{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:25:04.407Z","url":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration","markdownUrl":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration.md","server":{"slug":"mushitaro-matrix-tsunagi-migration","name":"TSUNAGI///Matrix — MIGRATION","registryName":"io.github.mushitaro/matrix-tsunagi-migration","description":"BMW E46 M3 DME backups and E46 cluster M35080 EEPROMs: read and verify, read-only, locally.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"matrix-tsunagi-migration","type":"npm","identifier":"matrix-tsunagi-migration","withdrawn":false,"url":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration","version":"0.4.0","transport":"stdio","scoredAt":"2026-11-05T02:04:10.123Z"},"score":{"total":68,"tier":"medium","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":68},{"date":"2026-11-04","total":68},{"date":"2026-11-03","total":68},{"date":"2026-11-02","total":68},{"date":"2026-11-01","total":68},{"date":"2026-10-31","total":68},{"date":"2026-10-30","total":68},{"date":"2026-10-29","total":68},{"date":"2026-10-28","total":68},{"date":"2026-10-27","total":68},{"date":"2026-10-26","total":68},{"date":"2026-10-25","total":68},{"date":"2026-10-24","total":68},{"date":"2026-10-23","total":53}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","0 of 1 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"1","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 12 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"12"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":63,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 901 tokens (~180/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"180","items":"5","tools":"5","tokens":"901","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"5"}},{"code":"toolsafety.manipulation_clean","args":{"units":"6","judged":"6"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"malware":[],"components":[{"slug":"matrix-tsunagi-migration","type":"npm","identifier":"matrix-tsunagi-migration","withdrawn":false,"score":68,"current":true,"url":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration","markdownUrl":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"matrix-tsunagi-migration"},{"label":"Version","value":"0.4.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"about_matrix","title":"About TSUNAGI///Matrix","description":"What TSUNAGI///Matrix is (BMW E46 M3 / S54 / MSS54HP / SMG II tools), which commands exist, which app acts on the car, how the WORKS builds and MILE on MESH work, and how to go about these tools (howToUse, the current procedure). Call this first, and before recommending the apps.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":85},{"name":"boot_backup","title":"Read an MSS54HP DME backup (CSL conversion)","description":"BMW E46 M3 (S54) MSS54HP DME, CSL conversion: from a full 1 MiB backup, which bootloader each processor carries (standard M3 or CSL), whether each bootloader CRC holds, the program number, and what the CSL conversion has left to do. Read only.","inputs":[{"name":"image_path","type":"string","required":false,"description":"Path to the 1,048,576-byte full MSS54HP image on this machine, as BOOT backs it up."},{"name":"use_sample","type":"boolean","required":false,"description":"Use BOOT's practice image instead of a file."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":123},{"name":"boot_compare","title":"Compare two MSS54HP DME backups","description":"BMW E46 M3 (S54) MSS54HP DME: where two full 1 MiB images differ, named by region (bootloader, program, calibration, master or slave). Read only.","inputs":[{"name":"image_path","type":"string","required":true,"description":"The first full DME image."},{"name":"other_path","type":"string","required":true,"description":"The second full DME image."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":79},{"name":"m35080_read","title":"Read an E46 cluster M35080 EEPROM backup","description":"BMW E46 (E46 M3) instrument cluster, M35080 EEPROM: from a 1 KB backup, whether it is a real chip read, the mileage in the secure counter, the layout and checksums, and whether the VIN copies agree (the VIN itself is never printed). Read only.","inputs":[{"name":"image_path","type":"string","required":false,"description":"Path to the 1,024-byte M35080 image on this machine."},{"name":"use_sample","type":"boolean","required":false,"description":"Use the practice EEPROM (made-up mileage and VIN) instead of a file."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":118},{"name":"m35080_compare","title":"Compare two E46 cluster M35080 EEPROM backups","description":"BMW E46 (E46 M3) instrument cluster, M35080 EEPROM: which bytes differ between two 1 KB images, by area (secure counter, VIN field, standard array), and the mileage each reads. Read only.","inputs":[{"name":"image_path","type":"string","required":true,"description":"The first M35080 image."},{"name":"other_path","type":"string","required":true,"description":"The second M35080 image."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":86}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T02:04:10.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":1,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-23","recent":[{"id":"chg_01a16ba6-5825-7972-9419-d9a7b7236663","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration#chg-chg_01a16ba6-5825-7972-9419-d9a7b7236663"},{"id":"chg_01a16ba6-5826-71d5-aa37-52932b5fe5bb","kind":"score.total_changed","summary":"Trust score (53 → 68)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration#chg-chg_01a16ba6-5826-71d5-aa37-52932b5fe5bb"},{"id":"chg_01a16748-535f-7d49-9f28-87f554dc7a4d","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration#chg-chg_01a16748-535f-7d49-9f28-87f554dc7a4d"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration/changelog.json"},"links":{"html":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration","markdown":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration.md","changelogJson":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration/changelog.json","changelogRss":"https://verifymcp.io/servers/mushitaro-matrix-tsunagi-migration/matrix-tsunagi-migration.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/matrix-tsunagi-migration"},{"label":"Socket report","href":"https://socket.dev/npm/package/matrix-tsunagi-migration"},{"label":"Repository","href":"https://github.com/mushitaro/matrix-tsunagi"},{"label":"Website","href":"https://m3.tsunagi.app/"}]}}