{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T20:27:30.997Z","url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm.md","server":{"slug":"pipeworx-io-perm","name":"Perm","registryName":"io.github.pipeworx-io/perm","description":"PERM MCP — US green-card labor certification data from DOL PERM (Program Electronic Review…","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-perm","type":"npm","identifier":"@pipeworx/mcp-perm","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-05T07:33:27.725Z"},"score":{"total":82,"tier":"high trust","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":82},{"date":"2026-11-04","total":67},{"date":"2026-11-03","total":79},{"date":"2026-11-02","total":79},{"date":"2026-11-01","total":79},{"date":"2026-10-31","total":79},{"date":"2026-10-30","total":79}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-perm).","Clear OSI-approved license (MIT).","Actively maintained (last published 1 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-perm"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"1"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":66,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 688 tokens (~229/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"229","items":"3","tools":"3","tokens":"688","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":20,"verdict":"partial","reasons":["Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"6"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"perm-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/perm/mcp","withdrawn":false,"score":77,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-perm/perm-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-perm/perm-mcp.md"},{"slug":"pipeworx-mcp-perm","type":"npm","identifier":"@pipeworx/mcp-perm","withdrawn":false,"score":82,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-perm"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"perm_employer_certifications","title":null,"description":"Check whether a US employer sponsors green cards (PERM labor certification) and profile their sponsorship, from DOL PERM (Form ETA-9089) disclosures. Answers 'does company X sponsor green cards' for recruiting and candidate advising. Returns the number of certified PERM filings, offered-wage range (min / median / max), the top sponsored job titles, and top worksite locations for the employer. Filter by year (DOL federal fiscal year, Oct-Sep); defaults to the latest full year. Employer name is matched as the disclosed legal name (e.g. 'Microsoft Corporation', 'Amazon.com Services LLC').","inputs":[{"name":"employer","type":"string","required":true,"description":"Employer name to look up, e.g. \"Microsoft\", \"Oracle\", \"Amazon\"."},{"name":"year","type":"number|string","required":false,"description":"Filing year (e.g. 2025). Defaults to the most recent full year this pack has data for. Interpreted as DOL federal fiscal year (Oct-Sep)."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":206},{"name":"perm_salary","title":null,"description":"Look up real green-card (PERM) offered wages for a job title from DOL PERM disclosures — a market wage benchmark backed by actual certified filings (not estimates). Answers 'what do green-card-sponsored software engineers earn at company X / in city Y'. Filter by job title, and optionally by employer, city, and year. Returns wage statistics (count, min / median / average / max) plus a sample of individual records (employer, title, wage, location, dates).","inputs":[{"name":"city","type":"string","required":false,"description":"Optional worksite city, e.g. \"SEATTLE\" or \"AUSTIN\"."},{"name":"employer","type":"string","required":false,"description":"Optional employer name to scope to, e.g. \"Meta\"."},{"name":"job_title","type":"string","required":true,"description":"Job title to search, e.g. \"software engineer\", \"data scientist\". Matched as a substring of the disclosed title."},{"name":"limit","type":"number|string","required":false,"description":"Max sample records to return (default 15, max 50)."},{"name":"year","type":"number|string","required":false,"description":"Filing year (e.g. 2025). Defaults to the most recent full year."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":230},{"name":"perm_top_sponsors","title":null,"description":"Find which US employers sponsor the most green cards (PERM labor certifications) for a given job title (optionally in a specific city) — a candidate-sourcing / target-account signal for recruiting. Answers 'which companies sponsor the most data engineers for green cards' or 'top PERM sponsors for nurses'. Returns employers ranked by certified PERM filings for the role, each with their filing count and median offered wage. Backed by real DOL PERM disclosures.","inputs":[{"name":"city","type":"string","required":false,"description":"Optional worksite city to scope to, e.g. \"AUSTIN\" or \"NEW YORK\"."},{"name":"job_title","type":"string","required":true,"description":"Job title to rank sponsors for, e.g. \"data engineer\", \"physical therapist\"."},{"name":"limit","type":"number|string","required":false,"description":"Max employers to return (default 15, max 50)."},{"name":"year","type":"number|string","required":false,"description":"Filing year (e.g. 2025). Defaults to the most recent full year."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":201}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T07:33:27.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-30","recent":[{"id":"chg_01a1aaa0-803e-73f7-8e4b-d28c309a4430","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm#chg-chg_01a1aaa0-803e-73f7-8e4b-d28c309a4430"},{"id":"chg_01a1aaa0-803e-7a10-ac28-8a9db23dcf4a","kind":"score.total_changed","summary":"Trust score (67 → 82)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm#chg-chg_01a1aaa0-803e-7a10-ac28-8a9db23dcf4a"},{"id":"chg_01a1a474-46c0-7cf3-9c62-d4749cb760f7","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm#chg-chg_01a1a474-46c0-7cf3-9c62-d4749cb760f7"},{"id":"chg_01a1a474-46c5-759e-8fe5-3f481f718db8","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm#chg-chg_01a1a474-46c5-759e-8fe5-3f481f718db8"},{"id":"chg_01a1a474-46c7-789b-8c20-bc14925b9d7b","kind":"score.total_changed","summary":"Trust score (79 → 67)","materiality":"functional","direction":"regression","scoreDelta":-12,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm#chg-chg_01a1a474-46c7-789b-8c20-bc14925b9d7b"},{"id":"chg_01a1a474-46c4-7619-b4e5-96127b6f47d7","kind":"check.reverified","summary":"Stability (unverified → 0.17)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm#chg-chg_01a1a474-46c4-7619-b4e5-96127b6f47d7"},{"id":"chg_01a190cd-e732-7ae1-a9db-5794ae6d0e45","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm#chg-chg_01a190cd-e732-7ae1-a9db-5794ae6d0e45"},{"id":"chg_01a18c01-8c4c-7a9e-a465-acfa4d293293","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm#chg-chg_01a18c01-8c4c-7a9e-a465-acfa4d293293"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm","markdown":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-perm/pipeworx-mcp-perm.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-perm"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-perm"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-perm"},{"label":"Website","href":"https://pipeworx.io/packs/perm"}]}}