{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-07T17:48:00.453Z","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag.md","server":{"slug":"pipeworx-io-naag","name":"Naag","registryName":"io.github.pipeworx-io/naag","description":"State attorney-general multistate enforcement, from the National Association of Attorneys General…","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-naag","type":"npm","identifier":"@pipeworx/mcp-naag","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-07T08:42:15.449Z"},"score":{"total":83,"tier":"high trust","status":"scored","weekDelta":4,"history":[{"date":"2026-11-07","total":83},{"date":"2026-11-06","total":82},{"date":"2026-11-05","total":82},{"date":"2026-11-04","total":81},{"date":"2026-11-03","total":66},{"date":"2026-11-02","total":79},{"date":"2026-11-01","total":79},{"date":"2026-10-31","total":79},{"date":"2026-10-30","total":79},{"date":"2026-10-29","total":79}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-naag).","Clear OSI-approved license (MIT).","Actively maintained (last published 4 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-naag"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"4"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":62,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 1029 tokens (~257/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"257","items":"4","tools":"4","tokens":"1029","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":30,"verdict":"partial","reasons":["Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"9"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"4"}},{"code":"toolsafety.manipulation_clean","args":{"units":"5","judged":"5"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"naag-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/naag/mcp","withdrawn":false,"score":86,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-naag/naag-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-naag/naag-mcp.md"},{"slug":"pipeworx-mcp-naag","type":"npm","identifier":"@pipeworx/mcp-naag","withdrawn":false,"score":83,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-naag"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"naag_multistate_cases","title":null,"description":"Search the National Association of Attorneys General database of MULTISTATE enforcement cases — lawsuits and investigations that coalitions of US state attorneys general brought together, largely antitrust and consumer protection: price-fixing, bid rigging, merger challenges, monopolization. Answers \"which states sued this company together\", \"what multistate antitrust actions were filed this year\", and \"how were they resolved\". Each case returns the case name, filing date, the participating and lead states, case and relief type, industry, resolution status, any federal co-plaintiff (DOJ, FTC) and a summary of the complaint.","inputs":[{"name":"case_type","type":"string","required":false,"description":"Conduct at issue, e.g. \"price-fixing\", \"merger-review\", \"bid-rigging\", \"monopolization\", \"market-allocation-agreement\"."},{"name":"federal_partner","type":"string","required":false,"description":"Federal agency that joined as co-plaintiff: \"usdoj\" or \"ftc\"."},{"name":"filed_from","type":"string","required":false,"description":"Earliest date the case record carries, YYYY-MM-DD."},{"name":"filed_to","type":"string","required":false,"description":"Latest date the case record carries, YYYY-MM-DD."},{"name":"industry","type":"string","required":false,"description":"Industry the defendants operate in, e.g. \"pharmaceuticals\", \"insurance\", \"hospitals\", \"dairy\"."},{"name":"lead_state","type":"string","required":false,"description":"A state that led the case as named plaintiff — two-letter code or full name."},{"name":"limit","type":"number","required":false,"description":"Cases to return, 1-50 (default 20)."},{"name":"offset","type":"number","required":false,"description":"Cases to skip, for paging (default 0)."},{"name":"query","type":"string","required":false,"description":"Free text over case names and complaint summaries, e.g. a defendant (\"Amazon\", \"Paramount\") or a practice (\"generic drug\")."},{"name":"resolution","type":"string","required":false,"description":"How it ended, e.g. \"settled\", \"pending\", \"consent-decree\", \"dismissed\", \"final-judgment\"."},{"name":"state","type":"string","required":false,"description":"A state that joined the coalition — two-letter code or full name (\"NY\", \"New York\")."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":430},{"name":"naag_case_detail","title":null,"description":"The full NAAG record for one multistate attorney-general case, given its numeric id or naag.org URL from naag_multistate_cases. Returns the complete complaint summary rather than a truncated one, plus every classification the record carries: participating states, lead plaintiff states, conduct type, civil or criminal, relief sought, resolution status, industry and any federal co-plaintiff.","inputs":[{"name":"case","type":"string","required":true,"description":"Numeric case id (e.g. \"48390\") or the naag.org/multistate-case/... URL."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":118},{"name":"naag_policy_letters","title":null,"description":"Multistate coalition policy letters — the comment letters and formal positions that groups of state attorneys general send jointly to Congress, federal agencies and companies, on subjects like robocalls, AI, opioids and consumer data. Answers \"have state AGs written to the FCC about this\" and \"which states signed that coalition letter\". Returns the letter title, date, signing states and a summary, sourced from NAAG.","inputs":[{"name":"limit","type":"number","required":false,"description":"Letters to return, 1-50 (default 20)."},{"name":"offset","type":"number","required":false,"description":"Letters to skip (default 0)."},{"name":"query","type":"string","required":false,"description":"Free text over letter titles and bodies, e.g. \"robocall\", \"artificial intelligence\", \"Know Your Customer\"."},{"name":"sent_from","type":"string","required":false,"description":"Earliest letter date, YYYY-MM-DD."},{"name":"sent_to","type":"string","required":false,"description":"Latest letter date, YYYY-MM-DD."},{"name":"state","type":"string","required":false,"description":"A state that signed — two-letter code or full name."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":208},{"name":"naag_press_releases","title":null,"description":"Announcements and analysis published by the National Association of Attorneys General: press releases on coalition actions state AGs have just taken, and Attorney General Journal articles on consumer protection, antitrust, cybersecurity, public health and criminal law. Answers \"what did state attorneys general announce recently\" on a topic. Returns headline, date, topic category, summary and the naag.org link.","inputs":[{"name":"limit","type":"number","required":false,"description":"Items to return, 1-50 (default 20)."},{"name":"offset","type":"number","required":false,"description":"Items to skip (default 0)."},{"name":"published_from","type":"string","required":false,"description":"Earliest publication date, YYYY-MM-DD."},{"name":"published_to","type":"string","required":false,"description":"Latest publication date, YYYY-MM-DD."},{"name":"query","type":"string","required":false,"description":"Free text over headlines and summaries, e.g. \"robocall\", \"opioid settlement\", \"data breach\"."},{"name":"topic","type":"string","required":false,"description":"Topic category, e.g. \"consumer-protection\", \"antitrust\", \"cybersecurity-and-privacy\", \"public-health\", \"criminal-law\", \"opioids\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":221}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-07T08:42:15.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1b52c-342f-75fa-b2ae-7881576f614d","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-07","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a1b52c-342f-75fa-b2ae-7881576f614d"},{"id":"chg_01a1aae0-ab6e-7a7a-99d5-17823fd2b5bf","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a1aae0-ab6e-7a7a-99d5-17823fd2b5bf"},{"id":"chg_01a1a5b5-6ca2-7996-a227-7194bf9b22c7","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a1a5b5-6ca2-7996-a227-7194bf9b22c7"},{"id":"chg_01a1a5b5-6ca4-7179-9359-be06b3b8ffa9","kind":"score.total_changed","summary":"Trust score (66 → 81)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a1a5b5-6ca4-7179-9359-be06b3b8ffa9"},{"id":"chg_01a19f4e-151b-79a8-a19d-5ac28bf73c7f","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a19f4e-151b-79a8-a19d-5ac28bf73c7f"},{"id":"chg_01a19f4e-151c-7cf0-8782-a3ee0e7f40b2","kind":"score.total_changed","summary":"Trust score (79 → 66)","materiality":"functional","direction":"regression","scoreDelta":-13,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a19f4e-151c-7cf0-8782-a3ee0e7f40b2"},{"id":"chg_01a19f4e-151c-76cf-87ce-ab412cc69327","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a19f4e-151c-76cf-87ce-ab412cc69327"},{"id":"chg_01a19f4e-151c-70eb-acbc-7287e0116d61","kind":"check.reverified","summary":"Stability (unverified → 0.17)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a19f4e-151c-70eb-acbc-7287e0116d61"},{"id":"chg_01a19f4e-151a-787b-9667-a9e120b60cdf","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a19f4e-151a-787b-9667-a9e120b60cdf"},{"id":"chg_01a19b66-e896-7762-a9b8-6eaac6813e5b","kind":"check.unverifiable","summary":"Security disclosure (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a19b66-e896-7762-a9b8-6eaac6813e5b"},{"id":"chg_01a18678-df7f-7750-99b6-aa3e8343138e","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag#chg-chg_01a18678-df7f-7750-99b6-aa3e8343138e"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag","markdown":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-naag/pipeworx-mcp-naag.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-naag"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-naag"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-naag"},{"label":"Website","href":"https://pipeworx.io/packs/naag"}]}}