{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:40:24.668Z","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans.md","server":{"slug":"pipeworx-io-sba-loans","name":"Sba Loans","registryName":"io.github.pipeworx-io/sba-loans","description":"SBA loans MCP — U.S. Small Business Administration 7(a) / 504 FOIA loan data (fleet #1921, phase…","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-sba-loans","type":"npm","identifier":"@pipeworx/mcp-sba-loans","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-05T02:45:43.268Z"},"score":{"total":66,"tier":"medium","status":"scored","weekDelta":-12,"history":[{"date":"2026-11-05","total":66},{"date":"2026-11-04","total":81},{"date":"2026-11-03","total":80},{"date":"2026-11-02","total":80},{"date":"2026-11-01","total":79},{"date":"2026-10-31","total":79},{"date":"2026-10-30","total":78},{"date":"2026-10-29","total":78}]},"categories":[{"name":"Supply Chain Security","score":50,"verdict":"unverified","reasons":["Malware scan not yet available for this package.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"vendor_no_verdict"}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-sba-loans).","Clear OSI-approved license (MIT).","Actively maintained (last published 0 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-sba-loans"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"0"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":67,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1228 tokens (~204/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"204","items":"6","tools":"6","tokens":"1228","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":23,"verdict":"partial","reasons":["Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"7"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":75,"verdict":"fail","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; \"sba_charge_off_aggregate\" implies \"charge\" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.","An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_undeclared","args":{"pct":"0","tool":"sba_charge_off_aggregate","verb":"charge","declared":"none","annotated":"0","destructive":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"7","judged":"7"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["Malware scan not yet available for this package."],"malware":[],"components":[{"slug":"sba-loans-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/sba-loans/mcp","withdrawn":false,"score":72,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/sba-loans-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-sba-loans/sba-loans-mcp.md"},{"slug":"pipeworx-mcp-sba-loans","type":"npm","identifier":"@pipeworx/mcp-sba-loans","withdrawn":false,"score":66,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-sba-loans"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"sba_loan_lookup","title":null,"description":"Look up a small business's SBA 7(a) or 504 loan(s) by borrower name. Returns individual loan records: amounts, lender, approval date, status (P I F / PIF = paid in full, CHGOFF = charged off, CANCLD = cancelled, EXEMPT), and — for charged-off loans — the charge-off amount. Street addresses are never stored or returned (city/state/ZIP only). Scope to a state to disambiguate common business names.","inputs":[{"name":"borrower_name","type":"string","required":true,"description":"Business or sole-proprietor name to search (substring match), e.g. \"Ameripro Construction\"."},{"name":"limit","type":"number","required":false,"description":"Max loans to return (1-100, default 20)."},{"name":"program","type":"string","required":false,"description":"Optional: \"7A\" or \"504\". Omit to search both."},{"name":"state","type":"string","required":false,"description":"Two-letter state code to scope the search, e.g. \"PA\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":202},{"name":"sba_largest_loans","title":null,"description":"Largest SBA 7(a)/504 loans, ranked by gross approval amount, filterable by program, NAICS code, borrower state, and/or lender name. Answers \"what are the biggest SBA loans in NAICS X\" or \"largest SBA loans in Texas\".","inputs":[{"name":"lender_name","type":"string","required":false,"description":"Optional lender name substring, e.g. \"Wells Fargo\"."},{"name":"limit","type":"number","required":false,"description":"Max loans to return (1-100, default 25)."},{"name":"naics_code","type":"string","required":false,"description":"Optional 6-digit NAICS code, e.g. \"722511\" (restaurants)."},{"name":"program","type":"string","required":false,"description":"Optional: \"7A\" or \"504\"."},{"name":"state","type":"string","required":false,"description":"Optional 2-letter borrower state code."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":160},{"name":"sba_lender_league_table","title":null,"description":"Lender league table — ranks lenders by SBA loan count and total dollar volume. For 7(a) loans \"lender\" is the originating bank; for 504 loans it is the CDC (Certified Development Company) that books the debenture. Answers \"which bank does the most SBA lending in NAICS Y\" or \"top SBA 504 lenders in California\".","inputs":[{"name":"limit","type":"number","required":false,"description":"Max lenders to return (1-100, default 25)."},{"name":"naics_code","type":"string","required":false,"description":"Optional 6-digit NAICS code."},{"name":"program","type":"string","required":false,"description":"Optional: \"7A\" or \"504\". Omit to combine both (note: 7(a) banks and 504 CDCs are different kinds of entity, so combining programs mixes those populations)."},{"name":"state","type":"string","required":false,"description":"Optional 2-letter borrower state code."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":183},{"name":"sba_charge_off_aggregate","title":null,"description":"Charge-off rate and dollar amount, aggregated by NAICS code, state, lender, or program. Answers \"which industries have the highest SBA loan charge-off rate\" or \"charge-off amount by state\". charge_off_rate is charged-off loan COUNT divided by total loan count in that group (not dollar-weighted).","inputs":[{"name":"group_by","type":"string","required":false,"description":"One of: naics | state | lender | program (default naics)."},{"name":"limit","type":"number","required":false,"description":"Max groups to return (1-100, default 25)."},{"name":"naics_code","type":"string","required":false,"description":"Optional 6-digit NAICS code to scope before grouping."},{"name":"program","type":"string","required":false,"description":"Optional: \"7A\" or \"504\" to scope before grouping."},{"name":"state","type":"string","required":false,"description":"Optional 2-letter borrower state code to scope before grouping."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":176},{"name":"ppp_loan_lookup","title":null,"description":"Look up a business's Paycheck Protection Program (PPP) loan(s) by borrower name. Returns each loan's approved amount, jobs_reported (the headcount the business stated on its 2020-21 application), NAICS code, servicing and originating lender, approval date, first or second draw, loan status, and forgiveness amount and date. Names match from their first word (\"Sumter Coatings\" finds \"SUMTER COATINGS, INC.\"); add zip to also match a word inside the name. Business borrowers only: sole proprietors, self-employed individuals and borrowers named as a person are excluded, and no street address is stored. Source: SBA PPP FOIA data, as of 2024-09-30.","inputs":[{"name":"borrower_name","type":"string","required":true,"description":"Business name, from its first word, e.g. \"Sumter Coatings\". Suffixes like Inc/LLC and punctuation are ignored."},{"name":"limit","type":"number","required":false,"description":"Max loans to return (1-100, default 20)."},{"name":"state","type":"string","required":false,"description":"Optional 2-letter borrower state code to narrow common names, e.g. \"SC\"."},{"name":"zip","type":"string","required":false,"description":"Optional 5-digit borrower ZIP. With it, a word inside the name also matches."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":264},{"name":"ppp_aggregate","title":null,"description":"Paycheck Protection Program (PPP) totals grouped by NAICS industry code, borrower state, or servicing lender: loan count, total approved, loans and dollars forgiven, forgiveness rate, and total jobs reported. Optionally scoped to one borrower state. Answers \"which industries got the most PPP money in Texas\" or \"which lenders serviced the most PPP dollars\". Business borrowers only (sole proprietors and individuals excluded). Source: SBA PPP FOIA data, as of 2024-09-30.","inputs":[{"name":"group_by","type":"string","required":false,"description":"naics | state | lender (default naics)."},{"name":"limit","type":"number","required":false,"description":"Max groups to return (1-100, default 25)."},{"name":"order_by","type":"string","required":false,"description":"Rank by total approved amount (default), loan count, or jobs reported."},{"name":"state","type":"string","required":false,"description":"Optional 2-letter borrower state code to scope before grouping."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":187}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T02:45:43.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1a999-1106-79f3-92cf-f1dbc2ded9bc","kind":"score.total_changed","summary":"Trust score (34 → 66)","materiality":"functional","direction":"improvement","scoreDelta":32,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1a999-1106-79f3-92cf-f1dbc2ded9bc"},{"id":"chg_01a1a98c-d036-7c0a-8649-8dcfcf2a45ff","kind":"check.unverifiable","summary":"Stability (0.20 → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1a98c-d036-7c0a-8649-8dcfcf2a45ff"},{"id":"chg_01a1a98c-d037-7b30-9813-44072546bf2b","kind":"check.unverifiable","summary":"Capabilities (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1a98c-d037-7b30-9813-44072546bf2b"},{"id":"chg_01a1a98c-d035-708b-b0ac-c60aa7f4f6e2","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1a98c-d035-708b-b0ac-c60aa7f4f6e2"},{"id":"chg_01a1a98c-d037-7515-b768-bb2368fda647","kind":"check.unverifiable","summary":"Tool safety (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1a98c-d037-7515-b768-bb2368fda647"},{"id":"chg_01a1a98c-d038-711e-84ed-5d5e2351efa4","kind":"check.unverifiable","summary":"Tool coverage (100 → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1a98c-d038-711e-84ed-5d5e2351efa4"},{"id":"chg_01a1a98c-d038-79a7-bc6e-68deca445559","kind":"check.appeared","summary":"First check of Schema quality (unverified)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1a98c-d038-79a7-bc6e-68deca445559"},{"id":"chg_01a1a98c-d039-703d-9669-6e8206673f0c","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1a98c-d039-703d-9669-6e8206673f0c"},{"id":"chg_01a1a98c-d039-76b6-bfa8-e275dcb71d6c","kind":"score.total_changed","summary":"Trust score (81 → 34)","materiality":"functional","direction":"regression","scoreDelta":-47,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1a98c-d039-76b6-bfa8-e275dcb71d6c"},{"id":"chg_01a1a467-0427-7ec1-8b56-06ed835983ee","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1a467-0427-7ec1-8b56-06ed835983ee"},{"id":"chg_01a19a19-01b5-7864-a71d-c4da1dbf4f87","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a19a19-01b5-7864-a71d-c4da1dbf4f87"},{"id":"chg_01a18fcb-a4fc-7020-a6cc-224642b1067f","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a18fcb-a4fc-7020-a6cc-224642b1067f"},{"id":"chg_01a18aa4-ff9d-705e-99cf-7f8ccc64627c","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a18aa4-ff9d-705e-99cf-7f8ccc64627c"},{"id":"chg_01a18712-6783-74c8-a610-a04ba5cd9d21","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a18712-6783-74c8-a610-a04ba5cd9d21"},{"id":"chg_01a1869b-2a40-7020-8969-cff3c3241c60","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans#chg-chg_01a1869b-2a40-7020-8969-cff3c3241c60"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans","markdown":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-sba-loans/pipeworx-mcp-sba-loans.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-sba-loans"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-sba-loans"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-sba-loans"},{"label":"Website","href":"https://pipeworx.io/packs/sba-loans"}]}}