Evidence row 2108503

What was observed

{
  "endpoints": [
    [
      "web",
      "https://filelayer.dev/"
    ]
  ],
  "name": "Filelayer",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-11-02T09:21:29.425621Z",
        "status": "active",
        "statusChangedAt": "2026-11-02T09:21:29.425621Z",
        "updatedAt": "2026-11-02T09:21:29.425621Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
      "description": "User files for a SaaS, under one person's authority: list, share with an expiry, revoke.",
      "name": "dev.filelayer/core",
      "packages": [
        {
          "environmentVariables": [
            {
              "description": "Your own PostgreSQL, where this library keeps file ownership, grants and the audit chain. Apply node_modules/@filelayer/core/schema.sql once before starting.",
              "isRequired": true,
              "isSecret": true,
              "name": "DATABASE_URL"
            },
            {
              "description": "The ONE subject this server speaks for, in your own id space. Fixed for the life of the process: no tool reads it as an argument and no tool can change it, which is the only reason exposing these tools to an agent is safe. Write it yourself or have your provisioning write it, never derive it from a conversation. Serving several people means starting several servers.",
              "isRequired": true,
              "name": "FILELAYER_AS"
            },
            {
              "description": "The organisation this server is scoped to, in your own id space.",
              "isRequired": true,
              "name": "FILELAYER_ORG"
            },
            {
              "description": "A local directory for the bytes. Needs no bucket and no IAM user. Set this OR the S3_* block: with neither, the server refuses to start rather than falling back to memory, which would work in a demo and lose the first real file.",
              "name": "FILELAYER_DATA_DIR"
            },
            {
              "description": "An S3-compatible endpoint, for example https://<account>.r2.cloudflarestorage.com. Setting it makes S3_BUCKET, S3_ACCESS_KEY_ID and S3_SECRET_ACCESS_KEY required.",
              "name": "S3_ENDPOINT"
            },
            {
              "description": "The bucket. It must be private: this library decides who may be GIVEN a URL and has no say in who the object store will answer. `npx -p @filelayer/core filelayer doctor` reports whether yours serves unauthenticated reads.",
              "name": "S3_BUCKET"
            },
            {
              "default": "auto",
              "description": "Region, or `auto` for Cloudflare R2.",
              "name": "S3_REGION"
            },
            {
              "description": "Access key id for the bucket.",
              "isSecret": true,
              "name": "S3_ACCESS_KEY_ID"
            },
            {
              "description": "Secret access key for the bucket.",
              "isSecret": true,
              "name": "S3_SECRET_ACCESS_KEY"
            },
            {
              "default": "filelayer-mcp",
              "description": "How this agent names itself in the audit trail, recorded on every event these tools produce. It is what lets the chain separate \"the partner opened this document\" from \"the partner's assistant opened this document\".",
              "name": "FILELAYER_MCP_AGENT_LABEL"
            },
            {
              "choices": [
                "true",
                "false"
              ],
              "default": "false",
              "description": "Set to exactly `true` to register delete_file. Off by default because deleting is not recoverable and an agent that misreads a sentence deletes the wrong thing silently.",
              "name": "FILELAYER_MCP_ALLOW_DESTRUCTIVE"
            },
            {
              "choices": [
                "true",
                "false"
              ],
              "default": "false",
              "description": "Set to exactly `true` to register file_audit. Off by default because the trail is an organisation's whole history and a tool that returns it copies every file name, actor and denial into the model's context. Reading it is itself audited since 0.27.0, which was the previous reason; the default did not move.",
              "name": "FILELAYER_MCP_EXPOSE_AUDIT"
            },
            {
              "choices": [
                "true",
                "false"
              ],
              "default": "false",
              "description": "Set to exactly `true` to register read_file. Off by default because a document returned by a tool is a document copied into a model's context; file_info plus a share link is usually what was actually needed.",
              "name": "FILELAYER_MCP_RETURN_BYTES"
            },
            {
              "description": "The base of the share URLs this instance mints. Without it, share links come back without a URL.",
              "name": "FILELAYER_BASE_URL"
            }
          ],
          "identifier": "@filelayer/core",
          "packageArguments": [
            {
              "type": "positional",
              "value": "-p"
            },
            {
              "type": "positional",
              "value": "@filelayer/core"
            },
            {
              "type": "positional",
              "value": "filelayer-mcp"
            }
          ],
          "registryBaseUrl": "https://registry.npmjs.org",
          "registryType": "npm",
          "runtimeHint": "npx",
          "transport": {
            "type": "stdio"
          },
          "version": "0.35.0"
        }
      ],
      "repository": {
        "source": "github",
        "subfolder": "packages/core",
        "url": "https://github.com/filelayer/filelayer"
      },
      "title": "Filelayer",
      "version": "0.35.0",
      "websiteUrl": "https://filelayer.dev"
    }
  },
  "source": "mcp_registry",
  "summary": "User files for a SaaS, under one person's authority: list, share with an expiry, revoke."
}

What the leaf hashes

{"body":"0d04c7c0974b8729a41eae45007fd3a646aca1f4072272713e36547b16399de9","id":2108503,"kind":"listing","method":"sync.mcp_registry/1","observed_us":1793614704552650,"prev":22796,"subject":"mcp_registry:dev.filelayer/core","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-11-02 (444186 rows).

1. 0x70648b0bb0471fb94466975c80d7c611ace0eb19e6e820c8a57829cbceeff7b6
2. 0x795af0c2c4742d222ee128153d04a2b320d6d720facc44a37fc5b1f4d827084d
3. 0x6dbb83d80bc8664626e09b5ddfa3edbbd69f17dba1147424f84e995dc811a144
4. 0xa66d58a8f9d8d833581f6a6b52dfaec503b2125ddee0b213c0a7eace4c338a90
5. 0x1e3a6c113bbe92ffa6e97d92df2f4aa9e66703e924da891ede5b7d2711d94294
6. 0x00c20e694f5d3df9006422bdd5580344cb1db32dd9642bfb887441ca2ec50c1d
7. 0x89e41918319904b58cdf608b0b0e857e8f90e3efc7443ec175c331fd7dd9a9e0
8. 0xd0945c2fe5bdec219d21bdf1f75bafe9c37601e0fcf3456e58cb5c456a4d8df3
9. 0x3f32ef2cf039169a3ce186524466d79d5b1530f9362135218196c6c34811b199
10. 0x2a706477a4a4c9f61f3b449c72b3b67abd9be529a30a796e3acfa465b9f72af5
11. 0x373c796320c7df6f6eee00262e8f9be2de66a996c95036bbc134572a4e11ed35
12. 0xfae5eba0f7987b5c42177d337465c3ecc14624ad4cad3ffd025f9ac681fc2c37
13. 0x608160924e1d66c9701d48e69e878606fa6a4dd94a73d3f0570dadb0c3de65b3
14. 0xb903742c059190ddedc375958f73db84c3806732f1e54330407245d4734015f5
15. 0x2cdc73dde4ed839d7482b6b91833e64bef56c7626db8439f3bbdfcffd2ae32a3
16. 0x0e5696ae625571c52ddcd8dc09aa6c994b4ab38f2086df20d56f1f01c603e501
17. 0xf9973981f80219d4f00fa9186b40a8144accc0c9875572fb79eaea312a21a187
18. 0x4d205063c881c48edbbb37762a8d3bbb7444d4c42daa882f663a231893d25c35
19. 0x365b161a4b68d750dcc4b3ecce1154a2163c87b08762079428e68f0ebb6a754e

Day root

0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1

Chained

0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2

Published

On Arc Testnet, block 70432815: 0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af