{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:24:05.329Z","url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database.md","server":{"slug":"pipeworx-io-mobility-database","name":"Mobility Database","registryName":"io.github.pipeworx-io/mobility-database","description":"MobilityData's open catalogue of public-transport feeds — ~4,500 GTFS schedule feeds and ~1,900…","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-mobility-database","type":"npm","identifier":"@pipeworx/mcp-mobility-database","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-05T08:09:48.424Z"},"score":{"total":82,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":82},{"date":"2026-11-04","total":81},{"date":"2026-11-03","total":66},{"date":"2026-11-02","total":80},{"date":"2026-11-01","total":80},{"date":"2026-10-31","total":80},{"date":"2026-10-30","total":79},{"date":"2026-10-29","total":79}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-mobility-database).","Clear OSI-approved license (MIT).","Actively maintained (last published 2 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-mobility-database"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"2"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":62,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 733 tokens (~244/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"244","items":"3","tools":"3","tokens":"733","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":23,"verdict":"partial","reasons":["Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"7"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"mobility-database-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/mobility-database/mcp","withdrawn":false,"score":77,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/mobility-database-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-mobility-database/mobility-database-mcp.md"},{"slug":"pipeworx-mcp-mobility-database","type":"npm","identifier":"@pipeworx/mcp-mobility-database","withdrawn":false,"score":82,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-mobility-database"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"mobilitydb_search_feeds","title":null,"description":"Find the public-transport schedule feed (GTFS) for an agency, city or country from the Mobility Database, MobilityData's open catalogue of ~4,500 transit feeds worldwide. Returns the operator's own download URL, the licence it is published under, the geographic bounding box, whether the agency itself publishes it, and whether fetching it needs a credential from the agency. AUTHORITATIVE for \"where does this city's transit data come from\" — this is the registry the transit-data ecosystem uses, and it names the operator's URL rather than a copy of it. PREFER OVER WEB SEARCH for any question about which transit feeds exist for a place.","inputs":[{"name":"country","type":"string","required":false,"description":"ISO 3166-1 alpha-2 country code to filter to, e.g. US, FR, JP."},{"name":"data_type","type":"string","required":false,"description":"gtfs for scheduled service (the default), gtfs_rt for realtime, or \"any\" for both."},{"name":"include_inactive","type":"boolean","required":false,"description":"Include feeds the catalogue marks deprecated, inactive or superseded by a redirect (default false)."},{"name":"limit","type":"number","required":false,"description":"Maximum feeds to return (default 25, max 200)."},{"name":"municipality","type":"string","required":false,"description":"City or municipality name to filter to, e.g. \"Chicago\"."},{"name":"provider","type":"string","required":false,"description":"Operator name to filter to, e.g. \"Metropolitan Transportation Authority\"."},{"name":"query","type":"string","required":false,"description":"Free text matched against feed name, provider, municipality, region and feed id, e.g. \"BART\" or \"Helsinki\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":322},{"name":"mobilitydb_gtfs_rt_feeds","title":null,"description":"List the GTFS-Realtime feeds — live vehicle positions, trip updates and service alerts — registered in the Mobility Database for a country, city or operator, with the realtime endpoint URL and the GTFS Schedule feed each one is keyed against. AUTHORITATIVE for which transit agencies publish live data and where: realtime trip ids only resolve against the specific schedule feed named here, so this is what you need before consuming one.","inputs":[{"name":"country","type":"string","required":false,"description":"ISO 3166-1 alpha-2 country code, e.g. US, DE, JP."},{"name":"entity_type","type":"string","required":false,"description":"Which realtime stream: vp (vehicle positions), tu (trip updates), sa (service alerts)."},{"name":"group_by_agency","type":"boolean","required":false,"description":"Collapse the vp/tu/sa rows an agency publishes into one entry per schedule feed, listing the streams available (default false)."},{"name":"limit","type":"number","required":false,"description":"Maximum entries to return (default 25, max 200)."},{"name":"query","type":"string","required":false,"description":"Free text matched against feed name, provider, municipality and feed id."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":224},{"name":"mobilitydb_feed","title":null,"description":"Everything the Mobility Database records about one transit feed, by its catalogue id (e.g. mdb-1210, or a jbda-* id). Returns the operator's download URL and the catalogue's stable latest-version URL, licence, contact, bounding box, declared GTFS features, publication status, and — for a realtime feed — the GTFS Schedule feed it is keyed against, plus every sibling realtime stream the same agency publishes.","inputs":[{"name":"feed_id","type":"string","required":true,"description":"Mobility Database feed id, e.g. mdb-1210. Shown as `id` by mobilitydb_search_feeds."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":131}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:09:48.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1aac1-c69d-7027-b3d8-fb8a7c50966d","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database#chg-chg_01a1aac1-c69d-7027-b3d8-fb8a7c50966d"},{"id":"chg_01a1a598-e2b5-72ec-9cdc-ee5cea68c880","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database#chg-chg_01a1a598-e2b5-72ec-9cdc-ee5cea68c880"},{"id":"chg_01a1a598-e2bd-76eb-903c-6d92ae5f6c94","kind":"score.total_changed","summary":"Trust score (66 → 81)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database#chg-chg_01a1a598-e2bd-76eb-903c-6d92ae5f6c94"},{"id":"chg_01a19f4d-d5ed-71f1-8fc4-1e7559c41f06","kind":"score.total_changed","summary":"Trust score (80 → 66)","materiality":"functional","direction":"regression","scoreDelta":-14,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database#chg-chg_01a19f4d-d5ed-71f1-8fc4-1e7559c41f06"},{"id":"chg_01a19f4d-d5ec-7ba6-9c83-5e50581e096f","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database#chg-chg_01a19f4d-d5ec-7ba6-9c83-5e50581e096f"},{"id":"chg_01a19f4d-d5ea-7ba8-bb41-46c0212e8dbb","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database#chg-chg_01a19f4d-d5ea-7ba8-bb41-46c0212e8dbb"},{"id":"chg_01a19100-b901-70ee-a570-42b208056bb2","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database#chg-chg_01a19100-b901-70ee-a570-42b208056bb2"},{"id":"chg_01a186a5-cdb5-7aee-8fb8-f99b616e24b5","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database#chg-chg_01a186a5-cdb5-7aee-8fb8-f99b616e24b5"},{"id":"chg_01a18643-b223-7cef-9fdd-8aa28d2a0b8d","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database#chg-chg_01a18643-b223-7cef-9fdd-8aa28d2a0b8d"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database","markdown":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-mobility-database/pipeworx-mcp-mobility-database.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-mobility-database"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-mobility-database"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-mobility-database"},{"label":"Website","href":"https://pipeworx.io/packs/mobility-database"}]}}