{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T04:06:58.921Z","url":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox","markdownUrl":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox.md","server":{"slug":"regretsss-a2a-mailbox","name":"a2a-mailbox","registryName":"io.github.RegretSSS/a2a-mailbox","description":"Cross-CLI agent mailbox: tmux-injected messaging for Claude Code, Codex, Pi and ZCode","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"a2a-mailbox","type":"mcpb","identifier":"https://github.com/RegretSSS/a2a-mailbox/releases/download/v0.1.0/a2a-mailbox.mcpb","withdrawn":false,"url":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox","version":null,"transport":"stdio","scoredAt":"2026-11-06T01:02:34.369Z"},"score":{"total":39,"tier":"low","status":"scored","weekDelta":null,"history":[{"date":"2026-11-06","total":39},{"date":"2026-11-05","total":39}]},"categories":[{"name":"Supply Chain Security","score":12,"verdict":"partial","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs were checked across the 15 of 15 dependencies we could resolve, so this covers what we could see, not the whole tree.","Install-script risk not yet assessed.","1 of 15 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.tree_partial","args":{"seen":"15","resolved":"15"}},{"code":"installscript.inconclusive","args":{"reason":"install_step_unscanned"}},{"code":"dephealth.assessed","args":{"deps":"15","unhealthy":"1"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (Apache-2.0).","Actively maintained (last published 0 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"Apache-2.0"}},{"code":"maintenance.recent","args":{"age_days":"0"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":67,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 404 tokens (~67/item across 6 items; 6 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"67","items":"6","tools":"6","tokens":"404","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":71,"verdict":"fail","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","0% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"0"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":75,"verdict":"fail","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; \"mail_send\" implies \"send\" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.","An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_undeclared","args":{"pct":"0","tool":"mail_send","verb":"send","declared":"none","annotated":"0","destructive":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"6","judged":"6"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a current MCP spec version (2026-07-28)."],"codes":[{"code":"protocol.current","args":{"version":"2026-07-28"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Install-script risk not yet assessed.","Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"malware":[],"components":[{"slug":"a2a-mailbox","type":"mcpb","identifier":"https://github.com/RegretSSS/a2a-mailbox/releases/download/v0.1.0/a2a-mailbox.mcpb","withdrawn":false,"score":39,"current":true,"url":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox","markdownUrl":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox.md"}],"facts":[{"label":"Registry","value":"mcpb"},{"label":"Package","value":"https://github.com/RegretSSS/a2a-mailbox/releases/download/v0.1.0/a2a-mailbox.mcpb"},{"label":"Transport","value":"stdio"},{"label":"SHA-256","value":"3635d09a48c2669f1af8c0d0e32a48b5414099ed162997b6ab35fc956c3f8d5a"}],"install":{"available":true,"bundleSha256":"3635d09a48c2669f1af8c0d0e32a48b5414099ed162997b6ab35fc956c3f8d5a"},"tools":[{"name":"mail_send","title":"Mail Send","description":"发消息给另一 agent。in_reply_to 用 mail_read 返回的 msg_id（可自动确认原消息）；expect_reply=True 唤醒词尾加『[需回函]』。","inputs":[{"name":"body","type":"string","required":true,"description":null},{"name":"context","type":"string","required":false,"description":null},{"name":"expect_reply","type":"boolean","required":false,"description":null},{"name":"in_reply_to","type":null,"required":false,"description":null},{"name":"to","type":"string","required":true,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":84},{"name":"mail_poll","title":"Mail Poll","description":"列出自己邮箱待处理消息的摘要（不消费，可反复查）。","inputs":[],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":26},{"name":"mail_read","title":"Mail Read","description":"读自己邮箱一条消息全文（含 ack_id——业务确认用）。","inputs":[{"name":"msg_id","type":"string","required":true,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":33},{"name":"mail_ack","title":"Mail Ack","description":"确认一条消息（幂等）。ack_id 用 mail_read 返回的；跨主机传输不可见时自证落盘 self_attested。","inputs":[{"name":"ack_id","type":"string","required":true,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":52},{"name":"mail_who","title":"Mail Who","description":"列出在册 agent（默认只列在线 active，含同目录分身行 agent_id@session短码 可定向发信；all=true 附已下线 stale）。group-only 标记与成员计数，附联邦 peers 状态。","inputs":[{"name":"all","type":"boolean","required":false,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":72},{"name":"mail_group","title":"Mail Group","description":"群组权限五合一。action=join 申请加入对方 group(agent_id=门主,note=来意)；action=pending 列自己的待审申请；action=admit 批准 agent_id 可发给自己；action=revoke 移出 agent_id；action=gate 开关仅准入名单收件闸(group_only=true 开,group 为展示名)。错误返回含完整用法。","inputs":[{"name":"action","type":"string","required":true,"description":null},{"name":"agent_id","type":"string","required":false,"description":null},{"name":"group","type":"string","required":false,"description":null},{"name":"group_only","type":"boolean","required":false,"description":null},{"name":"note","type":"string","required":false,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":137}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T01:02:34.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":15,"partial":false,"deprecated":null,"stale":1,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-11-05","recent":[{"id":"chg_01a1ab24-e291-78dd-80d3-03f2b25efd54","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox#chg-chg_01a1ab24-e291-78dd-80d3-03f2b25efd54"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox/changelog.json"},"links":{"html":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox","markdown":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox.md","changelogJson":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox/changelog.json","changelogRss":"https://verifymcp.io/servers/regretsss-a2a-mailbox/a2a-mailbox.xml","external":[{"label":"Repository","href":"https://github.com/RegretSSS/a2a-mailbox"}]}}