addrbookFor publishers
← The evidence ledger

Evidence row 35312

Observed , by baseline/1.

Kind
listing
About
source_record mcp_registry:io.github.couchbase/mcp-server-couchbase
Recorded
Previous row
None: the first of its kind about this subject
Body SHA-256
cf327073737e0e23142357587930837a1f11dfc05d46fe9c24227655755e42db
Leaf
0xb3e218a6fcd111b885a2a439ca0ab810b265ac28ec73cac9f588bf44c7b5b44c

What was observed

{
  "endpoints": [
    [
      "web",
      "https://mcp-server.couchbase.com/"
    ]
  ],
  "name": "io.github.couchbase/mcp-server-couchbase",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-08-13T14:51:13.605134Z",
        "status": "active",
        "statusChangedAt": "2026-08-13T14:51:13.605134Z",
        "updatedAt": "2026-08-13T14:51:13.605134Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
      "description": "Couchbase MCP Server - Enable AI agents to connect to and interact with Couchbase clusters.",
      "name": "io.github.couchbase/mcp-server-couchbase",
      "packages": [
        {
          "environmentVariables": [
            {
              "description": "Couchbase connection string. Required for connecting to the cluster.",
              "format": "string",
              "name": "CB_CONNECTION_STRING"
            },
            {
              "description": "Couchbase database username. Required for basic authentication.",
              "format": "string",
              "name": "CB_USERNAME"
            },
            {
              "description": "Couchbase database password. Required for basic authentication.",
              "format": "string",
              "isSecret": true,
              "name": "CB_PASSWORD"
            },
            {
              "description": "Couchbase CA certificate path. Required for TLS authentication in non Capella clusters.",
              "format": "string",
              "name": "CB_CA_CERT_PATH"
            },
            {
              "description": "Couchbase client certificate path. Required for mTLS authentication.",
              "format": "string",
              "name": "CB_CLIENT_CERT_PATH"
            },
            {
              "description": "Couchbase client key path. Required for mTLS authentication.",
              "format": "string",
              "name": "CB_CLIENT_KEY_PATH"
            },
            {
              "description": "Couchbase read only mode. Set to true to allow disable write operations across both KV and query. KV write tools are not loaded and SQL++ queries that modify data are blocked. Set to false to allow data modification queries and tools.",
              "format": "boolean",
              "name": "CB_MCP_READ_ONLY_MODE"
            },
            {
              "description": "Transport mode for the server (stdio, http or sse). Default is stdio",
              "format": "string",
              "name": "CB_MCP_TRANSPORT"
            },
            {
              "description": "Host to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.",
              "format": "string",
              "name": "CB_MCP_HOST"
            },
            {
              "description": "Port to run the MCP server on (default: 8000). Used only for HTTP and SSE transport modes.",
              "format": "number",
              "name": "CB_MCP_PORT"
            },
            {
              "description": "Tools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.",
              "format": "string",
              "name": "CB_MCP_DISABLED_TOOLS"
            },
            {
              "description": "Comma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.",
              "format": "string",
              "name": "CB_MCP_CONFIRMATION_REQUIRED_TOOLS"
            },
            {
              "description": "Logging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.",
              "format": "string",
              "name": "CB_MCP_LOG_LEVEL"
            },
            {
              "description": "Comma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.",
              "format": "string",
              "name": "CB_MCP_LOG_SINKS"
            },
            {
              "description": "Base path for the per-level log files. One rotating file is written per level (e.g. mcp_server.info.log, mcp_server.error.log). Only used when 'file' is in CB_MCP_LOG_SINKS. Default is mcp_server.log.",
              "format": "string",
              "name": "CB_MCP_LOG_FILE"
            },
            {
              "description": "Global maximum size in MB per-level log file before it rotates, inherited by every level unless overridden by a per-level CB_MCP_LOG_<LEVEL>_ROTATION_MAX_SIZE_MB. A value of 0 is invalid and falls back to the default (1 MB) with a startup warning. Default is 1 (1 MB).",
              "format": "number",
              "name": "CB_MCP_LOG_ROTATION_MAX_SIZE_MB"
            },
            {
              "description": "[DEPRECATED] Global rotation size in bytes; use CB_MCP_LOG_ROTATION_MAX_SIZE_MB (MB) instead. Still honored for backward compatibility but ignored when CB_MCP_LOG_ROTATION_MAX_SIZE_MB is also set. A value of 0 is invalid and falls back to the default with a startup warning.",
              "format": "number",
              "name": "CB_MCP_LOG_MAX_BYTES"
            },
            {
              "description": "Rotation size in MB for the ERROR log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for ERROR; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "CB_MCP_LOG_ERROR_ROTATION_MAX_SIZE_MB"
            },
            {
              "description": "Rotation size in MB for the WARNING log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for WARNING; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "CB_MCP_LOG_WARNING_ROTATION_MAX_SIZE_MB"
            },
            {
              "description": "Rotation size in MB for the INFO log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for INFO; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "CB_MCP_LOG_INFO_ROTATION_MAX_SIZE_MB"
            },
            {
              "description": "Rotation size in MB for the DEBUG log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for DEBUG; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "CB_MCP_LOG_DEBUG_ROTATION_MAX_SIZE_MB"
            },
            {
              "description": "Number of rotated backup files kept per-level log file, excluding the live file. Applies to every level unless overridden per level. Set to 0 to keep only the live file (still capped by the rotation size). Default is 1.",
              "format": "number",
              "name": "CB_MCP_LOG_RETENTION_BACKUP_COUNT"
            },
            {
              "description": "Rotated backups kept for the ERROR log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for ERROR; inherits it when unset.",
              "format": "number",
              "name": "CB_MCP_LOG_ERROR_RETENTION_BACKUP_COUNT"
            },
            {
              "description": "Rotated backups kept for the WARNING log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for WARNING; inherits it when unset.",
              "format": "number",
              "name": "CB_MCP_LOG_WARNING_RETENTION_BACKUP_COUNT"
            },
            {
              "description": "Rotated backups kept for the INFO log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for INFO; inherits it when unset.",
              "format": "number",
              "name": "CB_MCP_LOG_INFO_RETENTION_BACKUP_COUNT"
            },
            {
              "description": "Rotated backups kept for the DEBUG log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for DEBUG; inherits it when unset.",
              "format": "number",
              "name": "CB_MCP_LOG_DEBUG_RETENTION_BACKUP_COUNT"
            },
            {
              "description": "JWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with CB_MCP_OAUTH_JWT_ISSUER and CB_MCP_OAUTH_JWT_AUDIENCE. Only honored when CB_MCP_TRANSPORT=http.",
              "format": "string",
              "name": "CB_MCP_OAUTH_JWT_JWKS_URI"
            },
            {
              "description": "Expected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when CB_MCP_OAUTH_MCP_BASE_URL is set. Required to enable OAuth.",
              "format": "string",
              "name": "CB_MCP_OAUTH_JWT_ISSUER"
            },
            {
              "description": "Expected JWT 'aud' claim value. Required to enable OAuth.",
              "format": "string",
              "name": "CB_MCP_OAUTH_JWT_AUDIENCE"
            },
            {
              "description": "JWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.",
              "format": "string",
              "name": "CB_MCP_OAUTH_JWT_ALGORITHM"
            },
            {
              "description": "Public base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.",
              "format": "string",
              "name": "CB_MCP_OAUTH_MCP_BASE_URL"
            },
            {
              "description": "Override the OAuth scope label the server treats as 'read' access; advertised in PRM and matched against the token's scope/scp claim. Use when your IdP cannot emit the canonical form. Default is couchbase-mcp:read.",
              "format": "string",
              "name": "CB_MCP_OAUTH_SCOPE_READ_LABEL"
            },
            {
              "description": "Override the OAuth scope label the server treats as 'write' access; same semantics as CB_MCP_OAUTH_SCOPE_READ_LABEL. Default is couchbase-mcp:write.",
              "format": "string",
              "name": "CB_MCP_OAUTH_SCOPE_WRITE_LABEL"
            }
          ],
          "identifier": "couchbase-mcp-server",
          "packageArguments": [
            {
              "description": "Couchbase connection string. Required for connecting to the cluster.",
              "format": "string",
              "name": "--connection-string",
              "type": "named"
            },
            {
              "description": "Couchbase database username. Required for basic authentication.",
              "format": "string",
              "name": "--username",
              "type": "named"
            },
            {
              "description": "Couchbase database password. Required for basic authentication.",
              "format": "string",
              "isSecret": true,
              "name": "--password",
              "type": "named"
            },
            {
              "description": "Couchbase CA certificate path. Required for TLS authentication in non Capella clusters.",
              "format": "string",
              "name": "--ca-cert-path",
              "type": "named"
            },
            {
              "description": "Couchbase client certificate path. Required for mTLS authentication.",
              "format": "string",
              "name": "--client-cert-path",
              "type": "named"
            },
            {
              "description": "Couchbase client key path. Required for mTLS authentication.",
              "format": "string",
              "name": "--client-key-path",
              "type": "named"
            },
            {
              "description": "Couchbase read only mode. Set to true to disable write operations across both KV and query. KV write tools are not loaded and SQL++ queries that modify data are blocked. Set to false to allow data modification queries and tools.",
              "format": "boolean",
              "name": "--read-only-mode",
              "type": "named"
            },
            {
              "description": "Transport mode for the server (stdio, http or sse). Default is stdio",
              "format": "string",
              "name": "--transport",
              "type": "named"
            },
            {
              "description": "Host to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.",
              "format": "string",
              "name": "--host",
              "type": "named"
            },
            {
              "description": "Port to run the MCP server on (default: 8000). Used only for HTTP and SSE transport modes.",
              "format": "number",
              "name": "--port",
              "type": "named"
            },
            {
              "description": "Tools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.",
              "format": "string",
              "name": "--disabled-tools",
              "type": "named"
            },
            {
              "description": "Comma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.",
              "format": "string",
              "name": "--confirmation-required-tools",
              "type": "named"
            },
            {
              "description": "Logging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.",
              "format": "string",
              "name": "--log-level",
              "type": "named"
            },
            {
              "description": "Comma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.",
              "format": "string",
              "name": "--log-sinks",
              "type": "named"
            },
            {
              "description": "Base path for the per-level log files. One rotating file is written per level (e.g. mcp_server.info.log, mcp_server.error.log). Only used when 'file' is in --log-sinks. Default is mcp_server.log.",
              "format": "string",
              "name": "--log-file",
              "type": "named"
            },
            {
              "description": "Global maximum size in MB per-level log file before it rotates, inherited by every level unless overridden by a per-level --log-<level>-rotation-max-size-mb. A value of 0 is invalid and falls back to the default (1 MB) with a startup warning. Default is 1 (1 MB).",
              "format": "number",
              "name": "--log-rotation-max-size-mb",
              "type": "named"
            },
            {
              "description": "[DEPRECATED] Global rotation size in bytes; use --log-rotation-max-size-mb (MB) instead. Still honored for backward compatibility but ignored when --log-rotation-max-size-mb is also set. A value of 0 is invalid and falls back to the default with a startup warning.",
              "format": "number",
              "name": "--log-max-bytes",
              "type": "named"
            },
            {
              "description": "Rotation size in MB for the ERROR log file. Overrides --log-rotation-max-size-mb for ERROR; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "--log-error-rotation-max-size-mb",
              "type": "named"
            },
            {
              "description": "Rotation size in MB for the WARNING log file. Overrides --log-rotation-max-size-mb for WARNING; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "--log-warning-rotation-max-size-mb",
              "type": "named"
            },
            {
              "description": "Rotation size in MB for the INFO log file. Overrides --log-rotation-max-size-mb for INFO; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "--log-info-rotation-max-size-mb",
              "type": "named"
            },
            {
              "description": "Rotation size in MB for the DEBUG log file. Overrides --log-rotation-max-size-mb for DEBUG; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "--log-debug-rotation-max-size-mb",
              "type": "named"
            },
            {
              "description": "Number of rotated backup files kept per-level log file, excluding the live file. Applies to every level unless overridden per level. Set to 0 to keep only the live file (still capped by the rotation size). Default is 1.",
              "format": "number",
              "name": "--log-retention-backup-count",
              "type": "named"
            },
            {
              "description": "Rotated backups kept for the ERROR log file. Overrides --log-retention-backup-count for ERROR; inherits it when unset.",
              "format": "number",
              "name": "--log-error-retention-backup-count",
              "type": "named"
            },
            {
              "description": "Rotated backups kept for the WARNING log file. Overrides --log-retention-backup-count for WARNING; inherits it when unset.",
              "format": "number",
              "name": "--log-warning-retention-backup-count",
              "type": "named"
            },
            {
              "description": "Rotated backups kept for the INFO log file. Overrides --log-retention-backup-count for INFO; inherits it when unset.",
              "format": "number",
              "name": "--log-info-retention-backup-count",
              "type": "named"
            },
            {
              "description": "Rotated backups kept for the DEBUG log file. Overrides --log-retention-backup-count for DEBUG; inherits it when unset.",
              "format": "number",
              "name": "--log-debug-retention-backup-count",
              "type": "named"
            },
            {
              "description": "JWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with --oauth-issuer and --oauth-audience. Only honored when --transport=http.",
              "format": "string",
              "name": "--oauth-jwks-uri",
              "type": "named"
            },
            {
              "description": "Expected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when --oauth-mcp-base-url is set. Required to enable OAuth.",
              "format": "string",
              "name": "--oauth-issuer",
              "type": "named"
            },
            {
              "description": "Expected JWT 'aud' claim value. Required to enable OAuth.",
              "format": "string",
              "name": "--oauth-audience",
              "type": "named"
            },
            {
              "description": "JWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.",
              "format": "string",
              "name": "--oauth-algorithm",
              "type": "named"
            },
            {
              "description": "Public base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.",
              "format": "string",
              "name": "--oauth-mcp-base-url",
              "type": "named"
            },
            {
              "description": "Override the OAuth scope label the server treats as 'read' access; advertised in PRM and matched against the token's scope/scp claim. Use when your IdP cannot emit the canonical form. Default is couchbase-mcp:read.",
              "format": "string",
              "name": "--oauth-scope-read-label",
              "type": "named"
            },
            {
              "description": "Override the OAuth scope label the server treats as 'write' access; same semantics as --oauth-scope-read-label. Default is couchbase-mcp:write.",
              "format": "string",
              "name": "--oauth-scope-write-label",
              "type": "named"
            }
          ],
          "registryType": "pypi",
          "transport": {
            "type": "stdio"
          },
          "version": "1.0.1"
        },
        {
          "environmentVariables": [
            {
              "description": "Couchbase connection string. Required for connecting to the cluster.",
              "format": "string",
              "name": "CB_CONNECTION_STRING"
            },
            {
              "description": "Couchbase database username. Required for basic authentication.",
              "format": "string",
              "name": "CB_USERNAME"
            },
            {
              "description": "Couchbase database password. Required for basic authentication.",
              "format": "string",
              "isSecret": true,
              "name": "CB_PASSWORD"
            },
            {
              "description": "Couchbase CA certificate path. Required for TLS authentication in non Capella clusters.",
              "format": "string",
              "name": "CB_CA_CERT_PATH"
            },
            {
              "description": "Couchbase client certificate path. Required for mTLS authentication.",
              "format": "string",
              "name": "CB_CLIENT_CERT_PATH"
            },
            {
              "description": "Couchbase client key path. Required for mTLS authentication.",
              "format": "string",
              "name": "CB_CLIENT_KEY_PATH"
            },
            {
              "description": "Couchbase read only mode. Set to true to disable write operations across both KV and query. KV write tools are not loaded and SQL++ queries that modify data are blocked. Set to false to allow data modification queries and tools.",
              "format": "boolean",
              "name": "CB_MCP_READ_ONLY_MODE"
            },
            {
              "description": "Transport mode for the server (stdio, http or sse). Default is stdio",
              "format": "string",
              "name": "CB_MCP_TRANSPORT"
            },
            {
              "description": "Host to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.",
              "format": "string",
              "name": "CB_MCP_HOST"
            },
            {
              "description": "Port to run the MCP server on (default: 8000). Used only for HTTP and SSE transport modes.",
              "format": "number",
              "name": "CB_MCP_PORT"
            },
            {
              "description": "Tools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.",
              "format": "string",
              "name": "CB_MCP_DISABLED_TOOLS"
            },
            {
              "description": "Comma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.",
              "format": "string",
              "name": "CB_MCP_CONFIRMATION_REQUIRED_TOOLS"
            },
            {
              "description": "Logging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.",
              "format": "string",
              "name": "CB_MCP_LOG_LEVEL"
            },
            {
              "description": "Comma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.",
              "format": "string",
              "name": "CB_MCP_LOG_SINKS"
            },
            {
              "description": "Base path for the per-level log files. One rotating file is written per level (e.g. mcp_server.info.log, mcp_server.error.log). Only used when 'file' is in CB_MCP_LOG_SINKS. Default is mcp_server.log.",
              "format": "string",
              "name": "CB_MCP_LOG_FILE"
            },
            {
              "description": "Global maximum size in MB per-level log file before it rotates, inherited by every level unless overridden by a per-level CB_MCP_LOG_<LEVEL>_ROTATION_MAX_SIZE_MB. A value of 0 is invalid and falls back to the default (1 MB) with a startup warning. Default is 1 (1 MB).",
              "format": "number",
              "name": "CB_MCP_LOG_ROTATION_MAX_SIZE_MB"
            },
            {
              "description": "[DEPRECATED] Global rotation size in bytes; use CB_MCP_LOG_ROTATION_MAX_SIZE_MB (MB) instead. Still honored for backward compatibility but ignored when CB_MCP_LOG_ROTATION_MAX_SIZE_MB is also set. A value of 0 is invalid and falls back to the default with a startup warning.",
              "format": "number",
              "name": "CB_MCP_LOG_MAX_BYTES"
            },
            {
              "description": "Rotation size in MB for the ERROR log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for ERROR; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "CB_MCP_LOG_ERROR_ROTATION_MAX_SIZE_MB"
            },
            {
              "description": "Rotation size in MB for the WARNING log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for WARNING; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "CB_MCP_LOG_WARNING_ROTATION_MAX_SIZE_MB"
            },
            {
              "description": "Rotation size in MB for the INFO log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for INFO; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "CB_MCP_LOG_INFO_ROTATION_MAX_SIZE_MB"
            },
            {
              "description": "Rotation size in MB for the DEBUG log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for DEBUG; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.",
              "format": "number",
              "name": "CB_MCP_LOG_DEBUG_ROTATION_MAX_SIZE_MB"
            },
            {
              "description": "Number of rotated backup files kept per-level log file, excluding the live file. Applies to every level unless overridden per level. Set to 0 to keep only the live file (still capped by the rotation size). Default is 1.",
              "format": "number",
              "name": "CB_MCP_LOG_RETENTION_BACKUP_COUNT"
            },
            {
              "description": "Rotated backups kept for the ERROR log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for ERROR; inherits it when unset.",
              "format": "number",
              "name": "CB_MCP_LOG_ERROR_RETENTION_BACKUP_COUNT"
            },
            {
              "description": "Rotated backups kept for the WARNING log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for WARNING; inherits it when unset.",
              "format": "number",
              "name": "CB_MCP_LOG_WARNING_RETENTION_BACKUP_COUNT"
            },
            {
              "description": "Rotated backups kept for the INFO log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for INFO; inherits it when unset.",
              "format": "number",
              "name": "CB_MCP_LOG_INFO_RETENTION_BACKUP_COUNT"
            },
            {
              "description": "Rotated backups kept for the DEBUG log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for DEBUG; inherits it when unset.",
              "format": "number",
              "name": "CB_MCP_LOG_DEBUG_RETENTION_BACKUP_COUNT"
            },
            {
              "description": "JWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with CB_MCP_OAUTH_JWT_ISSUER and CB_MCP_OAUTH_JWT_AUDIENCE. Only honored when CB_MCP_TRANSPORT=http.",
              "format": "string",
              "name": "CB_MCP_OAUTH_JWT_JWKS_URI"
            },
            {
              "description": "Expected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when CB_MCP_OAUTH_MCP_BASE_URL is set. Required to enable OAuth.",
              "format": "string",
              "name": "CB_MCP_OAUTH_JWT_ISSUER"
            },
            {
              "description": "Expected JWT 'aud' claim value. Required to enable OAuth.",
              "format": "string",
              "name": "CB_MCP_OAUTH_JWT_AUDIENCE"
            },
            {
              "description": "JWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.",
              "format": "string",
              "name": "CB_MCP_OAUTH_JWT_ALGORITHM"
            },
            {
              "description": "Public base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.",
              "format": "string",
              "name": "CB_MCP_OAUTH_MCP_BASE_URL"
            },
            {
              "description": "Override the OAuth scope label the server treats as 'read' access; advertised in PRM and matched against the token's scope/scp claim. Use when your IdP cannot emit the canonical form. Default is couchbase-mcp:read.",
              "format": "string",
              "name": "CB_MCP_OAUTH_SCOPE_READ_LABEL"
            },
            {
              "description": "Override the OAuth scope label the server treats as 'write' access; same semantics as CB_MCP_OAUTH_SCOPE_READ_LABEL. Default is couchbase-mcp:write.",
              "format": "string",
              "name": "CB_MCP_OAUTH_SCOPE_WRITE_LABEL"
            }
          ],
          "identifier": "docker.io/couchbase/mcp-server:1.0.1",
          "registryType": "oci",
          "transport": {
            "type": "stdio"
          }
        }
      ],
      "repository": {
        "source": "github",
        "url": "https://github.com/couchbase/mcp-server-couchbase"
      },
      "version": "1.0.1",
      "websiteUrl": "https://mcp-server.couchbase.com/"
    }
  },
  "source": "mcp_registry",
  "summary": "Couchbase MCP Server - Enable AI agents to connect to and interact with Couchbase clusters."
}

What the leaf hashes

{"body":"cf327073737e0e23142357587930837a1f11dfc05d46fe9c24227655755e42db","id":35312,"kind":"listing","method":"baseline/1","observed_us":1793025372861689,"prev":null,"subject":"mcp_registry:io.github.couchbase/mcp-server-couchbase","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).

  1. 0xb3e2407a4485eabf09e9f95542b314e1fd0e9710b858db55e7b21000079fc669
  2. 0x94288aba76b719ed554447e9e7a46d39ba8667b17d4da5515a9adca54f401f36
  3. 0x2ecaacedd3704402cb7a7bceeb63462e059dc9df60522fa233bdd973e5095cbe
  4. 0xcc396657b5c20bf42e98a8fdb3a9161a4a66e5ed5345a9ab36755116389fa4a8
  5. 0xa5b454ea6efa71bd6173ace3db8120c91d642ece0ba6afa6b95362478ef5d200
  6. 0x971b4abab886c2b4cfbf75ed8d8f374db841413735992d0ea7ab5c70e7ec1e31
  7. 0x51ba3884db47f9af3753fb047fa0628c1596e7b756d336aec1b1cae9447d0341
  8. 0xa4d6ba21661b46644dc21e22c3055a93e5e4c5ee27e875439eafba540a62a664
  9. 0x1febf46acae5d729433fefda7e1123eb690cce1d18b908d70421662873f455b7
  10. 0xf04f1893fe6291cdbc16182b9a16bead5bf9b24bd4e846024218e2491f79cc69
  11. 0xc50bb1c2185da1e4294f4829be5412051ce30550dd05a2a26962841b3ba2399d
  12. 0x3d6ec9d5ef8daa604601742088e213da0a439db6eff6ce50ec3ffb264a60ddd3
  13. 0x3b1c0e225d1b1cb24cd5d5ea4af2de20ed68a1eaf8b61924ed1b81e4b9cf7e39
  14. 0x083427e39db4dd470662401f6db5db8fadf084fc4274cf8621b368416952b78b
  15. 0x1a74ed3b3756b9cd946da49701bcec120ec88645013da99fa9eea60b39e1a570
  16. 0x123ec8bee20ddc55223eeef5a4f4d6c4b6416515adbb911c56759f5cde56e452
  17. 0xd0651cb9bc8155eb52b5247d506e74b8a935057dc190ba52091702ac25ed3a40
  18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
  19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
Day root
0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
Chained
0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
Published
On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae

How to check it · This row as JSON