<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Pushary · api-mcp-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/pushary-pushary/api-mcp-mcp/changelog.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api-mcp-mcp: Tool “ask_user” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/pushary-pushary/api-mcp-mcp#chg-chg_019fc0a3-d9f3-76ef-8904-7e5faaad5d56</link><guid isPermaLink="true">https://verifymcp.io/servers/pushary-pushary/api-mcp-mcp#chg-chg_019fc0a3-d9f3-76ef-8904-7e5faaad5d56</guid><description>Tool “ask_user” rewrote its description, which is the text the model reads. Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 04:03:11 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api-mcp-mcp: Transport (unverified → pass)</title><link>https://verifymcp.io/servers/pushary-pushary/api-mcp-mcp#chg-chg_019faeeb-3fcf-787e-9b7b-9e502a17e9ec</link><guid isPermaLink="true">https://verifymcp.io/servers/pushary-pushary/api-mcp-mcp#chg-chg_019faeeb-3fcf-787e-9b7b-9e502a17e9ec</guid><description>Transport (unverified → pass). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 17:28:00 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp-mcp: Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.)</title><link>https://verifymcp.io/servers/pushary-pushary/api-mcp-mcp#chg-chg_019faeeb-3fd1-77c6-83a1-39c3574fb7fe</link><guid isPermaLink="true">https://verifymcp.io/servers/pushary-pushary/api-mcp-mcp#chg-chg_019faeeb-3fd1-77c6-83a1-39c3574fb7fe</guid><description>Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 17:28:00 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>