{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T21:20:03.464Z","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex.md","server":{"slug":"pipeworx-io-cornell-wex","name":"Cornell Wex","registryName":"io.github.pipeworx-io/cornell-wex","description":"Cornell LII Wex MCP — the Legal Information Institute's free legal dictionary and encyclopedia…","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-cornell-wex","type":"npm","identifier":"@pipeworx/mcp-cornell-wex","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-05T00:16:31.301Z"},"score":{"total":84,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":84},{"date":"2026-11-04","total":83},{"date":"2026-11-03","total":83},{"date":"2026-11-02","total":82},{"date":"2026-11-01","total":82},{"date":"2026-10-31","total":67},{"date":"2026-10-30","total":81},{"date":"2026-10-29","total":81}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-cornell-wex).","Clear OSI-approved license (MIT).","Actively maintained (last published 4 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-cornell-wex"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"4"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":73,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 500 tokens (~166/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"166","items":"3","tools":"3","tokens":"500","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":23,"verdict":"partial","reasons":["Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"7"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"cornell-wex-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/cornell-wex/mcp","withdrawn":false,"score":77,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/cornell-wex-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/cornell-wex-mcp.md"},{"slug":"pipeworx-mcp-cornell-wex","type":"npm","identifier":"@pipeworx/mcp-cornell-wex","withdrawn":false,"score":84,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-cornell-wex"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"wex_define","title":null,"description":"Definition of a US legal term or doctrine from Cornell LII's Wex legal encyclopedia: the plain-English explanation, its related Wex terms, topic categories and last-reviewed date. Answers \"what does habeas corpus mean\", \"define adverse possession\", \"explain res judicata\". Free: LII licenses Wex CC BY-NC-SA, so this call costs 0 credits and the response carries the attribution and licence a caller must pass on.","inputs":[{"name":"term","type":"string","required":true,"description":"The legal term as written, e.g. \"tort\", \"adverse possession\", \"res judicata\", \"Miranda warning\". Case and spaces do not matter."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":141},{"name":"wex_search","title":null,"description":"Find Wex legal-encyclopedia entries whose titles contain the given words, searched across the whole 5,600-entry index and ranked by how many words match. Use it when you do not know the exact term (e.g. \"possession\" lists adverse possession, constructive possession, possession of stolen goods). Returns entry titles with their URLs; pass one to wex_define for the definition. Free (CC BY-NC-SA, 0 credits).","inputs":[{"name":"limit","type":"number","required":false,"description":"Maximum entries to return (default 20, max 100)."},{"name":"query","type":"string","required":true,"description":"One or more words expected in the entry title, e.g. \"possession\", \"statute of limitations\", \"warrant\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":154},{"name":"wex_browse","title":null,"description":"List the Wex legal-encyclopedia entries under one letter of its A–Z index (5,600+ entries in total), with a URL for each. Useful for enumerating terms or paging through a letter; pass an entry to wex_define for its definition. Free (CC BY-NC-SA, 0 credits).","inputs":[{"name":"letter","type":"string","required":true,"description":"A single letter a–z (or a digit 1, 3, 4, 7, 9 for the few numeric entries)."},{"name":"limit","type":"number","required":false,"description":"Entries to return (default 100, max 500)."},{"name":"offset","type":"number","required":false,"description":"Start position within the letter (default 0)."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":148}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T00:16:31.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1a910-78ae-7dda-b4bf-456dcfe2ca10","kind":"score.total_changed","summary":"Trust score (83 → 84)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex#chg-chg_01a1a910-78ae-7dda-b4bf-456dcfe2ca10"},{"id":"chg_01a19ec3-5e53-766c-b1de-7dde284f2da1","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex#chg-chg_01a19ec3-5e53-766c-b1de-7dde284f2da1"},{"id":"chg_01a19480-899f-7750-8a3b-8a639d10664b","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex#chg-chg_01a19480-899f-7750-8a3b-8a639d10664b"},{"id":"chg_01a19480-89a0-7a5a-82cb-04e12a8963b0","kind":"score.total_changed","summary":"Trust score (67 → 82)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex#chg-chg_01a19480-89a0-7a5a-82cb-04e12a8963b0"},{"id":"chg_01a1915a-3987-7eb6-847c-4e5519d565d4","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex#chg-chg_01a1915a-3987-7eb6-847c-4e5519d565d4"},{"id":"chg_01a1915a-3986-767a-9063-a7f643363ec8","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex#chg-chg_01a1915a-3986-767a-9063-a7f643363ec8"},{"id":"chg_01a1915a-3988-7612-9f1f-38e0647fd44c","kind":"score.total_changed","summary":"Trust score (82 → 67)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex#chg-chg_01a1915a-3988-7612-9f1f-38e0647fd44c"},{"id":"chg_01a18f5e-711a-7cfe-8821-55adc62e7aea","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex#chg-chg_01a18f5e-711a-7cfe-8821-55adc62e7aea"},{"id":"chg_01a185c7-4445-74d3-a427-ea145b6161e4","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex#chg-chg_01a185c7-4445-74d3-a427-ea145b6161e4"},{"id":"chg_01a185a4-9177-76ba-9075-5f751634c237","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex#chg-chg_01a185a4-9177-76ba-9075-5f751634c237"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex","markdown":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-cornell-wex/pipeworx-mcp-cornell-wex.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-cornell-wex"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-cornell-wex"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-cornell-wex"},{"label":"Website","href":"https://pipeworx.io/packs/cornell-wex"}]}}