Evidence row 2298634

What was observed

{
  "count": 8,
  "tools": [
    {
      "description": "Evidence summary for an MCP server before you install or connect it: publisher identity level, provenance, known vulnerabilities, install scripts, maintenance, open warnings, checks that could not run, and recent changes. Pass installed (the servers already in use) to also get tool names this server shares with them, which an AI could call by mistake. No warnings is NOT a safety guarantee.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "identifier": {
            "description": "MCP server name (e.g. io.github.github/github-mcp-server), catalog id, or GitHub repository URL",
            "type": "string"
          },
          "installed": {
            "description": "Optional: names of MCP servers already installed, to check for tool-name clashes (first 20 used)",
            "items": {
              "type": "string"
            },
            "maxItems": 20,
            "type": "array"
          }
        },
        "required": [
          "identifier"
        ],
        "type": "object"
      },
      "name": "check_before_install"
    },
    {
      "description": "Metadata changes between consecutive published versions: new network hosts, replaced or added artifact sources, newly requested credentials.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "tool_id": {
            "type": "string"
          }
        },
        "required": [
          "tool_id"
        ],
        "type": "object"
      },
      "name": "get_changes"
    },
    {
      "description": "A single assertion of a tool (by field name) with the evidence records behind it: URL, fetch time, SHA-256.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "field": {
            "type": "string"
          },
          "tool_id": {
            "type": "string"
          }
        },
        "required": [
          "tool_id",
          "field"
        ],
        "type": "object"
      },
      "name": "get_evidence"
    },
    {
      "description": "How a publisher is identified across ecosystems (MCP namespace, domain, GitHub, packages) and the state of each link.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "publisher_key": {
            "type": "string"
          }
        },
        "required": [
          "publisher_key"
        ],
        "type": "object"
      },
      "name": "get_publisher"
    },
    {
      "description": "One stable answer (schema_version 1) for connecting an MCP server: its validated remote URL and transport, packages, copy-paste setup for Claude Code and JSON configs, warnings by severity, checks that could not run, and contradicted claims. auth is null until Assay has checked the sign-in metadata of the server. Never a safety rating.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "identifier": {
            "description": "MCP server name, catalog id, or GitHub repository URL",
            "type": "string"
          }
        },
        "required": [
          "identifier"
        ],
        "type": "object"
      },
      "name": "get_setup"
    },
    {
      "description": "Every assertion for a tool with its state (VERIFIED, CLAIMED, CONTRADICTED, STALE, UNKNOWN), reason, check and evidence records.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "tool_id": {
            "type": "string"
          }
        },
        "required": [
          "tool_id"
        ],
        "type": "object"
      },
      "name": "get_tool"
    },
    {
      "description": "Resolve an MCP server name, catalog id or GitHub repository URL to the real registry entry. If there is no exact match, returns the closest real names so look-alikes and invented names can be caught. No account needed.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "identifier": {
            "type": "string"
          }
        },
        "required": [
          "identifier"
        ],
        "type": "object"
      },
      "name": "resolve_identifier"
    },
    {
      "description": "Search cataloged MCP servers by keywords. Returns classification (verified_publisher = the publisher proved control of a domain or verified GitHub org, NOT that a company named in the tool made it / community / not_analyzed), identity level and warning counts.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "limit": {
            "maximum": 50,
            "minimum": 1,
            "type": "integer"
          },
          "official_only": {
            "type": "boolean"
          },
          "query": {
            "type": "string"
          }
        },
        "required": [
          "query"
        ],
        "type": "object"
      },
      "name": "search_tools"
    }
  ]
}

What the leaf hashes

{"body":"a42de83a5bf25f3c4155d7318275e4a07d2c2aa5d67ae5c359670e5011c318c8","id":2298634,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793661101539336,"prev":1731413,"subject":"f73d549a-a227-40b9-9dd2-0d865c78489e","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-11-02 (444186 rows).

1. 0xaac5798cb01a6ac3063a8178cca472fbec350405b20fcf3556ca674010702670
2. 0xe32e728b4805892b7ac44ab6a29fc03300f096da6806aa157ff217fed16d2903
3. 0x61847f09d01e51bfe15ebac99e13135b96d99873fde20848d88d506260bdd547
4. 0x33fc053a8aa806cb720be3bd19ef1fdd8fadd767c237af0068c26da4529fbf7e
5. 0x181e0d244de78b759c65cd1b4993d085c8c3040f3fc7f1d35c05eb8db04bfb01
6. 0xf5a030602e1210b21ca7ef0acb6efb81ecb9f53c898561a17d0a5e4e37d5903b
7. 0x376b7dfeaddabcf840c72d9a3213bf2484cec480690ac409612e7da27ffe06a7
8. 0x5621de784a76d5e59966440f2680cf3c2c40df5721fea0799269cbebb97ef2f5
9. 0xf93cb517dccb1319b74efa3abed778e36ea86927db20c5094d201af64b253ca0
10. 0xcb5b0c1b6e1167f8907ca4c687a763318be95a85fb219baa0f044b74705c0fa3
11. 0xe63ee161a6381a689376228cfa3659fd752ef85106858bd5f978bcd0c49a24aa
12. 0xecb2b1beabd76534757e66312399858ccb35ae71884df60c160786e26591e83b
13. 0x0a8f32fa56d4ddb69ff176883beda0b0217f66ec9bd09c11cec95d7ba5f6c70a
14. 0x27deeb1ef1692b4773e73c16b6d8d0cdf4251fe2660821e5336f57539770fd2f
15. 0x793184605629cd36ba80a07cbe115ca35e8923297bf024260c6f5c06b255f638
16. 0x2922573a524a0694086782ac45fa3083d3fc3f6a2a479b2105e1e2f06b2916f7
17. 0x07ad80c0c234ecea379a2f4450dfd0804db049dbc62abe77af6306049ca6b6c2
18. 0x98cbbf2c68ab4c0b4db782aeb88bea1f30b02178cf8b5d3d24a931d19492ea6d
19. 0x252cce55f1a3d5391c16f82d7f62494429a5f69b03486d4cfcfb7b2c96d6c884

Day root

0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1

Chained

0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2

Published

On Arc Testnet, block 70432815: 0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af