SecScan · api-mcp · changes | VerifyMCPRecorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.https://verifymcp.io[SECURITY] api-mcp: Tool “scan_url” rewrote its description, which is the text the model readshttps://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0f500-ce23-7dd1-af49-b57b164d6448https://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0f500-ce23-7dd1-af49-b57b164d6448Tool “scan_url” rewrote its description, which is the text the model reads. Compared against 2026-09-30.Thu, 01 Oct 2026 01:07:45 GMTsecurityneutraltool.description_changed[SECURITY] api-mcp: Authorization (fail → pass)https://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0e067-f38d-753d-b347-4a097db2f4b4https://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0e067-f38d-753d-b347-4a097db2f4b4Authorization (fail → pass). Compared against 2026-09-26.Sun, 27 Sep 2026 01:08:23 GMTsecurityimprovementcheck.verdict[SECURITY] api-mcp: First check of Authorization (partial)https://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0e067-f38f-7abc-9782-1a733a68ea5dhttps://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0e067-f38f-7abc-9782-1a733a68ea5dFirst check of Authorization (partial). Compared against 2026-09-26.Sun, 27 Sep 2026 01:08:23 GMTsecurityneutralcheck.appeared[SECURITY] api-mcp: Transport (unverified → pass)https://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0db41-aa4c-7353-8802-efe4925f9d34https://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0db41-aa4c-7353-8802-efe4925f9d34Transport (unverified → pass). Compared against 2026-09-25.Sat, 26 Sep 2026 01:08:28 GMTsecurityimprovementcheck.reverified[SECURITY] api-mcp: Injection markers (unverified → pass)https://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0db41-aa4d-71fd-8dcf-035d98aa9a5fhttps://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0db41-aa4d-71fd-8dcf-035d98aa9a5fInjection markers (unverified → pass). Compared against 2026-09-25.Sat, 26 Sep 2026 01:08:28 GMTsecurityimprovementcheck.reverified[SECURITY] api-mcp: Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.)https://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0db41-aa4d-76d0-99a9-ace913e0d6behttps://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0db41-aa4d-76d0-99a9-ace913e0d6beAuthorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.). Compared against 2026-09-25.Sat, 26 Sep 2026 01:08:28 GMTsecurityneutralcheck.reason[SECURITY] api-mcp: First check of Judged manipulation (pass)https://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0db41-aa4d-7a9c-9928-d19e211cda27https://verifymcp.io/servers/us-secscan-secscan/api-mcp#chg-chg_01a0db41-aa4d-7a9c-9928-d19e211cda27First check of Judged manipulation (pass). Compared against 2026-09-25.Sat, 26 Sep 2026 01:08:28 GMTsecurityneutralcheck.appeared