<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>SignaTrust · signatrust-mcp-server · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] signatrust-mcp-server: Known CVEs (fail → pass)</title><link>https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019ff91f-447c-7c7d-9ad1-b143ba9a0208</link><guid isPermaLink="true">https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019ff91f-447c-7c7d-9ad1-b143ba9a0208</guid><description>Known CVEs (fail → pass). Compared against 2026-08-12.</description><pubDate>Thu, 13 Aug 2026 03:16:43 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] signatrust-mcp-server: GHSA-frvp-7c67-39w9 no longer affects this package</title><link>https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019ff91f-447d-7d7f-a878-92ddfb635dac</link><guid isPermaLink="true">https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019ff91f-447d-7d7f-a878-92ddfb635dac</guid><description>GHSA-frvp-7c67-39w9 no longer affects this package. Compared against 2026-08-12.</description><pubDate>Thu, 13 Aug 2026 03:16:43 GMT</pubDate><category>security</category><category>improvement</category><category>advisory.resolved</category></item><item><title>[SECURITY] signatrust-mcp-server: CVE-2026-69207 no longer affects this package</title><link>https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fcfec-f993-796e-b66d-3b263a1adbff</link><guid isPermaLink="true">https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fcfec-f993-796e-b66d-3b263a1adbff</guid><description>CVE-2026-69207 no longer affects this package. Compared against 2026-08-04.</description><pubDate>Wed, 05 Aug 2026 03:17:21 GMT</pubDate><category>security</category><category>improvement</category><category>advisory.resolved</category></item><item><title>[SECURITY] signatrust-mcp-server: CVE-2026-69207 affects this package (medium)</title><link>https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fcac9-070c-7810-a28d-345946d23152</link><guid isPermaLink="true">https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fcac9-070c-7810-a28d-345946d23152</guid><description>CVE-2026-69207 affects this package (medium). Compared against 2026-08-03.</description><pubDate>Tue, 04 Aug 2026 03:19:59 GMT</pubDate><category>security</category><category>regression</category><category>advisory.identified</category></item><item><title>[SECURITY] signatrust-mcp-server: GHSA-frvp-7c67-39w9 affects this package (medium)</title><link>https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc4b1-0f6f-7c25-885e-7329813f53e9</link><guid isPermaLink="true">https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc4b1-0f6f-7c25-885e-7329813f53e9</guid><description>GHSA-frvp-7c67-39w9 affects this package (medium). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 22:56:05 GMT</pubDate><category>security</category><category>regression</category><category>advisory.identified</category></item><item><title>[SECURITY] signatrust-mcp-server: Provenance (unverified → fail)</title><link>https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc4b1-0f71-79db-b5df-24c9cb82330c</link><guid isPermaLink="true">https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc4b1-0f71-79db-b5df-24c9cb82330c</guid><description>Provenance (unverified → fail). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 22:56:05 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] signatrust-mcp-server: Known CVEs (unverified → fail)</title><link>https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc4b1-0f72-785f-bbae-811f0280a3f6</link><guid isPermaLink="true">https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc4b1-0f72-785f-bbae-811f0280a3f6</guid><description>Known CVEs (unverified → fail). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 22:56:05 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] signatrust-mcp-server: Install scripts (unverified → pass)</title><link>https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc4b1-0f73-783e-a0a8-cff46b06d6e9</link><guid isPermaLink="true">https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc4b1-0f73-783e-a0a8-cff46b06d6e9</guid><description>Install scripts (unverified → pass). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 22:56:05 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] signatrust-mcp-server: Malware scan (unverified → pass)</title><link>https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc176-f728-7957-a1b6-ab481939ed21</link><guid isPermaLink="true">https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc176-f728-7957-a1b6-ab481939ed21</guid><description>Malware scan (unverified → pass). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 07:53:47 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] signatrust-mcp-server: Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)</title><link>https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc176-f729-7507-8235-9bf97777d388</link><guid isPermaLink="true">https://verifymcp.io/servers/io-signatrust-mcp-server/signatrust-mcp-server#chg-chg_019fc176-f729-7507-8235-9bf97777d388</guid><description>Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 07:53:47 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>