09:49 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item></channel></rss>