{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T01:28:39.839Z","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt","markdownUrl":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt.md","server":{"slug":"seanebones-lang-deadbolt","name":"DeadBolt by NextEleven","registryName":"io.github.seanebones-lang/deadbolt","description":"Local execution gate: fixed deadlines, operator-only controls, read-only setup and readable denials.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"deadbolt","type":"mcpb","identifier":"https://github.com/seanebones-lang/deadbolt/releases/download/mcpb-v2.0.1/deadbolt-2.0.1.mcpb","withdrawn":false,"url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt","version":null,"transport":"stdio","scoredAt":"2026-11-05T05:20:00.763Z"},"score":{"total":48,"tier":"low","status":"scored","weekDelta":4,"history":[{"date":"2026-11-05","total":48},{"date":"2026-11-04","total":48},{"date":"2026-11-03","total":48},{"date":"2026-11-02","total":47},{"date":"2026-11-01","total":47},{"date":"2026-10-31","total":46},{"date":"2026-10-30","total":44},{"date":"2026-10-29","total":44},{"date":"2026-10-28","total":45},{"date":"2026-10-27","total":44},{"date":"2026-10-26","total":44},{"date":"2026-10-25","total":43},{"date":"2026-10-24","total":43},{"date":"2026-10-23","total":42},{"date":"2026-10-22","total":42},{"date":"2026-10-21","total":41},{"date":"2026-10-20","total":38},{"date":"2026-10-19","total":38},{"date":"2026-10-18","total":38},{"date":"2026-10-17","total":38},{"date":"2026-10-16","total":38},{"date":"2026-10-15","total":38},{"date":"2026-10-14","total":38},{"date":"2026-10-13","total":10},{"date":"2026-10-12","total":10}]},"categories":[{"name":"Supply Chain Security","score":0,"verdict":"unverified","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).","Install-script risk not yet assessed.","Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none)."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.inconclusive","args":{"reason":"no_manifest_bundled"}},{"code":"installscript.inconclusive","args":{"reason":"install_surface_unavailable"}},{"code":"dephealth.inconclusive","args":{"reason":"no_manifest_bundled"}}]},{"name":"Provenance & Transparency","score":48,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (Apache-2.0).","Actively maintained (last published 1 days ago).","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"Apache-2.0"}},{"code":"maintenance.recent","args":{"age_days":"1"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":68,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 214 tokens (~107/item across 2 items; 2 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"107","items":"2","tools":"2","tokens":"214","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":73,"verdict":"partial","reasons":["Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"22"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 2 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 3 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"2"}},{"code":"toolsafety.manipulation_clean","args":{"units":"3","judged":"3"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).","Install-script risk not yet assessed.","Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none)."],"malware":[],"components":[{"slug":"deadbolt","type":"mcpb","identifier":"https://github.com/seanebones-lang/deadbolt/releases/download/mcpb-v2.0.1/deadbolt-2.0.1.mcpb","withdrawn":false,"score":48,"current":true,"url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt","markdownUrl":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt.md"}],"facts":[{"label":"Registry","value":"mcpb"},{"label":"Package","value":"https://github.com/seanebones-lang/deadbolt/releases/download/mcpb-v2.0.1/deadbolt-2.0.1.mcpb"},{"label":"Transport","value":"stdio"},{"label":"SHA-256","value":"709bd27afe9c1ce8a833d124eceb2e6ca6458a40924534a34882b253fe4ae644"}],"install":{"available":true,"bundleSha256":"709bd27afe9c1ce8a833d124eceb2e6ca6458a40924534a34882b253fe4ae644"},"tools":[{"name":"deadbolt_get_integration_guide","title":null,"description":"Get local, read-only DeadBolt setup steps for a supported integration route. Returns operator responsibilities, a placeholder configuration and the enforcement boundary. Does not create files, run a server or grant permission. Available only when operator configuration is blank.","inputs":[{"name":"route","type":"string","required":true,"description":"Integration route: claude_desktop for this bundle, stdio_client for a terminal/editor MCP client, rust for embedding the crate, or http for the local sidecar."}],"outputs":[{"name":"boundary","type":"string","required":true,"description":"Protection scope and setup-mode limitation."},{"name":"documentation_url","type":"string","required":true,"description":"Official integration documentation URL; this tool performs no network request."},{"name":"operator_config_example","type":"string","required":true,"description":"JSON template for the bundle; replace all placeholders deliberately. This tool does not save or apply it."},{"name":"route","type":"string","required":true,"description":"Requested integration route."},{"name":"steps","type":"array","required":true,"description":"Ordered steps for the trusted developer/operator."}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":101},{"name":"deadbolt_check_bundle","title":null,"description":"Read the bundled engine and provenance metadata, calculate its SHA-256 and report compatibility and packaging integrity for this host. Reads only this installed bundle; does not execute the engine, inspect operator state or test security. Available only when operator configuration is blank.","inputs":[],"outputs":[{"name":"active_protection","type":"boolean","required":true,"description":"Always false in setup mode; no downstream server is configured."},{"name":"boundary","type":"string","required":true,"description":"Protection scope and setup-mode limitation."},{"name":"bundle_version","type":"string","required":true,"description":"Installed launcher bundle version."},{"name":"checksum_matches","type":"boolean","required":true,"description":"Whether the bundled executable matches its packaged SHA-256 metadata. This is corruption detection, not independent signature verification."},{"name":"engine_version","type":"string","required":true,"description":"Pinned preview engine version."},{"name":"target","type":"string","required":true,"description":"Native target for this host, or unsupported."}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":60}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T05:20:00.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-12","recent":[{"id":"chg_01a19fd5-282b-7e3c-8424-0cbc6dc89c42","kind":"score.total_changed","summary":"Trust score (47 → 48)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a19fd5-282b-7e3c-8424-0cbc6dc89c42"},{"id":"chg_01a19586-16cd-788d-8014-fbaf2d322177","kind":"score.total_changed","summary":"Trust score (46 → 47)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a19586-16cd-788d-8014-fbaf2d322177"},{"id":"chg_01a19060-2c88-7148-a97c-3501764eac4e","kind":"check.reverified","summary":"Maintenance (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a19060-2c88-7148-a97c-3501764eac4e"},{"id":"chg_01a19060-2c89-76f4-9721-afcffb3198c8","kind":"score.total_changed","summary":"Trust score (44 → 46)","materiality":"functional","direction":"improvement","scoreDelta":2,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a19060-2c89-76f4-9721-afcffb3198c8"},{"id":"chg_01a18b3a-1314-70f5-908d-809c78959150","kind":"check.reverified","summary":"Provenance (unverified → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a18b3a-1314-70f5-908d-809c78959150"},{"id":"chg_01a1863d-0f2e-7899-ae1e-0050e18599a7","kind":"check.unverifiable","summary":"Provenance (fail → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a1863d-0f2e-7899-ae1e-0050e18599a7"},{"id":"chg_01a1863d-0f2f-7dfc-b448-9449ed9b3191","kind":"check.unverifiable","summary":"Maintenance (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a1863d-0f2f-7dfc-b448-9449ed9b3191"},{"id":"chg_01a1863d-0f33-7161-ae2d-6f76cb7451bc","kind":"score.total_changed","summary":"Trust score (45 → 44)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a1863d-0f33-7161-ae2d-6f76cb7451bc"},{"id":"chg_01a180ed-b258-7b4b-9bc6-aa33b350f257","kind":"score.total_changed","summary":"Trust score (44 → 45)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a180ed-b258-7b4b-9bc6-aa33b350f257"},{"id":"chg_01a176a0-3a43-70e7-b1d9-adf40ace1f8b","kind":"score.total_changed","summary":"Trust score (43 → 44)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a176a0-3a43-70e7-b1d9-adf40ace1f8b"},{"id":"chg_01a16c52-d07a-79ea-9b5d-d65edae0aab3","kind":"score.total_changed","summary":"Trust score (42 → 43)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a16c52-d07a-79ea-9b5d-d65edae0aab3"},{"id":"chg_01a16206-2875-72ca-b63a-745c7ff08cbf","kind":"score.total_changed","summary":"Trust score (41 → 42)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a16206-2875-72ca-b63a-745c7ff08cbf"},{"id":"chg_01a15cde-c7c7-7a79-aaa9-ecdd2f9fd224","kind":"check.reverified","summary":"Stability (unverified → 0.23)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a15cde-c7c7-7a79-aaa9-ecdd2f9fd224"},{"id":"chg_01a15cde-c7c8-757d-bf4d-3254abef1d39","kind":"score.total_changed","summary":"Trust score (38 → 41)","materiality":"functional","direction":"improvement","scoreDelta":3,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a15cde-c7c8-757d-bf4d-3254abef1d39"},{"id":"chg_01a1381f-13ef-7557-8f48-b3ceb798a1ba","kind":"check.reverified","summary":"Injection markers (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a1381f-13ef-7557-8f48-b3ceb798a1ba"},{"id":"chg_01a1381f-1445-7bac-8869-6c536cc6dbe0","kind":"check.appeared","summary":"First check of Judged manipulation (pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a1381f-1445-7bac-8869-6c536cc6dbe0"},{"id":"chg_01a1381f-14b1-7ac9-be57-5a7dd99f6fcd","kind":"check.reason","summary":"Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a1381f-14b1-7ac9-be57-5a7dd99f6fcd"},{"id":"chg_01a1381f-14bf-7a76-8f76-73efd1472e23","kind":"check.reverified","summary":"MCP protocol (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a1381f-14bf-7a76-8f76-73efd1472e23"},{"id":"chg_01a1381f-157a-75a0-9397-8895c1511f17","kind":"check.reverified","summary":"Tool coverage (unverified → 100)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a1381f-157a-75a0-9397-8895c1511f17"},{"id":"chg_01a1381f-157c-7473-8029-49be6089653e","kind":"check.appeared","summary":"First check of Schema quality (fail)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt#chg-chg_01a1381f-157c-7473-8029-49be6089653e"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt/changelog.json"},"links":{"html":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt","markdown":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt.md","changelogJson":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt/changelog.json","changelogRss":"https://verifymcp.io/servers/seanebones-lang-deadbolt/deadbolt.xml","external":[{"label":"Repository","href":"https://github.com/seanebones-lang/deadbolt"},{"label":"Website","href":"https://nexteleven.dev/deadbolt"}]}}