--- title: "Company records answer twelve buyer questions, and the Model Context Protocol server reads them fact by fact: Trooth changelog - Trooth" description: "Every published company record now answers twelve buyer questions from its own fields and gives each fact an ID and a sentence that stands on its own. Trooth's Model Context Protocol (MCP) server, version 1.8.0, adds four read-only tools, two prompts and three resources, and records can now be asked about at /ask, downloaded in bulk and followed in feeds." canonical_url: "https://trooth.co/changelog/2026-10-16-record-contract-and-mcp-1-8" markdown_url: "https://trooth.co/changelog/2026-10-16-record-contract-and-mcp-1-8.md" generated_from: "the rendered page, converted to Markdown when this was requested" agent_index: "https://trooth.co/llms.txt" --- [Back to changelog](https://trooth.co/changelog) New October 16, 20263 minute read # Company records answer twelve buyer questions, and the Model Context Protocol server reads them fact by fact Every published company record now answers twelve buyer questions from its own fields and gives each fact an ID and a sentence that stands on its own. Trooth's Model Context Protocol (MCP) server, version 1.8.0, adds four read-only tools, two prompts and three resources, and records can now be asked about at /ask, downloaded in bulk and followed in feeds. ## What changed Every published company record now follows the shared record contract of 2026-10-16. It answers twelve buyer questions, such as whether the company trains artificial intelligence (AI) models on customer data and where customer data is stored, each from the record's own fields, with its provenance, its date and a link to that answer on the company's Trust Profile. A question the record does not hold is marked not published; nothing is worked out from other fields. Answers keep three negatives apart: no means the record holds a negative value, not published means the company has not published it, and not read means Trooth's reading did not read it. Each fact has a stable ID, such as security.mfa_methods, and a sentence that says on its own who said it, when and what. The record's summary names each check in Trooth's latest reading that did not come out as expected, with what was expected and what was observed. Controls that the company's own Trust Center lists as not yet in place are shown as the company states them. Where Trooth observed the same thing a company declares, its observation is shown beside the declaration. Declared facts carry their edit history where the record keeps one: the old value, the new value, when, and the role that made the change (owner, admin, member or Trooth), never a name. Trooth's Model Context Protocol (MCP) server is now version 1.8.0. Four read-only tools are new: trooth_resolve_company finds a company's record from a domain, web address, Trooth slug or name; trooth_get_fact reads one buyer question answer or one fact; trooth_list_companies lists companies by industry, data region, whether Trooth witnessed them and whether they published their own profile, in alphabetical order; and trooth_company_changes reads how a record changed, version by version. trooth_search_companies now returns its results a page at a time with a cursor. Two prompts are new, vendor_due_diligence and vendors_side_by_side, and three resources: trooth://provenance-glossary, trooth://buyer-questions and trooth://schema. Every tool is marked read only, and only trooth_outside_in_read, which fetches the domain you name, is marked as reaching beyond Trooth. When one of the new tools cannot answer as asked, its answer says why with an error code. Beside the server: /ask answers one of the twelve buyer questions about one company from that company's record and generates no text of its own; /api/network/bulk downloads every public record, one per line, with a manifest of versions and hashes; the Network and each company publish a machine-readable JSON Feed of record changes; /docs/query-privacy says what Trooth keeps when you or an agent ask about a company; /network/corrections lists every settled challenge to a fact on a published record, with its outcome and date; and /network/accuracy is where the results of checking answers against the records they cite are printed. ## Why it changed A buyer looking into a vendor asks the same questions every time, and an agent answering for them needs to cite one fact with who said it and when, and to keep a company that said no apart from one that has said nothing. ## Who is affected - **Affected:** Anyone who reads a company's record on the Trooth Network, people and agents alike, and developers who read records through /api/network/profile or the Model Context Protocol (MCP) server. Companies with a published record do not need to do anything: every answer is read from what their record already holds. - **Availability:** Everyone, from today, with no account: the records, /ask, the bulk download, the feeds and every tool on the Model Context Protocol (MCP) server except the one that reads your own workspace after sign-in. - **Release stage:** Available. - **Areas:** Trust Profiles, Network, API, MCP server. ## What to do **No action required.** Nothing anyone builds on changed. The new members of /api/network/profile are added to contract 2 and remove nothing, and the seven tools the Model Context Protocol (MCP) server already had keep their names, their required arguments and the answers they mark as errors. To use the new tools, ask the server for its list of tools again. ## Versions and migration - **Trooth MCP server:** `1.8.0` - **Record contract:** `2026-10-16` ## Dates - **Announced:** October 16, 2026, the day this entry was written. Entries are never backdated. - **Released:** October 16, 2026. ## What this does not fix The record for this server in the MCP Registry, version 1.1.7, is prepared and is published separately; until it is read back from the registry, the registry lists 1.1.6. No accuracy run has been made yet, and /network/accuracy says so rather than showing a figure. Edit history appears only on facts whose record keeps one, and controls not yet in place only for companies whose Trust Center lists them. ## Read more - [The guide for agents](https://trooth.co/docs/agents) - [Query privacy](https://trooth.co/docs/query-privacy) - [The corrections log](https://trooth.co/network/corrections) On this page - What changed - Why it changed - Who is affected - What to do - Versions and migration - Dates - What this does not fix - Read more [New](https://trooth.co/changelog?type=new)[Trust Profiles](https://trooth.co/changelog?area=trust-profile)[Network](https://trooth.co/changelog?area=network)[API](https://trooth.co/changelog?area=api)[MCP server](https://trooth.co/changelog?area=mcp) [Back to changelog](https://trooth.co/changelog) ## Related changes - [OCT.15NewAgent authority: delegations, approvals and signed evidence references for a workspace's agentsCompany workspace +3](https://trooth.co/changelog/2026-10-15-agent-authority) - [OCT.15NewDocument digests, an owner-signed record, and registry readings that say when and from what they were readTrust Profiles +4](https://trooth.co/changelog/2026-10-15-document-digests-and-owner-signed-record) - [OCT.15DeprecationThe compare pages and the compare tool are withdrawnNetwork +3](https://trooth.co/changelog/2026-10-15-compare-withdrawn) - [OCT.12DeprecationThe older profile lookup and the version 1 webhook signature retire on April 30, 2027API +4](https://trooth.co/changelog/2026-10-12-legacy-lookup-and-v1-signature-retire) - [OCT.07NewTrooth command-line tool 0.14.0: a company's own signed declaration, and the proof behind each tie in the public recordCLI +1](https://trooth.co/changelog/2026-10-07-cli-0-14-0-declarations) - [OCT.07NewTrooth command-line tool 0.13.0: the guard for agent actions, and what each public record reading rests onCLI +1](https://trooth.co/changelog/2026-10-07-cli-0-13-0-guard) ## Follow what changes at Trooth Every entry by email, or a feed narrowed to one area or to the changes that need you to act. ## Product updates by email Occasional notes when something on this page changes. You get one confirmation email when you subscribe, every email carries an unsubscribe link, and the address is never sold or shared. Email address [RSS](https://trooth.co/changelog/rss.xml)[Trust Profiles only](https://trooth.co/changelog/rss.xml?area=trust-profile)[Needs action](https://trooth.co/changelog/rss.xml?action=required) ## Structured data ```json { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://trooth.co/#org", "name": "Trooth", "legalName": "Trooth, LLC", "alternateName": [ "Trooth, LLC", "Trooth Network", "trooth.co" ], "url": "https://trooth.co", "logo": { "@type": "ImageObject", "@id": "https://trooth.co/#logo", "url": "https://trooth.co/brand/trooth-mark_black-on-white_1024.png", "contentUrl": "https://trooth.co/brand/trooth-mark_black-on-white_1024.png", "width": 1024, "height": 1024, "caption": "Trooth" }, "image": { "@id": "https://trooth.co/#logo" }, "description": "Trooth is an infrastructure and cybersecurity company providing Machine-Readable Trust. The Trooth Network keeps one current Machine-Readable Trust Profile per company, each fact sourced. Trooth signs what it witnessed; company declarations are unsigned.", "foundingDate": "2025-12-16", "address": { "@type": "PostalAddress", "streetAddress": "777 Brickell Ave, Suite 500, PMB 1174", "addressLocality": "Miami", "addressRegion": "FL", "postalCode": "33131", "addressCountry": "US" }, "contactPoint": { "@type": "ContactPoint", "contactType": "customer support", "email": "hello@trooth.co", "url": "https://trooth.co/contact" }, "sameAs": [ "https://x.com/Troothllc", "https://github.com/troothllc", "https://www.crunchbase.com/organization/trooth", "https://www.wikidata.org/wiki/Q141292994", "https://www.youtube.com/@Troothllc", "https://www.trustpilot.com/review/trooth.co" ] }, { "@type": "WebSite", "@id": "https://trooth.co/#website", "url": "https://trooth.co", "name": "Trooth", "alternateName": "Trooth Network", "inLanguage": "en", "publisher": { "@id": "https://trooth.co/#org" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://trooth.co/network?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "ItemList", "@id": "https://trooth.co/#sitelinks", "name": "Trooth sitelinks", "itemListElement": [ { "@type": "SiteNavigationElement", "position": 1, "name": "Join Trooth for free", "url": "https://trooth.co/signup" }, { "@type": "SiteNavigationElement", "position": 2, "name": "Company, Trooth", "url": "https://trooth.co/network/company/trooth" }, { "@type": "SiteNavigationElement", "position": 3, "name": "Trooth Network", "url": "https://trooth.co/network" } ] } ] } ``` ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://trooth.co/" }, { "@type": "ListItem", "position": 2, "name": "Changelog", "item": "https://trooth.co/changelog" }, { "@type": "ListItem", "position": 3, "name": "Company records answer twelve buyer questions, and the Model Context Protocol server reads them fact by fact", "item": "https://trooth.co/changelog/2026-10-16-record-contract-and-mcp-1-8" } ] } ```