Evidence row 35530

What was observed

{
  "endpoints": [
    [
      "mcp",
      "https://nist-nvd.caseyjhand.com/mcp"
    ]
  ],
  "name": "io.github.cyanheads/nist-nvd-mcp-server",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-10-26T07:24:16.880316Z",
        "status": "active",
        "statusChangedAt": "2026-10-26T07:24:16.880316Z",
        "updatedAt": "2026-10-26T07:24:16.880316Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
      "description": "Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.",
      "name": "io.github.cyanheads/nist-nvd-mcp-server",
      "packages": [
        {
          "environmentVariables": [
            {
              "default": "true",
              "description": "Clamp oversized reads to 2000 CVEs/events, 10000 CPEs, or 100 CVE IDs. False restores rejection.",
              "format": "boolean",
              "name": "NVD_CLAMP_LIMITS"
            },
            {
              "description": "NVD API key. Without it, rate limit is 5 req/30s; with it, 50 req/30s. Get one free at nvd.nist.gov/developers/request-an-api-key.",
              "format": "string",
              "name": "NVD_API_KEY"
            },
            {
              "default": "10000",
              "description": "Per-request timeout in milliseconds. Raise to 60000 when using nvd_get_cve_history without an API key.",
              "format": "string",
              "name": "NVD_REQUEST_TIMEOUT_MS"
            },
            {
              "default": "info",
              "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').",
              "format": "string",
              "name": "MCP_LOG_LEVEL"
            }
          ],
          "identifier": "@cyanheads/nist-nvd-mcp-server",
          "registryBaseUrl": "https://registry.npmjs.org",
          "registryType": "npm",
          "runtimeHint": "npx",
          "transport": {
            "type": "stdio"
          },
          "version": "0.4.0"
        },
        {
          "environmentVariables": [
            {
              "default": "true",
              "description": "Clamp oversized reads to 2000 CVEs/events, 10000 CPEs, or 100 CVE IDs. False restores rejection.",
              "format": "boolean",
              "name": "NVD_CLAMP_LIMITS"
            },
            {
              "description": "Selects the HTTP transport.",
              "format": "string",
              "name": "MCP_TRANSPORT_TYPE",
              "value": "http"
            },
            {
              "description": "NVD API key. Without it, rate limit is 5 req/30s; with it, 50 req/30s. Get one free at nvd.nist.gov/developers/request-an-api-key.",
              "format": "string",
              "name": "NVD_API_KEY"
            },
            {
              "default": "10000",
              "description": "Per-request timeout in milliseconds. Raise to 60000 when using nvd_get_cve_history without an API key.",
              "format": "string",
              "name": "NVD_REQUEST_TIMEOUT_MS"
            },
            {
              "default": "127.0.0.1",
              "description": "The hostname for the HTTP server.",
              "format": "string",
              "name": "MCP_HTTP_HOST"
            },
            {
              "default": "3010",
              "description": "The port to run the HTTP server on.",
              "format": "string",
              "name": "MCP_HTTP_PORT"
            },
            {
              "default": "/mcp",
              "description": "The endpoint path for the MCP server.",
              "format": "string",
              "name": "MCP_HTTP_ENDPOINT_PATH"
            },
            {
              "default": "none",
              "description": "Authentication mode to use: 'none', 'jwt', or 'oauth'.",
              "format": "string",
              "name": "MCP_AUTH_MODE"
            },
            {
              "default": "info",
              "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').",
              "format": "string",
              "name": "MCP_LOG_LEVEL"
            }
          ],
          "identifier": "@cyanheads/nist-nvd-mcp-server",
          "registryBaseUrl": "https://registry.npmjs.org",
          "registryType": "npm",
          "runtimeHint": "npx",
          "transport": {
            "type": "streamable-http",
            "url": "http://localhost:3010/mcp"
          },
          "version": "0.4.0"
        }
      ],
      "remotes": [
        {
          "type": "streamable-http",
          "url": "https://nist-nvd.caseyjhand.com/mcp"
        }
      ],
      "repository": {
        "source": "github",
        "url": "https://github.com/cyanheads/nist-nvd-mcp-server"
      },
      "version": "0.4.0"
    }
  },
  "source": "mcp_registry",
  "summary": "Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE."
}

What the leaf hashes

{"body":"10ab31375a8b338e86d000a4d7b7707cf6e78d569ea5fcd3d6f33fdf15f8ce18","id":35530,"kind":"listing","method":"baseline/1","observed_us":1793025373212167,"prev":null,"subject":"mcp_registry:io.github.cyanheads/nist-nvd-mcp-server","subject_kind":"source_record"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.