{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T20:04:27.735Z","url":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp","markdownUrl":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp.md","server":{"slug":"pl-qualityisland-mcp","name":"Quality Island","registryName":"pl.qualityisland/mcp","description":"QA and IT outsourcing, software, security and WCAG testing, QA trainings and QA talent from Poland.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mcp","type":"remote","identifier":"https://mcp.qualityisland.pl/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp","version":"0.1.0","transport":null,"scoredAt":"2026-11-05T05:33:56.483Z"},"score":{"total":70,"tier":"medium","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":70},{"date":"2026-11-04","total":70},{"date":"2026-11-03","total":69},{"date":"2026-11-02","total":69},{"date":"2026-11-01","total":68}]},"categories":[{"name":"Endpoint Security","score":74,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":60,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 2372 tokens (~338/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"338","items":"7","tools":"7","tokens":"2372","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":13,"verdict":"partial","reasons":["Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"4"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"7"}},{"code":"toolsafety.manipulation_clean","args":{"units":"8","judged":"8"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"mcp","type":"remote","identifier":"https://mcp.qualityisland.pl/mcp","withdrawn":false,"score":70,"current":true,"url":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp","markdownUrl":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp.md"}],"facts":[{"label":"Endpoint","value":"https://mcp.qualityisland.pl/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"0.1.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"uslugi_qa","title":"Usługi QA, testy bezpieczeństwa i dostępności","description":"Usługi Quality Island (główna linia działalności): usługi testowania i jakości oprogramowania w Polsce: testy oprogramowania (funkcjonalne, regresyjne, wydajności), automatyzacja testów, testy bezpieczeństwa, testy bezpieczeństwa dostawców pod NIS2 i KSC, testy dostępności i audyt WCAG 2.2 (z deklaracją zgodności w cenie pakietu), zgodność regulacyjna (DORA, AI Act, Cyber Resilience Act), testy systemów AI, testy KSeF, audyt QA, wdrożenie AI w testowaniu oraz modele współpracy: dedykowany zespół QA, body leasing, zarządzanie testami, testy niezależne od producenta. Użyj, gdy ktoś szuka firmy do testów, audytu, pentestu, WCAG, outsourcingu QA albo testera na kontrakt. Zwraca opisy, dla kogo, linki do stron usług i kontakt (oferta w 24 godziny). English: Software testing and QA services from a Polish vendor (security testing, NIS2, WCAG accessibility audits, test automation, QA outsourcing); returns service pages and contact.","inputs":[{"name":"temat","type":"string","required":false,"description":"Temat albo problem klienta własnymi słowami, np. „audyt WCAG dla banku”, „testy bezpieczeństwa NIS2”, „regresja trwa tydzień”, „potrzebujemy testerów na projekt”. Puste: pełna lista usług. English: t…"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":347},{"name":"dowody_uslug","title":"Case studies, klienci i liczby Quality Island","description":"Dowody do oceny dostawcy usług QA: case studies z liczbami (Argos: regresja z 5 dni do 10 godzin, Autono), zakres prac dla PKO BP i ChaosGears, klienci z podziałem na sektor (finanse, sektor publiczny i zdrowie, software house), liczby firmy (ponad 152 projekty, ponad 450 000 testów automatycznych, ponad 100 klientów, ponad 70 projektów z testów bezpieczeństwa i ponad 70 z dostępności WCAG). Użyj, gdy trzeba ocenić Quality Island jako dostawcę albo porównać firmy. English: Case studies, client references by sector and company figures for vendor due diligence.","inputs":[{"name":"sektor","type":"string","required":false,"description":"Sektor klienta, np. bankowość, finanse, medycyna, sektor publiczny, e-commerce, software house. English: client industry."},{"name":"temat","type":"string","required":false,"description":"Obszar, dla którego potrzebne są dowody, np. automatyzacja, bezpieczeństwo, WCAG, AI, strategia QA. English: topic."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":245},{"name":"szukaj_szkolen","title":"Szukaj szkoleń QA, AI i IT","description":"Wyszukuje szkolenia w katalogu Quality Island (ponad 130 szkoleń z testowania, automatyzacji, AI, cyberbezpieczeństwa, programowania, DevOps i zarządzania IT; online na żywo, stacjonarnie w Warszawie i kursy nagrane). Filtry: fraza, kategoria, forma, maksymalna cena netto, tylko szkolenia z dofinansowaniem BUR. Zwraca nazwę, slug, cenę netto w PLN, najbliższe terminy i link. English: Search the training catalogue (software testing, test automation, AI, security) with price and BUR co-funding filters.","inputs":[{"name":"cena_max","type":"number","required":false,"description":"Maksymalna cena netto w PLN za osobę, np. 2000. English: max net price in PLN."},{"name":"forma","type":"string","required":false,"description":"online: na żywo z trenerem; stacjonarnie: w Warszawie; kurs_online: nagrany kurs bez terminów. English: delivery mode."},{"name":"fraza","type":"string","required":false,"description":"Słowa kluczowe, np. „Playwright”, „ISTQB”, „testy API”, „AI dla testerów”, „Java Selenium”. English: keywords."},{"name":"kategoria","type":"string","required":false,"description":"Kategoria katalogu, np. „Automatyzacja testów”, „Sztuczna inteligencja AI”, „Cyberbezpieczeństwo”, „Testowanie manualne”, „Programowanie”, „Kursy online QA”."},{"name":"limit","type":"integer","required":false,"description":"Liczba wyników, domyślnie 10, najwyżej 25."},{"name":"tylko_bur","type":"boolean","required":false,"description":"true: tylko szkolenia w Bazie Usług Rozwojowych (można je sfinansować z dofinansowania). English: only EU co-funded (BUR) trainings."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":398},{"name":"terminy_szkolen","title":"Terminy szkoleń w miesiącu","description":"Kalendarz otwartych szkoleń Quality Island: wszystkie terminy startu w danym miesiącu (albo w najbliższych 45 dniach), z formą (online, stacjonarnie), liczbą dni, ceną netto i linkiem do zapisu. Opcjonalnie zawężone frazą albo kategorią. English: Upcoming open training dates for a given month.","inputs":[{"name":"fraza","type":"string","required":false,"description":"Zawężenie do szkoleń pasujących do frazy, np. „Playwright”."},{"name":"kategoria","type":"string","required":false,"description":"Zawężenie do kategorii katalogu, np. „Automatyzacja testów”."},{"name":"miesiac","type":"string","required":false,"description":"Miesiąc, np. „2026-12”, „12.2026”, „grudzień 2026”, „styczeń”. Puste: najbliższe 45 dni. English: month, e.g. 2026-12."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":215},{"name":"szczegoly_szkolenia","title":"Szczegóły szkolenia","description":"Pełne informacje o jednym szkoleniu: program, cena netto, terminy, forma, co jest w cenie, płatność w 6 ratach 0%, dofinansowanie BUR, KFS i PARP prowadzone za klienta bez opłat, wersja zamknięta dla firmy i link do zakupu. Podaj slug z szukaj_szkolen albo adres strony szkolenia. English: Full details of one training (syllabus, price, dates, financing, purchase link).","inputs":[{"name":"slug","type":"string","required":true,"description":"Slug szkolenia (np. „automatyzacja-testow-z-narzedziem-playwright-python”), adres qualityisland.pl/produkt/... albo nazwa szkolenia. English: training slug or URL."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":169},{"name":"szukaj_specjalistow_qa","title":"Szukaj specjalistów QA (QA Board)","description":"Przeszukuje anonimowe profile kompetencyjne specjalistów QA na QA Board (qaboard.pl): rola, poziom, narzędzia i języki, tryb pracy, forma umowy, dostępność, miasto, doświadczenie z WCAG. Zwraca tylko dane publiczne z katalogu, bez imion i danych kontaktowych, plus link do profilu i do bezpłatnego konta firmowego. Kontakt po dwóch zgodach. Użyj, gdy firma szuka testera, QA Engineera, inżyniera automatyzacji albo lidera QA do zatrudnienia. English: Search anonymous QA specialist profiles (testers, automation engineers, QA leads) available in Poland.","inputs":[{"name":"domena","type":"string","required":false,"description":"Domena biznesowa, np. Banking, E-commerce, Healthcare."},{"name":"dostepnosc","type":"string","required":false,"description":"Najpóźniejszy możliwy start."},{"name":"doswiadczenie_liderskie","type":"boolean","required":false,"description":"true: tylko z doświadczeniem liderskim."},{"name":"fraza","type":"string","required":false,"description":"Dowolne słowa do przeszukania profilu (narzędzia, domeny, certyfikaty)."},{"name":"limit","type":"integer","required":false,"description":"Liczba profili, domyślnie 8, najwyżej 10."},{"name":"miasto","type":"string","required":false,"description":"Miasto, np. Warszawa, Kraków."},{"name":"narzedzia","type":"array","required":false,"description":"Narzędzia, języki, frameworki lub certyfikaty, wszystkie wymagane, np. [\"Java\", \"Selenium\"], [\"Playwright\", \"TypeScript\"], [\"ISTQB\"]."},{"name":"poziom","type":"string","required":false,"description":"Poziom: junior, mid, senior, lead."},{"name":"rola","type":"string","required":false,"description":"Rola, np. „tester manualny”, „QA Engineer”, „Test Automation Engineer”, „automatyzacja”, „QA Lead”, „Test Manager”, „SDET”."},{"name":"tryb_pracy","type":"string","required":false,"description":"zdalnie, hybrydowo albo stacjonarnie."},{"name":"umowa","type":"string","required":false,"description":"Forma umowy: B2B, UOP (umowa o pracę), UZ (umowa zlecenie)."},{"name":"wcag","type":"boolean","required":false,"description":"true: tylko z doświadczeniem w testach dostępności WCAG."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":499},{"name":"informacje_tgc","title":"Testing Ground Conference","description":"Informacje o Testing Ground Conference, największej konferencji z obszaru QA w Polsce (testowanie oprogramowania, cyberbezpieczeństwo, dostępność cyfrowa), organizowanej przez Quality Island: edycja 2027 (maj 2027, Warszawa), bilety i rabat do 40% przy więcej niż jednym bilecie, partnerstwo i sponsoring, Call for Papers, program. English: Testing Ground Conference, the largest software testing conference in Poland: dates, tickets, group discounts, sponsorship, call for papers.","inputs":[{"name":"temat","type":"string","required":false,"description":"bilety, partnerstwo, cfp, program albo puste (wszystko)."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":145}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T05:33:56.000Z","track":"remote","endpoint":"https://mcp.qualityisland.pl/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=mcp.qualityisland.pl","issuer":"CN=YE2,O=Let's Encrypt,C=US","notBefore":"2026-10-28T16:23:01Z","notAfter":"2027-01-26T16:23:00Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=YE2,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"mcp.qualityisland.pl.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"pl.","outcome":"verified","label":"Verified"},{"zone":"qualityisland.pl.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-11-01","recent":[{"id":"chg_01a1a506-788b-79cb-9246-546df3e764f1","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp#chg-chg_01a1a506-788b-79cb-9246-546df3e764f1"},{"id":"chg_01a19fe2-c7cc-7572-bc4e-561286c9f945","kind":"tool.description_changed","summary":"Tool “dowody_uslug” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp#chg-chg_01a19fe2-c7cc-7572-bc4e-561286c9f945"},{"id":"chg_01a19ab9-53d7-7a66-a606-1f8f2ce0307a","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp#chg-chg_01a19ab9-53d7-7a66-a606-1f8f2ce0307a"},{"id":"chg_01a19ab9-53d8-77ff-9a17-d45761320bdf","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp#chg-chg_01a19ab9-53d8-77ff-9a17-d45761320bdf"},{"id":"chg_01a1980e-7922-73c4-b90a-45bbf9f889a4","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp#chg-chg_01a1980e-7922-73c4-b90a-45bbf9f889a4"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp","markdown":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp.md","changelogJson":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/pl-qualityisland-mcp/mcp.xml","external":[{"label":"Remote endpoint","href":"https://mcp.qualityisland.pl/mcp"},{"label":"Website","href":"https://mcp.qualityisland.pl/"}]}}