{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:28:15.139Z","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal","markdownUrl":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal.md","server":{"slug":"org-daxfoundation-signal-delta-signal","name":"Delta Signal","registryName":"org.daxfoundation.signal/delta-signal","description":"Audio steganography & watermarking. Encode/decode hidden messages that survive YouTube re-encoding.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"signal","type":"remote","identifier":"https://signal.daxfoundation.org/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal","version":"0.1.0","transport":null,"scoredAt":"2026-11-05T05:26:30.076Z"},"score":{"total":20,"tier":"low","status":"scored","weekDelta":-40,"history":[{"date":"2026-11-05","total":20},{"date":"2026-11-04","total":65},{"date":"2026-11-03","total":64},{"date":"2026-11-02","total":58},{"date":"2026-11-01","total":62},{"date":"2026-10-31","total":61},{"date":"2026-10-30","total":61},{"date":"2026-10-29","total":60},{"date":"2026-10-28","total":60}]},"categories":[{"name":"Endpoint Security","score":49,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation not yet verified: we couldn't confirm whether this endpoint requires it.","HTTPS enforcement could not be verified: the plaintext port answered with HTTP 503, which proves neither a plaintext path nor enforcement.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC is configured correctly; the domain's records validate against the full chain to the root."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.unreachable","args":{}},{"code":"https.inconclusive","args":{"reason":"plaintext_status","status":"503"}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.validated","args":{}}]},{"name":"Transport & Reachability","score":0,"verdict":"fail","reasons":["Transport check failed: declared streamable-http, but the endpoint returned HTTP 503."],"codes":[{"code":"transport.http_error","args":{"status":"503","transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list."],"codes":[{"code":"schema.unreachable","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list."],"codes":[{"code":"toolquality.unreachable","args":{}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list."],"codes":[{"code":"toolsafety.unreachable","args":{}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Capabilities not yet verified: we couldn't read the endpoint's capabilities."],"codes":[{"code":"cap.unreachable","args":{}}]}],"inconclusive":["Authorisation not yet verified: we couldn't confirm whether this endpoint requires it.","HTTPS enforcement could not be verified: the plaintext port answered with HTTP 503, which proves neither a plaintext path nor enforcement.","Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.","Stability not yet verified: not enough scan history yet (needs a 30-day window).","Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.","Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.","Capabilities not yet verified: we couldn't read the endpoint's capabilities."],"malware":[],"components":[{"slug":"signal","type":"remote","identifier":"https://signal.daxfoundation.org/mcp","withdrawn":false,"score":20,"current":true,"url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal","markdownUrl":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal.md"}],"facts":[{"label":"Endpoint","value":"https://signal.daxfoundation.org/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"0.1.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"describe_engine","title":null,"description":"Free. Describe Delta Signal: layers, stings, defaults, limits, presets and prices.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":27},{"name":"preview_card","title":null,"description":"Free. Render the SSTV signature card image for a message (PNG) so you can see what the picture sting will carry.","inputs":[{"name":"text","type":"string","required":true,"description":"Up to 38 characters"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":46},{"name":"render_signature","title":null,"description":"Render a Delta Signal audio signature (WAV, 48 kHz) that hides your message: in the heartbeat rhythm, as text in the spectrogram, as an inaudible watermark, and optionally as an SSTV picture, a ggwave data chirp or modem tones. Returns a download link (kept 7 days) and a manifest. Survives YouTube-grade AAC/Opus.","inputs":[{"name":"duration","type":"number","required":false,"description":"Seconds of signature body (default 60)"},{"name":"layers","type":"object","required":false,"description":"Per-layer options: bed, heartbeat, primes, glyph {band: mid|hi}, watermark {payload}"},{"name":"message","type":"string","required":true,"description":"Printable ASCII, up to 32 characters"},{"name":"preset","type":"string","required":false,"description":"Named preset: expands to a layer + sting bundle. Explicit options override the preset."},{"name":"seed","type":"string","required":false,"description":"Watermark key; keep it to verify later"},{"name":"stings","type":"array","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":197},{"name":"decode_audio","title":null,"description":"Decode every Delta Signal layer from a WAV, MP3 or M4A (AAC) file at an https URL: heartbeat cipher, spectral glyph, prime count, watermark (needs the seed used to render), ggwave, modem text and SSTV pictures (returned as PNG).","inputs":[{"name":"layers","type":"array","required":false,"description":null},{"name":"seed","type":"string","required":false,"description":null},{"name":"url","type":"string","required":true,"description":"https URL of a WAV, MP3 or M4A (AAC) file (convert other formats first)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":107},{"name":"verify_signature","title":null,"description":"Verify a Delta Signal audio signature at an https WAV URL: returns which hidden layers are present (found_layers) and whether the audio matches an expected message (matches: true/false, or null if no expected_message given). Cheaper than full decode — use it when you only need to confirm presence or identity.","inputs":[{"name":"expected_message","type":"string","required":false,"description":"Message you expect to find; omit to discover what is present"},{"name":"seed","type":"string","required":false,"description":"Watermark key used when the signature was rendered"},{"name":"url","type":"string","required":true,"description":"https URL of a WAV file"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":120}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T05:26:30.000Z","track":"remote","endpoint":"https://signal.daxfoundation.org/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=daxfoundation.org","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-27T15:28:22Z","notAfter":"2027-01-25T16:28:19Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"secure","label":"Secure","name":"signal.daxfoundation.org.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"org.","outcome":"verified","label":"Verified"},{"zone":"daxfoundation.org.","outcome":"verified","label":"Verified"},{"zone":"signal.daxfoundation.org.","outcome":"verified","label":"Verified"}]},"auth":{"outcome":"inconclusive","label":"Inconclusive","gate":null,"gateLabel":null,"status":503,"authorizationServers":[]},"httpsRedirect":{"outcome":"inconclusive","label":"Inconclusive","status":503},"transports":[{"transport":"streamable-http","outcome":"http_error","label":"HTTP error","status":503,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-28","recent":[{"id":"chg_01a1aa2c-43d1-70a9-9e93-7d1bc7b9baae","kind":"check.unverifiable","summary":"Stability (0.23 → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a1aa2c-43d1-70a9-9e93-7d1bc7b9baae"},{"id":"chg_01a1aa2c-43d1-7a28-8a08-4844815547e3","kind":"check.verdict","summary":"Transport (pass → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a1aa2c-43d1-7a28-8a08-4844815547e3"},{"id":"chg_01a1aa2c-43d2-7029-92d5-b848ac39eafe","kind":"check.unverifiable","summary":"Tool safety (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a1aa2c-43d2-7029-92d5-b848ac39eafe"},{"id":"chg_01a1aa2c-43d2-7a6d-a67f-bcc46a348198","kind":"check.reason","summary":"Authorization (Authorisation not yet verified: we couldn't confirm whether this endpoint requires it.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a1aa2c-43d2-7a6d-a67f-bcc46a348198"},{"id":"chg_01a1aa2c-43d3-70d0-bee9-b7e2673fbcc0","kind":"check.unverifiable","summary":"Schema quality (100 → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a1aa2c-43d3-70d0-bee9-b7e2673fbcc0"},{"id":"chg_01a1aa2c-43d3-7566-bde2-fc3560f85281","kind":"check.unverifiable","summary":"Capabilities (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a1aa2c-43d3-7566-bde2-fc3560f85281"},{"id":"chg_01a1aa2c-43d3-7ac3-b593-c62afc22d8ba","kind":"check.unverifiable","summary":"Tool coverage (100 → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a1aa2c-43d3-7ac3-b593-c62afc22d8ba"},{"id":"chg_01a1aa2c-43d4-708f-bc96-f7d688689018","kind":"capture.status_changed","summary":"Endpoint reachability (reachable → not serving MCP)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a1aa2c-43d4-708f-bc96-f7d688689018"},{"id":"chg_01a1aa2c-43d4-7509-bf67-5c9fc67880de","kind":"score.total_changed","summary":"Trust score (65 → 20)","materiality":"functional","direction":"regression","scoreDelta":-45,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a1aa2c-43d4-7509-bf67-5c9fc67880de"},{"id":"chg_01a1a4ff-7661-7c8c-b436-1019894c8bc2","kind":"score.total_changed","summary":"Trust score (64 → 65)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a1a4ff-7661-7c8c-b436-1019894c8bc2"},{"id":"chg_01a19fdb-241d-7f11-8ec9-cfc454fd658c","kind":"check.reverified","summary":"Judged manipulation (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a19fdb-241d-7f11-8ec9-cfc454fd658c"},{"id":"chg_01a19fdb-241f-74f0-8d51-b7968cc4f04b","kind":"check.reverified","summary":"Schema quality (unverified → good)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a19fdb-241f-74f0-8d51-b7968cc4f04b"},{"id":"chg_01a19fdb-2420-79e3-b67a-05d43e171416","kind":"score.total_changed","summary":"Trust score (58 → 64)","materiality":"functional","direction":"improvement","scoreDelta":6,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a19fdb-2420-79e3-b67a-05d43e171416"},{"id":"chg_01a19ab2-274a-7eb0-ab0e-8d2244a86e1a","kind":"check.unverifiable","summary":"Judged manipulation (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a19ab2-274a-7eb0-ab0e-8d2244a86e1a"},{"id":"chg_01a19ab2-274c-7197-ae10-3b055cc80b5e","kind":"check.unverifiable","summary":"Schema quality (good → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a19ab2-274c-7197-ae10-3b055cc80b5e"},{"id":"chg_01a19ab2-274c-76fe-940c-66c5c81f3a72","kind":"check.measure","summary":"Schema quality (472 → 542)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a19ab2-274c-76fe-940c-66c5c81f3a72"},{"id":"chg_01a19ab2-274c-7cb1-8d93-9d69c178a6bd","kind":"check.appeared","summary":"First check of Schema quality (100)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a19ab2-274c-7cb1-8d93-9d69c178a6bd"},{"id":"chg_01a19ab2-274d-725b-ad31-30a654a26710","kind":"tool.description_changed","summary":"Tool “describe_engine” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a19ab2-274d-725b-ad31-30a654a26710"},{"id":"chg_01a19ab2-274d-7763-830f-0effa374740c","kind":"param.added_optional","summary":"“render_signature” added an optional parameter “preset”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a19ab2-274d-7763-830f-0effa374740c"},{"id":"chg_01a19ab2-274d-7e34-ae67-8ab2d47e00a2","kind":"resource.added","summary":"New resource “presets”","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal#chg-chg_01a19ab2-274d-7e34-ae67-8ab2d47e00a2"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal/changelog.json"},"links":{"html":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal","markdown":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal.md","changelogJson":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal/changelog.json","changelogRss":"https://verifymcp.io/servers/org-daxfoundation-signal-delta-signal/signal.xml","external":[{"label":"Remote endpoint","href":"https://signal.daxfoundation.org/mcp"},{"label":"Website","href":"https://signal.daxfoundation.org/"}]}}