{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:29:39.147Z","url":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm","markdownUrl":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm.md","server":{"slug":"vardhjain-finos-mcp-cdm","name":"FINOS MCP - Common Domain Model (community)","registryName":"io.github.vardhjain/finos-mcp-cdm","description":"Read-only MCP for FINOS CDM 7.8.0 types and trade JSON validation. Independent project.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"finos-mcp-cdm","type":"pypi","identifier":"finos-mcp-cdm","withdrawn":false,"url":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm","version":"0.3.2","transport":"stdio","scoredAt":"2026-11-05T06:32:18.741Z"},"score":{"total":58,"tier":"low","status":"scored","weekDelta":-15,"history":[{"date":"2026-11-05","total":58},{"date":"2026-11-04","total":73},{"date":"2026-11-03","total":73},{"date":"2026-11-02","total":73},{"date":"2026-11-01","total":73},{"date":"2026-10-31","total":73},{"date":"2026-10-30","total":73},{"date":"2026-10-29","total":73},{"date":"2026-10-28","total":58},{"date":"2026-10-27","total":58},{"date":"2026-10-26","total":58}]},"categories":[{"name":"Supply Chain Security","score":50,"verdict":"partial","reasons":["Malware scan not yet available for this package.","No known CVEs affecting this package version or its production dependencies.","Runs hatchling.build at install time, a recognised build step with no custom scripting around it.","1 of 35 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"vendor_no_verdict"}},{"code":"cve.none","args":{}},{"code":"installscript.allowlisted","args":{"tool":"hatchling.build","hooks":"build_backend"}},{"code":"dephealth.assessed","args":{"deps":"35","unhealthy":"1"}}]},{"name":"Provenance & Transparency","score":100,"verdict":"pass","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to vardhjain/finos-mcp).","Clear OSI-approved license (Apache-2.0).","Actively maintained (last published 10 days ago).","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"vardhjain/finos-mcp"}},{"code":"license.osi","args":{"spdx":"Apache-2.0"}},{"code":"maintenance.recent","args":{"age_days":"10"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":39,"verdict":"fail","reasons":["0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).","AI-judged instruction clarity (fair).","Tool/resource definitions use about 712 tokens (~71/item across 10 items; 9 tools + 1 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.descriptions","args":{"pct":"0"}},{"code":"schema.ai_quality","args":{"band":"fair"}},{"code":"schema.footprint_lean","args":{"avg":"71","items":"10","tools":"9","tokens":"712","resources":"1"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":71,"verdict":"fail","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","0% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"0"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"9"}},{"code":"toolsafety.manipulation_clean","args":{"units":"11","judged":"11"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a current MCP spec version (2026-07-28)."],"codes":[{"code":"protocol.current","args":{"version":"2026-07-28"}}]}],"inconclusive":["Malware scan not yet available for this package.","Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"malware":[],"components":[{"slug":"finos-mcp-cdm","type":"pypi","identifier":"finos-mcp-cdm","withdrawn":false,"score":58,"current":true,"url":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm","markdownUrl":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm.md"}],"facts":[{"label":"Registry","value":"pypi"},{"label":"Package","value":"finos-mcp-cdm"},{"label":"Version","value":"0.3.2"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"describe_type","title":null,"description":"Describe one CDM type by name (TradeState) or fully qualified name\n(cdm.event.common.TradeState): every field with its type and cardinality, choice\nalternatives, which types reference it, and the schema resource to cite.","inputs":[{"name":"name","type":"string","required":true,"description":null}],"outputs":[{"name":"alternatives","type":"array","required":false,"description":"For choice types: the alternative type names."},{"name":"description","type":null,"required":true,"description":null},{"name":"extends","type":null,"required":true,"description":null},{"name":"fields","type":"array","required":true,"description":null},{"name":"kind","type":"string","required":true,"description":null},{"name":"name","type":"string","required":true,"description":null},{"name":"namespace","type":"string","required":true,"description":null},{"name":"root_type","type":"boolean","required":true,"description":null},{"name":"schema_filename","type":"string","required":true,"description":null},{"name":"schema_uri","type":"string","required":true,"description":null},{"name":"used_by","type":"array","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":65},{"name":"list_types","title":null,"description":"List CDM types. Filter by namespace prefix (cdm.product), kind (type, enum, choice,\nmeta) or root types only (the 16 top-level document types such as TradeState).","inputs":[{"name":"kind","type":null,"required":false,"description":null},{"name":"namespace","type":null,"required":false,"description":null},{"name":"page","type":"integer","required":false,"description":null},{"name":"page_size","type":"integer","required":false,"description":null},{"name":"root_only","type":"boolean","required":false,"description":null}],"outputs":[{"name":"items","type":"array","required":true,"description":null},{"name":"page","type":"integer","required":true,"description":null},{"name":"page_size","type":"integer","required":true,"description":null},{"name":"total","type":"integer","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":82},{"name":"list_products","title":null,"description":"Catalogue of product types: the product template types (NonTransferableProduct,\nTransferableProduct, TradableProduct, EconomicTerms, Payout) and every Payout\nalternative (InterestRatePayout, CreditDefaultPayout, OptionPayout, ...), with the\nvendored samples that use each.","inputs":[],"outputs":[{"name":"cdm_version","type":"string","required":true,"description":null},{"name":"entries","type":"array","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":70},{"name":"validate_object","title":null,"description":"Validate a CDM JSON object against the published schema. The format (Rune with\n'@type'/'@key'/'@ref' keys, or legacy 'value'/'meta' wrappers) is detected unless\ngiven. The type comes from '@type' or the type argument (e.g. TradeState). Use\nschema_version='6.30.0' for legacy documents produced by CDM 6. Every issue carries\nthe JSON path in your document and a kind (required, cardinality, type, enum, ...).","inputs":[{"name":"format","type":"string","required":false,"description":null},{"name":"object","type":"object","required":true,"description":null},{"name":"schema_version","type":null,"required":false,"description":null},{"name":"type","type":null,"required":false,"description":null}],"outputs":[{"name":"format_detected","type":null,"required":false,"description":null},{"name":"issues","type":"array","required":false,"description":null},{"name":"stats","type":"object","required":false,"description":null},{"name":"type","type":null,"required":false,"description":null},{"name":"valid","type":"boolean","required":true,"description":null},{"name":"validator","type":"string","required":true,"description":null},{"name":"warnings","type":"array","required":false,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":144},{"name":"explain_event","title":null,"description":"Explain a CDM BusinessEvent. Pass the event JSON to read its qualifier, instruction\nkinds, before/after trade states and the products involved; or pass a qualifier name\n(Execution, Termination, ...) to get the Qualify_* rule from the CDM sources and a\nsample that exercises it.","inputs":[{"name":"event","type":null,"required":false,"description":null},{"name":"qualifier","type":null,"required":false,"description":null}],"outputs":[{"name":"after_products","type":"array","required":false,"description":null},{"name":"after_trade_count","type":"integer","required":false,"description":null},{"name":"before_trade_count","type":"integer","required":false,"description":null},{"name":"format_detected","type":null,"required":false,"description":null},{"name":"instruction_types","type":"array","required":false,"description":null},{"name":"notes","type":"array","required":false,"description":null},{"name":"qualifier","type":null,"required":true,"description":null},{"name":"qualify_function","type":null,"required":true,"description":null},{"name":"sample_uris","type":"array","required":false,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":82},{"name":"search_types","title":null,"description":"Keyword search over CDM type names and descriptions (e.g. 'floating rate payout').","inputs":[{"name":"k","type":"integer","required":false,"description":null},{"name":"query","type":"string","required":true,"description":null}],"outputs":[{"name":"result","type":"array","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":40},{"name":"get_sample","title":null,"description":"Fetch one vendored sample document by name (see list_samples), e.g. a Rune-format\nExecution BusinessEvent for an interest-rate swap, to use as a template.","inputs":[{"name":"name","type":"string","required":true,"description":null}],"outputs":[{"name":"citation_uri","type":"string","required":true,"description":null},{"name":"format","type":"string","required":true,"description":null},{"name":"json_document","type":"object","required":true,"description":null},{"name":"name","type":"string","required":true,"description":null},{"name":"root_type","type":null,"required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":50},{"name":"list_samples","title":null,"description":"List the vendored sample documents (Rune-format from CDM 7.8.0, legacy from 6.30.0).","inputs":[{"name":"format","type":null,"required":false,"description":null}],"outputs":[{"name":"samples","type":"array","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":41},{"name":"server_info","title":null,"description":"Describe this server: standard version, upstream provenance, exposed counts, latency, policy.","inputs":[],"outputs":[{"name":"counts","type":"object","required":false,"description":null},{"name":"latency","type":"object","required":false,"description":null},{"name":"name","type":"string","required":true,"description":null},{"name":"policy","type":"object","required":false,"description":null},{"name":"read_only","type":"boolean","required":false,"description":null},{"name":"resources","type":"array","required":false,"description":null},{"name":"standard","type":"string","required":true,"description":null},{"name":"standard_version","type":null,"required":false,"description":null},{"name":"tools","type":"array","required":false,"description":null},{"name":"upstream_commit","type":null,"required":false,"description":null},{"name":"upstream_ref","type":null,"required":false,"description":null},{"name":"upstream_repo","type":null,"required":false,"description":null},{"name":"version","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":25}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T06:32:18.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[{"hook":"build_backend","tier":"allowlisted"}],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":35,"partial":false,"deprecated":null,"stale":null,"noRepo":1}},"mismatches":[],"changelog":{"trackingSince":"2026-10-26","recent":[{"id":"chg_01a1aa68-844d-787b-a4ac-3046f1aabf0e","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm#chg-chg_01a1aa68-844d-787b-a4ac-3046f1aabf0e"},{"id":"chg_01a1aa68-844e-7d04-9dc5-652f7557c300","kind":"score.total_changed","summary":"Trust score (73 → 58)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm#chg-chg_01a1aa68-844e-7d04-9dc5-652f7557c300"},{"id":"chg_01a185af-550e-70a6-a59c-a386c28d17ae","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm#chg-chg_01a185af-550e-70a6-a59c-a386c28d17ae"},{"id":"chg_01a185af-550f-7f35-b2de-bc19b8e69c83","kind":"score.total_changed","summary":"Trust score (58 → 73)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm#chg-chg_01a185af-550f-7f35-b2de-bc19b8e69c83"},{"id":"chg_01a179f0-5b18-7d66-95fe-ecc09d952517","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm#chg-chg_01a179f0-5b18-7d66-95fe-ecc09d952517"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm/changelog.json"},"links":{"html":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm","markdown":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm.md","changelogJson":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm/changelog.json","changelogRss":"https://verifymcp.io/servers/vardhjain-finos-mcp-cdm/finos-mcp-cdm.xml","external":[{"label":"PyPI project","href":"https://pypi.org/project/finos-mcp-cdm/"},{"label":"Socket report","href":"https://socket.dev/pypi/package/finos-mcp-cdm"},{"label":"Repository","href":"https://github.com/vardhjain/finos-mcp"},{"label":"Website","href":"https://vardhjain.github.io/finos-mcp/"}]}}