{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T16:32:31.747Z","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding","markdownUrl":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding.md","server":{"slug":"theluckystrike-onboarding","name":"McpStamp Onboarding","registryName":"io.github.theluckystrike/onboarding","description":"New-hire onboarding plans from role templates: tasks with due dates, progress, overdue items.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"onboarding","type":"mcpb","identifier":"https://github.com/theluckystrike/mcp-servers/releases/download/v0.22.0/onboarding.mcpb","withdrawn":false,"url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding","version":"0.22.0","transport":"stdio","scoredAt":"2026-11-06T06:29:47.237Z"},"score":{"total":50,"tier":"low","status":"scored","weekDelta":45,"history":[{"date":"2026-11-06","total":50},{"date":"2026-11-05","total":50},{"date":"2026-11-04","total":50},{"date":"2026-11-03","total":50},{"date":"2026-11-02","total":50},{"date":"2026-11-01","total":5},{"date":"2026-10-31","total":5},{"date":"2026-10-30","total":5},{"date":"2026-10-29","total":5},{"date":"2026-10-28","total":5},{"date":"2026-10-27","total":5},{"date":"2026-10-26","total":5},{"date":"2026-10-25","total":5},{"date":"2026-10-24","total":5},{"date":"2026-10-23","total":5},{"date":"2026-10-22","total":5},{"date":"2026-10-21","total":5},{"date":"2026-10-20","total":5},{"date":"2026-10-19","total":5},{"date":"2026-10-18","total":5},{"date":"2026-10-17","total":5},{"date":"2026-10-16","total":5},{"date":"2026-10-15","total":5},{"date":"2026-10-14","total":5},{"date":"2026-10-13","total":5},{"date":"2026-10-12","total":5},{"date":"2026-10-10","total":5}]},"categories":[{"name":"Supply Chain Security","score":23,"verdict":"partial","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs were checked across the 153 of 153 dependencies we could resolve, so this covers what we could see, not the whole tree.","No install/post-install scripts declared.","57 of 153 dependencies flagged as unhealthy (2 deprecated)."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.tree_partial","args":{"seen":"153","resolved":"153"}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"153","unhealthy":"57","deprecated":"2"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 49 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"49"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":87,"verdict":"fail","reasons":["100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).","AI-judged instruction clarity (excellent).","Tool/resource definitions use about 1015 tokens (~101/item across 10 items; 9 tools + 1 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.descriptions","args":{"pct":"100"}},{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_lean","args":{"avg":"101","items":"10","tools":"9","tokens":"1015","resources":"1"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"9"}},{"code":"toolsafety.manipulation_clean","args":{"units":"10","judged":"10"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"malware":[],"components":[{"slug":"mcp-onboarding","type":"remote","identifier":"https://mcp.zovo.one/mcp/onboarding","withdrawn":false,"score":95,"current":false,"url":"https://verifymcp.io/servers/theluckystrike-onboarding/mcp-onboarding","markdownUrl":"https://verifymcp.io/servers/theluckystrike-onboarding/mcp-onboarding.md"},{"slug":"onboarding","type":"mcpb","identifier":"https://github.com/theluckystrike/mcp-servers/releases/download/v0.22.0/onboarding.mcpb","withdrawn":false,"score":50,"current":true,"url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding","markdownUrl":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding.md"}],"facts":[{"label":"Registry","value":"mcpb"},{"label":"Package","value":"https://github.com/theluckystrike/mcp-servers/releases/download/v0.22.0/onboarding.mcpb"},{"label":"Version","value":"0.22.0"},{"label":"Transport","value":"stdio"},{"label":"SHA-256","value":"7c6662d660776632d72efb550e3a0f72b8696adca845645d6f04e4be92d05ec9"}],"install":{"available":true,"bundleSha256":"7c6662d660776632d72efb550e3a0f72b8696adca845645d6f04e4be92d05ec9"},"tools":[{"name":"onboarding_hire_add","title":"Add a hire","description":"Add a new hire and return its H-NNNN id: a name, a role and the day they start. The role is a grouping key, lower-cased and hyphenated. Add tasks with onboarding_task_add, or apply a role template with onboarding_template_apply.","inputs":[{"name":"name","type":"string","required":true,"description":"The hire's name, e.g. Ada Lovelace"},{"name":"role","type":"string","required":true,"description":"The role, e.g. engineer or sales. Lower-cased and hyphenated"},{"name":"start_date","type":"string","required":true,"description":"The day they start, YYYY-MM-DD. Task due dates are counted from here"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":133},{"name":"onboarding_hire_list","title":"List hires","description":"Every hire with their role, start date, task counts, percent complete and overdue count. Filter by role or by a word in the name. Returns at most 500 rows, newest change first.","inputs":[{"name":"contains","type":"string","required":false,"description":"Only hires whose name contains this text, matched case-insensitively"},{"name":"role","type":"string","required":false,"description":"Only hires in this role, matched after the same lower-case hyphenation applied on add"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":96},{"name":"onboarding_task_add","title":"Add a task to a hire","description":"Add one task to a hire's plan and return its K01-style id: the text, who owns it (hr, manager or it) and how many days after the start date it is due. The due date is counted from the hire's start date.","inputs":[{"name":"due_offset","type":"integer","required":true,"description":"Days after the hire's start date the task is due. 0 is day one"},{"name":"hire","type":"string","required":true,"description":"The hire id, e.g. H-0001, or the name when only one carries it"},{"name":"owner","type":"string","required":true,"description":"Who owns the task: hr, manager or it"},{"name":"text","type":"string","required":true,"description":"The task, as the person doing it will read it, e.g. Issue laptop and security badge"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":158},{"name":"onboarding_task_done","title":"Mark a task done or skipped","description":"Mark one task on a hire done or skipped, with the day it happened. done counts toward the percent complete; skipped is a deliberate dismissal and never counts as done. A task can be set back to todo to reopen it.","inputs":[{"name":"date","type":"string","required":false,"description":"The day it was completed, YYYY-MM-DD. Default today"},{"name":"hire","type":"string","required":true,"description":"The hire id, e.g. H-0001, or the name when only one carries it"},{"name":"status","type":"string","required":true,"description":"done, skipped, or todo to put it back to outstanding"},{"name":"task","type":"string","required":true,"description":"The task id, e.g. K03, as shown by onboarding_progress"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":142},{"name":"onboarding_template_apply","title":"Apply a role template to a hire","description":"Apply a role template to one hire (free) or many (Pro), copying the template's tasks into each hire with the template's version recorded. Editing the template afterwards never changes a hire already under way. If no template exists for the role, one is created from the tasks you pass.","inputs":[{"name":"hire","type":"string","required":true,"description":"The hire to apply the template to. Pro: pass a comma-separated list of hire ids or names to apply to many at once"},{"name":"role","type":"string","required":false,"description":"The role template to apply, by id (T-0001) or role. If omitted, the hire's own role is used"},{"name":"tasks","type":"array","required":false,"description":"When no template exists for the role, create one from these tasks and apply it. Pro only when applying to more than one hire"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":168},{"name":"onboarding_progress","title":"Show a hire's progress","description":"One hire's whole plan: every task with its owner, due date and status, plus the percent complete, the overdue count and what is still outstanding. Pass as_csv for a Pro-only CSV export of the plan.","inputs":[{"name":"as_csv","type":"boolean","required":false,"description":"Return the plan as CSV. Pro only. Default false"},{"name":"hire","type":"string","required":true,"description":"The hire id, e.g. H-0001, or the name when only one carries it"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":98},{"name":"onboarding_overdue","title":"List overdue tasks","description":"Every task that is still outstanding past its due date, across all hires or one hire, with how many days late. Returns at most 500 rows, most overdue first.","inputs":[{"name":"hire","type":"string","required":false,"description":"Only this hire's overdue tasks. Omit for every hire"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":63},{"name":"license_status","title":"License status","description":"Report this server's licence state: product, tier free or pro, licence id, expiry, the key source and the upgrade URL. No arguments, no network. Explains a free-tier refusal; license_activate installs a key.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":54},{"name":"license_activate","title":"Activate license","description":"Activate a Pro key (MCPL1.xxx.yyy) from checkout: verified offline against a built-in public key, saved to your config file. A wrong, malformed or expired key is refused, unsaved. license_status reads it back.","inputs":[{"name":"key","type":"string","required":true,"description":"License key from the checkout confirmation page"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":71}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T06:29:47.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":153,"partial":false,"deprecated":2,"stale":57,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-10","recent":[{"id":"chg_01a19a65-2774-7863-84dc-84171ea834df","kind":"check.reason","summary":"Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2774-7863-84dc-84171ea834df"},{"id":"chg_01a19a65-2773-71f9-a636-4e55299d325a","kind":"check.reverified","summary":"Known CVEs (unverified → partial)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2773-71f9-a636-4e55299d325a"},{"id":"chg_01a19a65-2772-788d-a111-f0013e9ff474","kind":"check.reverified","summary":"Injection markers (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2772-788d-a111-f0013e9ff474"},{"id":"chg_01a19a65-2771-7d57-8e31-2c78997ce286","kind":"check.reverified","summary":"Install scripts (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2771-7d57-8e31-2c78997ce286"},{"id":"chg_01a19a65-276c-7bc3-b35b-fabe46bdea4d","kind":"check.reverified","summary":"Provenance (unverified → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-276c-7bc3-b35b-fabe46bdea4d"},{"id":"chg_01a19a65-2776-7dbf-a7e1-973e148a115b","kind":"check.reverified","summary":"Dependency health (unverified → 0.81)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2776-7dbf-a7e1-973e148a115b"},{"id":"chg_01a19a65-2776-7638-a080-b66abe271961","kind":"check.reverified","summary":"Tool coverage (unverified → 100)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2776-7638-a080-b66abe271961"},{"id":"chg_01a19a65-2775-7ee4-a658-8f0f95ad14c1","kind":"check.reverified","summary":"License (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2775-7ee4-a658-8f0f95ad14c1"},{"id":"chg_01a19a65-2774-7d96-a9ab-36144b7a6894","kind":"check.appeared","summary":"First check of Judged manipulation (pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2774-7d96-a9ab-36144b7a6894"},{"id":"chg_01a19a65-2778-7ce9-8918-db8d6ab04c6a","kind":"check.appeared","summary":"First check of Schema quality (fail)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2778-7ce9-8918-db8d6ab04c6a"},{"id":"chg_01a19a65-2778-71cf-b33b-c2b77fe23e0e","kind":"check.reverified","summary":"Schema quality (unverified → 100)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2778-71cf-b33b-c2b77fe23e0e"},{"id":"chg_01a19a65-2777-7bdf-83dc-88c639a2f7cd","kind":"check.reverified","summary":"MCP protocol (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2777-7bdf-83dc-88c639a2f7cd"},{"id":"chg_01a19a65-2777-76ec-9a4d-6b0aab650080","kind":"check.reverified","summary":"Maintenance (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2777-76ec-9a4d-6b0aab650080"},{"id":"chg_01a19a65-277e-7610-9419-244a9262dec3","kind":"score.total_changed","summary":"Trust score (5 → 50)","materiality":"functional","direction":"improvement","scoreDelta":45,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-277e-7610-9419-244a9262dec3"},{"id":"chg_01a19a65-277e-708a-ae60-ef9304d6afa9","kind":"package.version_changed","summary":"Package version (0.22.5 → 0.22.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-277e-708a-ae60-ef9304d6afa9"},{"id":"chg_01a19a65-277d-740d-8ca7-73b9b99ffaa0","kind":"check.appeared","summary":"First check of Tool coverage (100)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-277d-740d-8ca7-73b9b99ffaa0"},{"id":"chg_01a19a65-277c-7f17-8e75-f4bc1b0a5b00","kind":"check.appeared","summary":"First check of Schema quality (pass)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-277c-7f17-8e75-f4bc1b0a5b00"},{"id":"chg_01a19a65-277c-7a6d-9f59-47c75fad84a5","kind":"license.changed","summary":"Licence (MIT)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-277c-7a6d-9f59-47c75fad84a5"},{"id":"chg_01a19a65-277a-7a0d-b274-d05fe4f07cf3","kind":"check.appeared","summary":"First check of Destructive annotations (pass)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-277a-7a0d-b274-d05fe4f07cf3"},{"id":"chg_01a19a65-2779-7b49-9eb3-48cec6cb7517","kind":"check.appeared","summary":"First check of Schema quality (excellent)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding#chg-chg_01a19a65-2779-7b49-9eb3-48cec6cb7517"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding/changelog.json"},"links":{"html":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding","markdown":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding.md","changelogJson":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding/changelog.json","changelogRss":"https://verifymcp.io/servers/theluckystrike-onboarding/onboarding.xml","external":[{"label":"Repository","href":"https://github.com/theluckystrike/mcp-servers"},{"label":"Website","href":"https://www.mcpstamp.com/servers/onboarding/"}]}}