Evidence row 309950

What was observed

{
  "count": 14,
  "tools": [
    {
      "description": "Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "chain": {
            "description": "base for mainnet (default), or base-sepolia to check a token before you launch it",
            "type": "string"
          },
          "contract_address": {
            "description": "B20 token contract address",
            "type": "string"
          },
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          }
        },
        "required": [
          "contract_address"
        ],
        "type": "object"
      },
      "name": "base_token_verification"
    },
    {
      "description": "Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "query": {
            "description": "Question (e.g., What should an incident response capability include?).",
            "type": "string"
          },
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          }
        },
        "required": [
          "query"
        ],
        "type": "object"
      },
      "name": "cyber_security_consultant"
    },
    {
      "description": "Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "chain": {
            "description": "Chain name or EVM chain ID: ethereum (1), base (8453), arc (5042), robinhood (4663), optimism (10), polygon (137), arbitrum (42161), bsc (56), avalanche (43114), gnosis (100), blast (81457). Defaults to ethereum.",
            "type": "string"
          },
          "chain_id": {
            "description": "Legacy: network, 1 mainnet or 2 testnet. Use chain instead.",
            "type": "number"
          },
          "contract_address": {
            "description": "Token contract address",
            "type": "string"
          },
          "platform_id": {
            "description": "Legacy: 1 Ethereum or 17 Base. Use chain instead.",
            "type": "number"
          },
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          }
        },
        "required": [
          "contract_address"
        ],
        "type": "object"
      },
      "name": "ethereum_token_verification"
    },
    {
      "description": "List every Cybercentry verification service with its price, inputs and SLA. Free.",
      "inputSchema": {
        "properties": {},
        "required": [],
        "type": "object"
      },
      "name": "list_services"
    },
    {
      "description": "Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "extract_metadata": {
            "description": "Extract file metadata (default: true)",
            "type": "boolean"
          },
          "image_uri": {
            "description": "Avatar/logo image URI: HTTPS URL or IPFS path",
            "type": "string"
          },
          "media_file_path": {
            "description": "URL or path to the media file to verify",
            "type": "string"
          },
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          },
          "verify_authenticity": {
            "description": "Verify content authenticity / C2PA provenance (default: true)",
            "type": "boolean"
          }
        },
        "required": [
          "image_uri",
          "media_file_path"
        ],
        "type": "object"
      },
      "name": "media_content_verification"
    },
    {
      "description": "Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "config": {
            "description": "Agent configuration as a JSON string",
            "type": "string"
          },
          "message": {
            "description": "Message",
            "type": "string"
          },
          "sessionId": {
            "description": "Session ID",
            "type": "string"
          },
          "skills": {
            "description": "Skills",
            "type": "string"
          },
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          },
          "tool": {
            "description": "Tool to validate, as a JSON string",
            "type": "string"
          }
        },
        "required": [
          "config"
        ],
        "type": "object"
      },
      "name": "openclaw_ai_agent_verification"
    },
    {
      "description": "Score a live token launch under ERC-8376, the token launch abuse standard we co-authored. The twelve-signal vector is assembled from chain state and scored against the eleven deployer abuse patterns into an abuse score of 0 to 100, with confidence reported separately so a high score on thin evidence cannot read as a certainty. Signals that could not be computed are named rather than scored clean. Price decline is excluded by rule, so a launch that locked liquidity, sold nothing and fell 95 per cent still scores clean: falling is not fraud. Name the creator, because at most venues the token was deployed by the venue's own factory and the creating address is the launchpad rather than the applicant. A screening, not a bonded on-chain report. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "chain": {
            "description": "Chain name or EVM chain ID. base (8453) only for now, since the scoring contracts are deployed there.",
            "type": "string"
          },
          "creator": {
            "description": "Wallet of the party who requested the launch, as connected at your venue. Without it the launch is unattributed and the signals about the deployer come back unavailable.",
            "type": "string"
          },
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          },
          "token": {
            "description": "Token contract address",
            "type": "string"
          }
        },
        "required": [
          "token"
        ],
        "type": "object"
      },
      "name": "post_launch_screening"
    },
    {
      "description": "Screen who is asking to launch, before you deploy anything for them. At most venues the launchpad creates the token, so the only thing in front of you beforehand is a connected wallet: this screens that wallet, and it includes the full wallet verification rather than a summary of one. OFAC SDN sanctions screening, the funding chain walked to depth across 33 chains, mixer contact including the Tornado Cash pools, dusting, control clusters and exchange reuse, with a risk score. Then the launch-specific half: allocations this wallet has taken from contracts before and whether it still holds them or sold them, and whether the ticker it wants collides with a token it already touched. Says what it could not establish rather than reporting it clean. Eight of the twelve ERC-8376 signals describe conduct during or after a sale and cannot exist yet, so this reports on the party and not on the launch. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "chain": {
            "description": "Chain name or EVM chain ID. Defaults to base (8453).",
            "type": "string"
          },
          "creator": {
            "description": "Wallet address of the party requesting the launch, as connected at your venue",
            "type": "string"
          },
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          },
          "ticker": {
            "description": "Ticker or name they want, to check for collision with an existing project",
            "type": "string"
          }
        },
        "required": [
          "creator"
        ],
        "type": "object"
      },
      "name": "pre_launch_screening"
    },
    {
      "description": "Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "cpdv_data": {
            "description": "Data (e.g., Test Data)",
            "type": "string"
          },
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          }
        },
        "required": [
          "cpdv_data"
        ],
        "type": "object"
      },
      "name": "private_data_verification"
    },
    {
      "description": "Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "cqcv_data": {
            "description": "Any text data you want to encrypt and verify",
            "type": "string"
          },
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          }
        },
        "required": [
          "cqcv_data"
        ],
        "type": "object"
      },
      "name": "quantum_cryptography_verification"
    },
    {
      "description": "Recent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each. Free.",
      "inputSchema": {
        "properties": {
          "limit": {
            "description": "Max incidents to return (default 10).",
            "type": "number"
          }
        },
        "required": [],
        "type": "object"
      },
      "name": "recent_exploits"
    },
    {
      "description": "Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "solidity_code": {
            "description": "Solidity Code",
            "type": "string"
          },
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          }
        },
        "required": [
          "solidity_code"
        ],
        "type": "object"
      },
      "name": "solidity_code_verification"
    },
    {
      "description": "Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 33 EVM chains. Check a counterparty before you transact with it. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          },
          "wallet_address": {
            "description": "Wallet Address",
            "type": "string"
          }
        },
        "required": [
          "wallet_address"
        ],
        "type": "object"
      },
      "name": "wallet_verification"
    },
    {
      "description": "Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. Costs $1.00 per call, paid in USDC over x402.",
      "inputSchema": {
        "properties": {
          "subscription_token": {
            "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.",
            "type": "string"
          },
          "target_url": {
            "description": "Target URL",
            "type": "string"
          }
        },
        "required": [
          "target_url"
        ],
        "type": "object"
      },
      "name": "web_application_verification"
    }
  ]
}

What the leaf hashes

{"body":"e1843685ddae83a998896082dba6c4b4292ca94ac8c478b5de954a91363bdb75","id":309950,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793059199689246,"prev":null,"subject":"0b33d37e-77a8-41c9-8245-d203c7226cbc","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0xa9f92949656cf5e3aee132e8a01240917a4165f703216858240cf378d13ac1e8
2. 0x598923ec2913b6723fa21f05ce6a07c0e92718a2b46638e0708f2985fca42afa
3. 0x5cafff5ad1702917a7bf855d6f9c65ec23ea6bcfa9ec2fa5e836e173e300039b
4. 0xaf28e2098c0a463857ba16ead6d12769c0bad1322f4818a424f0f4a035fbac25
5. 0x62e5ffc6b2ce28799e80024e163c9ed76bfa39e0fc4b83ec939eb3b948608ce7
6. 0x0827b69a9e65766830a95e930b9de92de6a3b67c52122119f705516748a614af
7. 0xae96117e15f8a00a862b86ec9ceb3a753c8a59d172433f53c8e120247c458782
8. 0x58b15397c7959021d625410ce18d828acee75953f32e8a5b26bf7f27097e2b15
9. 0xc580924a5a23f25de4357c17fc84cd3fafa3d3afccfd4e18ea2cb141221341eb
10. 0x382774117c6a99ced4320ca176d4e72cc7226f2fa6e3d8ac0173511fe55d6919
11. 0x55ba80743bf45624f0b04651dfd0a37e2a85f91f45e334ff14efbb74a49dd361
12. 0x09a19b8d31a6e948e5051cb72b98b1d2b2bfe053f62d6d24d61c22b3ed1c3f24
13. 0x4700d6dfdb40e52e2ceb8ffe62c75f3f708d23452f828255fd003d795f5d9d66
14. 0x3b4dba7d874fc323b0a364140a9c60f37bf547fe671897653118a9873fe03420
15. 0x1a74ed3b3756b9cd946da49701bcec120ec88645013da99fa9eea60b39e1a570
16. 0x123ec8bee20ddc55223eeef5a4f4d6c4b6416515adbb911c56759f5cde56e452
17. 0xd0651cb9bc8155eb52b5247d506e74b8a935057dc190ba52091702ac25ed3a40
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae