<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.heronapp/heron · heronapp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/io-heronapp-heron/heronapp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] heronapp: HSTS header (unverified → fail)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0aee6-a58a-7111-aaff-79d1df09f79e</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0aee6-a58a-7111-aaff-79d1df09f79e</guid><description>HSTS header (unverified → fail). Compared against 2026-09-16.</description><pubDate>Thu, 17 Sep 2026 10:25:45 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] heronapp: HTTPS (pass → unverified)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0aee6-a58e-7f1a-ae65-80bcef4f21e2</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0aee6-a58e-7f1a-ae65-80bcef4f21e2</guid><description>HTTPS (pass → unverified). Compared against 2026-09-16.</description><pubDate>Thu, 17 Sep 2026 10:25:45 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] heronapp: Transport (Transport check failed: declared streamable-http, but the endpoint returned HTTP 526.)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0aee6-a590-740b-aef5-151436893793</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0aee6-a590-740b-aef5-151436893793</guid><description>Transport (Transport check failed: declared streamable-http, but the endpoint returned HTTP 526.). Compared against 2026-09-16.</description><pubDate>Thu, 17 Sep 2026 10:25:45 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] heronapp: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0aee6-a591-72e1-ad0d-94f0b149d227</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0aee6-a591-72e1-ad0d-94f0b149d227</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.). Compared against 2026-09-16.</description><pubDate>Thu, 17 Sep 2026 10:25:45 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] heronapp: HSTS header (fail → unverified)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0a9c3-af8c-7292-89d8-8ddae0d87c3b</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0a9c3-af8c-7292-89d8-8ddae0d87c3b</guid><description>HSTS header (fail → unverified). Compared against 2026-09-15.</description><pubDate>Wed, 16 Sep 2026 10:29:28 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] heronapp: HTTPS (unverified → pass)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0a9c3-af8f-730d-a124-a6f54a541996</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0a9c3-af8f-730d-a124-a6f54a541996</guid><description>HTTPS (unverified → pass). Compared against 2026-09-15.</description><pubDate>Wed, 16 Sep 2026 10:29:28 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] heronapp: Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0a9c3-af8f-7bc2-8217-6a2696a720dd</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0a9c3-af8f-7bc2-8217-6a2696a720dd</guid><description>Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.). Compared against 2026-09-15.</description><pubDate>Wed, 16 Sep 2026 10:29:28 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] heronapp: Transport (Transport check failed: declared streamable-http, but we couldn&apos;t connect to verify it.)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0a9c3-af90-7dc2-a7f2-18beb9733358</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a0a9c3-af90-7dc2-a7f2-18beb9733358</guid><description>Transport (Transport check failed: declared streamable-http, but we couldn&apos;t connect to verify it.). Compared against 2026-09-15.</description><pubDate>Wed, 16 Sep 2026 10:29:28 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] heronapp: HSTS header (unverified → fail)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a07111-f69b-73a9-95b1-878cc6c02605</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a07111-f69b-73a9-95b1-878cc6c02605</guid><description>HSTS header (unverified → fail). Compared against 2026-09-04.</description><pubDate>Sat, 05 Sep 2026 10:16:37 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] heronapp: HTTPS (pass → unverified)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a07111-f69e-769e-b30d-9b9e02aa3369</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a07111-f69e-769e-b30d-9b9e02aa3369</guid><description>HTTPS (pass → unverified). Compared against 2026-09-04.</description><pubDate>Sat, 05 Sep 2026 10:16:37 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] heronapp: Transport (Transport check failed: declared streamable-http, but the endpoint returned HTTP 526.)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a07111-f6a1-75e2-96b7-113c6879831c</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a07111-f6a1-75e2-96b7-113c6879831c</guid><description>Transport (Transport check failed: declared streamable-http, but the endpoint returned HTTP 526.). Compared against 2026-09-04.</description><pubDate>Sat, 05 Sep 2026 10:16:37 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] heronapp: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a07111-f6a1-7cc9-87ad-2cafe220b799</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a07111-f6a1-7cc9-87ad-2cafe220b799</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.). Compared against 2026-09-04.</description><pubDate>Sat, 05 Sep 2026 10:16:37 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] heronapp: HSTS header (fail → unverified)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a066c6-a514-75bc-8622-be283712fe7e</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a066c6-a514-75bc-8622-be283712fe7e</guid><description>HSTS header (fail → unverified). Compared against 2026-09-02.</description><pubDate>Thu, 03 Sep 2026 10:18:09 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] heronapp: Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a066c6-a515-7b4c-a434-4b652558337d</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a066c6-a515-7b4c-a434-4b652558337d</guid><description>Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.). Compared against 2026-09-02.</description><pubDate>Thu, 03 Sep 2026 10:18:09 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] heronapp: Transport (Transport check failed: declared streamable-http, but we couldn&apos;t connect to verify it.)</title><link>https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a066c6-a516-7249-b18b-8897e96abb66</link><guid isPermaLink="true">https://verifymcp.io/servers/io-heronapp-heron/heronapp#chg-chg_01a066c6-a516-7249-b18b-8897e96abb66</guid><description>Transport (Transport check failed: declared streamable-http, but we couldn&apos;t connect to verify it.). Compared against 2026-09-02.</description><pubDate>Thu, 03 Sep 2026 10:18:09 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>