{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T02:47:33.501Z","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl.md","server":{"slug":"pipeworx-io-sec-xbrl","name":"Sec Xbrl","registryName":"io.github.pipeworx-io/sec-xbrl","description":"SEC XBRL MCP — wraps SEC EDGAR XBRL API (data.sec.gov)","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-sec-xbrl","type":"npm","identifier":"@pipeworx/mcp-sec-xbrl","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl","version":"0.2.1","transport":"stdio","scoredAt":"2026-11-06T00:03:59.884Z"},"score":{"total":84,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-06","total":84},{"date":"2026-11-05","total":84},{"date":"2026-11-04","total":83},{"date":"2026-11-03","total":83},{"date":"2026-11-02","total":82},{"date":"2026-11-01","total":82},{"date":"2026-10-31","total":82},{"date":"2026-10-30","total":81},{"date":"2026-10-29","total":81}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-sec-xbrl).","Clear OSI-approved license (MIT).","Actively maintained (last published 0 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-sec-xbrl"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"0"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":73,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1103 tokens (~137/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"137","items":"8","tools":"8","tokens":"1103","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":27,"verdict":"partial","reasons":["Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"8"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"8"}},{"code":"toolsafety.manipulation_clean","args":{"units":"9","judged":"9"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"sec-xbrl-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/sec-xbrl/mcp","withdrawn":false,"score":78,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/sec-xbrl-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/sec-xbrl-mcp.md"},{"slug":"pipeworx-mcp-sec-xbrl","type":"npm","identifier":"@pipeworx/mcp-sec-xbrl","withdrawn":false,"score":84,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-sec-xbrl"},{"label":"Version","value":"0.2.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"get_company_facts","title":null,"description":"List all XBRL taxonomies and concept tags filed by a company (CIK required). Returns entity name, taxonomy names (us-gaap, dei, etc.), concept count per taxonomy, and a sample of up to 20 tag names each. Use get_company_concept or get_company_financials to retrieve actual numeric values for a specific tag.","inputs":[{"name":"cik","type":"string","required":true,"description":"SEC Central Index Key (e.g., \"320193\" for Apple, \"789019\" for Microsoft)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":110},{"name":"get_company_concept","title":null,"description":"Get a specific financial metric for a company across all filings. Use this to track revenue, net income, or any XBRL tag over time. Example: get_company_concept(cik: \"320193\", taxonomy: \"us-gaap\", tag: \"Revenue\").","inputs":[{"name":"cik","type":"string","required":true,"description":"SEC Central Index Key (e.g., \"320193\" for Apple)"},{"name":"tag","type":"string","required":true,"description":"XBRL concept tag (e.g., \"Revenue\", \"NetIncomeLoss\", \"Assets\", \"EarningsPerShareBasic\")"},{"name":"taxonomy","type":"string","required":true,"description":"XBRL taxonomy: \"us-gaap\", \"ifrs-full\", \"dei\", or \"srt\""}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":148},{"name":"search_filings","title":null,"description":"Search recent SEC filings for a company by CIK. Optionally filter by filing type (10-K, 10-Q, 8-K, etc.). Returns filing dates, types, and accession numbers.","inputs":[{"name":"cik","type":"string","required":true,"description":"SEC Central Index Key (e.g., \"320193\" for Apple)"},{"name":"type","type":"string","required":false,"description":"Filing type filter (e.g., \"10-K\", \"10-Q\", \"8-K\", \"DEF 14A\")"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":102},{"name":"get_company_financials","title":null,"description":"High-level summary of a public US company's annual (10-K) financials: revenue, net income, total assets, cash, EPS, etc. Returns clean numerical values with the XBRL tag used and the period-end date. By default returns the most recent fiscal year; pass `fiscal_year_end` to get a specific year (e.g. \"2024-12-31\" for Tesla FY2024 or just \"2024\" to auto-match the year). Prefer this over get_company_facts/get_company_concept for any single-company financial snapshot question. Pass a CIK (e.g. \"320193\") or a ticker (e.g. \"AAPL\"; auto-resolves to CIK).","inputs":[{"name":"company","type":"string","required":true,"description":"CIK (e.g., \"320193\", \"0000320193\") OR ticker symbol (e.g., \"AAPL\", \"TSLA\", \"MSFT\"). Ticker is auto-resolved to CIK via SEC EDGAR."},{"name":"fiscal_year_end","type":"string","required":false,"description":"Optional. Pass a 4-digit fiscal year (\"2024\") to get values from any 10-K period ending in that calendar year, OR a specific period-end date (\"2024-12-31\"). Omit to get the most recent fiscal year."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":272},{"name":"get_liquidity_runway","title":null,"description":"Estimate a company’s mechanical liquidity runway from its latest SEC-tagged cash/current investments and trailing-twelve-month operating cash flow. This is a screening calculation—not management guidance—and excludes future financing, commitments, restricted access, working-capital timing, and forecast changes.","inputs":[{"name":"company","type":"string","required":true,"description":"Ticker, company name, or CIK."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":80},{"name":"get_dilution_profile","title":null,"description":"Summarize SEC-tagged common shares outstanding, approximate year-over-year share change, and reported equity issuance proceeds. Share-count dates need not equal quarter end, tags vary by filer, and this is not a fully diluted capitalization table.","inputs":[{"name":"company","type":"string","required":true,"description":"Ticker, company name, or CIK."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":74},{"name":"get_rnd_burn_profile","title":null,"description":"Calculate trailing-twelve-month SEC-tagged R&D expense and operating cash flow using annual plus current YTD minus prior-year comparable YTD. Returns the periods used and null when a defensible bridge cannot be built.","inputs":[{"name":"company","type":"string","required":true,"description":"Ticker, company name, or CIK."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":71},{"name":"get_capital_markets_filings","title":null,"description":"List recent SEC capital-markets filings for a company — shelf and IPO registrations (S-1, S-3, S-3ASR and the F- equivalents), 424 prospectuses, free-writing prospectuses, effectiveness notices and post-effective amendments. Answers \"has this company filed a shelf\", \"what has it registered recently\" and \"is there an active ATM programme on file\". A registration or prospectus filing is an event, so it does not prove securities were sold or quantify remaining shelf or ATM capacity, and an empty result covers only the years requested — a company may hold an effective shelf filed before that window.","inputs":[{"name":"company","type":"string","required":true,"description":"Ticker, company name, or CIK."},{"name":"limit","type":"number","required":false,"description":"1–100 (default 25)."},{"name":"years","type":"number","required":false,"description":"Look-back, 1–10 years (default 3)."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":190}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T00:03:59.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1a9db-9da2-787d-ac7a-d3f947fd258c","kind":"score.total_changed","summary":"Trust score (49 → 84)","materiality":"functional","direction":"improvement","scoreDelta":35,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a1a9db-9da2-787d-ac7a-d3f947fd258c"},{"id":"chg_01a1a9bf-e704-77f2-b3d2-e6f27a46f547","kind":"check.unverifiable","summary":"Tool coverage (100 → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a1a9bf-e704-77f2-b3d2-e6f27a46f547"},{"id":"chg_01a1a9bf-e705-7a37-aefc-6c58988f2568","kind":"check.appeared","summary":"First check of Schema quality (unverified)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a1a9bf-e705-7a37-aefc-6c58988f2568"},{"id":"chg_01a1a9bf-e706-76f1-8cae-359a97ec386e","kind":"package.version_changed","summary":"Package version (0.2.0 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a1a9bf-e706-76f1-8cae-359a97ec386e"},{"id":"chg_01a1a9bf-e707-7990-8fd3-24ae6a0fcc84","kind":"score.total_changed","summary":"Trust score (84 → 49)","materiality":"functional","direction":"regression","scoreDelta":-35,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a1a9bf-e707-7990-8fd3-24ae6a0fcc84"},{"id":"chg_01a1a9bf-e6f8-7b4c-8dbf-5098fbf79806","kind":"check.unverifiable","summary":"Stability (0.20 → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a1a9bf-e6f8-7b4c-8dbf-5098fbf79806"},{"id":"chg_01a1a9bf-e702-7717-8473-c87f268fc162","kind":"check.unverifiable","summary":"Capabilities (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a1a9bf-e702-7717-8473-c87f268fc162"},{"id":"chg_01a1a9bf-e700-7030-8a51-4878d86a7d45","kind":"check.unverifiable","summary":"Tool safety (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a1a9bf-e700-7030-8a51-4878d86a7d45"},{"id":"chg_01a1a904-b100-7e58-a5b7-77afa7041fed","kind":"score.total_changed","summary":"Trust score (83 → 84)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a1a904-b100-7e58-a5b7-77afa7041fed"},{"id":"chg_01a19eb8-06ed-7671-b240-a3c80c46fa2f","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a19eb8-06ed-7671-b240-a3c80c46fa2f"},{"id":"chg_01a18f42-fe0f-7c08-a952-6ef2284be7a4","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a18f42-fe0f-7c08-a952-6ef2284be7a4"},{"id":"chg_01a186b0-432e-704b-ac6b-d217845f5a0f","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a186b0-432e-704b-ac6b-d217845f5a0f"},{"id":"chg_01a1869d-1b72-7555-ae66-0a43735a9a97","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl#chg-chg_01a1869d-1b72-7555-ae66-0a43735a9a97"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl","markdown":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-sec-xbrl/pipeworx-mcp-sec-xbrl.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-sec-xbrl"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-sec-xbrl"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-sec-xbrl"},{"label":"Website","href":"https://pipeworx.io/packs/sec-xbrl"}]}}