<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Zambo · api-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/zambodotdev-zambo/api-mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] api-mcp: Tool “day_pass_activate” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0b81e-9cb9-714f-a1fb-a26424b9b45c</link><guid isPermaLink="true">https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0b81e-9cb9-714f-a1fb-a26424b9b45c</guid><description>Tool “day_pass_activate” rewrote its description, which is the text the model reads. Compared against 2026-09-18.</description><pubDate>Sat, 19 Sep 2026 05:23:28 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[CRITICAL] api-mcp: Authorization (partial → fail)</title><link>https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0a384-439b-7235-ab56-feae858b583b</link><guid isPermaLink="true">https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0a384-439b-7235-ab56-feae858b583b</guid><description>Authorization (partial → fail). Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 05:22:28 GMT</pubDate><category>critical</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] api-mcp: Tool “day_pass_activate” is now declared destructive</title><link>https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0a384-439e-7a3d-b0e0-b26a5b68c85e</link><guid isPermaLink="true">https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0a384-439e-7a3d-b0e0-b26a5b68c85e</guid><description>Tool “day_pass_activate” is now declared destructive. Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 05:22:28 GMT</pubDate><category>security</category><category>neutral</category><category>tool.destructive_set</category></item><item><title>[SECURITY] api-mcp: Tool “day_pass_activate” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0a384-439e-7e3e-9684-e1d0f3d776c2</link><guid isPermaLink="true">https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0a384-439e-7e3e-9684-e1d0f3d776c2</guid><description>Tool “day_pass_activate” rewrote its description, which is the text the model reads. Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 05:22:28 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] api-mcp: Tool “ghost_audit_site” is now declared destructive</title><link>https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0a384-439f-7a39-b9bf-babdcc73c1ea</link><guid isPermaLink="true">https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0a384-439f-7a39-b9bf-babdcc73c1ea</guid><description>Tool “ghost_audit_site” is now declared destructive. Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 05:22:28 GMT</pubDate><category>security</category><category>neutral</category><category>tool.destructive_set</category></item><item><title>[SECURITY] api-mcp: Tool “zambo_universal” is now declared destructive</title><link>https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0a384-43a2-7464-a7d1-f119e6f84c0f</link><guid isPermaLink="true">https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a0a384-43a2-7464-a7d1-f119e6f84c0f</guid><description>Tool “zambo_universal” is now declared destructive. Compared against 2026-09-14.</description><pubDate>Tue, 15 Sep 2026 05:22:28 GMT</pubDate><category>security</category><category>neutral</category><category>tool.destructive_set</category></item><item><title>[SECURITY] api-mcp: The server rewrote its instructions, which are the text every model session reads</title><link>https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a09935-8785-79b2-a57e-219203f9ddac</link><guid isPermaLink="true">https://verifymcp.io/servers/zambodotdev-zambo/api-mcp#chg-chg_01a09935-8785-79b2-a57e-219203f9ddac</guid><description>The server rewrote its instructions, which are the text every model session reads. Compared against 2026-09-12.</description><pubDate>Sun, 13 Sep 2026 05:20:17 GMT</pubDate><category>security</category><category>neutral</category><category>server.instructions_changed</category></item></channel></rss>