{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "io-usefulapi-mercoa",
  "component": "mercoa",
  "generated_at": "2026-09-21T01:23:03.373Z",
  "tracking_since": "2026-07-26",
  "counts": {
    "critical": 0,
    "security": 66,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0a802-c21b-7220-9ab1-344d5b11eaa1",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only_invoke",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 02:19:08.097589+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Authorization (fail → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0a802-c21b-7220-9ab1-344d5b11eaa1"
    },
    {
      "id": "chg_01a0a802-c21c-7e61-ab87-e2cd6263cba4",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 02:19:08.097589+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0a802-c21c-7e61-ab87-e2cd6263cba4"
    },
    {
      "id": "chg_01a0a2db-7094-7ea7-87b1-598ee5d71c57",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.challenge_only_invoke",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 02:18:05.208804+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Authorization (pass → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0a2db-7094-7ea7-87b1-598ee5d71c57"
    },
    {
      "id": "chg_01a09db5-210e-710f-ae27-c19f08585328",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 02:18:08.450711+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a09db5-210e-710f-ae27-c19f08585328"
    },
    {
      "id": "chg_01a09db5-210f-751e-b88c-c467cd96d0d0",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.unreachable",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 02:18:08.450711+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a09db5-210f-751e-b88c-c467cd96d0d0"
    },
    {
      "id": "chg_01a09db5-210f-7c68-a739-c41d5e3fd721",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.churn",
      "to_code": "stability.stable",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 02:18:08.450711+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Stability (fail → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a09db5-210f-7c68-a739-c41d5e3fd721"
    },
    {
      "id": "chg_01a0988f-0055-7901-a9e1-e386c82c9d42",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_unlisted",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 02:18:23.598444+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Authorization (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0988f-0055-7901-a9e1-e386c82c9d42"
    },
    {
      "id": "chg_01a0988f-0056-7665-802f-4e17ea24a536",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.stable",
      "to_code": "stability.churn",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "30",
        "added": "0",
        "breaks": "0",
        "removed": "17",
        "auth_transport": "1"
      },
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 02:18:23.598444+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Stability (pass → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0988f-0056-7665-802f-4e17ea24a536"
    },
    {
      "id": "chg_01a0988f-0056-7ace-b645-81ee054538b4",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 02:18:23.598444+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0988f-0056-7ace-b645-81ee054538b4"
    },
    {
      "id": "chg_01a09368-694c-70fe-b0d2-b581af5568ae",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive_unverified",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 02:18:08.455184+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a09368-694c-70fe-b0d2-b581af5568ae"
    },
    {
      "id": "chg_01a09368-694d-7825-af75-d93f9e5f74c9",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.churn",
      "to_code": "stability.stable",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 02:18:08.455184+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Stability (fail → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a09368-694d-7825-af75-d93f9e5f74c9"
    },
    {
      "id": "chg_01a08e43-58d2-7661-90be-e14a8f4ad088",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.stable",
      "to_code": "stability.churn",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "30",
        "added": "0",
        "breaks": "0",
        "removed": "0",
        "auth_transport": "1"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 02:19:33.380165+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Stability (pass → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a08e43-58d2-7661-90be-e14a8f4ad088"
    },
    {
      "id": "chg_01a08e43-58d4-7ea3-a4eb-5060ea462aa5",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_destructive_unverified",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "mercoa_create_entity"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 02:19:33.380165+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Authorization (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a08e43-58d4-7ea3-a4eb-5060ea462aa5"
    },
    {
      "id": "chg_01a0891b-fb3b-7ceb-a1aa-1eeda6caf200",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive_unverified",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 02:18:27.437654+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0891b-fb3b-7ceb-a1aa-1eeda6caf200"
    },
    {
      "id": "chg_01a0891b-fb3d-7588-9f06-9d9ab1f4a6b8",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.churn",
      "to_code": "stability.stable",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 02:18:27.437654+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Stability (fail → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0891b-fb3d-7588-9f06-9d9ab1f4a6b8"
    },
    {
      "id": "chg_01a083f5-bcf0-7681-9dfb-87d2232df83e",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.unreachable",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 02:18:35.023634+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a083f5-bcf0-7681-9dfb-87d2232df83e"
    },
    {
      "id": "chg_01a083f5-bcf1-7b3d-9064-3c998e2910a2",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.none_destructive_unverified",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "mercoa_create_entity"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 02:18:35.023634+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Authorization (Authorisation not fully verified: this server exposes a tool marked destructive (mercoa_create_entity) and its handshake is open, but we could not confirm whether a tool call is gated, so we do not assert it is callable unauthenticated.)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a083f5-bcf1-7b3d-9064-3c998e2910a2"
    },
    {
      "id": "chg_01a07ed1-a51c-788a-9ee8-70cc1616d5fb",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_unlisted",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 02:21:03.504745+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Authorization (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a07ed1-a51c-788a-9ee8-70cc1616d5fb"
    },
    {
      "id": "chg_01a07ed1-a51f-7539-8036-f273482f36e0",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.stable",
      "to_code": "stability.churn",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "30",
        "added": "0",
        "breaks": "0",
        "removed": "17",
        "auth_transport": "1"
      },
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 02:21:03.504745+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Stability (pass → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a07ed1-a51f-7539-8036-f273482f36e0"
    },
    {
      "id": "chg_01a07ed1-a51f-7d76-9917-bce98103d421",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 02:21:03.504745+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a07ed1-a51f-7d76-9917-bce98103d421"
    },
    {
      "id": "chg_01a06f59-e99e-7be5-87f5-d665a475efb7",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive_unverified",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 02:15:58.545102+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a06f59-e99e-7be5-87f5-d665a475efb7"
    },
    {
      "id": "chg_01a06f59-e99f-7e4c-b80d-f1cbda339b6a",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.churn",
      "to_code": "stability.stable",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 02:15:58.545102+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Stability (fail → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a06f59-e99f-7e4c-b80d-f1cbda339b6a"
    },
    {
      "id": "chg_01a0650c-fb77-7197-b729-8aac94126831",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.stable",
      "to_code": "stability.churn",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "30",
        "added": "0",
        "breaks": "0",
        "removed": "0",
        "auth_transport": "1"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 02:15:44.694065+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Stability (pass → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0650c-fb77-7197-b729-8aac94126831"
    },
    {
      "id": "chg_01a0650c-fb78-74cf-a609-716abbf11e41",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_destructive_unverified",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "mercoa_create_entity"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 02:15:44.694065+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Authorization (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0650c-fb78-74cf-a609-716abbf11e41"
    },
    {
      "id": "chg_01a05abf-b7d5-7a96-9219-303521ae41ee",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 02:15:08.981162+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a05abf-b7d5-7a96-9219-303521ae41ee"
    },
    {
      "id": "chg_01a05abf-b7d6-76a9-94eb-65f0eae878ca",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.auth_gated",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 02:15:08.981162+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a05abf-b7d6-76a9-94eb-65f0eae878ca"
    },
    {
      "id": "chg_01a05abf-b7d6-7cae-857e-c74f09195b9b",
      "kind": "check.reverified",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.insufficient_history",
      "to_code": "stability.stable",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 02:15:08.981162+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Stability (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a05abf-b7d6-7cae-857e-c74f09195b9b"
    },
    {
      "id": "chg_01a05598-cc0f-75f9-a2b3-0ea8785f05cf",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_unlisted",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 02:14:32.137085+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Authorization (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a05598-cc0f-75f9-a2b3-0ea8785f05cf"
    },
    {
      "id": "chg_01a05598-cc12-717b-8705-d2fa67cb1f70",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.stable",
      "to_code": "stability.insufficient_history",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 02:14:32.137085+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Stability (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a05598-cc12-717b-8705-d2fa67cb1f70"
    },
    {
      "id": "chg_01a05598-cc12-7867-a86f-96d1e78de75b",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.auth_gated",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 02:14:32.137085+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a05598-cc12-7867-a86f-96d1e78de75b"
    },
    {
      "id": "chg_01a05598-cc13-7a9e-8665-f51c33035da0",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "auth_gated",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "auth_gated",
        "from": "verified"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 02:14:32.137085+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → behind authorisation)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a05598-cc13-7a9e-8665-f51c33035da0"
    },
    {
      "id": "chg_01a05073-1c50-76fc-a1a5-ec5563c908dc",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive_unverified",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 02:15:16.214085+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a05073-1c50-76fc-a1a5-ec5563c908dc"
    },
    {
      "id": "chg_01a05073-1c51-7a5f-8f3f-9e48ac1ee0b1",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.churn",
      "to_code": "stability.stable",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 02:15:16.214085+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Stability (fail → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a05073-1c51-7a5f-8f3f-9e48ac1ee0b1"
    },
    {
      "id": "chg_01a04b4c-46ea-797f-88da-36607325fad2",
      "kind": "check.reverified",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.insufficient_history",
      "to_code": "stability.churn",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "30",
        "added": "0",
        "breaks": "0",
        "removed": "0",
        "auth_transport": "1"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 02:14:45.103556+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Stability (unverified → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a04b4c-46ea-797f-88da-36607325fad2"
    },
    {
      "id": "chg_01a04b4c-46ec-7363-8e1c-cbb477474c5e",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.auth_gated",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 02:14:45.103556+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a04b4c-46ec-7363-8e1c-cbb477474c5e"
    },
    {
      "id": "chg_01a04b4c-46ec-785c-b1d9-81067034a93f",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.none_destructive_unverified",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "mercoa_create_entity"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 02:14:45.103556+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Authorization (Authorisation not fully verified: this server exposes a tool marked destructive (mercoa_create_entity) and its handshake is open, but we could not confirm whether a tool call is gated, so we do not assert it is callable unauthenticated.)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a04b4c-46ec-785c-b1d9-81067034a93f"
    },
    {
      "id": "chg_01a04625-914e-71d1-91f0-f6bc2d5db37e",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_unlisted",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 02:14:22.215456+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Authorization (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a04625-914e-71d1-91f0-f6bc2d5db37e"
    },
    {
      "id": "chg_01a04625-914f-7646-8aa1-2d1bd45702c1",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.stable",
      "to_code": "stability.insufficient_history",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 02:14:22.215456+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Stability (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a04625-914f-7646-8aa1-2d1bd45702c1"
    },
    {
      "id": "chg_01a04625-914f-7b6f-9f2c-51a7c7b579a7",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.auth_gated",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 02:14:22.215456+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a04625-914f-7b6f-9f2c-51a7c7b579a7"
    },
    {
      "id": "chg_01a04625-9150-7a27-a96b-47da0e0f3572",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "auth_gated",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "auth_gated",
        "from": "verified"
      },
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 02:14:22.215456+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → behind authorisation)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a04625-9150-7a27-a96b-47da0e0f3572"
    },
    {
      "id": "chg_01a02c65-5049-79d6-865b-fffd894d5cee",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-23",
      "occurred_at": "2026-08-23 02:13:52.278234+00",
      "observed_since": "2026-08-22",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a02c65-5049-79d6-865b-fffd894d5cee"
    },
    {
      "id": "chg_01a0273f-4760-78b3-9b6a-0caf29f05161",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive_unverified",
      "to_code": "auth.none_unlisted",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-22",
      "occurred_at": "2026-08-22 02:14:13.548248+00",
      "observed_since": "2026-08-21",
      "source": "scan",
      "summary": "Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the tool list to see what that exposes.)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a0273f-4760-78b3-9b6a-0caf29f05161"
    },
    {
      "id": "chg_01a02218-2a7e-7e3e-b080-cf940e48a85f",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.churn",
      "from_value": "0.80",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "25",
        "added": "0",
        "breaks": "0",
        "removed": "0",
        "auth_transport": "1"
      },
      "occurred_on": "2026-08-21",
      "occurred_at": "2026-08-21 02:13:24.149917+00",
      "observed_since": "2026-08-20",
      "source": "scan",
      "summary": "Stability (0.80 → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a02218-2a7e-7e3e-b080-cf940e48a85f"
    },
    {
      "id": "chg_01a02218-2a80-72c9-a93f-f657d7740f91",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_destructive_unverified",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "mercoa_create_entity"
      },
      "occurred_on": "2026-08-21",
      "occurred_at": "2026-08-21 02:13:24.149917+00",
      "observed_since": "2026-08-20",
      "source": "scan",
      "summary": "Authorization (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a02218-2a80-72c9-a93f-f657d7740f91"
    },
    {
      "id": "chg_01a017ca-6cdd-7381-b655-a2ce9a6754aa",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive_unverified",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-19",
      "occurred_at": "2026-08-19 02:12:17.180213+00",
      "observed_since": "2026-08-18",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a017ca-6cdd-7381-b655-a2ce9a6754aa"
    },
    {
      "id": "chg_01a012a4-f1c0-7e0a-9484-b49e2378e6e9",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.churn",
      "from_value": "0.70",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "22",
        "added": "0",
        "breaks": "0",
        "removed": "0",
        "auth_transport": "1"
      },
      "occurred_on": "2026-08-18",
      "occurred_at": "2026-08-18 02:13:14.753166+00",
      "observed_since": "2026-08-17",
      "source": "scan",
      "summary": "Stability (0.70 → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a012a4-f1c0-7e0a-9484-b49e2378e6e9"
    },
    {
      "id": "chg_01a012a4-f1c2-79b9-a2b4-d7a248ab4d7a",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only_invoke",
      "to_code": "auth.none_destructive_unverified",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "mercoa_create_entity"
      },
      "occurred_on": "2026-08-18",
      "occurred_at": "2026-08-18 02:13:14.753166+00",
      "observed_since": "2026-08-17",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a012a4-f1c2-79b9-a2b4-d7a248ab4d7a"
    },
    {
      "id": "chg_01a00d7d-616a-74d4-828a-5e97b33b106f",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.challenge_only_invoke",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-17",
      "occurred_at": "2026-08-17 02:11:55.828957+00",
      "observed_since": "2026-08-16",
      "source": "scan",
      "summary": "Authorization (unverified → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a00d7d-616a-74d4-828a-5e97b33b106f"
    },
    {
      "id": "chg_01a00858-368b-72c3-b17c-6fbc714ba530",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.insufficient_history",
      "from_value": "0.63",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-16",
      "occurred_at": "2026-08-16 02:13:13.933337+00",
      "observed_since": "2026-08-15",
      "source": "scan",
      "summary": "Stability (0.63 → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a00858-368b-72c3-b17c-6fbc714ba530"
    },
    {
      "id": "chg_01a00858-368c-749e-b086-1df5e532c4c9",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only_invoke",
      "to_code": "auth.none_unlisted",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-16",
      "occurred_at": "2026-08-16 02:13:13.933337+00",
      "observed_since": "2026-08-15",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a00858-368c-749e-b086-1df5e532c4c9"
    },
    {
      "id": "chg_01a00858-368d-7aa5-bd7b-e99047d4ed69",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "auth_gated",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "auth_gated",
        "from": "verified"
      },
      "occurred_on": "2026-08-16",
      "occurred_at": "2026-08-16 02:13:13.933337+00",
      "observed_since": "2026-08-15",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → behind authorisation)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a00858-368d-7aa5-bd7b-e99047d4ed69"
    },
    {
      "id": "chg_01a00330-8241-7858-a984-1dd8f3dcf68b",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.challenge_only_invoke",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-15",
      "occurred_at": "2026-08-15 02:11:45.800462+00",
      "observed_since": "2026-08-14",
      "source": "scan",
      "summary": "Authorization (pass → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_01a00330-8241-7858-a984-1dd8f3dcf68b"
    },
    {
      "id": "chg_019ffe0b-6a1e-75e4-8704-cfef9e966475",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only_invoke",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-14",
      "occurred_at": "2026-08-14 02:13:08.709548+00",
      "observed_since": "2026-08-13",
      "source": "scan",
      "summary": "Authorization (fail → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019ffe0b-6a1e-75e4-8704-cfef9e966475"
    },
    {
      "id": "chg_019ff8e3-a17b-7694-87a2-40c1cc6e8aa4",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.challenge_only_invoke",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 02:11:35.362995+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Authorization (pass → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019ff8e3-a17b-7694-87a2-40c1cc6e8aa4"
    },
    {
      "id": "chg_019ff3bf-07d6-7d92-952f-a19624753b27",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive_unverified",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-12",
      "occurred_at": "2026-08-12 02:13:30.685124+00",
      "observed_since": "2026-08-11",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019ff3bf-07d6-7d92-952f-a19624753b27"
    },
    {
      "id": "chg_019fdf24-f919-7e4f-9123-e56478542d8b",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive_unverified",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 02:12:50.024283+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fdf24-f919-7e4f-9123-e56478542d8b"
    },
    {
      "id": "chg_019fd9fd-2718-7276-9f7f-5bb77a45482b",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_destructive_unverified",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "mercoa_create_entity"
      },
      "occurred_on": "2026-08-07",
      "occurred_at": "2026-08-07 02:11:14.28232+00",
      "observed_since": "2026-08-06",
      "source": "scan",
      "summary": "Authorization (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fd9fd-2718-7276-9f7f-5bb77a45482b"
    },
    {
      "id": "chg_019fd9fd-2719-74b6-815d-0f3d8a23de90",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.churn",
      "from_value": "0.33",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "11",
        "added": "0",
        "breaks": "0",
        "removed": "0",
        "auth_transport": "1"
      },
      "occurred_on": "2026-08-07",
      "occurred_at": "2026-08-07 02:11:14.28232+00",
      "observed_since": "2026-08-06",
      "source": "scan",
      "summary": "Stability (0.33 → fail)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fd9fd-2719-74b6-815d-0f3d8a23de90"
    },
    {
      "id": "chg_019fd4d8-5f19-7988-975d-e9125280b260",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 02:12:57.660323+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fd4d8-5f19-7988-975d-e9125280b260"
    },
    {
      "id": "chg_019fcfb0-12f2-7dfe-8994-d3932547a0c8",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_unlisted",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 02:10:50.702159+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Authorization (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fcfb0-12f2-7dfe-8994-d3932547a0c8"
    },
    {
      "id": "chg_019fcfb0-12f3-7a3a-97ae-56e1531706f8",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.insufficient_history",
      "from_value": "0.27",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 02:10:50.702159+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Stability (0.27 → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fcfb0-12f3-7a3a-97ae-56e1531706f8"
    },
    {
      "id": "chg_019fcfb0-12f4-79ee-a0a1-d6b63d60e939",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "not_mcp",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "not_mcp",
        "from": "verified"
      },
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 02:10:50.702159+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → not serving MCP)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fcfb0-12f4-79ee-a0a1-d6b63d60e939"
    },
    {
      "id": "chg_019fc4be-8a94-79e7-a83d-a2a47c4e68b1",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:10:49.462285+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fc4be-8a94-79e7-a83d-a2a47c4e68b1"
    },
    {
      "id": "chg_019fbb12-73f5-7eaa-9646-fd88bfd0a52e",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.insufficient_history",
      "from_value": "0.13",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 02:06:16.554409+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Stability (0.13 → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fbb12-73f5-7eaa-9646-fd88bfd0a52e"
    },
    {
      "id": "chg_019fbb12-73f6-76dd-8960-6efa8d0c4013",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_unlisted",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 02:06:16.554409+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Authorization (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fbb12-73f6-76dd-8960-6efa8d0c4013"
    },
    {
      "id": "chg_019fbb12-73f7-75c5-93b1-5f117c9f31f2",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "not_mcp",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "not_mcp",
        "from": "verified"
      },
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 02:06:16.554409+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → not serving MCP)",
      "link": "https://verifymcp.io/servers/io-usefulapi-mercoa/mercoa#chg-chg_019fbb12-73f7-75c5-93b1-5f117c9f31f2"
    }
  ],
  "days": [
    {
      "date": "2026-09-16",
      "total": 85,
      "delta": 4,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-15",
      "total": 81,
      "delta": -4,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-14",
      "total": 85,
      "delta": 54,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    },
    {
      "date": "2026-09-13",
      "total": 31,
      "delta": -54,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    },
    {
      "date": "2026-09-12",
      "total": 85,
      "delta": 14,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-11",
      "total": 71,
      "delta": -14,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-10",
      "total": 85,
      "delta": 14,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-09",
      "total": 71,
      "delta": 40,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    }
  ]
}