Evidence row 30066

What was observed

{
  "endpoints": [
    [
      "web",
      "https://github.com/Nizoka/zipnative-mcp"
    ]
  ],
  "name": "zipnative MCP — ZIP creation, inspection, secure extraction & verification",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-10-19T12:18:17.541776Z",
        "status": "active",
        "statusChangedAt": "2026-10-19T12:18:17.541776Z",
        "updatedAt": "2026-10-19T12:18:17.541776Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
      "description": "ZIP MCP server: create, inspect, verify, extract, canonicalize, merge, modify. 15 tools",
      "name": "io.github.Nizoka/zipnative-mcp",
      "packages": [
        {
          "environmentVariables": [
            {
              "description": "Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache).",
              "format": "filepath",
              "name": "ZIPNATIVE_MCP_OUTPUT_DIR"
            },
            {
              "description": "Opt-in content-addressed response cache directory (absolute path) (SHA-256 keyed, 1h TTL, 256 MiB, oldest-written evicted first, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue.",
              "format": "filepath",
              "name": "ZIPNATIVE_MCP_CACHE_DIR"
            },
            {
              "description": "Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set.",
              "format": "number",
              "name": "ZIPNATIVE_MCP_PORT"
            },
            {
              "description": "Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer <token>' or answers 401. Compared constant-time, never logged.",
              "isSecret": true,
              "name": "ZIPNATIVE_MCP_HTTP_TOKEN"
            },
            {
              "description": "Operator ceiling for limits.maxEntryUncompressedSize, limits.maxTotalUncompressedSize and limits.maxEntryCompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED.",
              "format": "number",
              "name": "ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES"
            },
            {
              "description": "Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start.",
              "format": "number",
              "name": "ZIPNATIVE_MCP_MAX_ENTRIES"
            },
            {
              "description": "Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start.",
              "format": "number",
              "name": "ZIPNATIVE_MCP_WORKERS"
            },
            {
              "description": "Operator ceiling for every file written in outputMode='file' (create_zip, modify_zip, canonicalize_zip, merge_zip, extract_zip, inflate_raw), enforced while streaming (default 4294967296 = 4 GiB, the 1.0.0 behaviour). Integer >= 1048576, read once at startup; an invalid value refuses to start. Raise it to write Zip64 archives above 4 GiB into the sandbox (create_zip stream entries with zip64: true).",
              "format": "number",
              "name": "ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTES"
            }
          ],
          "identifier": "zipnative-mcp",
          "registryBaseUrl": "https://registry.npmjs.org",
          "registryType": "npm",
          "runtimeArguments": [
            {
              "type": "positional",
              "value": "-y",
              "valueHint": "skip-confirm"
            },
            {
              "type": "positional",
              "value": "zipnative-mcp",
              "valueHint": "package"
            }
          ],
          "runtimeHint": "npx",
          "transport": {
            "type": "stdio"
          },
          "version": "1.1.0"
        }
      ],
      "repository": {
        "source": "github",
        "url": "https://github.com/Nizoka/zipnative-mcp"
      },
      "title": "zipnative MCP — ZIP creation, inspection, secure extraction & verification",
      "version": "1.1.0",
      "websiteUrl": "https://github.com/Nizoka/zipnative-mcp#readme"
    }
  },
  "source": "mcp_registry",
  "summary": "ZIP MCP server: create, inspect, verify, extract, canonicalize, merge, modify. 15 tools"
}

What the leaf hashes

{"body":"5a63b219a816972a00a995be3093a11bd9210fbd3f1b43d09dd214b3076c09df","id":30066,"kind":"listing","method":"baseline/1","observed_us":1793025362032032,"prev":null,"subject":"mcp_registry:io.github.Nizoka/zipnative-mcp","subject_kind":"source_record"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.