<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>FDA Data MCP · www · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/medley-fda-data/www/changelog.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] www: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 46 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019fc563-665f-7873-aecc-47d46be2585d</link><guid isPermaLink="true">https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019fc563-665f-7873-aecc-47d46be2585d</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 46 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-02.</description><pubDate>Mon, 03 Aug 2026 02:10:53 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] www: Transport (fail → pass)</title><link>https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019fc563-665e-7013-a2ed-1382c68ce55b</link><guid isPermaLink="true">https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019fc563-665e-7013-a2ed-1382c68ce55b</guid><description>Transport (fail → pass). Compared against 2026-08-02.</description><pubDate>Mon, 03 Aug 2026 02:10:53 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] www: Transport (fail → pass)</title><link>https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019faf0c-3748-7134-8ab2-9cd524d5635e</link><guid isPermaLink="true">https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019faf0c-3748-7134-8ab2-9cd524d5635e</guid><description>Transport (fail → pass). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 18:04:01 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] www: Transport (pass → fail)</title><link>https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019faa41-9e88-7d50-aa14-82f1f4a14ba3</link><guid isPermaLink="true">https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019faa41-9e88-7d50-aa14-82f1f4a14ba3</guid><description>Transport (pass → fail). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 19:44:14 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] www: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019faa41-9e8a-7f16-9b63-f40da00e4872</link><guid isPermaLink="true">https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019faa41-9e8a-7f16-9b63-f40da00e4872</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 19:44:14 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] www: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019faa41-9e89-7a72-82a0-a7364fccd4cb</link><guid isPermaLink="true">https://verifymcp.io/servers/medley-fda-data/www#chg-chg_019faa41-9e89-7a72-82a0-a7364fccd4cb</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 19:44:14 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>