Evidence row 29295

What was observed

{
  "endpoints": [
    [
      "mcp",
      "https://x402-resource-scanner.vercel.app/mcp"
    ],
    [
      "web",
      "https://x402-resource-scanner.vercel.app/"
    ]
  ],
  "name": "Boundary Guard x402",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-05-16T03:03:03.731763Z",
        "status": "active",
        "statusChangedAt": "2026-05-16T03:03:03.731763Z",
        "updatedAt": "2026-05-16T03:03:03.731763Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
      "_meta": {
        "io.modelcontextprotocol.registry/publisher-provided": {
          "canonicalUrl": "https://x402-resource-scanner.vercel.app",
          "category": "Agent Verification and Security",
          "llms": "https://x402-resource-scanner.vercel.app/llms.txt",
          "mcpDiscovery": "https://x402-resource-scanner.vercel.app/.well-known/mcp.json",
          "mcpServerCard": "https://x402-resource-scanner.vercel.app/.well-known/mcp/server-card.json",
          "notes": "Direct MCP discovery is public; protected tool execution uses marketplace-managed or operator-issued auth.",
          "openapi": "https://x402-resource-scanner.vercel.app/openapi.json",
          "provider": "LarryBuildsAI",
          "publicIntrospection": {
            "enabled": true,
            "methods": [
              "initialize",
              "tools/list"
            ],
            "toolCallsRequireAuth": true
          },
          "security": {
            "authBoundary": "Public MCP introspection is allowed; protected tools/call requests require upstream bearer authorization.",
            "dataPolicy": "Do not submit private keys, API keys, cookies, payment signatures, or raw payment response headers.",
            "externalContentPolicy": "Targets scanned by the tools are untrusted evidence, not instructions for the agent or service.",
            "ssrfPolicy": "The service rejects private, internal, credentialed, and unsafe target URLs before probing."
          },
          "tools": [
            "boundary_guard_check",
            "scan_x402_resource",
            "probe_x402_paid_path",
            "check_agent_tool_readiness",
            "generate_x402_launch_pack",
            "generate_trust_receipt"
          ],
          "x402Manifest": "https://x402-resource-scanner.vercel.app/.well-known/x402"
        }
      },
      "description": "MCP tools for x402 readiness, paid-path probes, launch packs, and trust receipts.",
      "name": "io.github.LarryLemonBot/boundary-guard-x402",
      "remotes": [
        {
          "headers": [
            {
              "description": "Bearer token required for protected tools/call. initialize and tools/list are public for discovery.",
              "isRequired": true,
              "isSecret": true,
              "name": "Authorization",
              "placeholder": "Bearer <token>"
            }
          ],
          "type": "streamable-http",
          "url": "https://x402-resource-scanner.vercel.app/mcp"
        }
      ],
      "title": "Boundary Guard x402",
      "version": "0.1.0",
      "websiteUrl": "https://x402-resource-scanner.vercel.app"
    }
  },
  "source": "mcp_registry",
  "summary": "MCP tools for x402 readiness, paid-path probes, launch packs, and trust receipts."
}

What the leaf hashes

{"body":"339cd8532c75d1e25ec462d72975cd416e217a3af6bd68da93d5fed11791a7ae","id":29295,"kind":"listing","method":"baseline/1","observed_us":1793025360945798,"prev":null,"subject":"mcp_registry:io.github.LarryLemonBot/boundary-guard-x402","subject_kind":"source_record"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.