{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "moralito311-andr-andreax",
  "component": "pagos",
  "generated_at": "2026-08-21T00:38:03.981Z",
  "tracking_since": "2026-08-16",
  "counts": {
    "critical": 0,
    "security": 10,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a01910-0ce3-7b82-ba22-d750fb908c9e",
      "kind": "check.reverified",
      "family": "https",
      "subject_kind": "check",
      "subject": "https",
      "subject_child": "",
      "from_code": "https.inconclusive",
      "to_code": "https.plaintext",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-19",
      "occurred_at": "2026-08-19 08:07:57.294387+00",
      "observed_since": "2026-08-18",
      "source": "scan",
      "summary": "HTTPS (unverified → fail)",
      "link": "https://verifymcp.io/servers/moralito311-andr-andreax/pagos#chg-chg_01a01910-0ce3-7b82-ba22-d750fb908c9e"
    },
    {
      "id": "chg_01a01910-0ce4-79b3-a95f-187fd478eefe",
      "kind": "check.verdict",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_absent",
      "to_code": "headers.hsts_present",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-19",
      "occurred_at": "2026-08-19 08:07:57.294387+00",
      "observed_since": "2026-08-18",
      "source": "scan",
      "summary": "HSTS header (fail → pass)",
      "link": "https://verifymcp.io/servers/moralito311-andr-andreax/pagos#chg-chg_01a01910-0ce4-79b3-a95f-187fd478eefe"
    },
    {
      "id": "chg_01a01910-0ce4-7ea5-85e9-976b4db13174",
      "kind": "check.verdict",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.http_error",
      "to_code": "transport.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-08-19",
      "occurred_at": "2026-08-19 08:07:57.294387+00",
      "observed_since": "2026-08-18",
      "source": "scan",
      "summary": "Transport (fail → pass)",
      "link": "https://verifymcp.io/servers/moralito311-andr-andreax/pagos#chg-chg_01a01910-0ce4-7ea5-85e9-976b4db13174"
    },
    {
      "id": "chg_01a01910-0ce5-74cb-a2c0-483e1270f8ae",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.none_undeclared",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "auth": "none",
        "undeclared_tools": "54"
      },
      "occurred_on": "2026-08-19",
      "occurred_at": "2026-08-19 08:07:57.294387+00",
      "observed_since": "2026-08-18",
      "source": "scan",
      "summary": "Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 54 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)",
      "link": "https://verifymcp.io/servers/moralito311-andr-andreax/pagos#chg-chg_01a01910-0ce5-74cb-a2c0-483e1270f8ae"
    },
    {
      "id": "chg_01a013e9-8b2b-7692-bd9e-e1b7159addb7",
      "kind": "check.verdict",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_present",
      "to_code": "headers.hsts_absent",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-18",
      "occurred_at": "2026-08-18 08:07:47.373183+00",
      "observed_since": "2026-08-17",
      "source": "scan",
      "summary": "HSTS header (pass → fail)",
      "link": "https://verifymcp.io/servers/moralito311-andr-andreax/pagos#chg-chg_01a013e9-8b2b-7692-bd9e-e1b7159addb7"
    },
    {
      "id": "chg_01a013e9-8b32-75b3-afe7-85a7ca3f941b",
      "kind": "check.reason",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.redirected",
      "to_code": "transport.http_error",
      "from_value": "fail",
      "to_value": "fail",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "502",
        "transport": "streamable-http"
      },
      "occurred_on": "2026-08-18",
      "occurred_at": "2026-08-18 08:07:47.373183+00",
      "observed_since": "2026-08-17",
      "source": "scan",
      "summary": "Transport (Transport check failed: declared streamable-http, but the endpoint returned HTTP 502.)",
      "link": "https://verifymcp.io/servers/moralito311-andr-andreax/pagos#chg-chg_01a013e9-8b32-75b3-afe7-85a7ca3f941b"
    },
    {
      "id": "chg_01a00ec3-5de5-7713-8275-76eb27534a3a",
      "kind": "check.unverifiable",
      "family": "https",
      "subject_kind": "check",
      "subject": "https",
      "subject_child": "",
      "from_code": "https.plaintext",
      "to_code": "https.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "redirect_not_https"
      },
      "occurred_on": "2026-08-17",
      "occurred_at": "2026-08-17 08:07:59.496033+00",
      "observed_since": "2026-08-16",
      "source": "scan",
      "summary": "HTTPS (fail → unverified)",
      "link": "https://verifymcp.io/servers/moralito311-andr-andreax/pagos#chg-chg_01a00ec3-5de5-7713-8275-76eb27534a3a"
    },
    {
      "id": "chg_01a00ec3-5de7-770c-83e1-b5a849846142",
      "kind": "check.verdict",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.verified",
      "to_code": "transport.redirected",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-08-17",
      "occurred_at": "2026-08-17 08:07:59.496033+00",
      "observed_since": "2026-08-16",
      "source": "scan",
      "summary": "Transport (pass → fail)",
      "link": "https://verifymcp.io/servers/moralito311-andr-andreax/pagos#chg-chg_01a00ec3-5de7-770c-83e1-b5a849846142"
    },
    {
      "id": "chg_01a00ec3-5de7-7cab-9e24-f222881c3581",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_undeclared",
      "to_code": "auth.none_unlisted",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-17",
      "occurred_at": "2026-08-17 08:07:59.496033+00",
      "observed_since": "2026-08-16",
      "source": "scan",
      "summary": "Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the tool list to see what that exposes.)",
      "link": "https://verifymcp.io/servers/moralito311-andr-andreax/pagos#chg-chg_01a00ec3-5de7-7cab-9e24-f222881c3581"
    },
    {
      "id": "chg_01a00ec3-5dea-72f3-8650-43a9434061aa",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "not_mcp",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "not_mcp",
        "from": "verified"
      },
      "occurred_on": "2026-08-17",
      "occurred_at": "2026-08-17 08:07:59.496033+00",
      "observed_since": "2026-08-16",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → not serving MCP)",
      "link": "https://verifymcp.io/servers/moralito311-andr-andreax/pagos#chg-chg_01a00ec3-5dea-72f3-8650-43a9434061aa"
    }
  ],
  "days": [
    {
      "date": "2026-08-19",
      "total": 61,
      "delta": 43,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    },
    {
      "date": "2026-08-18",
      "total": 18,
      "delta": -2,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-08-17",
      "total": 20,
      "delta": -39,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-08-16",
      "total": 59,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}