<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.zerozaky/spoiler · spoiler · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/zerozaky-spoiler/spoiler.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] spoiler: Transport (pass → fail)</title><link>https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_01a03787-1c38-71d2-9231-f27c11cbfec9</link><guid isPermaLink="true">https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_01a03787-1c38-71d2-9231-f27c11cbfec9</guid><description>Transport (pass → fail). Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 06:06:36 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] spoiler: Stability (0.37 → unverified)</title><link>https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fdad3-f320-7366-a7fe-a8ac042463ac</link><guid isPermaLink="true">https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fdad3-f320-7366-a7fe-a8ac042463ac</guid><description>Stability (0.37 → unverified). Compared against 2026-08-06.</description><pubDate>Fri, 07 Aug 2026 06:05:51 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] spoiler: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fdad3-f321-758e-a195-a8d57d859c1b</link><guid isPermaLink="true">https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fdad3-f321-758e-a195-a8d57d859c1b</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-08-06.</description><pubDate>Fri, 07 Aug 2026 06:05:51 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] spoiler: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fdad3-f323-7c52-ab9c-2d499da803a1</link><guid isPermaLink="true">https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fdad3-f323-7c52-ab9c-2d499da803a1</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-08-06.</description><pubDate>Fri, 07 Aug 2026 06:05:51 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] spoiler: HSTS header (unverified → pass)</title><link>https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fd086-fd68-7beb-a74c-78fd0346bc40</link><guid isPermaLink="true">https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fd086-fd68-7beb-a74c-78fd0346bc40</guid><description>HSTS header (unverified → pass). Compared against 2026-08-04.</description><pubDate>Wed, 05 Aug 2026 06:05:35 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] spoiler: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 12 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fd086-fd69-7ad5-b1df-03f78bb19576</link><guid isPermaLink="true">https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fd086-fd69-7ad5-b1df-03f78bb19576</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 12 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-04.</description><pubDate>Wed, 05 Aug 2026 06:05:35 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] spoiler: HSTS header (pass → unverified)</title><link>https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fcb5e-cded-79f4-b1fe-d19073acdbc6</link><guid isPermaLink="true">https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fcb5e-cded-79f4-b1fe-d19073acdbc6</guid><description>HSTS header (pass → unverified). Compared against 2026-08-03.</description><pubDate>Tue, 04 Aug 2026 06:03:35 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] spoiler: Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.)</title><link>https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fcb5e-cdee-742c-8193-c260481734ee</link><guid isPermaLink="true">https://verifymcp.io/servers/zerozaky-spoiler/spoiler#chg-chg_019fcb5e-cdee-742c-8193-c260481734ee</guid><description>Authorization (Authorisation not yet verified: we couldn&apos;t confirm whether this endpoint requires it.). Compared against 2026-08-03.</description><pubDate>Tue, 04 Aug 2026 06:03:35 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>