← The evidence ledger
Evidence row 117141
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://modelmarket.dev/x402/warden-scan
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- ad0657c782b103daa4f826ed9d17959f127dbdf32f45d0c6efa823ebec7f2bf4
- Leaf
- 0xd997f09a25fb0b80678272da604107b00698273ec2eb567fd907d91f1947e5e1
What was observed
{
"endpoints": [
[
"x402",
"https://modelmarket.dev/x402/warden-scan"
]
],
"name": "AIMarket",
"owner_address": "0x1218ff36c5d2e3b6a565cdb1a8b1accfc606ad0a",
"raw": {
"accepts": [
{
"amount": "1000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x1218ff36C5d2e3B6A565CdB1A8B1AcCFc606Ad0a",
"scheme": "exact"
}
],
"description": "WARDEN verdict on an MCP server's tools/list: allow or block, a 0-1 score and every finding with the matched text (prompt injection, secret requests, exfiltration, hidden Unicode). Deterministic published rules, no network.",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"tools": [
{
"description": "Returns the forecast for a city.",
"inputSchema": {
"type": "object"
},
"name": "get_weather"
}
]
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"engine": {
"package": "@aimarket/warden@0.21.0",
"ruleset": {
"version": "16"
}
},
"service": "warden-scan",
"status": "ok",
"verdict": {
"allow": true,
"findings": [],
"score": 1
}
},
"schema": {
"properties": {
"engine": {
"properties": {
"package": {
"type": "string"
},
"ruleset": {
"properties": {
"digest": {
"type": "string"
},
"version": {
"type": "string"
}
},
"type": "object"
}
},
"required": [
"package"
],
"type": "object"
},
"scope": {
"type": "string"
},
"service": {
"const": "warden-scan",
"type": "string"
},
"status": {
"const": "ok",
"type": "string"
},
"verdict": {
"properties": {
"allow": {
"type": "boolean"
},
"allowedTools": {
"items": {
"type": "string"
},
"type": "array"
},
"blockedTools": {
"items": {
"type": "string"
},
"type": "array"
},
"decidedBy": {
"type": [
"string",
"null"
]
},
"findings": {
"items": {
"properties": {
"advisory": {
"type": "boolean"
},
"code": {
"type": "string"
},
"gate": {
"type": "string"
},
"message": {
"type": "string"
},
"severity": {
"type": "string"
},
"tool": {
"type": [
"string",
"null"
]
}
},
"required": [
"gate",
"code",
"severity",
"message"
],
"type": "object"
},
"type": "array"
},
"score": {
"maximum": 1,
"minimum": 0,
"type": "number"
}
},
"required": [
"allow",
"score",
"findings"
],
"type": "object"
}
},
"required": [
"status",
"service",
"engine",
"verdict"
],
"type": "object"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"properties": {
"server": {
"description": "optional {name, url}, used only as a label",
"type": "object"
},
"tools": {
"description": "the server's tools/list result, up to 500 definitions",
"items": {
"properties": {
"description": {
"type": "string"
},
"inputSchema": {
"type": "object"
},
"name": {
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"tools"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"engine": {
"properties": {
"package": {
"type": "string"
},
"ruleset": {
"properties": {
"digest": {
"type": "string"
},
"version": {
"type": "string"
}
},
"type": "object"
}
},
"required": [
"package"
],
"type": "object"
},
"scope": {
"type": "string"
},
"service": {
"const": "warden-scan",
"type": "string"
},
"status": {
"const": "ok",
"type": "string"
},
"verdict": {
"properties": {
"allow": {
"type": "boolean"
},
"allowedTools": {
"items": {
"type": "string"
},
"type": "array"
},
"blockedTools": {
"items": {
"type": "string"
},
"type": "array"
},
"decidedBy": {
"type": [
"string",
"null"
]
},
"findings": {
"items": {
"properties": {
"advisory": {
"type": "boolean"
},
"code": {
"type": "string"
},
"gate": {
"type": "string"
},
"message": {
"type": "string"
},
"severity": {
"type": "string"
},
"tool": {
"type": [
"string",
"null"
]
}
},
"required": [
"gate",
"code",
"severity",
"message"
],
"type": "object"
},
"type": "array"
},
"score": {
"maximum": 1,
"minimum": 0,
"type": "number"
}
},
"required": [
"allow",
"score",
"findings"
],
"type": "object"
}
},
"required": [
"status",
"service",
"engine",
"verdict"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
},
"builder-code": {
"info": {
"s": [
"cdp_sdk_server"
]
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"additionalProperties": false,
"properties": {
"a": {
"description": "App builder code",
"pattern": "^[a-z0-9_]{1,32}$",
"type": "string"
},
"s": {
"description": "Service builder codes",
"items": {
"pattern": "^[a-z0-9_]{1,32}$",
"type": "string"
},
"maxItems": 11,
"type": "array"
},
"w": {
"description": "Wallet builder code",
"pattern": "^[a-z0-9_]{1,32}$",
"type": "string"
}
},
"type": "object"
}
},
"eip2612GasSponsoring": {},
"erc20ApprovalGasSponsoring": {}
},
"iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1790911092/bazaar-icons/d6897a094270ce34.png",
"lastUpdated": "2026-10-25T21:59:49.975Z",
"quality": {
"l30DaysTotalCalls": 8,
"l30DaysUniquePayers": 7,
"lastCalledAt": "2026-10-25T21:59:49.36Z"
},
"resource": "https://modelmarket.dev/x402/warden-scan",
"serviceName": "AIMarket",
"tags": [
"mcp",
"security",
"prompt-injection",
"firewall"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "WARDEN verdict on an MCP server's tools/list: allow or block, a 0-1 score and every finding with the matched text (prompt injection, secret requests, exfiltration, hidden Unicode). Deterministic published rules, no network."
}What the leaf hashes
{"body":"ad0657c782b103daa4f826ed9d17959f127dbdf32f45d0c6efa823ebec7f2bf4","id":117141,"kind":"listing","method":"baseline/1","observed_us":1793025610804677,"prev":null,"subject":"x402_bazaar:https://modelmarket.dev/x402/warden-scan","subject_kind":"source_record"}Proof
Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.