{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:40:36.877Z","url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines.md","server":{"slug":"pipeworx-io-msha-mines","name":"Msha Mines","registryName":"io.github.pipeworx-io/msha-mines","description":"MSHA mine records — search a US mine by operator or mine name, or look up a known MSHA Mine ID for…","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-msha-mines","type":"npm","identifier":"@pipeworx/mcp-msha-mines","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-05T08:42:17.148Z"},"score":{"total":82,"tier":"high trust","status":"scored","weekDelta":4,"history":[{"date":"2026-11-05","total":82},{"date":"2026-11-04","total":81},{"date":"2026-11-03","total":81},{"date":"2026-11-02","total":78},{"date":"2026-11-01","total":78},{"date":"2026-10-31","total":78},{"date":"2026-10-30","total":78},{"date":"2026-10-29","total":78}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-msha-mines).","Clear OSI-approved license (MIT).","Actively maintained (last published 2 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-msha-mines"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"2"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":61,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 912 tokens (~304/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"304","items":"3","tools":"3","tokens":"912","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":23,"verdict":"partial","reasons":["Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"7"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"msha-mines-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/msha-mines/mcp","withdrawn":false,"score":77,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/msha-mines-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-msha-mines/msha-mines-mcp.md"},{"slug":"pipeworx-mcp-msha-mines","type":"npm","identifier":"@pipeworx/mcp-msha-mines","withdrawn":false,"score":82,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-msha-mines"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"msha_mine_search","title":null,"description":"Search MSHA (Mine Safety and Health Administration) mine records by operator name, controller name, or mine name. Returns matching mines with their MSHA Mine ID, status (Active, Abandoned, Intermittent, etc.), mine type (Surface/Underground/Facility), coal vs metal/non-metal classification, commodity, state, and current operator/controller. Use this to find the Mine ID(s) for a company before calling msha_mine_detail. Sourced from MSHA's own bulk mine-records file (public domain), refreshed weekly. Keyless.","inputs":[{"name":"limit","type":"number","required":false,"description":"Max mines to return (default 25, max 100)."},{"name":"query","type":"string","required":true,"description":"Operator, controller, or mine name (or part of one) to search for, e.g. \"Peabody\", \"Warrior Met Coal\", \"O'Neal Quarry\"."},{"name":"state","type":"string","required":false,"description":"Optional 2-letter US state code to restrict the search, e.g. \"WV\", \"KY\"."},{"name":"status","type":"string","required":false,"description":"Optional exact mine status filter: Active, Abandoned, \"Abandoned and Sealed\", Intermittent, \"New Mine\", NonProducing, \"Temporarily Idled\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":258},{"name":"msha_mine_detail","title":null,"description":"Look up a known MSHA Mine ID: current status, type, commodity, operator and controller, plus recent inspections, recent violations (with assessed penalties, S&S flag, and abatement/termination dates), and recent quarterly employment and coal production. Violations/inspections/production cover only the most recent 5 calendar years (the response says so) — MSHA's full history back to 2000 is not loaded. Sourced from MSHA's own bulk mine-records files (public domain), refreshed weekly. Keyless.","inputs":[{"name":"inspections_limit","type":"number","required":false,"description":"Max recent inspections to return (default 10, max 50)."},{"name":"mine_id","type":"string","required":true,"description":"MSHA Mine ID, e.g. \"4608254\". Find it with msha_mine_search if you only have an operator/mine name."},{"name":"violations_limit","type":"number","required":false,"description":"Max recent violations to return (default 20, max 100)."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":200},{"name":"msha_violation_counts","title":null,"description":"Count MSHA violations issued at one mine within a calendar year or year range — in ONE call, not a listing. Returns the TOTAL plus a breakdown by who it was issued to (Operator vs Contractor vs Agent vs Miner) and by significant-and-substantial (S&S) status. Use this instead of msha_mine_detail when the question is \"how many\" — msha_mine_detail only returns its most recent violations_limit rows (default 20, max 100) and has no true count. Counted by the calendar year of each violation's own issue date (VIOLATION_ISSUE_DT, via MSHA's own CAL_YR field). Only the most recent 5 calendar years are loaded (the response's `coverage` field says exactly which); a year outside that window comes back flagged as \"not loaded,\" never as a silent zero. Takes a known MSHA Mine ID (use msha_mine_search to find one) or a mine/operator/controller name — the name path only works when it resolves to exactly one mine; otherwise it lists the candidates so you can retry with a mine_id. Sourced from MSHA's own bulk mine-records files (public domain), refreshed weekly. Keyless.","inputs":[{"name":"mine_id","type":"string","required":false,"description":"MSHA Mine ID, e.g. \"4601437\". Preferred over mine_name — unambiguous."},{"name":"mine_name","type":"string","required":false,"description":"Mine, operator, or controller name to resolve to a Mine ID — used only when mine_id is omitted, and only works if it matches exactly one mine."},{"name":"year","type":"number","required":false,"description":"Single calendar year to count, e.g. 2025."},{"name":"year_from","type":"number","required":false,"description":"First calendar year of a range (inclusive). Use together with year_to instead of year."},{"name":"year_to","type":"number","required":false,"description":"Last calendar year of a range (inclusive). Use together with year_from instead of year."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":398}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:42:17.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1aadf-82d2-77cb-96a8-9593d31d50a2","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines#chg-chg_01a1aadf-82d2-77cb-96a8-9593d31d50a2"},{"id":"chg_01a1a5b5-4134-7089-ab65-93369f860af6","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines#chg-chg_01a1a5b5-4134-7089-ab65-93369f860af6"},{"id":"chg_01a19f84-a79c-7b4f-be0a-7c059761c36f","kind":"check.unverifiable","summary":"Security disclosure (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines#chg-chg_01a19f84-a79c-7b4f-be0a-7c059761c36f"},{"id":"chg_01a19f84-a79e-7718-8d76-43b4900b51bc","kind":"check.reverified","summary":"Stability (unverified → 0.17)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines#chg-chg_01a19f84-a79e-7718-8d76-43b4900b51bc"},{"id":"chg_01a19f84-a79f-7736-bce7-731be078b3ca","kind":"score.total_changed","summary":"Trust score (78 → 81)","materiality":"functional","direction":"improvement","scoreDelta":3,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines#chg-chg_01a19f84-a79f-7736-bce7-731be078b3ca"},{"id":"chg_01a19f84-a79f-718f-8e87-7b4081c8591d","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines#chg-chg_01a19f84-a79f-718f-8e87-7b4081c8591d"},{"id":"chg_01a18bf5-2237-7297-a3d9-b1a101ac2b43","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines#chg-chg_01a18bf5-2237-7297-a3d9-b1a101ac2b43"},{"id":"chg_01a186e9-1260-7376-a8ff-a3081b78fd42","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines#chg-chg_01a186e9-1260-7376-a8ff-a3081b78fd42"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines","markdown":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-msha-mines/pipeworx-mcp-msha-mines.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-msha-mines"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-msha-mines"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-msha-mines"},{"label":"Website","href":"https://pipeworx.io/packs/msha-mines"}]}}