{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T20:29:45.097Z","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile.md","server":{"slug":"pipeworx-io-cmf-chile","name":"Cmf Chile","registryName":"io.github.pipeworx-io/cmf-chile","description":"CMF Chile MCP -- Comision para el Mercado Financiero (Chile's financial regulator).","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-cmf-chile","type":"npm","identifier":"@pipeworx/mcp-cmf-chile","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-05T09:14:55.499Z"},"score":{"total":77,"tier":"medium","status":"scored","weekDelta":-2,"history":[{"date":"2026-11-05","total":77},{"date":"2026-11-04","total":81},{"date":"2026-11-03","total":81},{"date":"2026-11-02","total":80},{"date":"2026-11-01","total":80},{"date":"2026-10-31","total":65},{"date":"2026-10-30","total":79},{"date":"2026-10-29","total":79}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":71,"verdict":"fail","reasons":["Repository presence not verified: we could not reach the forge to check. This is a gap on our side, not a finding about the repository.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-cmf-chile).","Clear OSI-approved license (MIT).","Actively maintained (last published 5 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_inconclusive","args":{"status":"504"}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-cmf-chile"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"5"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":62,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 866 tokens (~288/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"288","items":"3","tools":"3","tokens":"866","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":23,"verdict":"partial","reasons":["Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"7"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["Repository presence not verified: we could not reach the forge to check. This is a gap on our side, not a finding about the repository."],"malware":[],"components":[{"slug":"cmf-chile-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/cmf-chile/mcp","withdrawn":false,"score":77,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/cmf-chile-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/cmf-chile-mcp.md"},{"slug":"pipeworx-mcp-cmf-chile","type":"npm","identifier":"@pipeworx/mcp-cmf-chile","withdrawn":false,"score":77,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-cmf-chile"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"cmf_sanctions","title":null,"description":"Search the CMF (Chile's financial regulator) register of sanction resolutions, about 1,500 resolutions from 2002 to today: each row has the resolution number, date, subject (e.g. 'APLICA SANCIÓN A ITAÚ CORREDORES DE BOLSA LIMITADA') and a link to the resolution document. Filter by free-text query (Spanish; matches the subject, accent- and case-insensitive, all words must match) and/or year. Resolutions that name individuals are served with the person's name as the register publishes it (Bruce's case ruling of 2026-10-25, scoped to this tool): every row carries its source record (resolution number, date, CMF document link); no address is ever served for an individual and a natural person's RUT is stripped from the subject; anyone named can ask for removal at support@pipeworx.io and a removed name is replaced in the subject and its document link dropped (counted in withheld_by_removal_request). Each row has a subject_kind (person | organisation | mixed | unclassified) assigned only from explicit cues in the subject (honorific = person; corporate-form word = organisation); a bare personal name with neither cue is 'unclassified', not guessed, and subject_kind_basis says why. When nothing matches, returns found:false with the exact scope searched (a sanction announced in a press release but absent from the register is not covered).","inputs":[{"name":"limit","type":"number|string","required":false,"description":"Max rows to return (default 25, max 200). Newest first."},{"name":"query","type":"string","required":false,"description":"Optional Spanish words to match in the resolution subject, e.g. \"Itaú\" or \"Cooperativa Oriente\". All words must match."},{"name":"year","type":"number|string","required":false,"description":"Optional resolution year, e.g. 2026."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":384},{"name":"cmf_regulation","title":null,"description":"Look up CMF regulations: NCG (normas de carácter general), CIR (circulares) and OFC (oficios circulares). Pass a number (with type NCG|CIR|OFC) to resolve one norm, e.g. type=NCG number=514 returns its title, issue date, PDF link, the resolution that approved it, and which norms modify, repeal or are modified by it. Or pass a Spanish keyword query (e.g. \"finanzas abiertas\") and/or a year to list matching norms, newest first. At least one of number, query or year is required.","inputs":[{"name":"limit","type":"number|string","required":false,"description":"Max norms to return (default 20, max 100)."},{"name":"number","type":"number|string","required":false,"description":"Norm number, e.g. 514."},{"name":"query","type":"string","required":false,"description":"Spanish keyword(s) searched in the norm text/title, e.g. \"finanzas abiertas\"."},{"name":"type","type":"string","required":false,"description":"Norm type. Default ALL."},{"name":"year","type":"number|string","required":false,"description":"Issue year, e.g. 2026."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":226},{"name":"cmf_registry","title":null,"description":"Look up a legal entity in the CMF registers by RUT or name. Returns (1) supervised-entity register hits: CMF code, name, entity type and whether the registration is current; and (2) the register of financial service providers created by Chile's Fintec law, with the services each provider is authorised for (crowdfunding platform, alternative trading system, credit advice, investment advice, custody, order routing, intermediation) and status. RUT may be written 77.532.023-0 or 77532023. An absent entity returns found:false with the scope searched, which means 'not in these registers', not 'does not exist'. Natural persons are never returned.","inputs":[{"name":"name","type":"string","required":false,"description":"Entity name or part of it, e.g. \"Abaqus\"."},{"name":"rut","type":"string","required":false,"description":"Chilean RUT of the entity, e.g. \"77.532.023-0\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":200}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T09:14:55.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1aafd-64a2-74df-ac4e-b5940abaa98a","kind":"score.total_changed","summary":"Trust score (81 → 77)","materiality":"functional","direction":"regression","scoreDelta":-4,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a1aafd-64a2-74df-ac4e-b5940abaa98a"},{"id":"chg_01a1aafd-64a1-74eb-a606-98473e302f07","kind":"check.unverifiable","summary":"Provenance (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a1aafd-64a1-74eb-a606-98473e302f07"},{"id":"chg_01a1a0a9-bd1a-7ce2-ba03-f9b34281a129","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a1a0a9-bd1a-7ce2-ba03-f9b34281a129"},{"id":"chg_01a1965b-b2c5-7ad9-b39a-5356f96c0bc2","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a1965b-b2c5-7ad9-b39a-5356f96c0bc2"},{"id":"chg_01a1965b-b2c7-7892-8944-f48af89dc773","kind":"score.total_changed","summary":"Trust score (65 → 80)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a1965b-b2c7-7892-8944-f48af89dc773"},{"id":"chg_01a19123-86ba-77f6-9d84-f5ed0e514748","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a19123-86ba-77f6-9d84-f5ed0e514748"},{"id":"chg_01a19123-86bc-72e6-99d5-37d868ae242d","kind":"score.total_changed","summary":"Trust score (79 → 65)","materiality":"functional","direction":"regression","scoreDelta":-14,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a19123-86bc-72e6-99d5-37d868ae242d"},{"id":"chg_01a19123-86bb-7b86-97f9-3c759e452070","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a19123-86bb-7b86-97f9-3c759e452070"},{"id":"chg_01a18c10-c7d8-79fa-825d-7711776c3b3f","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a18c10-c7d8-79fa-825d-7711776c3b3f"},{"id":"chg_01a185c7-7645-78c3-ae4b-1943e6882cd0","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a185c7-7645-78c3-ae4b-1943e6882cd0"},{"id":"chg_01a185a2-ef1d-77e2-b12b-10704b9d3cda","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile#chg-chg_01a185a2-ef1d-77e2-b12b-10704b9d3cda"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile","markdown":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-cmf-chile/pipeworx-mcp-cmf-chile.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-cmf-chile"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-cmf-chile"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-cmf-chile"},{"label":"Website","href":"https://pipeworx.io/packs/cmf-chile"}]}}