Evidence row 35461

What was observed

{
  "endpoints": [
    [
      "mcp",
      "https://cisa-cybersecurity.caseyjhand.com/mcp"
    ]
  ],
  "name": "io.github.cyanheads/cisa-cybersecurity-mcp-server",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-10-14T21:31:06.737755Z",
        "status": "active",
        "statusChangedAt": "2026-10-14T21:31:06.737755Z",
        "updatedAt": "2026-10-14T21:31:06.737755Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
      "description": "CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.",
      "name": "io.github.cyanheads/cisa-cybersecurity-mcp-server",
      "packages": [
        {
          "environmentVariables": [
            {
              "default": "info",
              "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').",
              "format": "string",
              "name": "MCP_LOG_LEVEL"
            },
            {
              "default": "*/30 * * * *",
              "description": "Cron expression for the KEV catalog conditional-refresh poll, on every transport. Set off to disable it; an invalid expression fails startup.",
              "format": "string",
              "name": "CISA_KEV_REFRESH_CRON"
            },
            {
              "description": "Filesystem path to the local SQLite index of ICS advisories. Unset, it is csaf.sqlite3 under cisa-cybersecurity-mcp-server in the per-user cache directory: ~/Library/Caches on macOS, $XDG_CACHE_HOME or ~/.cache on Linux, %LOCALAPPDATA% on Windows.",
              "format": "string",
              "name": "CISA_CSAF_MIRROR_PATH"
            },
            {
              "default": "true",
              "description": "Seed the ICS advisory index in the background at startup when it has never completed a sync, and re-ingest it in place when an older server version built it. Accepts true or false; set false where seeding runs out of band.",
              "format": "string",
              "name": "CISA_CSAF_MIRROR_AUTO_INIT"
            },
            {
              "default": "17 */6 * * *",
              "description": "Cron expression for the incremental ICS advisory refresh, on every transport; the refresh also runs once at startup. Set off to disable both; an invalid expression fails startup.",
              "format": "string",
              "name": "CISA_CSAF_REFRESH_CRON"
            },
            {
              "default": "21600",
              "description": "Seconds a fetched SSVC record stays cached. Negative results use one sixth of this value.",
              "format": "string",
              "name": "CISA_VULNRICHMENT_CACHE_TTL_SECONDS"
            },
            {
              "default": "900",
              "description": "Seconds a parsed RSS feed window stays cached.",
              "format": "string",
              "name": "CISA_FEED_CACHE_TTL_SECONDS"
            },
            {
              "default": "30000",
              "description": "Per-request timeout in milliseconds for every upstream fetch.",
              "format": "string",
              "name": "CISA_HTTP_TIMEOUT_MS"
            }
          ],
          "identifier": "@cyanheads/cisa-cybersecurity-mcp-server",
          "registryBaseUrl": "https://registry.npmjs.org",
          "registryType": "npm",
          "runtimeHint": "npx",
          "transport": {
            "type": "stdio"
          },
          "version": "0.3.2"
        },
        {
          "environmentVariables": [
            {
              "description": "Selects the HTTP transport.",
              "format": "string",
              "name": "MCP_TRANSPORT_TYPE",
              "value": "http"
            },
            {
              "default": "127.0.0.1",
              "description": "The hostname for the HTTP server.",
              "format": "string",
              "name": "MCP_HTTP_HOST"
            },
            {
              "default": "3010",
              "description": "The port to run the HTTP server on.",
              "format": "string",
              "name": "MCP_HTTP_PORT"
            },
            {
              "default": "/mcp",
              "description": "The endpoint path for the MCP server.",
              "format": "string",
              "name": "MCP_HTTP_ENDPOINT_PATH"
            },
            {
              "default": "none",
              "description": "Authentication mode to use: 'none', 'jwt', or 'oauth'.",
              "format": "string",
              "name": "MCP_AUTH_MODE"
            },
            {
              "default": "info",
              "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').",
              "format": "string",
              "name": "MCP_LOG_LEVEL"
            },
            {
              "default": "*/30 * * * *",
              "description": "Cron expression for the KEV catalog conditional-refresh poll, on every transport. Set off to disable it; an invalid expression fails startup.",
              "format": "string",
              "name": "CISA_KEV_REFRESH_CRON"
            },
            {
              "description": "Filesystem path to the local SQLite index of ICS advisories. Unset, it is csaf.sqlite3 under cisa-cybersecurity-mcp-server in the per-user cache directory: ~/Library/Caches on macOS, $XDG_CACHE_HOME or ~/.cache on Linux, %LOCALAPPDATA% on Windows.",
              "format": "string",
              "name": "CISA_CSAF_MIRROR_PATH"
            },
            {
              "default": "true",
              "description": "Seed the ICS advisory index in the background at startup when it has never completed a sync, and re-ingest it in place when an older server version built it. Accepts true or false; set false where seeding runs out of band.",
              "format": "string",
              "name": "CISA_CSAF_MIRROR_AUTO_INIT"
            },
            {
              "default": "17 */6 * * *",
              "description": "Cron expression for the incremental ICS advisory refresh, on every transport; the refresh also runs once at startup. Set off to disable both; an invalid expression fails startup.",
              "format": "string",
              "name": "CISA_CSAF_REFRESH_CRON"
            },
            {
              "default": "21600",
              "description": "Seconds a fetched SSVC record stays cached. Negative results use one sixth of this value.",
              "format": "string",
              "name": "CISA_VULNRICHMENT_CACHE_TTL_SECONDS"
            },
            {
              "default": "900",
              "description": "Seconds a parsed RSS feed window stays cached.",
              "format": "string",
              "name": "CISA_FEED_CACHE_TTL_SECONDS"
            },
            {
              "default": "30000",
              "description": "Per-request timeout in milliseconds for every upstream fetch.",
              "format": "string",
              "name": "CISA_HTTP_TIMEOUT_MS"
            }
          ],
          "identifier": "@cyanheads/cisa-cybersecurity-mcp-server",
          "registryBaseUrl": "https://registry.npmjs.org",
          "registryType": "npm",
          "runtimeHint": "npx",
          "transport": {
            "type": "streamable-http",
            "url": "http://localhost:3010/mcp"
          },
          "version": "0.3.2"
        }
      ],
      "remotes": [
        {
          "type": "streamable-http",
          "url": "https://cisa-cybersecurity.caseyjhand.com/mcp"
        }
      ],
      "repository": {
        "source": "github",
        "url": "https://github.com/cyanheads/cisa-cybersecurity-mcp-server"
      },
      "version": "0.3.2"
    }
  },
  "source": "mcp_registry",
  "summary": "CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless."
}

What the leaf hashes

{"body":"baebb9948afdec50939826d6f4c752e3946a815ab3facd8b637eb3007a289d15","id":35461,"kind":"listing","method":"baseline/1","observed_us":1793025373067568,"prev":null,"subject":"mcp_registry:io.github.cyanheads/cisa-cybersecurity-mcp-server","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x0a385f2889fca590aecff25769835051d504d77d071416ac57e84f8b79ae2287
2. 0x1b50360b89dd61f676f7958ced691876ffca4df148f340de65548975e945b690
3. 0x89a650bffbcb21a1ac8404e8410f5520de4e1704d5c8eab3bbd547142014ae4e
4. 0x8aa3e74dd581d044c03e5c6b25e3e3087f3a643602a75776fd122c2e651825e8
5. 0xc4f15a2a73fc3b62827436a308ca98aa9ba9639b48fac4053cd03b2521350685
6. 0x8f84e7bda6f544d03ea4be62426a415ab398e3445511e9b2b82e28f8ec3b3b1e
7. 0x60b86f2a4298f707f140cbf8016ca9fc737d4c0e0b7623339cddc9d7104f82f0
8. 0xc8cce4ccfe25d5a5077983f73b288514abe105c9786080272d48f65d5364c404
9. 0xf88e097adda8b3df9e167ac9617b23b48d33f13fbfd85f031daeddd17d64feb0
10. 0xb0bc31ab556762b7fe858f7c949edb2e4e31297933ff02d4987fcbda94b38b0f
11. 0x87b542db74671bce07a9c7ffa1bac70164f2e2ab234b807975c3d56a1d6139ee
12. 0x9e12233d6ee4faeb9271b0fc3c834797517d702f44add023149f28a0809c0aaa
13. 0xe5a836cf25a8dfc72c9e3b6a69a7561a1f61f50f9cf36707d36f6e926aa15dec
14. 0xa96bb9408ce00a0d40ddaba8736257dfce76d5478b131d69db1afdf8a824312b
15. 0x7ddc2fead128357f881b63e6c7c26d7fbbb84fca6c7c8e0bbfe386de86ca8d39
16. 0xc6a4d7899a0f442958e26505011190b7cff2483611c1b94eba9043e0ba9ac36e
17. 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae