Evidence row 25067

What was observed

{
  "endpoints": [
    [
      "web",
      "https://github.com/1N3/sn1per-mcp"
    ]
  ],
  "name": "Sn1per MCP Server: pentest, recon and attack surface scanning",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-10-17T21:08:34.386458Z",
        "status": "active",
        "statusChangedAt": "2026-10-17T21:08:34.386458Z",
        "updatedAt": "2026-10-17T21:08:34.386458Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
      "_meta": {
        "io.modelcontextprotocol.registry/publisher-provided": {
          "com.sn1persecurity": {
            "controls": "Mandatory target scope, local JSONL audit log, secrets redaction; intrusive modes and destructive tools are off by default.",
            "documentation": "https://github.com/1N3/sn1per-mcp#readme",
            "editions": [
              "ce",
              "se",
              "pro",
              "enterprise"
            ],
            "hostRequirements": "Runs beside a local Sn1per install (CE 9.x or the 11.x engine). Scan and delete tools need root through a passwordless sudo rule for the Sn1per CLI; read tools run unprivileged.",
            "intendedUse": "Authorized security testing only: systems you own or are explicitly permitted in writing to test.",
            "platform": "linux",
            "securityPolicy": "https://github.com/1N3/sn1per-mcp/security/policy",
            "transport": "stdio only"
          }
        }
      },
      "description": "Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.",
      "icons": [
        {
          "mimeType": "image/png",
          "sizes": [
            "256x256"
          ],
          "src": "https://raw.githubusercontent.com/1N3/sn1per-mcp/v0.9.0/assets/sn1per-mcp-256.png"
        }
      ],
      "name": "io.github.1N3/sn1per-mcp",
      "packages": [
        {
          "environmentVariables": [
            {
              "description": "Comma-separated domains, IPs and CIDR ranges you are authorized to test (prefix ! to exclude). Scans outside it are refused.",
              "format": "string",
              "name": "SNIPER_MCP_SCOPE",
              "placeholder": "app.example,192.0.2.0/24"
            },
            {
              "description": "Optional absolute path to a scope file with one or more entries per line and # comments.",
              "format": "filepath",
              "name": "SNIPER_MCP_SCOPE_FILE"
            },
            {
              "description": "Optional authorization reference, such as a statement-of-work or ticket id, recorded in the audit log.",
              "format": "string",
              "name": "SNIPER_MCP_AUTHORIZATION_REF"
            },
            {
              "default": "false",
              "description": "Set to true to offer scan modes that run brute force, exploitation or injection testing. Off by default.",
              "format": "boolean",
              "name": "SNIPER_MCP_ALLOW_INTRUSIVE"
            },
            {
              "default": "false",
              "description": "Set to true to add the workspace delete and export tools; they ask the human to confirm. Off by default.",
              "format": "boolean",
              "name": "SNIPER_MCP_ENABLE_DESTRUCTIVE"
            },
            {
              "default": "true",
              "description": "Redaction of secrets in results. On by default; turn off only with a local model when raw values are required.",
              "format": "boolean",
              "name": "SNIPER_MCP_REDACT"
            },
            {
              "choices": [
                "auto",
                "ce",
                "se",
                "pro",
                "enterprise"
              ],
              "default": "auto",
              "description": "Optional override of the auto-detected Sn1per edition.",
              "format": "string",
              "name": "SNIPER_EDITION"
            },
            {
              "description": "Optional absolute path to the sniper CLI. Detected automatically on standard installs.",
              "format": "filepath",
              "name": "SNIPER_BIN",
              "placeholder": "/usr/share/sniper/sniper"
            },
            {
              "description": "Optional Sn1per install directory. Read from the CLI or /usr/share/sniper by default.",
              "format": "filepath",
              "name": "SNIPER_INSTALL_DIR",
              "placeholder": "/usr/share/sniper"
            },
            {
              "description": "Optional directory that contains the loot workspace tree. Defaults to the install directory's loot folder.",
              "format": "filepath",
              "name": "SNIPER_LOOT_BASE",
              "placeholder": "/usr/share/sniper/loot"
            },
            {
              "default": "true",
              "description": "Set to false for a read-only deployment that never launches scans.",
              "format": "boolean",
              "name": "SNIPER_SCAN_ENABLED"
            }
          ],
          "identifier": "sn1per-mcp",
          "registryBaseUrl": "https://pypi.org",
          "registryType": "pypi",
          "runtimeHint": "uvx",
          "transport": {
            "type": "stdio"
          },
          "version": "0.9.0"
        }
      ],
      "repository": {
        "source": "github",
        "url": "https://github.com/1N3/sn1per-mcp"
      },
      "title": "Sn1per MCP Server: pentest, recon and attack surface scanning",
      "version": "0.9.0",
      "websiteUrl": "https://github.com/1N3/sn1per-mcp#readme"
    }
  },
  "source": "mcp_registry",
  "summary": "Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings."
}

What the leaf hashes

{"body":"c343a1eaee48a96e70a45c67b2fdb53e54e7da79a3c1331ed1a80825b35ec45b","id":25067,"kind":"listing","method":"baseline/1","observed_us":1793025354182823,"prev":null,"subject":"mcp_registry:io.github.1N3/sn1per-mcp","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x3a4a031e74c0724bb92b0fa92a6590d7224d67b7dc4c2cb1b1c3f07babd320f5
2. 0x259ee950e84c13c09dc9d978d3d19d132a337e550518e3b1bf73bea259f9238e
3. 0xc9ea684d0a7c49e972862d5e365b3c5944a5bac6f0090f3811eea187d28be7ce
4. 0xad8f0fd507482ac08f589a5a20cd04108cf5a0719bd144607d3c0aa09b39af58
5. 0x5d9f77759d7478057186f58d2018b0676f8a6d575ed66ea10c9d47f2e3228ca5
6. 0x12fe0001d306e9a3d6e7d4b232881e1238e32948b059956976fbc7159e43b6ce
7. 0x19246518fa231be31db5e9e3d049a296673b4dd48333c52f8e6a853490fa1616
8. 0xfdbc49809782861c36c941bfc9e94ecc82c790382fa5eb28f49dcab4a49ebb26
9. 0xaddc01aba9ce973160990a7b51da0af08d68d02defedade63d5da26b2d10643b
10. 0xdcc828e24b7442e8235bf18fc875c4401696d216b65ec037eb65cf2ef34782da
11. 0xd9b921e2251851de5c43bdbb4f58d5e2fa1aee215c84e0f3e0426cf1e4a08e8f
12. 0x18cc4431e4bbe45ee72defb9bb3318434364bf71c883055c6197fa7102ec601a
13. 0xe2214b3d6a48396930d1739b02ea366de2aac5337c9b9ff2aff28cecf6518139
14. 0x7f594f5609f388d64d3cda87b5631d393ee8300bb09bad71f150113a5886ee33
15. 0x4b52a97f7a80ff7778a702b85267b8d2e5c93ce160942656435c29ae7be68bf4
16. 0x2e6a32eb32761c210560e852405e2f865f958ddbe01027894f8b9c1b3433b9f0
17. 0x9a83be955a206deb65b995adfd92c58fa31c95fbbf926bd199d300e70b08b26d
18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae