{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-07T17:25:44.690Z","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli","markdownUrl":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli.md","server":{"slug":"writeitai-mountable","name":"mountable.io","registryName":"io.github.writeitai/mountable","description":"Manage persistent AI-agent filesystems. Paid hosted service; Apache-2.0 client.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mountable-cli","type":"npm","identifier":"mountable-cli","withdrawn":false,"url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli","version":"0.10.0","transport":"stdio","scoredAt":"2026-11-07T09:55:49.990Z"},"score":{"total":86,"tier":"high trust","status":"scored","weekDelta":2,"history":[{"date":"2026-11-07","total":86},{"date":"2026-11-06","total":86},{"date":"2026-11-05","total":86},{"date":"2026-11-04","total":85},{"date":"2026-11-03","total":85},{"date":"2026-11-02","total":85},{"date":"2026-11-01","total":84},{"date":"2026-10-31","total":84},{"date":"2026-10-30","total":83},{"date":"2026-10-29","total":83},{"date":"2026-10-28","total":82},{"date":"2026-10-27","total":82},{"date":"2026-10-26","total":66},{"date":"2026-10-25","total":81},{"date":"2026-10-24","total":81},{"date":"2026-10-23","total":65},{"date":"2026-10-22","total":80}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"pass","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","No production dependencies, so there is no dependency health to assess."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.no_dependencies","args":{"deps":"0","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to writeitai/mountable).","Clear OSI-approved license (Apache-2.0).","Actively maintained (last published 0 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"writeitai/mountable"}},{"code":"license.osi","args":{"spdx":"Apache-2.0"}},{"code":"maintenance.recent","args":{"age_days":"0"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":68,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 2565 tokens (~150/item across 17 items; 17 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"150","items":"17","tools":"17","tokens":"2565","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":53,"verdict":"partial","reasons":["Stability observed for 16 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"16"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":75,"verdict":"fail","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","0 of 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; \"delete_grant\" implies \"delete\" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.","An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_undeclared","args":{"pct":"0","tool":"delete_grant","verb":"delete","declared":"none","annotated":"0","destructive":"5"}},{"code":"toolsafety.manipulation_clean","args":{"units":"18","judged":"18"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a current MCP spec version (2026-07-28)."],"codes":[{"code":"protocol.current","args":{"version":"2026-07-28"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"mountable-cli","type":"npm","identifier":"mountable-cli","withdrawn":false,"score":86,"current":true,"url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli","markdownUrl":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"mountable-cli"},{"label":"Version","value":"0.10.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"create_filesystem","title":null,"description":"Create a filesystem and return it; its id is what tickets and mounts need. Needs a management key (mtblm_) or the login of an owner or admin; an API key gets management_key_required. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. Not idempotent, and names need not be unique: after a timeout or an unknown outcome, call list_filesystems and look for the name before creating again. Never retry blindly. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"name","type":"string","required":true,"description":"the filesystem's name; names need not be unique"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":153},{"name":"create_mount_ticket","title":null,"description":"Create a one-time mount ticket for a sandbox. The result is the mount session with its ticket (single use, valid for minutes) and mount_command, a convenience hint for a person. Agents must construct the documented mountable mount --ticket-stdin --json command with separately quoted arguments, not evaluate mount_command. Pass the ticket through stdin from MOUNTABLE_TICKET, never in an argument list or log. /mnt/mountable is only a default: use a caller-approved writable directory. Use an existing approved CLI; if installation is authorized, choose npm install --global --ignore-scripts mountable-cli or uv tool install mountable, then mountable version. Report setup blockers instead of using sudo or a remote shell installer. Linux mounts need FUSE. Validate the nonempty ticket and selected filesystem ID, then wait for a mounted JSON event matching the intended path, filesystem and mode before using the directory. Retries: pass your own idempotency_key and reuse it when retrying after an unknown outcome. A replay returns the existing session without a ticket. If that session is still requested, its ticket was lost: this tool revokes it and creates a new one with a fresh key, and the result names the old one as replaced_session_id. If it is active or later, the ticket was used: nothing is revoked and the tool fails with ticket_already_used; use a new idempotency_key for another mount. idempotency_conflict means an identical request is in progress. If the outcome is unknown (network_error or outcome_unknown), the error's idempotency_key is the key that request was sent with: retry with exactly that key, even if you did not choose it. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"idempotency_key","type":"string","required":false,"description":"a key you choose and reuse when retrying this request; a new key for each new mount"},{"name":"max_duration_seconds","type":"integer","required":false,"description":"the session's maximum duration in seconds; optional (default 12 hours, at most the API key's or login's expiry)"},{"name":"read_only","type":"boolean","required":false,"description":"mount read-only"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":452},{"name":"delete_grant","title":null,"description":"Remove a grant; sessions that relied on it end. Not idempotent: after an unknown outcome, call list_grants to see whether it is gone. Needs a management key (mtblm_) or the login of an owner or admin; an API key gets management_key_required. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"grant_id","type":"string","required":true,"description":"the grant's ID, from list_grants"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":143},{"name":"delete_webhook","title":null,"description":"Delete a webhook; deliveries to its URL stop. Not idempotent: after an unknown outcome, call list_webhooks to see whether it is gone. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"},{"name":"webhook_id","type":"string","required":true,"description":"the webhook ID, from list_webhooks"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":115},{"name":"enable_webhook","title":null,"description":"Re-enable a webhook disabled after 24 hours of failed deliveries (disabled_reason failing), once its endpoint works again; the next delivery is usually a files.resync. A webhook disabled as access_revoked cannot be re-enabled (error access_revoked): create a new one with `mountable webhooks create`. Safe to retry. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"},{"name":"webhook_id","type":"string","required":true,"description":"the webhook ID, from list_webhooks"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":150},{"name":"filesystem_usage","title":null,"description":"A filesystem's stored bytes and files against its quotas, and its traffic over 30 days. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. Read-only and safe to retry. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":93},{"name":"list_api_keys","title":null,"description":"List the organisation's API keys: id, name, filesystem_id (set for a key limited to one filesystem), expires_at and revoked; never their secrets. Creating a key is not a tool, because its answer is the key's secret: run `mountable api-keys create` or `mountable s3-keys create` (or use the SDKs) where the backend stores it. Needs a management key (mtblm_) or the login of an owner or admin; an API key gets management_key_required. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. Read-only and safe to retry. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":171},{"name":"list_filesystems","title":null,"description":"List the organisation's filesystems (an API key sees those it has a grant on; a management key sees all). org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. Read-only and safe to retry. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":88},{"name":"list_grants","title":null,"description":"List a filesystem's grants: id, principal_type (member, group or api_key), principal_id and mode (ro or rw). Needs a management key (mtblm_) or the login of an owner or admin; an API key gets management_key_required. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. Read-only and safe to retry. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":128},{"name":"list_mount_sessions","title":null,"description":"List a filesystem's live mount sessions (an API key sees those it created). org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. Read-only and safe to retry. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":91},{"name":"list_organizations","title":null,"description":"List the caller's mountable.io organisations (a key has exactly one). Read-only and safe to retry. On rate_limited, wait retry_after seconds before retrying.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":44},{"name":"list_s3_keys","title":null,"description":"List a filesystem's S3 keys: access_key_id, name, mode, expires_at and revoked; never their secrets. The bucket is the filesystem ID at https://s3.mountable.io (path-style). Creating a key is not a tool, because its answer is the key's secret: run `mountable api-keys create` or `mountable s3-keys create` (or use the SDKs) where the backend stores it. Needs a management key (mtblm_) or the login of an owner or admin; an API key gets management_key_required. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. Read-only and safe to retry. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":194},{"name":"list_webhooks","title":null,"description":"List a filesystem's webhooks: url, path_prefix, state (active or disabled), disabled_reason (failing or access_revoked) and the last delivery's outcome (last_success_at, last_failure, failing_since). Needs read-write access to the filesystem. Creating a webhook and rotating its secret are not tools, because their answer is the signing secret: run `mountable webhooks create` or `rotate-secret` (or use the SDKs) where the receiving backend stores it. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. Read-only and safe to retry. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":174},{"name":"revoke_api_key","title":null,"description":"Revoke an API key; its sessions end and its calls fail. Idempotent and safe to retry. Needs a management key (mtblm_) or the login of an owner or admin; an API key gets management_key_required. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"key_id","type":"string","required":true,"description":"the API key's ID, from list_api_keys"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":123},{"name":"revoke_mount_session","title":null,"description":"Revoke a mount session; its mount stops working. Idempotent and safe to retry. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"session_id","type":"string","required":true,"description":"the mount session ID"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":53},{"name":"revoke_s3_key","title":null,"description":"Revoke an S3 key; S3 refuses it within 15 seconds. Idempotent and safe to retry. Needs a management key (mtblm_) or the login of an owner or admin; an API key gets management_key_required. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"access_key_id","type":"string","required":true,"description":"the S3 key's access key ID, from list_s3_keys"},{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":142},{"name":"set_grant","title":null,"description":"Give a member, group or API key access to a filesystem, or change the mode of its grant. Sets the same grant when repeated, so it is safe to retry. Needs a management key (mtblm_) or the login of an owner or admin; an API key gets management_key_required. org_id is optional: a key uses its own organisation, and a login with one organisation uses that one. On rate_limited, wait retry_after seconds before retrying.","inputs":[{"name":"filesystem_id","type":"string","required":true,"description":"the filesystem ID"},{"name":"mode","type":"string","required":true,"description":"ro or rw"},{"name":"org_id","type":"string","required":false,"description":"the organisation ID; optional"},{"name":"principal_id","type":"string","required":true,"description":"the member's, group's or API key's ID"},{"name":"principal_type","type":"string","required":true,"description":"member, group or api_key"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":171}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-07T09:55:49.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":0,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-22","recent":[{"id":"chg_01a1b56f-9088-771e-a384-ae9f503a910c","kind":"check.measure","summary":"Schema quality (132 → 150)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-07","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a1b56f-9088-771e-a384-ae9f503a910c"},{"id":"chg_01a1b56f-9089-76f0-8826-a9826e650c5a","kind":"check.measure","summary":"Schema quality (excellent → good)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-07","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a1b56f-9089-76f0-8826-a9826e650c5a"},{"id":"chg_01a1b56f-9089-7c9c-be6f-44d051c2f65c","kind":"package.version_changed","summary":"Package version (0.8.0 → 0.10.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-07","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a1b56f-9089-7c9c-be6f-44d051c2f65c"},{"id":"chg_01a1b56f-908a-71d4-808e-07c63e2a5cbf","kind":"score.total_changed","summary":"Trust score (87 → 86)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-11-07","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a1b56f-908a-71d4-808e-07c63e2a5cbf"},{"id":"chg_01a1b389-ba19-796e-b79e-c0b01c28917e","kind":"score.total_changed","summary":"Trust score (86 → 87)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-07","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a1b389-ba19-796e-b79e-c0b01c28917e"},{"id":"chg_01a1a93d-33a0-7bfe-b6fe-062cec510a7b","kind":"score.total_changed","summary":"Trust score (85 → 86)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a1a93d-33a0-7bfe-b6fe-062cec510a7b"},{"id":"chg_01a199c9-420e-7467-8051-26753acd1c2a","kind":"score.total_changed","summary":"Trust score (84 → 85)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a199c9-420e-7467-8051-26753acd1c2a"},{"id":"chg_01a18f7c-866e-743d-af27-4a15ea81c897","kind":"score.total_changed","summary":"Trust score (83 → 84)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a18f7c-866e-743d-af27-4a15ea81c897"},{"id":"chg_01a18530-3ff0-7f14-9133-ba76090fddab","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a18530-3ff0-7f14-9133-ba76090fddab"},{"id":"chg_01a17ae3-b329-7c8b-b23b-386e13cd4c09","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a17ae3-b329-7c8b-b23b-386e13cd4c09"},{"id":"chg_01a17ae3-b32a-7ad5-9bf9-d145d34217c7","kind":"score.total_changed","summary":"Trust score (66 → 82)","materiality":"functional","direction":"improvement","scoreDelta":16,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a17ae3-b32a-7ad5-9bf9-d145d34217c7"},{"id":"chg_01a17a26-c485-73c3-8b6d-ebd5807b1cc7","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a17a26-c485-73c3-8b6d-ebd5807b1cc7"},{"id":"chg_01a17a26-c487-7aad-80c8-1be23e152a42","kind":"check.measure","summary":"Schema quality (886 → 1328)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a17a26-c487-7aad-80c8-1be23e152a42"},{"id":"chg_01a17a26-c488-7313-9d89-d8b9ad1f80d2","kind":"package.version_changed","summary":"Package version (0.6.0 → 0.8.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a17a26-c488-7313-9d89-d8b9ad1f80d2"},{"id":"chg_01a17a26-c488-7b4e-8e5f-35d6fdc20784","kind":"score.total_changed","summary":"Trust score (82 → 66)","materiality":"functional","direction":"regression","scoreDelta":-16,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a17a26-c488-7b4e-8e5f-35d6fdc20784"},{"id":"chg_01a175bd-0923-7e6c-891c-7907dd7dfe2a","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a175bd-0923-7e6c-891c-7907dd7dfe2a"},{"id":"chg_01a16b6f-bf6e-7039-9190-d03cd29e829a","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a16b6f-bf6e-7039-9190-d03cd29e829a"},{"id":"chg_01a16b6f-bf6e-7c21-8aa5-eba4ce8f902a","kind":"score.total_changed","summary":"Trust score (65 → 81)","materiality":"functional","direction":"improvement","scoreDelta":16,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a16b6f-bf6e-7c21-8aa5-eba4ce8f902a"},{"id":"chg_01a166a0-62b7-7f28-b4ae-8712938ba37e","kind":"score.total_changed","summary":"Trust score (80 → 65)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a166a0-62b7-7f28-b4ae-8712938ba37e"},{"id":"chg_01a166a0-62b7-70f7-b998-0437a759619a","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli#chg-chg_01a166a0-62b7-70f7-b998-0437a759619a"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli/changelog.json"},"links":{"html":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli","markdown":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli.md","changelogJson":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli/changelog.json","changelogRss":"https://verifymcp.io/servers/writeitai-mountable/mountable-cli.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/mountable-cli"},{"label":"Socket report","href":"https://socket.dev/npm/package/mountable-cli"},{"label":"Repository","href":"https://github.com/writeitai/mountable"},{"label":"Website","href":"https://mountable.io/docs/mcp"}]}}