{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T20:30:41.496Z","url":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts.md","server":{"slug":"pipeworx-io-uk-contracts","name":"Uk Contracts","registryName":"io.github.pipeworx-io/uk-contracts","description":"UK Contracts Finder MCP.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"pipeworx-mcp-uk-contracts","type":"npm","identifier":"@pipeworx/mcp-uk-contracts","withdrawn":false,"url":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts","version":"0.2.0","transport":"stdio","scoredAt":"2026-11-05T04:03:43.807Z"},"score":{"total":82,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":82},{"date":"2026-11-04","total":82},{"date":"2026-11-03","total":81},{"date":"2026-11-02","total":81},{"date":"2026-11-01","total":80},{"date":"2026-10-31","total":80},{"date":"2026-10-30","total":79},{"date":"2026-10-29","total":79}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-uk-contracts).","Clear OSI-approved license (MIT).","Actively maintained (last published 6 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"pipeworx-io/mcp-uk-contracts"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"6"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":63,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1381 tokens (~276/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"276","items":"5","tools":"5","tokens":"1381","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":23,"verdict":"partial","reasons":["Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"7"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"5"}},{"code":"toolsafety.manipulation_clean","args":{"units":"6","judged":"6"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"uk-contracts-mcp","type":"remote","identifier":"https://gateway.pipeworx.io/uk-contracts/mcp","withdrawn":false,"score":77,"current":false,"url":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/uk-contracts-mcp","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/uk-contracts-mcp.md"},{"slug":"pipeworx-mcp-uk-contracts","type":"npm","identifier":"@pipeworx/mcp-uk-contracts","withdrawn":false,"score":82,"current":true,"url":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts","markdownUrl":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@pipeworx/mcp-uk-contracts"},{"label":"Version","value":"0.2.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"search_notices","title":null,"description":"Full-text search of UK government procurement from Contracts Finder (Cabinet Office) — what the public sector bought, who supplied it, and for how much, plus open opportunities still out to tender. Covers NHS trusts, councils, police forces, universities and central government departments. Search by keyword (\"MRI scanner\", \"agency nursing\", \"school catering\", \"cloud hosting\") across notice title, description and awarded supplier, and narrow by publication date. Returns awarded contracts with supplier name and contract value by default, because a question about \"contracts\" usually means what was actually awarded. Keyless. The UK complement to EU tenders.","inputs":[{"name":"keyword","type":"string","required":false,"description":"Free-text search over notice title, description and awarded supplier name, e.g. \"MRI\", \"magnetic resonance imaging\", \"agency nursing\". Server-side and properly indexed. Omit to browse the newest noti…"},{"name":"limit","type":"number","required":false,"description":"Max notices to return, 1–100 (default 20). `total_matches` reports the full hit count regardless."},{"name":"notice_type","type":"string","required":false,"description":"Optional notice type. \"Contract\" is a real procurement; \"PreProcurement\" is market engagement; \"Pipeline\"/\"Planning\"/\"Future\" are intentions to buy later."},{"name":"published_from","type":"string","required":false,"description":"Optional ISO date (YYYY-MM-DD) lower bound on publication date, e.g. \"2025-01-01\"."},{"name":"published_to","type":"string","required":false,"description":"Optional ISO date (YYYY-MM-DD) upper bound on publication date, e.g. \"2026-08-01\"."},{"name":"status","type":"string","required":false,"description":"Which notices: \"awarded\" (contracts actually awarded, with supplier and value — the DEFAULT, and what a question about \"contracts\" nearly always means), \"open\" (opportunities still accepting bids), \"…"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":444},{"name":"get_notice","title":null,"description":"Get the full detail for a single UK Contracts Finder notice by the `id` returned by search_notices or recent_notices. Returns the complete (untruncated) description, buyer, contract value, awarded supplier, CPV classification, region, tender period and contact where published. Accepts either id form — search_notices returns a bare GUID and recent_notices an OCDS release id (\"{guid}-{seq}\"); they are separate id spaces on separate endpoints, and this tool routes to the right one for you. Keyless.","inputs":[{"name":"id","type":"string","required":true,"description":"The `id` from a search_notices result (a bare GUID, e.g. \"5295555c-7556-4726-bd59-7895f51a3c3a\") or from recent_notices (an OCDS release id, e.g. \"a42239ac-faef-4245-ad0f-16b3a787675b-901561\"). Eithe…"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":209},{"name":"recent_notices","title":null,"description":"List the most recent UK procurement notices from Contracts Finder, newest-first, optionally filtered by stage (tender/award). Same compact shape as search_notices. Keyless.","inputs":[{"name":"limit","type":"number","required":false,"description":"Number of recent notices to return, 1–100 (default 20)."},{"name":"stage","type":"string","required":false,"description":"Notice stage: \"tender\" or \"award\". Default \"tender\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":88},{"name":"find_a_tender_recent","title":null,"description":"Recent OR HISTORICAL high-value UK government tenders and contract awards from the Find a Tender Service (find-tender.service.gov.uk) — the UK's above-threshold procurement portal (the post-Brexit replacement for EU TED, for larger public contracts). Use for \"high value UK tenders\", \"above threshold UK government contracts\", \"Find a Tender notices\", \"large UK public sector contract opportunities\", or a historical window like \"FTS notices from 2023\". Returns notices newest-first within the window `days` reaches back. An optional keyword is matched over title, description, award title and AWARDED SUPPLIER — client-side, because the FTS API has no text search (it rejects a keyword parameter outright, allowing only stages/limit/cursor/updatedFrom/updatedTo). ALWAYS READ `window_complete`: false means the walk stopped at the page cap (8 pages/call) with more feed left, so a zero means \"absent from the notices examined\", not \"not published\" — narrow `days` or `stage` until it is true, or repeat the call from where it stopped. For a proper full-corpus keyword SEARCH of UK procurement with real historical date filtering (not just a bounded walk), and for lower-value notices, use search_notices (Contracts Finder), which does have a real server-side index. Keyless.","inputs":[{"name":"days","type":"number","required":false,"description":"How many days back to scan, 1–3660 (~10 years; FTS itself accepts any historical date, verified live). Default 7 when listing, 30 when a keyword is given (the 7-day feed is only ~30 notices, too few…"},{"name":"keyword","type":"string","required":false,"description":"Optional keyword to filter recent notices by title/description, e.g. \"cloud\", \"construction\". Omit to list all recent."},{"name":"limit","type":"number","required":false,"description":"Max notices to return, 1–100 (default 20)."},{"name":"stage","type":"string","required":false,"description":"Notice stage: \"tender\" (open opportunities, default), \"award\" (results), or \"planning\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":471},{"name":"find_a_tender_notice","title":null,"description":"Full detail for one Find a Tender Service (high-value UK) notice by its OCID (e.g. \"ocds-h6vhtk-06d27d\", from find_a_tender_recent results). Returns title, buyer, description, CPV classification, value, deadlines, and documents. Keyless.","inputs":[{"name":"ocid","type":"string","required":true,"description":"The notice OCID, e.g. \"ocds-h6vhtk-06d27d\". Get these from find_a_tender_recent."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":114}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T04:03:43.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1a4b8-c856-797f-9969-16359df9b301","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts#chg-chg_01a1a4b8-c856-797f-9969-16359df9b301"},{"id":"chg_01a19a6c-4e4d-7dd5-8180-10001ecf6ee8","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts#chg-chg_01a19a6c-4e4d-7dd5-8180-10001ecf6ee8"},{"id":"chg_01a1901f-35b4-7b52-bc35-e0e5ae7fcfed","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts#chg-chg_01a1901f-35b4-7b52-bc35-e0e5ae7fcfed"},{"id":"chg_01a186db-9ea3-7a6f-b793-88d41d17fa4d","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts#chg-chg_01a186db-9ea3-7a6f-b793-88d41d17fa4d"},{"id":"chg_01a186b4-7861-7c8d-900c-d9124a28d5bc","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts#chg-chg_01a186b4-7861-7c8d-900c-d9124a28d5bc"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts","markdown":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts.md","changelogJson":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts/changelog.json","changelogRss":"https://verifymcp.io/servers/pipeworx-io-uk-contracts/pipeworx-mcp-uk-contracts.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@pipeworx/mcp-uk-contracts"},{"label":"Socket report","href":"https://socket.dev/npm/package/@pipeworx/mcp-uk-contracts"},{"label":"Repository","href":"https://github.com/pipeworx-io/mcp-uk-contracts"},{"label":"Website","href":"https://pipeworx.io/packs/uk-contracts"}]}}