Evidence row 266598

What was observed

{
  "count": 1,
  "tools": [
    {
      "description": "Pre-flight security verdict for an MCP server invocation. Judges BOTH server-level reputation AND the server's dependency graph (npm/pypi) against the DugganUSA threat-intel corpus (1.13M+ IOCs, Shai-Hulud + typosquat + LOLBin families). Returns BLOCK / ADVISORY / REVIEW / ALLOW with severity, evidence, dep-graph summary, and HMAC-signed response. REVIEW means we hold NO RECORD of this server -- not that it is safe. A brand-new attacker-published server also looks like this, so REVIEW calls for a look, not a pass. ALLOW is only returned when we actually resolved the server and scanned its dependency graph; known_to_us and dep_graph.scanned confirm it. Suited to a pre-flight check before a tool on another MCP server is used, especially one from outside the official MCP Registry.",
      "inputSchema": {
        "additionalProperties": true,
        "properties": {
          "server": {
            "description": "REQUIRED. The server to judge: its exact MCP Registry name (io.github.owner/server-name, optionally @version). A bare name (server-name) is judged as typed, never mapped to a registry server, and the matching full names come back in input.did_you_mean. Also resolved, only when the identity is provable: a registry URL (https://registry.modelcontextprotocol.io/v0/servers/<name>) and a GitHub repo (\"owner/repo\" or https://github.com/owner/repo) published by that owner as exactly one registry server. Package names (npm/PyPI), images and Smithery ids are recorded but judged as given (usually REVIEW): their name does not prove which code runs. Refused: commands, shell metacharacters, non-ASCII, local paths, endpoint URLs. No substring or fuzzy matching: anything we cannot resolve to exactly one server returns REVIEW, never a guess.",
            "minLength": 1,
            "type": "string"
          },
          "tool": {
            "description": "Optional name of the specific tool being invoked",
            "type": "string"
          },
          "version": {
            "description": "Optional version of the MCP server (semver). A version inside `server` (name@1.2.3) is used when this is empty.",
            "type": "string"
          }
        },
        "required": [
          "server"
        ],
        "type": "object"
      },
      "name": "check_mcp_server"
    }
  ]
}

What the leaf hashes

{"body":"996173174d6cc658c6fc970b3b83f74f037aa808efb84385537abb11ba535ca9","id":266598,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793035418781264,"prev":null,"subject":"988c616e-e41a-4203-b965-df153ff7007c","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0xdb9d778400e568340c9e54a9ad093d66c460b2cc229e6b7bcaef9cc35aa0500a
2. 0xcaf6e1d04e746069935aff07cd38fe2c90c6dc912ecf0d8816c1a8c0ddb46434
3. 0xf85bed7434f318c5f5f485fd9beb7853d1ec1108c1ee25589d868e2e2cdd88d2
4. 0x68108f2b29a514c5516f6357a7ea514ba19fe7f7d0611d29ad9bb4ae9b5b4536
5. 0x790d97e3d679ebb40cf9f8d2959c107787f81ee6d06eccf3c57a22682328adfe
6. 0xa115bd2897379fed8895a7350554d67e8aeacb874799eb1e2816fabfbfacaec4
7. 0xf068599a46425fc5a5a8ad80999feab3a7f1e758bed0a460f6d25dd7fddc6e3a
8. 0x563d9e8e38aa6c22cd609c4308bafa00a5cb018d858e5bedfd10adea42d5b406
9. 0x5c99ce30657fb110de3d84dacef5d556df2b651621044b053a709046aff4cece
10. 0x05b88d4894c1a9b590eb6a2fd334630f0ce15ff2f7464f18f51a0d81007464e7
11. 0x7ec512db50ffb560b82f17e53667bcea802a69de4d98e67a44363985fac7f4da
12. 0x4b7a7525bd11eaa3154ce1b1171d1b54b83370163f39203e230c520e42560c4b
13. 0xa4edde833302b48399053e2519aea1aed1074cd102bf4b553643df1866cce4ec
14. 0x0b7541c75cc482a7134110311d7dbd02095d969ba21177de9b21a52a55981718
15. 0x6dc40f983a3840a0ad927a9ca17f4ff1e3b649a6c735e2a09b140db7c2caf13b
16. 0x703f95866af09c5e5d6ead7411e9a10f964a41a2aff64d4a55ff0053c023a023
17. 0xd0651cb9bc8155eb52b5247d506e74b8a935057dc190ba52091702ac25ed3a40
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae