{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T21:17:27.840Z","url":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api","markdownUrl":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api.md","server":{"slug":"mrcrtr1979-droid-receipts-index","name":"Receipts Index","registryName":"io.github.mrcrtr1979-droid/receipts-index","description":"Free index and sample of dated AI-engine answer rows; prices for paid x402 rows. Never pays.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"api","type":"remote","identifier":"https://api.receiptsindex.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api","version":"0.1.5","transport":null,"scoredAt":"2026-11-05T09:36:50.545Z"},"score":{"total":70,"tier":"medium","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":70},{"date":"2026-11-04","total":70},{"date":"2026-11-03","total":70},{"date":"2026-11-02","total":69},{"date":"2026-11-01","total":69},{"date":"2026-10-31","total":68},{"date":"2026-10-30","total":68},{"date":"2026-10-29","total":67},{"date":"2026-10-28","total":67}]},"categories":[{"name":"Endpoint Security","score":63,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.inconclusive","args":{"reason":"plaintext_status","status":"405"}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":75,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 308 tokens (~102/item across 3 items; 3 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"102","items":"3","tools":"3","tokens":"308","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":27,"verdict":"partial","reasons":["Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"8"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement."],"malware":[],"components":[{"slug":"api","type":"remote","identifier":"https://api.receiptsindex.com/mcp","withdrawn":false,"score":70,"current":true,"url":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api","markdownUrl":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api.md"},{"slug":"receipts-index-mcp","type":"npm","identifier":"receipts-index-mcp","withdrawn":false,"score":83,"current":false,"url":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/receipts-index-mcp","markdownUrl":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/receipts-index-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://api.receiptsindex.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"0.1.5"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"receipts_index","title":"Receipts Index: free row index","description":"Calls GET /v1/index on the Receipts API. Free. Returns row ids and UTC dates (no row content), the row count, the first and last dates, and the list of dates that have rows. Use start and limit to page through row ids. Row content is sold per call through x402 and is not returned here.","inputs":[{"name":"limit","type":"integer","required":false,"description":"Rows per page, 1 to 500. The API default applies when omitted."},{"name":"start","type":"integer","required":false,"description":"First row id of the page. Default 1."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":117},{"name":"receipts_sample","title":"Receipts Index: free sample row","description":"Calls GET /v1/sample on the Receipts API. Free. Returns one real record row labeled as a sample, with its row id, the paid route and price for that row, and the row as fields and as CSV. It takes no parameters and is not a purchase.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":65},{"name":"receipts_pricing","title":"Receipts Index: paid endpoints and prices","description":"Reads GET /.well-known/x402 (and /v1/manifest for the price text) on the Receipts API and returns the paid endpoints with their prices in USDC. Free to call. It never pays and never signs anything. Paying is done by an x402 client against the listed route.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":70}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T09:36:50.000Z","track":"remote","endpoint":"https://api.receiptsindex.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=receiptsindex.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-25T09:49:02Z","notAfter":"2027-01-23T10:46:46Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"api.receiptsindex.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"receiptsindex.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"inconclusive","label":"Inconclusive","status":405},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-28","recent":[{"id":"chg_01a1a0bc-1382-7861-bf03-d0343df991d0","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api#chg-chg_01a1a0bc-1382-7861-bf03-d0343df991d0"},{"id":"chg_01a19670-0831-752b-a04b-5e2748304758","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api#chg-chg_01a19670-0831-752b-a04b-5e2748304758"},{"id":"chg_01a18c24-755e-77d3-b1a9-49df210a949a","kind":"score.total_changed","summary":"Trust score (67 → 68)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api#chg-chg_01a18c24-755e-77d3-b1a9-49df210a949a"},{"id":"chg_01a186ff-231f-7883-be40-2b3f296a233e","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api#chg-chg_01a186ff-231f-7883-be40-2b3f296a233e"},{"id":"chg_01a1841c-7318-7cbd-abbc-b7883a598608","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api#chg-chg_01a1841c-7318-7cbd-abbc-b7883a598608"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api/changelog.json"},"links":{"html":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api","markdown":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api.md","changelogJson":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api/changelog.json","changelogRss":"https://verifymcp.io/servers/mrcrtr1979-droid-receipts-index/api.xml","external":[{"label":"Remote endpoint","href":"https://api.receiptsindex.com/mcp"},{"label":"Repository","href":"https://github.com/mrcrtr1979-droid/namebeam-visibility-index"},{"label":"Website","href":"https://api.receiptsindex.com/?utm_source=mcp-registry"}]}}