{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T21:46:46.783Z","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp","markdownUrl":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp.md","server":{"slug":"tolomere21-latam-mcp","name":"io.github.Tolomere21/latam-mcp","registryName":"io.github.Tolomere21/latam-mcp","description":"Peruvian public data — SUNAT RUC, BCRP FX, SEACE tenders. Sourced from official open-data.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"dead","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"latam-mcp-mcp","type":"npm","identifier":"@latam-mcp/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp","version":"0.1.1","transport":"stdio","scoredAt":"2026-08-08T07:27:52.217Z"},"score":{"total":0,"tier":"low","status":"scored","weekDelta":-5,"history":[{"date":"2026-08-08","total":0},{"date":"2026-08-07","total":1},{"date":"2026-08-06","total":2},{"date":"2026-08-05","total":3},{"date":"2026-08-04","total":4},{"date":"2026-08-03","total":5},{"date":"2026-08-02","total":5},{"date":"2026-08-01","total":5},{"date":"2026-07-31","total":5},{"date":"2026-07-30","total":46},{"date":"2026-07-29","total":46},{"date":"2026-07-28","total":25},{"date":"2026-07-27","total":24}]},"categories":[{"name":"Supply Chain Security","score":50,"verdict":"unverified","reasons":["No malware found by supply-chain analysis.","Known CVEs could not be checked: we could not find this package in its registry.","Install-script risk not yet assessed.","Dependency health could not be checked: we could not find this package in its registry."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.inconclusive","args":{"reason":"root_not_published"}},{"code":"installscript.inconclusive","args":{"reason":"metadata_unavailable"}},{"code":"dephealth.inconclusive","args":{"reason":"root_not_published"}}]},{"name":"Provenance & Transparency","score":0,"verdict":"fail","reasons":["Repository check failed: the declared repository URL returned HTTP 404.","Provenance check failed: the registry has no such package, so there's no artefact to verify.","License check failed: the registry has no such package, so no license can be read.","Maintenance check failed: the registry has no such package, so there's no release history to read.","Security-disclosure policy not yet verified: we couldn't inspect the source repository."],"codes":[{"code":"provenance.repo_http_error","args":{"status":"404"}},{"code":"provenance.package_absent","args":{"reason":"package_absent"}},{"code":"license.package_absent","args":{"reason":"package_absent"}},{"code":"maintenance.package_absent","args":{"reason":"package_absent"}},{"code":"disclosure.repo_inconclusive","args":{"reason":"repo_unreachable"}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: this package could not be installed in a clean environment, so we have no schema to assess."],"codes":[{"code":"schema.sandbox_failed","args":{"reason":"install_failure","status":"failed"}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: this package could not be installed in a clean environment, so we have no schema to compare."],"codes":[{"code":"stability.sandbox_failed","args":{"reason":"install_failure","status":"failed"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: this package could not be installed in a clean environment, so we have no tool definitions to assess."],"codes":[{"code":"toolquality.sandbox_failed","args":{"reason":"install_failure","status":"failed"}}]},{"name":"Tool Safety","score":null,"verdict":"unverified","reasons":[],"codes":[]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Protocol version not yet verified: this package could not be installed in a clean environment, so we never saw its MCP handshake."],"codes":[{"code":"cap.sandbox_failed","args":{"reason":"install_failure","status":"failed"}}]}],"inconclusive":["Known CVEs could not be checked: we could not find this package in its registry.","Install-script risk not yet assessed.","Dependency health could not be checked: we could not find this package in its registry.","Security-disclosure policy not yet verified: we couldn't inspect the source repository.","Schema quality not yet verified: this package could not be installed in a clean environment, so we have no schema to assess.","Stability not yet verified: this package could not be installed in a clean environment, so we have no schema to compare.","Tool coverage not yet verified: this package could not be installed in a clean environment, so we have no tool definitions to assess.","Protocol version not yet verified: this package could not be installed in a clean environment, so we never saw its MCP handshake."],"malware":[],"components":[{"slug":"latam-mcp-mcp","type":"npm","identifier":"@latam-mcp/mcp","withdrawn":false,"score":0,"current":true,"url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp","markdownUrl":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@latam-mcp/mcp"},{"label":"Version","value":"0.1.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-08-08T07:27:52.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"package_absent","label":"Package not found","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-07-27","recent":[{"id":"chg_019fe045-65ac-71a8-9586-3e5c34d09469","kind":"score.total_changed","summary":"Trust score (1 → 15)","materiality":"functional","direction":"improvement","scoreDelta":14,"occurredOn":"2026-08-08","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fe045-65ac-71a8-9586-3e5c34d09469"},{"id":"chg_019fdb11-c83a-7e56-829b-530c7adbaa03","kind":"score.total_changed","summary":"Trust score (2 → 15)","materiality":"functional","direction":"improvement","scoreDelta":13,"occurredOn":"2026-08-07","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fdb11-c83a-7e56-829b-530c7adbaa03"},{"id":"chg_019fd5f8-9ddf-7359-9d54-dea9c486ce9c","kind":"score.total_changed","summary":"Trust score (3 → 15)","materiality":"functional","direction":"improvement","scoreDelta":12,"occurredOn":"2026-08-06","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fd5f8-9ddf-7359-9d54-dea9c486ce9c"},{"id":"chg_019fd0c4-d30d-7388-81f5-ccccd53b7329","kind":"score.total_changed","summary":"Trust score (4 → 15)","materiality":"functional","direction":"improvement","scoreDelta":11,"occurredOn":"2026-08-05","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fd0c4-d30d-7388-81f5-ccccd53b7329"},{"id":"chg_019fcbc2-887a-7297-adfc-21375238e8a3","kind":"score.total_changed","summary":"Trust score (5 → 15)","materiality":"functional","direction":"improvement","scoreDelta":10,"occurredOn":"2026-08-04","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fcbc2-887a-7297-adfc-21375238e8a3"},{"id":"chg_019fc678-25ce-7187-8ad8-f82edfb7b69f","kind":"score.total_changed","summary":"Trust score (5 → 15)","materiality":"functional","direction":"improvement","scoreDelta":10,"occurredOn":"2026-08-03","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fc678-25ce-7187-8ad8-f82edfb7b69f"},{"id":"chg_019fc14e-2bff-78e2-a4ed-8b53739b35ed","kind":"check.verdict","summary":"Source repository (pass → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-02","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fc14e-2bff-78e2-a4ed-8b53739b35ed"},{"id":"chg_019fc14e-2c00-7780-a971-7965517f2e3d","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-08-02","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fc14e-2c00-7780-a971-7965517f2e3d"},{"id":"chg_019fc14e-2c00-7c3e-96d9-159e6d82075c","kind":"check.unverifiable","summary":"Security disclosure (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-02","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fc14e-2c00-7c3e-96d9-159e6d82075c"},{"id":"chg_019fc14e-2c01-716c-bac6-b131126985ce","kind":"score.total_changed","summary":"Trust score (5 → 15)","materiality":"functional","direction":"improvement","scoreDelta":10,"occurredOn":"2026-08-02","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fc14e-2c01-716c-bac6-b131126985ce"},{"id":"chg_019fbdf1-71c4-74f1-ae8e-7f363d9a51d4","kind":"check.reason","summary":"Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-01","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fbdf1-71c4-74f1-ae8e-7f363d9a51d4"},{"id":"chg_019fbdf1-71c4-7b40-b24c-8d3a78ce0e54","kind":"check.reason","summary":"Schema quality (Schema quality not yet verified: our sandbox run of this package did not complete, so we have no schema to assess.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-01","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fbdf1-71c4-7b40-b24c-8d3a78ce0e54"},{"id":"chg_019fbdf1-71c5-724c-b917-4c3bd7d0e160","kind":"check.reason","summary":"Capabilities (Protocol version not yet verified: our sandbox run of this package did not complete, so we never saw its MCP handshake.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-01","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fbdf1-71c5-724c-b917-4c3bd7d0e160"},{"id":"chg_019fbdf1-71c5-77eb-8f57-af584d7eb61a","kind":"check.reason","summary":"Tool coverage (Tool coverage not yet verified: our sandbox run of this package did not complete, so we have no tool definitions to assess.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-01","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fbdf1-71c5-77eb-8f57-af584d7eb61a"},{"id":"chg_019fba01-1e26-7f42-80de-98aa813d9d0e","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-07-31","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fba01-1e26-7f42-80de-98aa813d9d0e"},{"id":"chg_019fae44-54e4-762a-a361-8af3e39c23e3","kind":"check.reverified","summary":"Provenance (unverified → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-07-29","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fae44-54e4-762a-a361-8af3e39c23e3"},{"id":"chg_019fae44-54e4-7ce7-b8a4-2b42e944957f","kind":"check.reverified","summary":"Install scripts (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-07-29","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fae44-54e4-7ce7-b8a4-2b42e944957f"},{"id":"chg_019fae44-54e5-72f0-a2cd-3452d5626a90","kind":"check.reverified","summary":"Known CVEs (unverified → partial)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-07-29","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fae44-54e5-72f0-a2cd-3452d5626a90"},{"id":"chg_019fae44-54e5-781e-b10e-e1c275f73e83","kind":"check.reverified","summary":"License (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-07-29","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fae44-54e5-781e-b10e-e1c275f73e83"},{"id":"chg_019fae44-54e5-7d19-b8b5-8df9830733cd","kind":"check.reverified","summary":"Maintenance (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-07-29","url":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp#chg-chg_019fae44-54e5-7d19-b8b5-8df9830733cd"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp","markdown":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp.md","changelogJson":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/tolomere21-latam-mcp/latam-mcp-mcp.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@latam-mcp/mcp"},{"label":"Socket report","href":"https://socket.dev/npm/package/@latam-mcp/mcp"},{"label":"Website","href":"https://latam-mcp.com/"}]}}