← The evidence ledger
Evidence row 120410
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://saylorinnovations.com/api/mcp-scan
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- a98caf605a27dee48c252dbc0d2d01109d42d3367bf725dd4152e59f63047790
- Leaf
- 0xbaa93c74f1e2d63c77a35b5e545a93b602242d02bfeb90bc73d5c86a5ba0ee94
What was observed
{
"endpoints": [
[
"x402",
"https://saylorinnovations.com/api/mcp-scan"
]
],
"name": "Saylor Innovations Watchdog MCP",
"owner_address": "0xa2a8df0f7caabea4e120a2568118f141569fc8aa",
"raw": {
"accepts": [
{
"amount": "10000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:mcpscan:scan",
"name": "USD Coin",
"note": "Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:8453",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:mcpscan:scan",
"name": "USD Coin",
"note": "Polygon settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:137",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:mcpscan:scan",
"name": "USD Coin",
"note": "Arbitrum settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:42161",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM",
"memo": "saylor:mcpscan:scan",
"reference": "HaeRiche4UgPpQ5emEBB9zpcEGmTF6EGjQsidBNHiUrB",
"session": "eyJhcnRpY2xlSWQiOiJtY3BzY2FuOnNjYW4iLCJyZWZlcmVuY2UiOiJIYWVSaWNoZTRVZ1BwUTVlbUVCQjl6cGNFR21URjZFR2pRc2lkQk5IaVVyQiIsInJlY2lwaWVudCI6IjdMU2pmckpmOGZOc0I4VkE5dTdOM1dFbjI1c21RTHBvYjNTdnlVdlhhY3k3IiwibWludCI6IkVQakZXZGQ1QXVmcVNTcWVNMnFOMXh6eWJhcEM4RzR3RUdHa1p3eVREdDF2IiwibWluQW1vdW50IjoxMDAwMCwiZXhwIjoxNzkyNDU3ODgyNTk0fQ.TVNivZjy-APSJMsZCx85R0t82d96XVzJ-OlpGPn7Dfk"
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB",
"extra": {
"feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM",
"memo": "saylor:mcpscan:scan",
"reference": "DQVyh7Reve8HkeYHTZ9nDzD27H7RakYmSRR4RRkdERoa",
"session": "eyJhcnRpY2xlSWQiOiJtY3BzY2FuOnNjYW4iLCJyZWZlcmVuY2UiOiJEUVZ5aDdSZXZlOEhrZVlIVFo5bkR6RDI3SDdSYWtZbVNSUjRSUmtkRVJvYSIsInJlY2lwaWVudCI6IjdMU2pmckpmOGZOc0I4VkE5dTdOM1dFbjI1c21RTHBvYjNTdnlVdlhhY3k3IiwibWludCI6IkVzOXZNRnJ6YUNFUm1KZnJGNEgyRllENEtDb05rWTExTWNDZThCZW53TllCIiwibWluQW1vdW50IjoxMDAwMCwiZXhwIjoxNzkyNDU3ODgyNTk0fQ.zA68YfLg8njggkm4B6_UV3c-IY4p9fG3UmLk-pm6Fcw"
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
},
{
"amount": "92768",
"asset": "So11111111111111111111111111111111111111112",
"extra": {
"memo": "saylor:mcpscan:scan",
"native": true,
"note": "Native SOL: send lamports with a system transfer, not an SPL transfer. Price is quoted live and this quote expires in 120s.",
"quotedLamports": "95638",
"reference": "wgeuhpWV8vbZ1WjTKh33dDTBwJtuthAZirF6fPhSb26",
"session": "eyJhcnRpY2xlSWQiOiJtY3BzY2FuOnNjYW4iLCJyZWZlcmVuY2UiOiJ3Z2V1aHBXVjh2YloxV2pUS2gzM2REVEJ3SnR1dGhBWmlyRjZmUGhTYjI2IiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjpudWxsLCJtaW5BbW91bnQiOjkyNzY4LCJleHAiOjE3OTI0NTc4ODI1OTR9.ZEZt_L-XpWakt7d1uk3aTb7IEttj5ELAHkQDnVZfwqI",
"solUsdPrice": 104.56
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
}
],
"description": "MCP server security scan - tool poisoning, prompt injection and risky capabilities before you connect",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"url": "https://docs.mcp.cloudflare.com/mcp"
},
"type": "http"
},
"output": {
"example": {
"counts": {
"findings": 1,
"prompts": 0,
"resources": 0,
"tools": 3
},
"findings": [
{
"detail": "references local secret or config files",
"evidence": "~/.ssh",
"rule": "prompt-injection",
"severity": "critical",
"tool": "add_numbers"
}
],
"reachable": true,
"reasons": [
"1 critical finding(s): hidden instructions or invisible text in what the model reads"
],
"registry": {
"listed": false
},
"score": 30,
"server": {
"name": "example-server",
"protocol_version": "2025-06-18",
"tls": true
},
"tools": [
{
"capabilities": [],
"findings": [],
"name": "add_numbers"
}
],
"url": "https://example.com/mcp",
"verdict": "do-not-connect"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"url": {
"description": "MCP server endpoint URL, e.g. https://example.com/mcp (query)",
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"counts": {
"type": "object"
},
"findings": {
"description": "Issues or observations found",
"items": {
"type": "object"
},
"type": "array"
},
"generated_at": {
"description": "Time this response was generated (UTC)",
"type": [
"string",
"null"
]
},
"method": {
"description": "Method used",
"type": [
"string",
"null"
]
},
"reachable": {
"description": "True when the target answered",
"type": [
"boolean",
"null"
]
},
"reasons": {
"description": "Evidence behind the verdict or score",
"items": {
"type": "string"
},
"type": "array"
},
"registry": {
"description": "Registry the record comes from"
},
"scanned_in_ms": {
"description": "Scanned in, in milliseconds",
"type": [
"number",
"null"
]
},
"score": {
"description": "Score from 0 (worst) to 100 (best)",
"type": [
"number",
"null"
]
},
"server": {
"description": "Server software reported",
"type": "object"
},
"tools": {
"items": {
"type": "object"
},
"type": "array"
},
"url": {
"description": "Canonical URL",
"type": "string"
},
"verdict": {
"description": "Overall assessment derived from the listed reasons",
"enum": [
"no-issues-found",
"caution",
"high-risk",
"do-not-connect",
"auth-required",
"unreachable",
"not-mcp",
"not-scanned"
],
"type": "string"
}
},
"required": [
"url",
"verdict"
],
"type": "object"
},
"type": {
"const": "json",
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1790235422/bazaar-icons/bc5e2b3d111ebbef.jpg",
"lastUpdated": "2026-10-20T00:56:02.647Z",
"quality": {
"l30DaysTotalCalls": 3,
"l30DaysUniquePayers": 3,
"lastCalledAt": "2026-10-20T00:56:02.261Z"
},
"resource": "https://saylorinnovations.com/api/mcp-scan",
"serviceName": "Saylor Innovations Watchdog MCP",
"tags": [
"mcp",
"security",
"tool-poisoning",
"prompt-injection",
"trust"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "MCP server security scan - tool poisoning, prompt injection and risky capabilities before you connect"
}What the leaf hashes
{"body":"a98caf605a27dee48c252dbc0d2d01109d42d3367bf725dd4152e59f63047790","id":120410,"kind":"listing","method":"baseline/1","observed_us":1793025618023795,"prev":null,"subject":"x402_bazaar:https://saylorinnovations.com/api/mcp-scan","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0xbaa978674f10b8558cac23d330bf82ed33547e9f07cd453930637693ee91d7a0
- 0xf2ad08812264f9d0ec623e8e82af399a54473b141226a8372556700e7547f8a8
- 0x922df4185f89f9b7c7b9cc211fc57dc19a948f043b087ac7e26c07777897e650
- 0x432ea576c22361aec4dc776c5d5b511c2cc4b67eb1438d2eea8a644750176671
- 0xf5655362a6bb6aab8e19481da13ccc34f757cdf43e1837522a0b5e2654d8d519
- 0x316b4298a7e0d0193833993350df978e8d34ea6887a4260bb8a6b2f3d6e1461f
- 0xe7fa15ae31be32f2f571064119431e32c402721327879f6505a9fcab5b4cd818
- 0xe869c9c40ad0d54c4f995c1e36a7c5488e27489b4fd84ce82e93e5ae636669dd
- 0x68848522200c1eb3d241cbe11d9173cfd8bb548de1e8d7d46e32deec1df23abb
- 0x5c670c369e4461ebb756b60e4a7c2b61bacd5db31fcc3315d727acb3845358d5
- 0xd2fc7e774aa4a9259d0eb5e076abdaa36417d3853be0f8ff34d37acaa77db477
- 0x1a61f9ab4a9304db8146c466be341271a345718ebf06b718e0f0dd9f347d2fbd
- 0x2f43fe2b2533a5f40c107c114e458e226102f5f8ae91f097e964345880e30928
- 0xf692ce2b0a640ec9f75aa960e5fb1c2c7091a04e24881798735752c19014e519
- 0x9f68b5e15459cb62b8c0cd4c124fa61c74147b4a5755a200fbecd21a581635d1
- 0x123ec8bee20ddc55223eeef5a4f4d6c4b6416515adbb911c56759f5cde56e452
- 0xd0651cb9bc8155eb52b5247d506e74b8a935057dc190ba52091702ac25ed3a40
- 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae