This release adds 5 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryVinkius Cloud adds auto‑computed Behavioral Trust Score with tier badges and a public Security Passport on marketplace listings.
Full changelog
Highlights
Marketplace Behavioral Transparency
Vinkius Cloud now auto-computes a Behavioral Trust Score from the CapabilityLockfile (vurb.lock) at deploy time and exposes a public Security Passport on every marketplace listing — zero seller effort required.
- Behavioral Trust Score — Auto-computed from 10 lockfile signals. Tier badges: 🏆 Gold (≥85) · 🥈 Silver (≥60) · 🥉 Bronze (≥40) · ⚪ Unrated (<40).
- Security Passport — Public transparency tab on every listing: entitlements grid, tool surface, middleware chain, and integrity digest — all from
vurb.lock. - Publisher Type —
official|partner|communityat the MCP server level. - i18n Marketplace Descriptions — EN, PT, ES, FR via
I18nLangTabscomponent. - BYOC Buyer Auth Toggle — shadcn-vue Switch with zero-knowledge privacy disclaimer.
Changed
- Replaced custom CSS toggles with shadcn-vue
Switchcomponent. - Trust badge + publisher badge in listing header and dashboard.
Database
- Migration
2026_03_27_150000— Adds i18n, trust, and behavioral surface columns.
Full changelog: CHANGELOG.md
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About vinkius-labs/mcp-fusion
A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.
Related context
Related tools
Beta — feedback welcome: [email protected]