<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Quill — Canadian Government Data (MapleSpike) · mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/reverb256-quill/mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] mcp: HTTPS (fail → unverified)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd74-7cbe-a0c8-c60588850ad0</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd74-7cbe-a0c8-c60588850ad0</guid><description>HTTPS (fail → unverified). Compared against 2026-10-26.</description><pubDate>Tue, 27 Oct 2026 06:16:42 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] mcp: Stability (0.13 → unverified)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd75-7b97-b0ad-2da574ca6299</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd75-7b97-b0ad-2da574ca6299</guid><description>Stability (0.13 → unverified). Compared against 2026-10-26.</description><pubDate>Tue, 27 Oct 2026 06:16:42 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] mcp: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd76-7108-84ff-c6ea39420a37</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd76-7108-84ff-c6ea39420a37</guid><description>Tool safety (pass → unverified). Compared against 2026-10-26.</description><pubDate>Tue, 27 Oct 2026 06:16:42 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] mcp: Transport (pass → unverified)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd76-764c-b9ac-6c8e51f481fd</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd76-764c-b9ac-6c8e51f481fd</guid><description>Transport (pass → unverified). Compared against 2026-10-26.</description><pubDate>Tue, 27 Oct 2026 06:16:42 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] mcp: Authorization (The endpoint enforces authorisation, but returns a challenge with no valid RFC 9728 metadata, so a client cannot discover where to get a token.)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd76-7b55-9c76-24da6650d7c3</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd76-7b55-9c76-24da6650d7c3</guid><description>Authorization (The endpoint enforces authorisation, but returns a challenge with no valid RFC 9728 metadata, so a client cannot discover where to get a token.). Compared against 2026-10-26.</description><pubDate>Tue, 27 Oct 2026 06:16:42 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] mcp: Endpoint reachability (reachable → behind authorisation)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd77-7a98-8aa3-db407d9d24d3</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a17c00-fd77-7a98-8aa3-db407d9d24d3</guid><description>Endpoint reachability (reachable → behind authorisation). Compared against 2026-10-26.</description><pubDate>Tue, 27 Oct 2026 06:16:42 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] mcp: HTTPS (unverified → fail)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a16241-bd3f-7e23-a24a-a99dd791c278</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a16241-bd3f-7e23-a24a-a99dd791c278</guid><description>HTTPS (unverified → fail). Compared against 2026-10-21.</description><pubDate>Thu, 22 Oct 2026 06:17:17 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] mcp: Transport (unverified → pass)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a16241-bd41-7021-afde-34ff66809a8b</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a16241-bd41-7021-afde-34ff66809a8b</guid><description>Transport (unverified → pass). Compared against 2026-10-21.</description><pubDate>Thu, 22 Oct 2026 06:17:17 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] mcp: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a16241-bd41-7665-a107-b3ee889a9704</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a16241-bd41-7665-a107-b3ee889a9704</guid><description>Injection markers (unverified → pass). Compared against 2026-10-21.</description><pubDate>Thu, 22 Oct 2026 06:17:17 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] mcp: Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a16241-bd41-7d35-995e-5d48afc02487</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a16241-bd41-7d35-995e-5d48afc02487</guid><description>Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.). Compared against 2026-10-21.</description><pubDate>Thu, 22 Oct 2026 06:17:17 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] mcp: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a16241-bd42-739d-b43f-2009f05f5ab6</link><guid isPermaLink="true">https://verifymcp.io/servers/reverb256-quill/mcp#chg-chg_01a16241-bd42-739d-b43f-2009f05f5ab6</guid><description>First check of Judged manipulation (pass). Compared against 2026-10-21.</description><pubDate>Thu, 22 Oct 2026 06:17:17 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item></channel></rss>