<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.lnanology/xfinlab · api-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/lnanology-xfinlab/api-mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api-mcp: Transport (fail → pass)</title><link>https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08e6c-e4a9-75e9-8af4-eeabd9149a52</link><guid isPermaLink="true">https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08e6c-e4a9-75e9-8af4-eeabd9149a52</guid><description>Transport (fail → pass). Compared against 2026-09-10.</description><pubDate>Fri, 11 Sep 2026 03:04:56 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08e6c-e4aa-7b41-85c7-2157311bf044</link><guid isPermaLink="true">https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08e6c-e4aa-7b41-85c7-2157311bf044</guid><description>Injection markers (unverified → pass). Compared against 2026-09-10.</description><pubDate>Fri, 11 Sep 2026 03:04:56 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08e6c-e4ab-7308-8724-37eab5b1c89a</link><guid isPermaLink="true">https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08e6c-e4ab-7308-8724-37eab5b1c89a</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-09-10.</description><pubDate>Fri, 11 Sep 2026 03:04:56 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api-mcp: Stability (0.37 → unverified)</title><link>https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08947-7408-7202-bc64-974703c21d6b</link><guid isPermaLink="true">https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08947-7408-7202-bc64-974703c21d6b</guid><description>Stability (0.37 → unverified). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 03:05:56 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api-mcp: Transport (pass → fail)</title><link>https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08947-7409-7238-83fb-9f470efc3466</link><guid isPermaLink="true">https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08947-7409-7238-83fb-9f470efc3466</guid><description>Transport (pass → fail). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 03:05:56 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08947-7409-7c14-9b3b-87f0a774b633</link><guid isPermaLink="true">https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08947-7409-7c14-9b3b-87f0a774b633</guid><description>Tool safety (pass → unverified). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 03:05:56 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] api-mcp: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08947-740a-721e-86f9-070462132635</link><guid isPermaLink="true">https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08947-740a-721e-86f9-070462132635</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 03:05:56 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api-mcp: Endpoint reachability (reachable → unreachable)</title><link>https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08947-740b-7a0d-8380-c0acccb66dd3</link><guid isPermaLink="true">https://verifymcp.io/servers/lnanology-xfinlab/api-mcp#chg-chg_01a08947-740b-7a0d-8380-c0acccb66dd3</guid><description>Endpoint reachability (reachable → unreachable). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 03:05:56 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item></channel></rss>