<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.SupplyMaven-SCR/supply-chain-intelligence · api-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/supplymaven-scr-supply-chain-intelligence/api-mcp/changelog.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api-mcp: HSTS header (unverified → pass)</title><link>https://verifymcp.io/servers/supplymaven-scr-supply-chain-intelligence/api-mcp#chg-chg_019fbad8-ac93-7072-b856-69b813925773</link><guid isPermaLink="true">https://verifymcp.io/servers/supplymaven-scr-supply-chain-intelligence/api-mcp#chg-chg_019fbad8-ac93-7072-b856-69b813925773</guid><description>HSTS header (unverified → pass). Compared against 2026-07-31.</description><pubDate>Sat, 01 Aug 2026 01:03:09 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] api-mcp: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 33 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/supplymaven-scr-supply-chain-intelligence/api-mcp#chg-chg_019fbad8-ac93-7541-91c8-edb186b26c7e</link><guid isPermaLink="true">https://verifymcp.io/servers/supplymaven-scr-supply-chain-intelligence/api-mcp#chg-chg_019fbad8-ac93-7541-91c8-edb186b26c7e</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 33 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-07-31.</description><pubDate>Sat, 01 Aug 2026 01:03:09 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] api-mcp: Transport (fail → pass)</title><link>https://verifymcp.io/servers/supplymaven-scr-supply-chain-intelligence/api-mcp#chg-chg_019fbad8-ac92-75cd-afdc-36398ecdd21e</link><guid isPermaLink="true">https://verifymcp.io/servers/supplymaven-scr-supply-chain-intelligence/api-mcp#chg-chg_019fbad8-ac92-75cd-afdc-36398ecdd21e</guid><description>Transport (fail → pass). Compared against 2026-07-31.</description><pubDate>Sat, 01 Aug 2026 01:03:09 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item></channel></rss>