{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:25:25.558Z","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa.md","server":{"slug":"pipeworx-io-codex-gsfa","name":"Codex Gsfa","registryName":"io.github.pipeworx-io/codex-gsfa","description":"Codex GSFA — the FAO/WHO General Standard for Food Additives (CXS 192-1995).","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-codex-gsfa","type":"npm","identifier":"@pipeworx/mcp-codex-gsfa","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-05T06:10:41.151Z"},"score":{"total":84,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":84},{"date":"2026-11-04","total":84},{"date":"2026-11-03","total":83},{"date":"2026-11-02","total":83},{"date":"2026-11-01","total":82},{"date":"2026-10-31","total":56},{"date":"2026-10-30","total":81},{"date":"2026-10-29","total":81}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-codex-gsfa).","Clear OSI-approved license (MIT).","Actively maintained (last published 4 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-codex-gsfa"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"4"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":75,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 952 tokens (~136/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"136","items":"7","tools":"7","tokens":"952","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":23,"verdict":"partial","reasons":["Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"7"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"7"}},{"code":"toolsafety.manipulation_clean","args":{"units":"8","judged":"8"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"codex-gsfa-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/codex-gsfa/mcp","withdrawn":false,"score":78,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/codex-gsfa-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/codex-gsfa-mcp.md"},{"slug":"pipeworx-mcp-codex-gsfa","type":"npm","identifier":"@pipeworx/mcp-codex-gsfa","withdrawn":false,"score":84,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-codex-gsfa"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"gsfa_check_use","title":null,"description":"Answer whether a specific food additive is permitted in a specific food category under the Codex General Standard for Food Additives, and at what maximum level. Returns the maximum use level (a numeric limit such as 10,000 mg/kg, or GMP meaning good manufacturing practice), which GSFA table the permission comes from, the note references that condition it, and whether the permission was stated for that exact food category or inherited from a parent category. Use for questions about whether an additive is allowed in a food, legal use levels, and food additive compliance.","inputs":[{"name":"additive","type":"string","required":true,"description":"INS number, name, or synonym — e.g. \"461\", \"methyl cellulose\"."},{"name":"food_category","type":"string","required":true,"description":"GSFA food category number (\"13.2\") or its name (\"complementary foods for infants\") — both work. Subcategories inherit parent provisions."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":184},{"name":"gsfa_search_additive","title":null,"description":"Find food additives in the Codex GSFA by INS number, name, or synonym. Returns each match with its INS number, name, synonyms, technological functional classes (thickener, preservative, colour, and so on), and how many food-category provisions it holds. Use to resolve an additive name or E-number to its GSFA entry before looking up permitted uses.","inputs":[{"name":"limit","type":"number","required":false,"description":"Maximum results (default 20)."},{"name":"query","type":"string","required":true,"description":"INS number, additive name, or synonym."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":115},{"name":"gsfa_additive_provisions","title":null,"description":"List every food category in which a given food additive is permitted under the Codex GSFA, with the maximum use level for each. Separates Table 1 and 2 provisions (which carry a specific maximum level) from Table 3 provisions (permitted under good manufacturing practice with no numeric limit). Use to see the full permitted scope of one additive across all foods.","inputs":[{"name":"additive","type":"string","required":true,"description":"INS number, name, or synonym — e.g. \"415\", \"xanthan gum\"."},{"name":"limit","type":"number","required":false,"description":"Maximum provisions returned (default 200)."},{"name":"table","type":"string","required":false,"description":"Filter to one table: \"table1_2\" or \"table3\". Omit for both."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":154},{"name":"gsfa_food_category_additives","title":null,"description":"List every food additive permitted in a given Codex GSFA food category, with each maximum use level. Includes provisions inherited from parent categories, since a GSFA provision applies to a category and all of its subcategories. Use to see what additives may legally be used in a particular food.","inputs":[{"name":"food_category","type":"string","required":true,"description":"GSFA food category number (\"01.4.4\") or its name (\"cream analogues\")."},{"name":"include_inherited","type":"boolean","required":false,"description":"Include provisions stated on parent categories (default true)."},{"name":"limit","type":"number","required":false,"description":"Maximum results (default 200)."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":128},{"name":"gsfa_search_food_categories","title":null,"description":"Search the Codex GSFA food category system by number or name — for example \"cheese\", \"beverages\", or \"01.4\". Returns matching category numbers and names. Use to find the right GSFA food category number before checking which additives are permitted in it.","inputs":[{"name":"limit","type":"number","required":false,"description":"Maximum results (default 50)."},{"name":"query","type":"string","required":true,"description":"Category number prefix or words from the category name."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":96},{"name":"gsfa_notes","title":null,"description":"Look up the qualifying notes that condition Codex GSFA food additive provisions. GSFA provisions are frequently limited by numbered notes such as \"for use in ready-to-drink products only\", \"as sulphur dioxide\", or \"on the fat basis\", and a maximum use level is not fully specified without them. Give note numbers to resolve, or a search term to find notes by their wording.","inputs":[{"name":"limit","type":"number","required":false,"description":"Maximum results when searching (default 25)."},{"name":"note_ids","type":"array","required":false,"description":"Note numbers to resolve, e.g. [160, 273]."},{"name":"query","type":"string","required":false,"description":"Find notes whose text contains this wording, e.g. \"sulphur dioxide\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":148},{"name":"gsfa_coverage","title":null,"description":"Report what this Codex GSFA dataset contains and how current it is: the Codex Alimentarius Commission sessions represented, counts of additives, food categories and provisions, and which additive records could not be retrieved. Use to check the freshness and completeness of GSFA answers before relying on them.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":68}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T06:10:41.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1a52a-1da6-7044-a281-8e949b20af9b","kind":"score.total_changed","summary":"Trust score (83 → 84)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a1a52a-1da6-7044-a281-8e949b20af9b"},{"id":"chg_01a19add-4c34-7dde-abb6-1e11f20ccc08","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a19add-4c34-7dde-abb6-1e11f20ccc08"},{"id":"chg_01a195b8-dfc8-7dde-8694-3ac417f72547","kind":"check.reverified","summary":"Dependency health (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a195b8-dfc8-7dde-8694-3ac417f72547"},{"id":"chg_01a195b8-dfc9-74c5-b34f-476f6191798d","kind":"score.total_changed","summary":"Trust score (56 → 82)","materiality":"functional","direction":"improvement","scoreDelta":26,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a195b8-dfc9-74c5-b34f-476f6191798d"},{"id":"chg_01a195b8-dfc6-7ce7-8f30-1445154d74e0","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a195b8-dfc6-7ce7-8f30-1445154d74e0"},{"id":"chg_01a195b8-dfc8-755e-9b43-526ca209a878","kind":"check.reverified","summary":"Known CVEs (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a195b8-dfc8-755e-9b43-526ca209a878"},{"id":"chg_01a1915a-6b46-79a4-96a8-279fea51b60d","kind":"score.total_changed","summary":"Trust score (82 → 56)","materiality":"functional","direction":"regression","scoreDelta":-26,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a1915a-6b46-79a4-96a8-279fea51b60d"},{"id":"chg_01a1915a-6b43-798d-bc68-3a781823bd90","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a1915a-6b43-798d-bc68-3a781823bd90"},{"id":"chg_01a1915a-6b44-7df2-82c6-13bea2852540","kind":"check.unverifiable","summary":"Known CVEs (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a1915a-6b44-7df2-82c6-13bea2852540"},{"id":"chg_01a1915a-6b45-791e-a005-e4894da80492","kind":"check.unverifiable","summary":"Dependency health (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a1915a-6b45-791e-a005-e4894da80492"},{"id":"chg_01a1915a-6b46-70d7-959a-b9956e6f028a","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a1915a-6b46-70d7-959a-b9956e6f028a"},{"id":"chg_01a190ee-b96b-7ca1-a6f1-59b6e70f767f","kind":"check.unverifiable","summary":"Security disclosure (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a190ee-b96b-7ca1-a6f1-59b6e70f767f"},{"id":"chg_01a190ee-b96d-7127-8de0-9db0a4225ae1","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a190ee-b96d-7127-8de0-9db0a4225ae1"},{"id":"chg_01a185c7-9cc6-73f6-839d-c2f7e13331c5","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a185c7-9cc6-73f6-839d-c2f7e13331c5"},{"id":"chg_01a185a3-8402-7e35-b5df-9484dc5e5ba4","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa#chg-chg_01a185a3-8402-7e35-b5df-9484dc5e5ba4"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa","markdown":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-codex-gsfa/pipeworx-mcp-codex-gsfa.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-codex-gsfa"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-codex-gsfa"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-codex-gsfa"},{"label":"Website","href":"https://pipeworx.io/packs/codex-gsfa"}]}}