{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:30:36.674Z","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo.md","server":{"slug":"pipeworx-io-govinfo","name":"Govinfo","registryName":"io.github.pipeworx-io/govinfo","description":"GovInfo.gov MCP — full text of US government publications","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-govinfo","type":"npm","identifier":"@pipeworx/mcp-govinfo","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-05T09:46:08.606Z"},"score":{"total":83,"tier":"high trust","status":"scored","weekDelta":4,"history":[{"date":"2026-11-05","total":83},{"date":"2026-11-04","total":82},{"date":"2026-11-03","total":82},{"date":"2026-11-02","total":66},{"date":"2026-11-01","total":81},{"date":"2026-10-31","total":80},{"date":"2026-10-30","total":80},{"date":"2026-10-29","total":79}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-govinfo).","Clear OSI-approved license (MIT).","Actively maintained (last published 3 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-govinfo"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"3"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":67,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1269 tokens (~181/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"181","items":"7","tools":"7","tokens":"1269","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":23,"verdict":"partial","reasons":["Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"7"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"7"}},{"code":"toolsafety.manipulation_clean","args":{"units":"8","judged":"8"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"govinfo-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/govinfo/mcp","withdrawn":false,"score":77,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-govinfo/govinfo-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-govinfo/govinfo-mcp.md"},{"slug":"pipeworx-mcp-govinfo","type":"npm","identifier":"@pipeworx/mcp-govinfo","withdrawn":false,"score":83,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-govinfo"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"list_collections","title":null,"description":"List GovInfo collections (BILLS, CFR, USCODE, FR, CHRG, CRPT, HMAN, PLAW, SERIALSET, USCOURTS, etc.) with package counts. Use the collection code with search_packages to filter.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":59},{"name":"search_packages","title":null,"description":"Full-text + faceted search across GovInfo. Filter by one or more collection codes (BILLS, FR, CFR, USCODE, CHRG, CRPT, CREC, PLAW, USCOURTS...), date range, congress, and free-text query. Several codes search the union of those collections. Returns package IDs, titles, collection and issue dates.","inputs":[{"name":"collections","type":"string","required":false,"description":"Collection codes, comma- or space-separated (e.g. \"CHRG\" or \"CHRG,CRPT\"). Several codes return the union of those collections — \"CHRG,CRPT\" gives every package in either. Codes come from list_collect…"},{"name":"congress","type":"number","required":false,"description":"Congress number (e.g., 118) — for BILLS/CHRG/CRPT"},{"name":"date_from","type":"string","required":false,"description":"YYYY-MM-DD"},{"name":"date_to","type":"string","required":false,"description":"YYYY-MM-DD"},{"name":"limit","type":"number","required":false,"description":"Alias for page_size, 1-100."},{"name":"offset_mark","type":"string","required":false,"description":"Pagination cursor from previous response"},{"name":"page_size","type":"number","required":false,"description":"Results per page, 1-100 (default 25). `limit` works as an alias."},{"name":"query","type":"string","required":true,"description":"Free-text search"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":256},{"name":"get_package","title":null,"description":"Metadata for a single package by packageId (e.g., \"BILLS-118hr1234ih\", \"FR-2024-05-12\"). Returns title, dates, citations, granule count, download links (PDF/XML/MODS).","inputs":[{"name":"package_id","type":"string","required":true,"description":"GovInfo packageId"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":71},{"name":"list_granules","title":null,"description":"List granules within a package — e.g., sections of a CFR title, individual entries in a Federal Register issue. Returns granule IDs + titles.","inputs":[{"name":"limit","type":"number","required":false,"description":"Alias for page_size, 1-100."},{"name":"offset_mark","type":"string","required":false,"description":"Pagination cursor"},{"name":"package_id","type":"string","required":true,"description":"GovInfo packageId"},{"name":"page_size","type":"number","required":false,"description":"Granules per page, 1-100 (default 100). `limit` works as an alias."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":108},{"name":"get_granule","title":null,"description":"Fetch summary metadata for a single granule (sub-unit) within a GovInfo package, given package_id and granule_id (both from list_granules). Returns title, class, and provenance fields from the GovInfo summary endpoint.","inputs":[{"name":"granule_id","type":"string","required":true,"description":"Granule ID"},{"name":"package_id","type":"string","required":true,"description":"GovInfo packageId"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":82},{"name":"gao_red_book","title":null,"description":"Find the chapter of GAO's Principles of Federal Appropriations Law — the Red Book — that governs a federal appropriations, fiscal-law or government-funding question, described in plain words. Answers questions about what an appropriation may lawfully be spent on (the purpose statute and the necessary expense rule), how long it stays available (the bona fide needs rule, expired and cancelled accounts, no-year and multi-year money), how much may be obligated (the Antideficiency Act, augmentation, miscellaneous receipts, apportionment), recording valid obligations, continuing resolutions and funding lapses, accountable-officer liability and relief, grants and cooperative agreements, guaranteed and insured loans, acquisition, real property, and claims for and against the government. Returns the ranked chapters together with the full table of contents, each row naming which EDITION it comes from: GAO publishes the Red Book chapter by chapter, so the current treatise is a mix of Fourth and Third Edition chapters and this reads that composition live from GAO on every call. Every row carries the chapter PDF, its source_last_modified and age_days. This is official interpretation by the agency that decides federal appropriations law, not statute — pair it with uscode or cfr text for the underlying provision.","inputs":[{"name":"chapter","type":"number","required":false,"description":"Return one specific Red Book chapter number (1-15) instead of ranking by topic."},{"name":"include_scope_text","type":"boolean","required":false,"description":"Fetch GAO's own scope summary for the Fourth Edition chapters from their product pages (3 extra parallel requests). Default true."},{"name":"topic","type":"string","required":false,"description":"The fiscal-law topic or question in plain words, e.g. \"can we pay for food at a conference\", \"bona fide needs rule\", \"Antideficiency Act violation\", \"obligating funds under a continuing resolution\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":373},{"name":"gao_comptroller_decisions","title":null,"description":"Search Comptroller General decisions and opinions — the B-numbered rulings in which GAO decides federal appropriations and fiscal-law disputes, the precedent the Red Book itself cites. Give a topic in plain words (purpose statute violation, augmentation of appropriations, gift acceptance authority, improper payment, interagency agreement) and get the decisions, each with its B-number, decision date and GovInfo package. Filters out GAO audit and performance reports so the result set is decisions only, and reports how many of the underlying hits were decisions. Complements gao_red_book (the treatise) and gao_protests_search (bid-protest decisions, a different GAO docket).","inputs":[{"name":"date_from","type":"string","required":false,"description":"YYYY-MM-DD"},{"name":"date_to","type":"string","required":false,"description":"YYYY-MM-DD"},{"name":"include_reports","type":"boolean","required":false,"description":"Also return GAO audit/performance reports from the same search, flagged as reports. Default false."},{"name":"limit","type":"number","required":false,"description":"Alias for page_size."},{"name":"offset_mark","type":"string","required":false,"description":"Pagination cursor from a previous response."},{"name":"page_size","type":"number","required":false,"description":"Decisions to return, 1-100 (default 25)."},{"name":"query","type":"string","required":true,"description":"Free-text topic, e.g. \"augmentation of appropriations\" or \"necessary expense\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":267}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T09:46:08.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1ab19-f97f-71c7-bd67-acc3322c9d86","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a1ab19-f97f-71c7-bd67-acc3322c9d86"},{"id":"chg_01a1a0c4-05c3-76e9-9f8f-ed9d6499e020","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a1a0c4-05c3-76e9-9f8f-ed9d6499e020"},{"id":"chg_01a1a0c4-05c9-796c-a627-f95fdf0c80d3","kind":"score.total_changed","summary":"Trust score (66 → 82)","materiality":"functional","direction":"improvement","scoreDelta":16,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a1a0c4-05c9-796c-a627-f95fdf0c80d3"},{"id":"chg_01a19a63-e652-7a8a-a86b-cd1060d3ceb5","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a19a63-e652-7a8a-a86b-cd1060d3ceb5"},{"id":"chg_01a19a63-e653-7ddc-b89c-da605e001a67","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a19a63-e653-7ddc-b89c-da605e001a67"},{"id":"chg_01a19a63-e654-73c2-962a-06dbe49cd4db","kind":"score.total_changed","summary":"Trust score (81 → 66)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a19a63-e654-73c2-962a-06dbe49cd4db"},{"id":"chg_01a19678-e250-7486-9722-caa270791553","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a19678-e250-7486-9722-caa270791553"},{"id":"chg_01a18c2b-cc8c-7903-8299-b3e52a870432","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a18c2b-cc8c-7903-8299-b3e52a870432"},{"id":"chg_01a18c2b-cc8d-7e4c-b935-de5f997823d3","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a18c2b-cc8d-7e4c-b935-de5f997823d3"},{"id":"chg_01a18712-2983-7111-8604-ba65cdf8204c","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a18712-2983-7111-8604-ba65cdf8204c"},{"id":"chg_01a18697-e769-75cb-9ee7-57c17261301c","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#chg-chg_01a18697-e769-75cb-9ee7-57c17261301c"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo","markdown":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-govinfo"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-govinfo"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-govinfo"},{"label":"Website","href":"https://pipeworx.io/packs/govinfo"}]}}