{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-07T18:56:08.560Z","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants.md","server":{"slug":"pipeworx-io-codex-contaminants","name":"Codex Contaminants","registryName":"io.github.pipeworx-io/codex-contaminants","description":"Codex Alimentarius CXS 193 — maximum levels for contaminants and toxins in food and feed: lead…","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-codex-contaminants","type":"npm","identifier":"@pipeworx/mcp-codex-contaminants","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-07T02:07:29.905Z"},"score":{"total":85,"tier":"high trust","status":"scored","weekDelta":19,"history":[{"date":"2026-11-07","total":85},{"date":"2026-11-06","total":84},{"date":"2026-11-05","total":84},{"date":"2026-11-04","total":83},{"date":"2026-11-03","total":83},{"date":"2026-11-02","total":82},{"date":"2026-11-01","total":82},{"date":"2026-10-31","total":66},{"date":"2026-10-30","total":81},{"date":"2026-10-29","total":80}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-codex-contaminants).","Clear OSI-approved license (MIT).","Actively maintained (last published 6 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-codex-contaminants"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"6"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":72,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 345 tokens (~172/item across 2 items; 2 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"172","items":"2","tools":"2","tokens":"345","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":30,"verdict":"partial","reasons":["Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"9"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 2 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 3 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"2"}},{"code":"toolsafety.manipulation_clean","args":{"units":"3","judged":"3"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"codex-contaminants-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/codex-contaminants/mcp","withdrawn":false,"score":85,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/codex-contaminants-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/codex-contaminants-mcp.md"},{"slug":"pipeworx-mcp-codex-contaminants","type":"npm","identifier":"@pipeworx/mcp-codex-contaminants","withdrawn":false,"score":85,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-codex-contaminants"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"contaminants_max_levels","title":null,"description":"Codex Alimentarius maximum levels (MLs) for a contaminant in food — lead, cadmium, arsenic, mercury, methylmercury, tin, aflatoxins, ochratoxin A, patulin, melamine, hydrocyanic acid. Returns each commodity with its maximum level, the unit it is expressed in, and the page of CXS 193 it came from. Use for \"what is the Codex limit for lead in fish\" or \"which foods have cadmium maximum levels\".","inputs":[{"name":"commodity","type":"string","required":false,"description":"Optional. Narrow to a commodity or food group, e.g. \"rice\", \"fish\", \"milk\", \"vegetables\"."},{"name":"contaminant","type":"string","required":true,"description":"Contaminant name, e.g. \"lead\", \"cadmium\", \"aflatoxins\", \"methylmercury\", \"tin\". Matched case-insensitively."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":193},{"name":"contaminants_for_commodity","title":null,"description":"Every Codex maximum level that applies to one food — \"which contaminant limits apply to rice\", \"what are the Codex limits for milk\". Returns each contaminant with its maximum level and unit for that commodity, from CXS 193.","inputs":[{"name":"commodity","type":"string","required":true,"description":"Food or commodity name, e.g. \"rice\", \"fish\", \"milk\", \"cereal grains\", \"natural mineral waters\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":93}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-07T02:07:29.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1b3c2-ca85-7cdc-ae7e-50281d2d70c0","kind":"score.total_changed","summary":"Trust score (84 → 85)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-07","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a1b3c2-ca85-7cdc-ae7e-50281d2d70c0"},{"id":"chg_01a1a973-0f5f-76a7-bb65-f16f7eb7bb07","kind":"score.total_changed","summary":"Trust score (83 → 84)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a1a973-0f5f-76a7-bb65-f16f7eb7bb07"},{"id":"chg_01a19f26-c359-79a8-9fc9-bc9b85c5e1a5","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a19f26-c359-79a8-9fc9-bc9b85c5e1a5"},{"id":"chg_01a194da-d508-7343-bfc9-223d8642f56e","kind":"score.total_changed","summary":"Trust score (66 → 82)","materiality":"functional","direction":"improvement","scoreDelta":16,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a194da-d508-7343-bfc9-223d8642f56e"},{"id":"chg_01a194da-d504-7f0f-8519-d24f260c7632","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a194da-d504-7f0f-8519-d24f260c7632"},{"id":"chg_01a19159-ff73-7b16-9f8b-da3050d3e6b9","kind":"score.total_changed","summary":"Trust score (81 → 66)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a19159-ff73-7b16-9f8b-da3050d3e6b9"},{"id":"chg_01a19159-ff73-7498-a860-8082020b9b23","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a19159-ff73-7498-a860-8082020b9b23"},{"id":"chg_01a19159-ff71-7c08-8241-ac214e237881","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a19159-ff71-7c08-8241-ac214e237881"},{"id":"chg_01a18a8d-61de-7546-a172-60e33ee961c5","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a18a8d-61de-7546-a172-60e33ee961c5"},{"id":"chg_01a185c7-1f07-7e13-b6ea-2559a6749a8e","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a185c7-1f07-7e13-b6ea-2559a6749a8e"},{"id":"chg_01a185a3-7fbb-7755-879b-79d3e2682af2","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants#chg-chg_01a185a3-7fbb-7755-879b-79d3e2682af2"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants","markdown":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-codex-contaminants/pipeworx-mcp-codex-contaminants.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-codex-contaminants"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-codex-contaminants"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-codex-contaminants"},{"label":"Website","href":"https://pipeworx.io/packs/codex-contaminants"}]}}