<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnHunt Security Intelligence · vulnhunt-agent-api-production · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] vulnhunt-agent-api-production: Transport (fail → pass)</title><link>https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09d38-341d-786d-85d4-033c296c5bb5</link><guid isPermaLink="true">https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09d38-341d-786d-85d4-033c296c5bb5</guid><description>Transport (fail → pass). Compared against 2026-09-13.</description><pubDate>Mon, 14 Sep 2026 00:01:41 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] vulnhunt-agent-api-production: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09d38-3420-7b1f-9cc2-8876f9109e92</link><guid isPermaLink="true">https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09d38-3420-7b1f-9cc2-8876f9109e92</guid><description>Injection markers (unverified → pass). Compared against 2026-09-13.</description><pubDate>Mon, 14 Sep 2026 00:01:41 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] vulnhunt-agent-api-production: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 11 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09d38-3421-7872-bcd7-db935a47277b</link><guid isPermaLink="true">https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09d38-3421-7872-bcd7-db935a47277b</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 11 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-09-13.</description><pubDate>Mon, 14 Sep 2026 00:01:41 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] vulnhunt-agent-api-production: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09d38-342d-7756-9da4-837ba25b2e8f</link><guid isPermaLink="true">https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09d38-342d-7756-9da4-837ba25b2e8f</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-09-12.</description><pubDate>Mon, 14 Sep 2026 00:01:41 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item><item><title>[SECURITY] vulnhunt-agent-api-production: Stability (0.07 → unverified)</title><link>https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09815-8467-738b-a2e8-e812c20e3a95</link><guid isPermaLink="true">https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09815-8467-738b-a2e8-e812c20e3a95</guid><description>Stability (0.07 → unverified). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 00:05:42 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] vulnhunt-agent-api-production: Transport (pass → fail)</title><link>https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09815-8469-71a6-8a83-0982c03a3e21</link><guid isPermaLink="true">https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09815-8469-71a6-8a83-0982c03a3e21</guid><description>Transport (pass → fail). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 00:05:42 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] vulnhunt-agent-api-production: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09815-846a-70dc-99b1-fb2740fead29</link><guid isPermaLink="true">https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09815-846a-70dc-99b1-fb2740fead29</guid><description>Tool safety (pass → unverified). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 00:05:42 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] vulnhunt-agent-api-production: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09815-846b-79ab-b02c-ce85a6cee2c2</link><guid isPermaLink="true">https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09815-846b-79ab-b02c-ce85a6cee2c2</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 00:05:42 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] vulnhunt-agent-api-production: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09815-8471-73af-96cb-71d21eacd482</link><guid isPermaLink="true">https://verifymcp.io/servers/owenkingva-web-vulnhunt/vulnhunt-agent-api-production#chg-chg_01a09815-8471-73af-96cb-71d21eacd482</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 00:05:42 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item></channel></rss>