Evidence row 303675

What was observed

{
  "count": 8,
  "tools": [
    {
      "description": "Audit an MCP client configuration for security risks — works offline,\nno external service required. Detects: tool poisoning, hidden/coercive\ninstructions in tool descriptions, hardcoded credentials, unpinned\npackages (rug-pull risk), insecure transport, and toxic capability\ncombinations (shell + network, file-read + network).",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "config_json": {
            "description": "The FULL JSON content of the MCP config file as a string\n         (e.g. claude_desktop_config.json or .mcp.json). Paste the\n         file content, not the path.",
            "type": "string"
          }
        },
        "required": [
          "config_json"
        ],
        "type": "object"
      },
      "name": "audit_mcp_server_config"
    },
    {
      "description": "Check the health of your agent's external dependencies: uptime, SSL\nvalidity, blacklist status, and a trust score 0-100 (DepScan).",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "endpoints": {
            "description": "List of URLs your agent/skill depends on,\n       e.g. [\"https://api.openai.com\", \"https://api.stripe.com\"]",
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "required": [
          "endpoints"
        ],
        "type": "object"
      },
      "name": "check_dependencies"
    },
    {
      "description": "Complete security posture in one call: audits the MCP config, checks\ndependency health, analyzes an untrusted skill, scans the local network\ngateway, and scans any payload you're about to send out for secrets/PII —\nthen correlates everything into a single prioritized report. Pass only\nwhat you have; each section is skipped gracefully if its input or service\nis missing.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "dependency_endpoints": {
            "anyOf": [
              {
                "items": {
                  "type": "string"
                },
                "type": "array"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "description": "URLs your stack depends on (optional)"
          },
          "mcp_config_json": {
            "default": "",
            "description": "MCP config content as string (optional)",
            "type": "string"
          },
          "network_authorized": {
            "default": false,
            "description": "REQUIRED to scan network_target. Set True to certify\n                you own or have permission to scan it. (optional, default False)",
            "type": "boolean"
          },
          "network_target": {
            "default": "",
            "description": "IP to scan, e.g. \"192.168.1.1\" (optional)",
            "type": "string"
          },
          "skill_url": {
            "default": "",
            "description": "untrusted skill to vet (optional)",
            "type": "string"
          },
          "text_to_scan": {
            "default": "",
            "description": "payload to vet for secret/PII egress (optional)",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "full_stack_audit"
    },
    {
      "description": "Active security scan of a device or host with an autonomous AI agent that\ndecides which follow-up probes to run (ActiveScanner). Only scan targets\nyou own or have permission to test.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "authorized": {
            "description": "REQUIRED. You must set this to True to certify that you own\n        the target or have explicit permission to test it. Setting it\n        to False (or omitting it) aborts the scan. Scanning without\n        authorization may be illegal (CFAA / Computer Misuse Act).",
            "type": "boolean"
          },
          "scan_type": {
            "default": "quick",
            "description": "\"quick\" (~30s, top ports) [default], \"standard\" (~2min,\n       agent loop), \"deep\" (~10min, full ports + credentials check)",
            "type": "string"
          },
          "target": {
            "description": "IP, CIDR, or hostname. Examples: \"192.168.1.1\", \"10.0.0.0/24\"",
            "type": "string"
          }
        },
        "required": [
          "target",
          "authorized"
        ],
        "type": "object"
      },
      "name": "network_scan"
    },
    {
      "description": "Scan a text payload (a prompt, an outbound API body, a file's contents)\nfor secrets and PII BEFORE it leaves for an LLM or external API, and\nreturn a redacted copy. Catches the #1 real-world agent incident:\nsecrets/PII leaking into a model's context.\n\nWORKS OFFLINE with no API key — the detection runs in-process (pure regex\n+ Luhn check, no network). If a SecretScan backend key IS configured, the\nscan is routed there instead (which also persists an audit record).",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "redact": {
            "default": true,
            "description": "If True (default), each match is replaced with a token like\n    [REDACTED-KEY] / [REDACTED-EMAIL]. If False, only reports.",
            "type": "boolean"
          },
          "text": {
            "description": "The payload to inspect (prompt, request body, document text).",
            "type": "string"
          }
        },
        "required": [
          "text"
        ],
        "type": "object"
      },
      "name": "scan_secrets"
    },
    {
      "description": "Analyze an AI agent skill for prompt injection, malware patterns, and\nOWASP LLM Top 10 issues BEFORE installing it (SecurityScan).",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "skill_url": {
            "description": "URL of the skill to analyze (e.g. a GitHub skill URL).",
            "type": "string"
          }
        },
        "required": [
          "skill_url"
        ],
        "type": "object"
      },
      "name": "scan_skill"
    },
    {
      "description": "Start a Stripe checkout to buy a SecurityScan tier (agent-native sales).\nReturns a payment URL to hand to your user AND a PENDING API key that\nactivates automatically once payment clears — no other setup step.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "email": {
            "default": "",
            "description": "optional — prefills the Stripe checkout page for your user",
            "type": "string"
          },
          "existing_key": {
            "default": "",
            "description": "optional — upgrade an existing ask_live_ key instead of\n          minting a new one",
            "type": "string"
          },
          "tier": {
            "description": "one of \"founder\" ($29 one-time), \"personal\", \"executive\",\n  \"enterprise\" (monthly)",
            "type": "string"
          }
        },
        "required": [
          "tier"
        ],
        "type": "object"
      },
      "name": "securityscan_checkout"
    },
    {
      "description": "SecurityScan catalog: tiers, prices, quotas and the evidence behind the\nproduct — the fact sheet an agent needs to evaluate or recommend a purchase\nto its user. Fully offline, no API key required.\n\nReturns:\n    JSON with the tier table (price / target slots / scan types), the\n    pricing model, benchmark evidence, and how to buy.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {},
        "type": "object"
      },
      "name": "securityscan_pricing"
    }
  ]
}

What the leaf hashes

{"body":"566817e930e70a7122ba62ab6f0793292d75e2649d153c76310c577a870702ab","id":303675,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793055455474896,"prev":null,"subject":"d00385ce-6733-4562-b9ce-8f504a2488e9","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x23e00a41458da7d7ef4ae12bf1a4104f2530f28000e083fa1eb9e16f30cbb8a7
2. 0x7591299c2fe0d5c58290c6e41aae1b6e3e5ef4e5a9bd0c242bed17948f4f75c1
3. 0x24f8cbd25f8c21ea39e108100657130326194f3ae95db28fbcef65ce2e1f51b9
4. 0xaf7b06aae0a030f52ab525897a702107f4ca4b593e20863f36a0b8d6b7cffa48
5. 0x5113f329aca1203effaf7eb90c15b3e5f7451d6a7ee982ff13094bc9f393ccc8
6. 0xb1dc9ecc54da410692a2b04f64fa9b18205a2d842faee7fdf7689ec39db9c9b4
7. 0xca274402287fbdb8ff959850af02053944eb0a92c4a856b38061d93b49e13e1c
8. 0x064a66e3edc22e84710148c6696def16002e3ff5e49d5254c1d4cbf9313acd73
9. 0x30b23b171c41979074ea07198e6d19c378a38a74d524ba62a07f730bcbef77a8
10. 0x1f665fd33ff003b77fc5f27a4e56219f36aaae7e346794cb25d15f47d71ec758
11. 0x395ecef2713b13f9a2a88fe836fbc1a4e94906043e3938cd3fd16627be6b95de
12. 0x2ceb9cc3a43f479e6ab73db5d3d474a93995fb4188ee45f71846b4cf537a0016
13. 0x830b2c874449c7499489eba2baa67d49f991298225763c0161b471621038d0fb
14. 0xd843afcced75dedd39194ff9bd12326b88099e6112686db2299392d022dc3146
15. 0xc3a6a3ae44ec0da1848b16d40c45d7aac97a67352eea8df18e0f26edabea8a2f
16. 0x06d71bfa7d8b41d62c8836efc2c601e1cc3772d9453596b2ae4950887f3310ca
17. 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae