{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:24:02.991Z","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa.md","server":{"slug":"pipeworx-io-ebsa","name":"Ebsa","registryName":"io.github.pipeworx-io/ebsa","description":"EBSA enforcement — civil-penalty actions on ERISA benefit-plan filings","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-ebsa","type":"npm","identifier":"@pipeworx/mcp-ebsa","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-05T00:05:17.578Z"},"score":{"total":82,"tier":"high trust","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":82},{"date":"2026-11-04","total":82},{"date":"2026-11-03","total":81},{"date":"2026-11-02","total":81},{"date":"2026-11-01","total":69},{"date":"2026-10-31","total":79},{"date":"2026-10-30","total":79}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-ebsa).","Clear OSI-approved license (MIT).","Actively maintained (last published 3 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-ebsa"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"3"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":67,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 760 tokens (~190/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"190","items":"4","tools":"4","tokens":"760","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":20,"verdict":"partial","reasons":["Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"6"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"4"}},{"code":"toolsafety.manipulation_clean","args":{"units":"5","judged":"5"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"ebsa-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/ebsa/mcp","withdrawn":false,"score":77,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-ebsa/ebsa-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-ebsa/ebsa-mcp.md"},{"slug":"pipeworx-mcp-ebsa","type":"npm","identifier":"@pipeworx/mcp-ebsa","withdrawn":false,"score":82,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-ebsa"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"ebsa_search","title":null,"description":"Search closed EBSA (Employee Benefits Security Administration) civil-penalty enforcement cases since 2000 — deficient-filer, late-filer and non-filer penalty assessments against ERISA benefit-plan sponsors for their Form 5500 filings. Filter by plan sponsor/administrator name, case type, state, or plan year. Returns the plan, sponsor, case type, close reason/date, and the penalty amount (a DOL-assigned dollar-range bucket, e.g. \"over $100,000\"). Complements the `form5500` pack, which covers the filings themselves rather than enforcement against them.","inputs":[{"name":"_apiKey","type":"string","required":false,"description":"Optional. Your own free DOL Open Data Portal key (dataportal.dol.gov); omit it to use the platform key."},{"name":"case_type","type":"string","required":false,"description":"Case type, e.g. \"Deficient Filer\", \"Late Filer\", \"Non Filer\". Matched as a substring."},{"name":"limit","type":"number","required":false,"description":"Cases to return, 1-100 (default 20)."},{"name":"plan_year","type":"string|number","required":false,"description":"Plan year of the filing that triggered the case, e.g. 2022."},{"name":"sponsor","type":"string","required":false,"description":"Plan sponsor / administrator name, matched as a substring against both the plan administrator and the plan name."},{"name":"state","type":"string","required":false,"description":"Two-letter or full state name of the plan administrator as DOL records it (e.g. \"Texas\")."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":301},{"name":"ebsa_sponsor","title":null,"description":"Full EBSA civil-penalty enforcement history for one named plan sponsor/administrator, with every closed case and a count by case type. Matches the sponsor against both the plan administrator name and the plan name and reports which one hit. Use to answer whether an employer's benefit plans have a history of filing-compliance penalties.","inputs":[{"name":"_apiKey","type":"string","required":false,"description":"Optional. Your own free DOL Open Data Portal key (dataportal.dol.gov); omit it to use the platform key."},{"name":"limit","type":"number","required":false,"description":"Cases to examine, 1-100 (default 100)."},{"name":"sponsor","type":"string","required":true,"description":"Plan sponsor / administrator name, matched against the plan administrator and the plan name."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":151},{"name":"ebsa_recent","title":null,"description":"The most recent closed EBSA civil-penalty enforcement actions, newest first, optionally restricted to one case type or state. Returns plan, sponsor, case type, close date/reason and penalty bucket for each. Use for \"what EBSA enforcement actions closed recently\".","inputs":[{"name":"_apiKey","type":"string","required":false,"description":"Optional. Your own free DOL Open Data Portal key (dataportal.dol.gov); omit it to use the platform key."},{"name":"case_type","type":"string","required":false,"description":"Restrict to one case type, e.g. \"Deficient Filer\"."},{"name":"limit","type":"number","required":false,"description":"Cases to return, 1-100 (default 20)."},{"name":"state","type":"string","required":false,"description":"Restrict to one plan-administrator state as DOL records it (e.g. \"California\")."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":166},{"name":"ebsa_coverage","title":null,"description":"Report what the EBSA OCATS enforcement dataset currently covers: its publication date, update frequency and the close-date range of a sample query. Use to check how current the enforcement data is before relying on an absence of cases.","inputs":[{"name":"_apiKey","type":"string","required":false,"description":"Optional. Your own free DOL Open Data Portal key (dataportal.dol.gov); omit it to use the platform key."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":90}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T00:05:17.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-30","recent":[{"id":"chg_01a1a3dd-ee4b-7f22-9e91-f23903869693","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a1a3dd-ee4b-7f22-9e91-f23903869693"},{"id":"chg_01a19991-ae5e-770b-aee3-2e46b76962a9","kind":"check.reverified","summary":"Dependency health (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a19991-ae5e-770b-aee3-2e46b76962a9"},{"id":"chg_01a19991-ae61-760a-b8bc-4d76e648f087","kind":"score.total_changed","summary":"Trust score (69 → 81)","materiality":"functional","direction":"improvement","scoreDelta":12,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a19991-ae61-760a-b8bc-4d76e648f087"},{"id":"chg_01a19991-ae59-7ed3-b718-c463733874aa","kind":"check.reverified","summary":"Known CVEs (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a19991-ae59-7ed3-b718-c463733874aa"},{"id":"chg_01a19537-a2e9-723a-b0aa-5fe95e918361","kind":"check.reverified","summary":"Stability (unverified → 0.07)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a19537-a2e9-723a-b0aa-5fe95e918361"},{"id":"chg_01a19537-a2e9-7c90-9ddd-8bbce4328a71","kind":"score.total_changed","summary":"Trust score (38 → 69)","materiality":"functional","direction":"improvement","scoreDelta":31,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a19537-a2e9-7c90-9ddd-8bbce4328a71"},{"id":"chg_01a1951f-cd35-7552-aa4c-59ba0dec6568","kind":"check.unverifiable","summary":"Known CVEs (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a1951f-cd35-7552-aa4c-59ba0dec6568"},{"id":"chg_01a1951f-cd39-76fa-8f90-1a5d6d735289","kind":"score.total_changed","summary":"Trust score (79 → 38)","materiality":"functional","direction":"regression","scoreDelta":-41,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a1951f-cd39-76fa-8f90-1a5d6d735289"},{"id":"chg_01a1951f-cd39-716b-b3b6-e488bf3ac9b3","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a1951f-cd39-716b-b3b6-e488bf3ac9b3"},{"id":"chg_01a1951f-cd38-7a1a-8c47-c056661bde11","kind":"check.appeared","summary":"First check of Schema quality (unverified)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a1951f-cd38-7a1a-8c47-c056661bde11"},{"id":"chg_01a1951f-cd38-7356-8a65-c29af8cdf14c","kind":"check.unverifiable","summary":"Dependency health (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a1951f-cd38-7356-8a65-c29af8cdf14c"},{"id":"chg_01a1951f-cd37-7b22-9412-ccc057857f80","kind":"check.unverifiable","summary":"Tool coverage (100 → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a1951f-cd37-7b22-9412-ccc057857f80"},{"id":"chg_01a1951f-cd37-74c5-8001-db9696999d15","kind":"check.unverifiable","summary":"Capabilities (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a1951f-cd37-74c5-8001-db9696999d15"},{"id":"chg_01a1951f-cd36-7e2e-9994-3f638205b8fc","kind":"check.reason","summary":"Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a1951f-cd36-7e2e-9994-3f638205b8fc"},{"id":"chg_01a1951f-cd36-73c2-8b43-da652a50fbf7","kind":"check.unverifiable","summary":"Tool safety (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a1951f-cd36-73c2-8b43-da652a50fbf7"},{"id":"chg_01a18f44-6574-70d4-b82f-5c9536979eb5","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a18f44-6574-70d4-b82f-5c9536979eb5"},{"id":"chg_01a18c01-886b-7ccc-a4aa-07c3510dc2b4","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa#chg-chg_01a18c01-886b-7ccc-a4aa-07c3510dc2b4"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa","markdown":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-ebsa/pipeworx-mcp-ebsa.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-ebsa"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-ebsa"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-ebsa"},{"label":"Website","href":"https://pipeworx.io/packs/ebsa"}]}}