<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.usefulapi/fitbit · fitbit · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/io-usefulapi-fitbit/fitbit.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] fitbit: HTTPS (unverified → pass)</title><link>https://verifymcp.io/servers/io-usefulapi-fitbit/fitbit#chg-chg_01a0f65b-07e2-7c76-a7a1-31d51108ac88</link><guid isPermaLink="true">https://verifymcp.io/servers/io-usefulapi-fitbit/fitbit#chg-chg_01a0f65b-07e2-7c76-a7a1-31d51108ac88</guid><description>HTTPS (unverified → pass). Compared against 2026-09-30.</description><pubDate>Thu, 01 Oct 2026 07:25:55 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] fitbit: Transport (fail → pass)</title><link>https://verifymcp.io/servers/io-usefulapi-fitbit/fitbit#chg-chg_01a0f140-2a9e-756f-8b63-89dd24c857f1</link><guid isPermaLink="true">https://verifymcp.io/servers/io-usefulapi-fitbit/fitbit#chg-chg_01a0f140-2a9e-756f-8b63-89dd24c857f1</guid><description>Transport (fail → pass). Compared against 2026-09-29.</description><pubDate>Wed, 30 Sep 2026 07:38:29 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] fitbit: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/io-usefulapi-fitbit/fitbit#chg-chg_01a0f140-2a9f-72d1-93ae-5309dbc01411</link><guid isPermaLink="true">https://verifymcp.io/servers/io-usefulapi-fitbit/fitbit#chg-chg_01a0f140-2a9f-72d1-93ae-5309dbc01411</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.). Compared against 2026-09-29.</description><pubDate>Wed, 30 Sep 2026 07:38:29 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>