{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "io-neonia-cloud-backend",
  "component": "mcp",
  "generated_at": "2026-10-08T00:29:05.440Z",
  "tracking_since": "2026-07-26",
  "counts": {
    "critical": 0,
    "security": 17,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a1066e-9d6d-724b-bc3f-b52fa5c48f9c",
      "kind": "check.reverified",
      "family": "https",
      "subject_kind": "check",
      "subject": "https",
      "subject_child": "",
      "from_code": "https.inconclusive",
      "to_code": "https.enforced",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-04",
      "occurred_at": "2026-10-04 10:21:14.827806+00",
      "observed_since": "2026-10-03",
      "source": "scan",
      "summary": "HTTPS (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a1066e-9d6d-724b-bc3f-b52fa5c48f9c"
    },
    {
      "id": "chg_01a10142-0813-7561-8832-a5b5854ef088",
      "kind": "check.unverifiable",
      "family": "https",
      "subject_kind": "check",
      "subject": "https",
      "subject_child": "",
      "from_code": "https.enforced",
      "to_code": "https.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "plaintext_status",
        "status": "406"
      },
      "occurred_on": "2026-10-03",
      "occurred_at": "2026-10-03 10:14:26.659716+00",
      "observed_since": "2026-10-02",
      "source": "scan",
      "summary": "HTTPS (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a10142-0813-7561-8832-a5b5854ef088"
    },
    {
      "id": "chg_01a0fc21-11d6-73f5-90ae-077d95ae0605",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only",
      "to_code": "auth.unreachable",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-02",
      "occurred_at": "2026-10-02 10:20:19.533899+00",
      "observed_since": "2026-10-01",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0fc21-11d6-73f5-90ae-077d95ae0605"
    },
    {
      "id": "chg_01a0fc21-11d9-752a-8711-389d6427a2c2",
      "kind": "check.reverified",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.auth_gated",
      "to_code": "transport.unreachable",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-10-02",
      "occurred_at": "2026-10-02 10:20:19.533899+00",
      "observed_since": "2026-10-01",
      "source": "scan",
      "summary": "Transport (unverified → fail)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0fc21-11d9-752a-8711-389d6427a2c2"
    },
    {
      "id": "chg_01a0fc21-11da-7b8c-9ee9-5f616cab5ad3",
      "kind": "check.unverifiable",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_absent",
      "to_code": "headers.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-02",
      "occurred_at": "2026-10-02 10:20:19.533899+00",
      "observed_since": "2026-10-01",
      "source": "scan",
      "summary": "HSTS header (fail → unverified)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0fc21-11da-7b8c-9ee9-5f616cab5ad3"
    },
    {
      "id": "chg_01a0fc21-11dd-7ac3-95e5-6f7a5ceadc81",
      "kind": "check.unverifiable",
      "family": "tls",
      "subject_kind": "check",
      "subject": "tls",
      "subject_child": "",
      "from_code": "tls.valid",
      "to_code": "tls.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-02",
      "occurred_at": "2026-10-02 10:20:19.533899+00",
      "observed_since": "2026-10-01",
      "source": "scan",
      "summary": "TLS certificate (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0fc21-11dd-7ac3-95e5-6f7a5ceadc81"
    },
    {
      "id": "chg_01a0fc21-11e1-7210-9c49-617ebe7b597d",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.auth_gated",
      "to_code": "toolsafety.unreachable",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-02",
      "occurred_at": "2026-10-02 10:20:19.533899+00",
      "observed_since": "2026-10-01",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0fc21-11e1-7210-9c49-617ebe7b597d"
    },
    {
      "id": "chg_01a0cdc6-e707-7972-93ad-9db739b82beb",
      "kind": "check.reverified",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.inconclusive",
      "to_code": "headers.hsts_absent",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-23",
      "occurred_at": "2026-09-23 10:19:19.501021+00",
      "observed_since": "2026-09-22",
      "source": "scan",
      "summary": "HSTS header (unverified → fail)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0cdc6-e707-7972-93ad-9db739b82beb"
    },
    {
      "id": "chg_01a0cdc6-e709-71e2-a1de-1504985caa7c",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.unreachable",
      "to_code": "auth.challenge_only",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-23",
      "occurred_at": "2026-09-23 10:19:19.501021+00",
      "observed_since": "2026-09-22",
      "source": "scan",
      "summary": "Authorization (unverified → fail)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0cdc6-e709-71e2-a1de-1504985caa7c"
    },
    {
      "id": "chg_01a0cdc6-e709-7776-81b4-d2597537cffe",
      "kind": "check.unverifiable",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.unreachable",
      "to_code": "transport.auth_gated",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-09-23",
      "occurred_at": "2026-09-23 10:19:19.501021+00",
      "observed_since": "2026-09-22",
      "source": "scan",
      "summary": "Transport (fail → unverified)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0cdc6-e709-7776-81b4-d2597537cffe"
    },
    {
      "id": "chg_01a0cdc6-e709-7c29-9640-d2198d96bdbf",
      "kind": "check.reverified",
      "family": "tls",
      "subject_kind": "check",
      "subject": "tls",
      "subject_child": "",
      "from_code": "tls.unreachable",
      "to_code": "tls.valid",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-23",
      "occurred_at": "2026-09-23 10:19:19.501021+00",
      "observed_since": "2026-09-22",
      "source": "scan",
      "summary": "TLS certificate (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0cdc6-e709-7c29-9640-d2198d96bdbf"
    },
    {
      "id": "chg_01a0cdc6-e70a-756f-af8d-434686cde711",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.unreachable",
      "to_code": "toolsafety.auth_gated",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-23",
      "occurred_at": "2026-09-23 10:19:19.501021+00",
      "observed_since": "2026-09-22",
      "source": "scan",
      "summary": "Tool safety (Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0cdc6-e70a-756f-af8d-434686cde711"
    },
    {
      "id": "chg_01a0c8a0-3ad1-7665-8dff-bb4d479ebaf2",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only",
      "to_code": "auth.unreachable",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-22",
      "occurred_at": "2026-09-22 10:18:59.034433+00",
      "observed_since": "2026-09-21",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0c8a0-3ad1-7665-8dff-bb4d479ebaf2"
    },
    {
      "id": "chg_01a0c8a0-3ad2-755f-89cb-e402d5389584",
      "kind": "check.reverified",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.auth_gated",
      "to_code": "transport.unreachable",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-09-22",
      "occurred_at": "2026-09-22 10:18:59.034433+00",
      "observed_since": "2026-09-21",
      "source": "scan",
      "summary": "Transport (unverified → fail)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0c8a0-3ad2-755f-89cb-e402d5389584"
    },
    {
      "id": "chg_01a0c8a0-3ad2-7bf6-92a9-433b3cefe198",
      "kind": "check.unverifiable",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_absent",
      "to_code": "headers.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-22",
      "occurred_at": "2026-09-22 10:18:59.034433+00",
      "observed_since": "2026-09-21",
      "source": "scan",
      "summary": "HSTS header (fail → unverified)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0c8a0-3ad2-7bf6-92a9-433b3cefe198"
    },
    {
      "id": "chg_01a0c8a0-3ad3-7411-9e30-878b7b53590c",
      "kind": "check.unverifiable",
      "family": "tls",
      "subject_kind": "check",
      "subject": "tls",
      "subject_child": "",
      "from_code": "tls.valid",
      "to_code": "tls.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-22",
      "occurred_at": "2026-09-22 10:18:59.034433+00",
      "observed_since": "2026-09-21",
      "source": "scan",
      "summary": "TLS certificate (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0c8a0-3ad3-7411-9e30-878b7b53590c"
    },
    {
      "id": "chg_01a0c8a0-3ad3-79a3-a190-c12cb03b48b6",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.auth_gated",
      "to_code": "toolsafety.unreachable",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-22",
      "occurred_at": "2026-09-22 10:18:59.034433+00",
      "observed_since": "2026-09-21",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.)",
      "link": "https://verifymcp.io/servers/io-neonia-cloud-backend/mcp#chg-chg_01a0c8a0-3ad3-79a3-a190-c12cb03b48b6"
    }
  ],
  "days": [
    {
      "date": "2026-10-06",
      "total": 20,
      "delta": -6,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    },
    {
      "date": "2026-10-04",
      "total": 26,
      "delta": -7,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-03",
      "total": 33,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-02",
      "total": 33,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    },
    {
      "date": "2026-09-28",
      "total": 33,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-25",
      "total": 33,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-23",
      "total": 33,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    },
    {
      "date": "2026-09-22",
      "total": 33,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    }
  ]
}