{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "pipeworx-io-threatfox",
  "component": "threatfox-mcp",
  "generated_at": "2026-09-21T07:09:50.877Z",
  "tracking_since": "2026-07-26",
  "counts": {
    "critical": 6,
    "security": 94,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a09e16-ec0a-75b6-8da9-9611af47b6ec",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.stable",
      "to_code": "stability.churn",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "30",
        "added": "0",
        "breaks": "0",
        "removed": "35",
        "auth_transport": "0"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 04:04:57.303487+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Stability (pass → fail)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a09e16-ec0a-75b6-8da9-9611af47b6ec"
    },
    {
      "id": "chg_01a09e16-ec0c-73b4-a849-1c0fae7cf622",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive",
      "to_code": "auth.none_unlisted",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 04:04:57.303487+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a09e16-ec0c-73b4-a849-1c0fae7cf622"
    },
    {
      "id": "chg_01a09e16-ec0c-7d12-96a5-eeefc61cade5",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 04:04:57.303487+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a09e16-ec0c-7d12-96a5-eeefc61cade5"
    },
    {
      "id": "chg_01a098f0-2abf-768b-ba03-90f40df13a8c",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.none_destructive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "forget"
      },
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 04:04:31.434033+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Authorization (unverified → fail)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a098f0-2abf-768b-ba03-90f40df13a8c"
    },
    {
      "id": "chg_01a098f0-2ac0-767d-b345-0369d5e3585d",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.unreachable",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 04:04:31.434033+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a098f0-2ac0-767d-b345-0369d5e3585d"
    },
    {
      "id": "chg_01a098f0-2ac0-7ccd-a861-3a4f72cee95b",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.churn",
      "to_code": "stability.stable",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 04:04:31.434033+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Stability (fail → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a098f0-2ac0-7ccd-a861-3a4f72cee95b"
    },
    {
      "id": "chg_01a093ca-5445-7e7a-b717-d8e9261d0594",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.stable",
      "to_code": "stability.churn",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "30",
        "added": "0",
        "breaks": "0",
        "removed": "35",
        "auth_transport": "0"
      },
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 04:05:05.599666+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Stability (pass → fail)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a093ca-5445-7e7a-b717-d8e9261d0594"
    },
    {
      "id": "chg_01a093ca-5447-751b-af0b-c1571237498f",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive",
      "to_code": "auth.none_unlisted",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 04:05:05.599666+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a093ca-5447-751b-af0b-c1571237498f"
    },
    {
      "id": "chg_01a093ca-5447-7c7a-bd07-9c9ab2e7b782",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 04:05:05.599666+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a093ca-5447-7c7a-bd07-9c9ab2e7b782"
    },
    {
      "id": "chg_01a08ea4-2a90-7b17-ac50-969d37424ead",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_destructive",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "forget"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 04:05:18.467996+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Authorization (pass → fail)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08ea4-2a90-7b17-ac50-969d37424ead"
    },
    {
      "id": "chg_01a08ea4-2a92-7ca2-b182-ba3182a9cd13",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 04:05:18.467996+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08ea4-2a92-7ca2-b182-ba3182a9cd13"
    },
    {
      "id": "chg_01a08ea4-2a93-72e7-861d-06e5de362ec6",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 04:05:18.467996+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08ea4-2a93-72e7-861d-06e5de362ec6"
    },
    {
      "id": "chg_01a08ea4-2a95-7ad4-9e59-2a185857ed20",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 04:05:18.467996+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08ea4-2a95-7ad4-9e59-2a185857ed20"
    },
    {
      "id": "chg_01a08ea4-2a96-707e-bc9a-dff1ebbc2e0a",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 04:05:18.467996+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08ea4-2a96-707e-bc9a-dff1ebbc2e0a"
    },
    {
      "id": "chg_01a08ea4-2a96-7693-9de9-fd763d0f8935",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 04:05:18.467996+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08ea4-2a96-7693-9de9-fd763d0f8935"
    },
    {
      "id": "chg_01a0897e-5a1c-7532-ac33-214e6038c3fa",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 04:05:54.227225+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0897e-5a1c-7532-ac33-214e6038c3fa"
    },
    {
      "id": "chg_01a0897e-5a1d-76c7-93f4-661deeeacfa6",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 04:05:54.227225+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0897e-5a1d-76c7-93f4-661deeeacfa6"
    },
    {
      "id": "chg_01a0897e-5a1d-7af4-a05e-0751cb6d5128",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 04:05:54.227225+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0897e-5a1d-7af4-a05e-0751cb6d5128"
    },
    {
      "id": "chg_01a0897e-5a1d-7f1a-a839-30163ac0b1e6",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 04:05:54.227225+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0897e-5a1d-7f1a-a839-30163ac0b1e6"
    },
    {
      "id": "chg_01a0897e-5a1e-73b6-94d4-c25bb04e93dc",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 04:05:54.227225+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0897e-5a1e-73b6-94d4-c25bb04e93dc"
    },
    {
      "id": "chg_01a08458-c52c-7cfc-a841-e26d83b9ad04",
      "kind": "check.verdict",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.unreachable",
      "to_code": "transport.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 04:06:45.176656+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Transport (fail → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08458-c52c-7cfc-a841-e26d83b9ad04"
    },
    {
      "id": "chg_01a08458-c52d-7c9b-8ea2-02fdbd356060",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 04:06:45.176656+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Authorization (unverified → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08458-c52d-7c9b-8ea2-02fdbd356060"
    },
    {
      "id": "chg_01a08458-c52e-7267-849f-be6bf8443ed9",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.unreachable",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 04:06:45.176656+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08458-c52e-7267-849f-be6bf8443ed9"
    },
    {
      "id": "chg_01a08458-c52e-7732-bb9e-e18f50049dc3",
      "kind": "check.reverified",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.insufficient_history",
      "to_code": "stability.stable",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 04:06:45.176656+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Stability (unverified → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08458-c52e-7732-bb9e-e18f50049dc3"
    },
    {
      "id": "chg_01a08458-c52f-7e8e-a432-4b81dabad0cf",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 04:06:45.176656+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08458-c52f-7e8e-a432-4b81dabad0cf"
    },
    {
      "id": "chg_01a08458-c530-7368-8e1f-b20a6b90fa35",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 04:06:45.176656+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08458-c530-7368-8e1f-b20a6b90fa35"
    },
    {
      "id": "chg_01a08458-c530-781e-8847-62565cef7d03",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 04:06:45.176656+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08458-c530-781e-8847-62565cef7d03"
    },
    {
      "id": "chg_01a08458-c530-7bb0-8d31-7de21b808d3f",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 04:06:45.176656+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08458-c530-7bb0-8d31-7de21b808d3f"
    },
    {
      "id": "chg_01a08458-c531-7023-a013-5d056a93f5f1",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 04:06:45.176656+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a08458-c531-7023-a013-5d056a93f5f1"
    },
    {
      "id": "chg_01a07f34-912c-77e9-84ed-a3e8584d7283",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.stable",
      "to_code": "stability.insufficient_history",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 04:09:06.470885+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Stability (pass → unverified)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a07f34-912c-77e9-84ed-a3e8584d7283"
    },
    {
      "id": "chg_01a07f34-912d-7bee-9702-b3244a96702d",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive",
      "to_code": "auth.none_unlisted",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 04:09:06.470885+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a07f34-912d-7bee-9702-b3244a96702d"
    },
    {
      "id": "chg_01a07f34-912e-7169-9df6-fb55f27f2cfb",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 04:09:06.470885+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a07f34-912e-7169-9df6-fb55f27f2cfb"
    },
    {
      "id": "chg_01a07f34-912f-73cf-a4a0-2a28dafba56d",
      "kind": "check.verdict",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.verified",
      "to_code": "transport.unreachable",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 04:09:06.470885+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Transport (pass → fail)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a07f34-912f-73cf-a4a0-2a28dafba56d"
    },
    {
      "id": "chg_01a07f34-9132-761c-aefc-bd67fddd31ec",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "unreachable",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "unreachable",
        "from": "verified"
      },
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 04:09:06.470885+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → unreachable)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a07f34-9132-761c-aefc-bd67fddd31ec"
    },
    {
      "id": "chg_01a07a0d-b6ff-70b8-948f-b1ae97898514",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.none_destructive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "forget"
      },
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 04:08:34.197583+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Authorization (unverified → fail)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a07a0d-b6ff-70b8-948f-b1ae97898514"
    },
    {
      "id": "chg_01a07a0d-b700-7013-b56e-b5394b7d1f6b",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.unreachable",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 04:08:34.197583+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a07a0d-b700-7013-b56e-b5394b7d1f6b"
    },
    {
      "id": "chg_01a07a0d-b700-73d3-b822-9e2379f27a87",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.churn",
      "to_code": "stability.stable",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 04:08:34.197583+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Stability (fail → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a07a0d-b700-73d3-b822-9e2379f27a87"
    },
    {
      "id": "chg_01a074e4-4380-7872-83ba-8f05b88c1f4d",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.stable",
      "to_code": "stability.churn",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "30",
        "added": "0",
        "breaks": "0",
        "removed": "35",
        "auth_transport": "0"
      },
      "occurred_on": "2026-09-06",
      "occurred_at": "2026-09-06 04:05:11.532368+00",
      "observed_since": "2026-09-05",
      "source": "scan",
      "summary": "Stability (pass → fail)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a074e4-4380-7872-83ba-8f05b88c1f4d"
    },
    {
      "id": "chg_01a074e4-4381-78d3-82e0-502e48befa07",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive",
      "to_code": "auth.none_unlisted",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-06",
      "occurred_at": "2026-09-06 04:05:11.532368+00",
      "observed_since": "2026-09-05",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a074e4-4381-78d3-82e0-502e48befa07"
    },
    {
      "id": "chg_01a074e4-4381-7e48-9a5b-788dfcb77698",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-06",
      "occurred_at": "2026-09-06 04:05:11.532368+00",
      "observed_since": "2026-09-05",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a074e4-4381-7e48-9a5b-788dfcb77698"
    },
    {
      "id": "chg_01a06fbe-3eff-7629-b545-845f1c2d7b92",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 04:05:33.903596+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06fbe-3eff-7629-b545-845f1c2d7b92"
    },
    {
      "id": "chg_01a06fbe-3f00-7b51-844f-f200feb8205d",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 04:05:33.903596+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06fbe-3f00-7b51-844f-f200feb8205d"
    },
    {
      "id": "chg_01a06fbe-3f01-71ef-95d0-413beb79ab1a",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 04:05:33.903596+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06fbe-3f01-71ef-95d0-413beb79ab1a"
    },
    {
      "id": "chg_01a06fbe-3f01-786d-8613-ec0290ac1f42",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 04:05:33.903596+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06fbe-3f01-786d-8613-ec0290ac1f42"
    },
    {
      "id": "chg_01a06fbe-3f01-7d91-8bfe-e131a508842d",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 04:05:33.903596+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06fbe-3f01-7d91-8bfe-e131a508842d"
    },
    {
      "id": "chg_01a06a97-de7e-799a-9346-6277c888183a",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 04:05:32.806995+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06a97-de7e-799a-9346-6277c888183a"
    },
    {
      "id": "chg_01a06a97-de7f-7683-b39b-db9841c4969e",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 04:05:32.806995+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06a97-de7f-7683-b39b-db9841c4969e"
    },
    {
      "id": "chg_01a06a97-de7f-7bd9-ab4e-a71e03a9e6d1",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 04:05:32.806995+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06a97-de7f-7bd9-ab4e-a71e03a9e6d1"
    },
    {
      "id": "chg_01a06a97-de80-70c0-a930-e86f998c7ee4",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 04:05:32.806995+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06a97-de80-70c0-a930-e86f998c7ee4"
    },
    {
      "id": "chg_01a06a97-de80-78ec-b9d4-95503b8ca49b",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "entity_profile",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "entity_profile"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 04:05:32.806995+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Tool “entity_profile” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06a97-de80-78ec-b9d4-95503b8ca49b"
    },
    {
      "id": "chg_01a06a97-de82-7dad-a7ba-1bf4f1ce60e7",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 04:05:32.806995+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06a97-de82-7dad-a7ba-1bf4f1ce60e7"
    },
    {
      "id": "chg_01a06571-a398-74d8-aa09-f8ebc2fb620d",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 04:05:41.195859+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06571-a398-74d8-aa09-f8ebc2fb620d"
    },
    {
      "id": "chg_01a06571-a395-71e8-a447-3fc27824ba1a",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_destructive",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "forget"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 04:05:41.195859+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Authorization (pass → fail)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06571-a395-71e8-a447-3fc27824ba1a"
    },
    {
      "id": "chg_01a06571-a398-7afd-bbbf-a5183422499f",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 04:05:41.195859+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06571-a398-7afd-bbbf-a5183422499f"
    },
    {
      "id": "chg_01a06571-a399-7373-a29f-c315cc61611a",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 04:05:41.195859+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06571-a399-7373-a29f-c315cc61611a"
    },
    {
      "id": "chg_01a06571-a39a-7d3c-ab72-b22e23ef1d6f",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 04:05:41.195859+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06571-a39a-7d3c-ab72-b22e23ef1d6f"
    },
    {
      "id": "chg_01a06571-a39b-72fd-b92e-9f2da813c007",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "polymarket_kalshi_spread",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "polymarket_kalshi_spread"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 04:05:41.195859+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Tool “polymarket_kalshi_spread” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06571-a39b-72fd-b92e-9f2da813c007"
    },
    {
      "id": "chg_01a06571-a39b-782a-8904-32b7df6210b0",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 04:05:41.195859+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a06571-a39b-782a-8904-32b7df6210b0"
    },
    {
      "id": "chg_01a0604a-c0db-731c-86c5-b45cb0e57c41",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 04:05:06.665801+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0604a-c0db-731c-86c5-b45cb0e57c41"
    },
    {
      "id": "chg_01a0604a-c0dc-7ca7-946e-8fba58c30b1e",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 04:05:06.665801+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0604a-c0dc-7ca7-946e-8fba58c30b1e"
    },
    {
      "id": "chg_01a0604a-c0dd-7a2f-aa69-da8744891faf",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 04:05:06.665801+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0604a-c0dd-7a2f-aa69-da8744891faf"
    },
    {
      "id": "chg_01a0604a-c0de-7311-a882-0ccc7d5e861c",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 04:05:06.665801+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0604a-c0de-7311-a882-0ccc7d5e861c"
    },
    {
      "id": "chg_01a0604a-c0de-7c66-bc7a-104a95caff4f",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "resolve_entity",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "resolve_entity"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 04:05:06.665801+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Tool “resolve_entity” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0604a-c0de-7c66-bc7a-104a95caff4f"
    },
    {
      "id": "chg_01a0604a-c0df-7a09-bf22-90ceebea99cf",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 04:05:06.665801+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0604a-c0df-7a09-bf22-90ceebea99cf"
    },
    {
      "id": "chg_01a05b24-5b8a-732a-bb89-a44b1194f836",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 04:05:04.44374+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Authorization (fail → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a05b24-5b8a-732a-bb89-a44b1194f836"
    },
    {
      "id": "chg_01a05b24-5b8c-707f-9dd1-03182595c79a",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 04:05:04.44374+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a05b24-5b8c-707f-9dd1-03182595c79a"
    },
    {
      "id": "chg_01a05b24-5b8c-7c28-86d1-bf611247d32f",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 04:05:04.44374+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a05b24-5b8c-7c28-86d1-bf611247d32f"
    },
    {
      "id": "chg_01a05b24-5b8d-757c-878c-8b7820e8b806",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 04:05:04.44374+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a05b24-5b8d-757c-878c-8b7820e8b806"
    },
    {
      "id": "chg_01a05b24-5b8d-7d7a-a60b-52c386a7f66c",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 04:05:04.44374+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a05b24-5b8d-7d7a-a60b-52c386a7f66c"
    },
    {
      "id": "chg_01a05b24-5b8e-7707-9454-9fd45a416e11",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 04:05:04.44374+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a05b24-5b8e-7707-9454-9fd45a416e11"
    },
    {
      "id": "chg_01a055fd-e27c-7acb-a8c1-07043a2c12eb",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_destructive",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "forget"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 04:04:56.951305+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Authorization (pass → fail)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a055fd-e27c-7acb-a8c1-07043a2c12eb"
    },
    {
      "id": "chg_01a055fd-e27d-7cd4-847d-6d012e586657",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 04:04:56.951305+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a055fd-e27d-7cd4-847d-6d012e586657"
    },
    {
      "id": "chg_01a055fd-e27e-74bb-9a0b-56db3ed1e329",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 04:04:56.951305+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a055fd-e27e-74bb-9a0b-56db3ed1e329"
    },
    {
      "id": "chg_01a055fd-e27e-7a5e-a730-c64c2ec59da6",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 04:04:56.951305+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a055fd-e27e-7a5e-a730-c64c2ec59da6"
    },
    {
      "id": "chg_01a055fd-e27f-7006-9a47-75be7fc4a318",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 04:04:56.951305+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a055fd-e27f-7006-9a47-75be7fc4a318"
    },
    {
      "id": "chg_01a055fd-e27f-75f1-9fa8-42d159d89fba",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "polymarket_kalshi_spread",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "polymarket_kalshi_spread"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 04:04:56.951305+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Tool “polymarket_kalshi_spread” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a055fd-e27f-75f1-9fa8-42d159d89fba"
    },
    {
      "id": "chg_01a055fd-e27f-7b8e-9d9c-e2cd0a4194ac",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 04:04:56.951305+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a055fd-e27f-7b8e-9d9c-e2cd0a4194ac"
    },
    {
      "id": "chg_01a050d7-ad7b-74aa-a56d-44adf0bed5b3",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_destructive",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 04:05:06.97512+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Authorization (fail → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a050d7-ad7b-74aa-a56d-44adf0bed5b3"
    },
    {
      "id": "chg_01a050d7-ad7c-7157-89eb-d9aeb32f819a",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 04:05:06.97512+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a050d7-ad7c-7157-89eb-d9aeb32f819a"
    },
    {
      "id": "chg_01a050d7-ad7c-779e-a18d-35174f2a3be3",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 04:05:06.97512+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a050d7-ad7c-779e-a18d-35174f2a3be3"
    },
    {
      "id": "chg_01a050d7-ad7c-7c24-bd1d-583ebc464d4f",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 04:05:06.97512+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a050d7-ad7c-7c24-bd1d-583ebc464d4f"
    },
    {
      "id": "chg_01a050d7-ad7d-719c-9f6c-c64a143a8827",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 04:05:06.97512+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a050d7-ad7d-719c-9f6c-c64a143a8827"
    },
    {
      "id": "chg_01a050d7-ad7d-76d7-8d3e-9f7788087a77",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 04:05:06.97512+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a050d7-ad7d-76d7-8d3e-9f7788087a77"
    },
    {
      "id": "chg_01a04bb1-4a59-7574-9d41-1acdbced6813",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.none_destructive",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "forget"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 04:05:05.098773+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Authorization (pass → fail)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04bb1-4a59-7574-9d41-1acdbced6813"
    },
    {
      "id": "chg_01a04bb1-4a5a-7759-b523-062a0932cd87",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 04:05:05.098773+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04bb1-4a5a-7759-b523-062a0932cd87"
    },
    {
      "id": "chg_01a04bb1-4a5a-7cf6-bb89-097dfb2a30bc",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 04:05:05.098773+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04bb1-4a5a-7cf6-bb89-097dfb2a30bc"
    },
    {
      "id": "chg_01a04bb1-4a5b-729f-94b2-9865ff711082",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 04:05:05.098773+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04bb1-4a5b-729f-94b2-9865ff711082"
    },
    {
      "id": "chg_01a04bb1-4a5b-77fd-aa1f-df0fcf05ec93",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 04:05:05.098773+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04bb1-4a5b-77fd-aa1f-df0fcf05ec93"
    },
    {
      "id": "chg_01a04bb1-4a5b-7d2e-b12d-ce715470cd5a",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 04:05:05.098773+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04bb1-4a5b-7d2e-b12d-ce715470cd5a"
    },
    {
      "id": "chg_01a04167-146f-7baa-a5e4-3365bf8ad52a",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 04:07:49.571163+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04167-146f-7baa-a5e4-3365bf8ad52a"
    },
    {
      "id": "chg_01a04167-1470-7c38-bfd5-e002d2c532ac",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 04:07:49.571163+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04167-1470-7c38-bfd5-e002d2c532ac"
    },
    {
      "id": "chg_01a04167-1471-7199-a3ba-ebe04129429b",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 04:07:49.571163+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04167-1471-7199-a3ba-ebe04129429b"
    },
    {
      "id": "chg_01a04167-1471-773e-a878-280e5a550d52",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 04:07:49.571163+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04167-1471-773e-a878-280e5a550d52"
    },
    {
      "id": "chg_01a04167-1471-7bc2-a8c9-b3c1595546f6",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 04:07:49.571163+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a04167-1471-7bc2-a8c9-b3c1595546f6"
    },
    {
      "id": "chg_01a0371a-65cc-7274-aa93-8348e8aa048f",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-25",
      "occurred_at": "2026-08-25 04:07:51.924252+00",
      "observed_since": "2026-08-24",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a0371a-65cc-7274-aa93-8348e8aa048f"
    },
    {
      "id": "chg_01a031f3-e515-79af-82e6-0c15aecbcb73",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx"
      },
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 04:07:42.517804+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Tool “ask_pipeworx” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a031f3-e515-79af-82e6-0c15aecbcb73"
    },
    {
      "id": "chg_01a031f3-e516-79e2-bf36-43a3dded0f04",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_beta",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_beta"
      },
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 04:07:42.517804+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_beta” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a031f3-e516-79e2-bf36-43a3dded0f04"
    },
    {
      "id": "chg_01a031f3-e516-7eac-94c0-69761d70b763",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "ask_pipeworx_grounded",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "ask_pipeworx_grounded"
      },
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 04:07:42.517804+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Tool “ask_pipeworx_grounded” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a031f3-e516-7eac-94c0-69761d70b763"
    },
    {
      "id": "chg_01a031f3-e517-76c5-a0c9-b7db9fcf1656",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "deep_research",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "deep_research"
      },
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 04:07:42.517804+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Tool “deep_research” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a031f3-e517-76c5-a0c9-b7db9fcf1656"
    },
    {
      "id": "chg_01a031f3-e518-7000-b90f-955b3f200871",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 04:07:42.517804+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/pipeworx-io-threatfox/threatfox-mcp#chg-chg_01a031f3-e518-7000-b90f-955b3f200871"
    }
  ],
  "days": [
    {
      "date": "2026-09-21",
      "total": 42,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-20",
      "total": 42,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-19",
      "total": 42,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-18",
      "total": 42,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-17",
      "total": 42,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-16",
      "total": 42,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-15",
      "total": 42,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-14",
      "total": 42,
      "delta": -30,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    }
  ]
}