<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>CityAlert · api-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api-mcp: HSTS header (unverified → pass)</title><link>https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp#chg-chg_01a0e141-73d0-79ea-b983-df54d3ef52e6</link><guid isPermaLink="true">https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp#chg-chg_01a0e141-73d0-79ea-b983-df54d3ef52e6</guid><description>HSTS header (unverified → pass). Compared against 2026-09-26.</description><pubDate>Sun, 27 Sep 2026 05:05:58 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 8 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp#chg-chg_01a0e141-73d1-7e69-9fef-7f796b0364bc</link><guid isPermaLink="true">https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp#chg-chg_01a0e141-73d1-7e69-9fef-7f796b0364bc</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 8 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-09-26.</description><pubDate>Sun, 27 Sep 2026 05:05:58 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api-mcp: HSTS header (pass → unverified)</title><link>https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp#chg-chg_01a0dc1c-13db-764e-9862-556418cec07a</link><guid isPermaLink="true">https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp#chg-chg_01a0dc1c-13db-764e-9862-556418cec07a</guid><description>HSTS header (pass → unverified). Compared against 2026-09-25.</description><pubDate>Sat, 26 Sep 2026 05:07:02 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api-mcp: Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.)</title><link>https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp#chg-chg_01a0dc1c-13df-74ce-8618-1c366b8faac4</link><guid isPermaLink="true">https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp#chg-chg_01a0dc1c-13df-74ce-8618-1c366b8faac4</guid><description>Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.). Compared against 2026-09-25.</description><pubDate>Sat, 26 Sep 2026 05:07:02 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api-mcp: Tool “get_incidents” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp#chg-chg_01a0c25b-f165-764b-afd5-84e2148c00bc</link><guid isPermaLink="true">https://verifymcp.io/servers/live-cityalert-cityalert/api-mcp#chg-chg_01a0c25b-f165-764b-afd5-84e2148c00bc</guid><description>Tool “get_incidents” rewrote its description, which is the text the model reads. Compared against 2026-09-20.</description><pubDate>Mon, 21 Sep 2026 05:06:40 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item></channel></rss>