<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>sh.agentcard/agentcard · mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/sh-agentcard-agentcard/mcp/changelog.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] mcp: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/sh-agentcard-agentcard/mcp#chg-chg_019faf36-1665-78dd-8b82-efc5ca9e3b5c</link><guid isPermaLink="true">https://verifymcp.io/servers/sh-agentcard-agentcard/mcp#chg-chg_019faf36-1665-78dd-8b82-efc5ca9e3b5c</guid><description>HSTS header (pass → fail). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 18:49:45 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] mcp: Transport (unverified → pass)</title><link>https://verifymcp.io/servers/sh-agentcard-agentcard/mcp#chg-chg_019faf36-166a-7514-b8a7-8ee45e4b0309</link><guid isPermaLink="true">https://verifymcp.io/servers/sh-agentcard-agentcard/mcp#chg-chg_019faf36-166a-7514-b8a7-8ee45e4b0309</guid><description>Transport (unverified → pass). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 18:49:45 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] mcp: Authorization (Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.)</title><link>https://verifymcp.io/servers/sh-agentcard-agentcard/mcp#chg-chg_019faf36-166b-7481-b40d-0b41c5850566</link><guid isPermaLink="true">https://verifymcp.io/servers/sh-agentcard-agentcard/mcp#chg-chg_019faf36-166b-7481-b40d-0b41c5850566</guid><description>Authorization (Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 18:49:45 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>