Evidence row 39930

What was observed

{
  "endpoints": [
    [
      "web",
      "https://github.com/kalehdoo/warehouse-mcp"
    ]
  ],
  "name": "io.github.kalehdoo/warehouse-mcp",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-05-06T21:52:22.38453Z",
        "status": "active",
        "statusChangedAt": "2026-05-06T21:52:22.38453Z",
        "updatedAt": "2026-05-06T21:52:22.38453Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
      "description": "Production MCP server for Postgres, Oracle, Snowflake, BigQuery, Redshift, DuckDB, MotherDuck.",
      "name": "io.github.kalehdoo/warehouse-mcp",
      "packages": [
        {
          "environmentVariables": [
            {
              "default": "stdio",
              "description": "Set to 'stdio' for desktop AI clients (Claude Desktop, Cursor). Defaults to 'http'.",
              "name": "MCP_TRANSPORT"
            },
            {
              "choices": [
                "postgres",
                "oracle",
                "redshift",
                "snowflake",
                "bigquery",
                "duckdb"
              ],
              "description": "Which warehouse to connect to. One of: postgres, oracle, redshift, snowflake, bigquery, duckdb. (DuckDB also handles MotherDuck via DUCKDB_PATH=md:<db>.)",
              "format": "string",
              "isRequired": true,
              "name": "WAREHOUSE_TYPE"
            },
            {
              "description": "Comma-separated bearer keys with role and optional warehouse-role impersonation: 'key1:reader,key2:admin', 'key3:reader:set_role=alice'. Leave empty for stdio (OS process boundary is the trust boundary). Required for HTTP.",
              "format": "string",
              "isSecret": true,
              "name": "MCP_API_KEYS"
            },
            {
              "description": "DuckDB file path, ':memory:', or 'md:<database>' for MotherDuck. Required when WAREHOUSE_TYPE=duckdb.",
              "format": "string",
              "name": "DUCKDB_PATH"
            },
            {
              "description": "MotherDuck service token. Required when DUCKDB_PATH starts with 'md:'.",
              "format": "string",
              "isSecret": true,
              "name": "MOTHERDUCK_TOKEN"
            },
            {
              "description": "Postgres host. Required when WAREHOUSE_TYPE=postgres. (Use REDSHIFT_HOST for Redshift.)",
              "name": "PG_HOST"
            },
            {
              "description": "Postgres database name.",
              "name": "PG_DATABASE"
            },
            {
              "description": "Postgres user.",
              "name": "PG_USER"
            },
            {
              "description": "Postgres password.",
              "isSecret": true,
              "name": "PG_PASSWORD"
            },
            {
              "description": "Oracle user. Required when WAREHOUSE_TYPE=oracle.",
              "name": "ORACLE_USER"
            },
            {
              "description": "Oracle password.",
              "isSecret": true,
              "name": "ORACLE_PASSWORD"
            },
            {
              "description": "Oracle Easy Connect (e.g. host:1521/SERVICE), TNS descriptor, or alias.",
              "name": "ORACLE_CONNECT_STRING"
            },
            {
              "description": "Snowflake account identifier (e.g. xy12345.us-east-1). Required when WAREHOUSE_TYPE=snowflake.",
              "name": "SNOWFLAKE_ACCOUNT"
            },
            {
              "description": "Snowflake username.",
              "name": "SNOWFLAKE_USER"
            },
            {
              "description": "Path to PKCS8 private key (.p8). Snowflake auth is key-pair only; password auth is not supported.",
              "name": "SNOWFLAKE_PRIVATE_KEY_PATH"
            },
            {
              "description": "GCP project id. Required when WAREHOUSE_TYPE=bigquery.",
              "name": "BIGQUERY_PROJECT"
            },
            {
              "description": "Path to BigQuery service-account JSON. Omit on GKE / Cloud Run with workload identity.",
              "name": "GOOGLE_APPLICATION_CREDENTIALS"
            },
            {
              "choices": [
                "on",
                "off"
              ],
              "default": "off",
              "description": "Set to 'on' to enable role-aware PII masking on result rows (emails, SSNs, phones, IPs, Luhn-validated CCs). Off by default.",
              "name": "GUARDRAIL_PII_MASK"
            },
            {
              "default": "0",
              "description": "Per-principal token-bucket rate limit on tool invocations. 0 = disabled. Recommend 60 for production.",
              "name": "MCP_RATE_LIMIT_RPM"
            }
          ],
          "identifier": "warehouse-mcp",
          "registryType": "npm",
          "runtimeArguments": [
            {
              "description": "Boots the MCP server. Use 'init' for interactive setup or 'doctor' to diagnose configuration.",
              "isRequired": true,
              "type": "positional",
              "value": "start"
            }
          ],
          "transport": {
            "type": "stdio"
          },
          "version": "0.4.2"
        }
      ],
      "repository": {
        "source": "github",
        "url": "https://github.com/kalehdoo/warehouse-mcp"
      },
      "version": "0.4.2",
      "websiteUrl": "https://github.com/kalehdoo/warehouse-mcp"
    }
  },
  "source": "mcp_registry",
  "summary": "Production MCP server for Postgres, Oracle, Snowflake, BigQuery, Redshift, DuckDB, MotherDuck."
}

What the leaf hashes

{"body":"d36b105843c5e773eccf2a91571eb371c7552e8b3a3b12737ad51e10119a1a3c","id":39930,"kind":"listing","method":"baseline/1","observed_us":1793025396584011,"prev":null,"subject":"mcp_registry:io.github.kalehdoo/warehouse-mcp","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0xe164deb796f020a0fe8f6b5a1491a4fb344ffeb684a832887fd54a2296ebb324
2. 0xa9f659151aa46bde3e48530ea7aa2d00cbd0129725a66862d37f60b51541eb23
3. 0x9331b8cac7b756942264707ed98cde4653834355300d1ba5de605e4ef2a43db6
4. 0x8055a930825afa8db1adb6dbf87406fb194d986e5fd7258a5e28ea7a88380f56
5. 0xf850f248fd8e2568bd4ccfaa56aaafd0bb43bd31e0d062f777c1d5bfde65cb78
6. 0x394f4392ccee1a630c36301867c8797819d0360e3c431477bd814ce0a5b57167
7. 0xcd0d428139cdf69520b01a4533b312e620f1a3e0e491a8c519b2744cced9401d
8. 0xff96377938c41ab084afb4a2bdfe929b35e9106170f9604c1c01b956a7371ff8
9. 0xe63f8e4581859c67f54bf7aee4c4a0debf8404ddbf6dd1964ec000823c4caa23
10. 0x4b514c272cf743fead7500e2a90fbbb62a667f67d8a586fb32ddc4f005077e2e
11. 0x82d0a2528274b883dc22fee84985c9c34404274baadfb76651d0008598f80bff
12. 0x714c96bd488ccf4af927c8bc83397404f7f6f1b165b622d0e8216290209825e4
13. 0x3fcdf7fa32ccefe771eb57ae3015142065d64e3ce732fea7d11b9a3c99dde44f
14. 0x0b7541c75cc482a7134110311d7dbd02095d969ba21177de9b21a52a55981718
15. 0x6dc40f983a3840a0ad927a9ca17f4ff1e3b649a6c735e2a09b140db7c2caf13b
16. 0x703f95866af09c5e5d6ead7411e9a10f964a41a2aff64d4a55ff0053c023a023
17. 0xd0651cb9bc8155eb52b5247d506e74b8a935057dc190ba52091702ac25ed3a40
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae