{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T19:28:32.349Z","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea","markdownUrl":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea.md","server":{"slug":"kelvin-ling-collectsea","name":"CollectSEA","registryName":"io.github.kelvin-ling/collectsea","description":"Find real software, security and AI-agent failures that resemble your design, with safeguards.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"collectsea","type":"remote","identifier":"https://collectsea.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea","version":"2026.10.17","transport":null,"scoredAt":"2026-11-05T03:27:11.460Z"},"score":{"total":79,"tier":"medium","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":79},{"date":"2026-11-04","total":79},{"date":"2026-11-03","total":78},{"date":"2026-11-02","total":78},{"date":"2026-11-01","total":77},{"date":"2026-10-31","total":77},{"date":"2026-10-30","total":76},{"date":"2026-10-29","total":76},{"date":"2026-10-28","total":76},{"date":"2026-10-27","total":75},{"date":"2026-10-26","total":75},{"date":"2026-10-25","total":74},{"date":"2026-10-24","total":74},{"date":"2026-10-23","total":73},{"date":"2026-10-22","total":73},{"date":"2026-10-21","total":72},{"date":"2026-10-20","total":72},{"date":"2026-10-19","total":71},{"date":"2026-10-18","total":71},{"date":"2026-10-17","total":70}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":66,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 659 tokens (~109/item across 6 items; 6 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"109","items":"6","tools":"6","tokens":"659","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":63,"verdict":"partial","reasons":["Stability observed for 19 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"19"}}]},{"name":"Tool Coverage","score":81,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","43% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"43"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"6"}},{"code":"toolsafety.manipulation_clean","args":{"units":"7","judged":"7"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"collectsea","type":"remote","identifier":"https://collectsea.com/mcp","withdrawn":false,"score":79,"current":true,"url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea","markdownUrl":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea.md"}],"facts":[{"label":"Endpoint","value":"https://collectsea.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"2026.10.17"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"analyze_design","title":"Find failure precedents for a design","description":"Profile a proposed feature, system or AI-agent workflow and return documented incidents from systems that behaved similarly, their failure patterns, and the safeguards to build in. Use before writing code for anything that moves money, deletes data, changes permissions, runs code, or acts on external content.","inputs":[{"name":"max_results","type":"integer","required":false,"description":null},{"name":"proposal","type":"string","required":true,"description":"Two to five sentences: what the system does, what it can change, what data it reads, which services it calls."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":103},{"name":"analyze_existing_app","title":"Find failure precedents for an existing app","description":"Analyze an existing app using observed behavior, README, architecture notes, configuration or source snippets. Provide a public GitHub repository_url to import selected context, or inspect a private repository locally and submit relevant text. Code is never executed and the running app is not scanned. Returns source context, behavior signals, historical precedents and safeguards to verify.","inputs":[{"name":"files","type":"array","required":false,"description":"Relevant text files. Description plus file contents must fit within 25,000 characters and the 32 KB request limit. Remove credentials and personal data."},{"name":"max_results","type":"integer","required":false,"description":null},{"name":"proposal","type":"string","required":false,"description":"Observed app behavior, integrations, data flows, permissions and deployment context. Optional when files are supplied."},{"name":"repository_url","type":"string","required":false,"description":"Public GitHub repository home URL, e.g. https://github.com/owner/app. Imports a small selection of docs, config and source at one commit."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":187},{"name":"search_incidents","title":"Search the incident database","description":"Keyword search over documented incidents and security advisories (company, technology, CVE, failure mode). Returns titles, summaries, evidence labels and URLs.","inputs":[{"name":"cursor","type":"string","required":false,"description":"Pagination cursor from a previous call"},{"name":"include_advisories","type":"boolean","required":false,"description":null},{"name":"max_results","type":"integer","required":false,"description":null},{"name":"query","type":"string","required":true,"description":"e.g. \"idempotency\", \"Redis tenant\", \"prompt injection\", \"CVE-2021-44228\""}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":102},{"name":"get_incident","title":"Get one incident record","description":"Full record for one incident by ID (e.g. SEA-POST-005): what happened, source, failure pattern, safeguards and review status.","inputs":[{"name":"id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":46},{"name":"list_failure_patterns","title":"List failure patterns","description":"The 14 recurring failure patterns with triggers, warning signs and engineering principles.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":24},{"name":"get_safeguards","title":"Get agent rules for a design","description":"Return ready-to-save rules (AGENTS.md by default; also CLAUDE.md, Cursor rule or Copilot instructions) for a proposed design, each rule citing the incidents behind it.","inputs":[{"name":"format","type":"string","required":false,"description":null},{"name":"mode","type":"string","required":false,"description":null},{"name":"proposal","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":70}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T03:27:11.000Z","track":"remote","endpoint":"https://collectsea.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=collectsea.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-18T01:42:21Z","notAfter":"2027-01-16T02:42:17Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"collectsea.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"collectsea.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-17","recent":[{"id":"chg_01a1a497-5c37-7988-937d-48467c123c86","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a1a497-5c37-7988-937d-48467c123c86"},{"id":"chg_01a19a3f-482b-7e91-ae49-95f3a35f81af","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a19a3f-482b-7e91-ae49-95f3a35f81af"},{"id":"chg_01a18ff1-6fe7-7d42-ae70-e37e876a2807","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a18ff1-6fe7-7d42-ae70-e37e876a2807"},{"id":"chg_01a18080-c8ab-7463-8060-7768f15294f7","kind":"score.total_changed","summary":"Trust score (75 → 76)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a18080-c8ab-7463-8060-7768f15294f7"},{"id":"chg_01a17634-882c-7013-b448-391a9f7470e5","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a17634-882c-7013-b448-391a9f7470e5"},{"id":"chg_01a16be7-db72-7c90-ab14-f4eedcd75c54","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a16be7-db72-7c90-ab14-f4eedcd75c54"},{"id":"chg_01a166c0-b366-7190-977d-2486454c8fa8","kind":"server.version_changed","summary":"Server version (2026.10.18-review-reliability → 2026.10.22-review-workspace)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a166c0-b366-7190-977d-2486454c8fa8"},{"id":"chg_01a1619a-a7eb-773d-ad23-9492a14b8e58","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a1619a-a7eb-773d-ad23-9492a14b8e58"},{"id":"chg_01a1574c-e788-75ac-aa7e-ad991cdfb887","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a1574c-e788-75ac-aa7e-ad991cdfb887"},{"id":"chg_01a15226-4ded-776f-bc33-76de7e110a55","kind":"server.version_changed","summary":"Server version (2026.10.17-seo-visuals → 2026.10.18-review-reliability)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a15226-4ded-776f-bc33-76de7e110a55"},{"id":"chg_01a14d00-5892-7548-89ec-20685d66e0cd","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a14d00-5892-7548-89ec-20685d66e0cd"},{"id":"chg_01a14d00-5893-7227-8af9-3e08f2e1b65a","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a14d00-5893-7227-8af9-3e08f2e1b65a"},{"id":"chg_01a14baa-5086-7239-96d2-220c4fc2eb57","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea#chg-chg_01a14baa-5086-7239-96d2-220c4fc2eb57"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea/changelog.json"},"links":{"html":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea","markdown":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea.md","changelogJson":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea/changelog.json","changelogRss":"https://verifymcp.io/servers/kelvin-ling-collectsea/collectsea.xml","external":[{"label":"Remote endpoint","href":"https://collectsea.com/mcp"},{"label":"Repository","href":"https://github.com/kelvin-ling/CollectSEA"},{"label":"Website","href":"https://collectsea.com/"}]}}