addrbookFor publishers
← The evidence ledger

Evidence row 14677

Observed , by baseline/1.

Kind
listing
About
source_record mcp_registry:com.dustforge/demipass
Recorded
Previous row
None: the first of its kind about this subject
Body SHA-256
24ef6b4ff6fc03c24d660a8807172b9e5c3a016ebd710f4ff7b80aaa7cbd3fc8
Leaf
0x23930b0f85ee7db462a15946f424a388af7a4adf616c8196611cbe9f97db9ff1

What was observed

{
  "endpoints": [
    [
      "web",
      "https://dustforge.com/"
    ]
  ],
  "name": "com.dustforge/demipass",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-07-07T06:04:54.268516Z",
        "status": "active",
        "statusChangedAt": "2026-07-07T06:04:54.268516Z",
        "updatedAt": "2026-07-07T06:04:54.268516Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
      "description": "Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.",
      "name": "com.dustforge/demipass",
      "packages": [
        {
          "environmentVariables": [
            {
              "description": "Dustforge JWT bearer token. Self-onboard at https://dustforge.com/.well-known/silicon or mint via the 2FA email flow.",
              "isRequired": true,
              "isSecret": true,
              "name": "DEMIPASS_TOKEN"
            },
            {
              "description": "API base URL (default https://api.dustforge.com)",
              "name": "DEMIPASS_URL"
            }
          ],
          "identifier": "demipass",
          "registryType": "npm",
          "transport": {
            "type": "stdio"
          },
          "version": "2.5.0"
        }
      ],
      "repository": {
        "source": "github",
        "url": "https://github.com/bildow/demipass"
      },
      "version": "2.5.0",
      "websiteUrl": "https://dustforge.com"
    }
  },
  "source": "mcp_registry",
  "summary": "Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context."
}

What the leaf hashes

{"body":"24ef6b4ff6fc03c24d660a8807172b9e5c3a016ebd710f4ff7b80aaa7cbd3fc8","id":14677,"kind":"listing","method":"baseline/1","observed_us":1793025318417670,"prev":null,"subject":"mcp_registry:com.dustforge/demipass","subject_kind":"source_record"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.

How to check it · This row as JSON