← The evidence ledger
Evidence row 63043
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://agents.daedalusdevelopmentgroup.com/v1/mcp-tool-security-audit
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 9f78d7a6eda51bc739771e92051405d109a0663c6dac0eb5e11fc4f5d3468058
- Leaf
- 0x30aec925f2878d03759bdcd2a93edda90c202cb2af4e4ddd5f70f34adfdae769
What was observed
{
"endpoints": [
[
"x402",
"https://agents.daedalusdevelopmentgroup.com/v1/mcp-tool-security-audit"
]
],
"name": "DDG Agent-Payable Services",
"owner_address": "0x8afbd522f8a16bea184b41c593b8925a66830bc6",
"raw": {
"accepts": [
{
"amount": "10000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"assetSymbol": "USDC",
"chainName": "Base mainnet",
"displayAmount": "0.01",
"displayCurrency": "USD",
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x8AfBD522F8a16BEa184b41c593B8925a66830Bc6",
"scheme": "exact"
}
],
"description": "MCP/tool permission and auth-boundary audit: tool-risk matrix, dangerous capability flags, prompt-injection exposure. Fully automated: delivered inline in the paid call (no operator queue).",
"extensions": {
"bazaar": {
"description": "MCP/tool permission and auth-boundary audit: tool-risk matrix, dangerous capability flags, prompt-injection exposure. Fully automated: delivered inline in the paid call (no operator queue).",
"info": {
"input": {
"body": {
"budget_usd": 0.01,
"callback_url": "https://example.com",
"notes": "string",
"payment_proof": "string",
"target": {},
"url": "https://example.com"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"ok": true
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": true,
"properties": {
"body": {
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"additionalProperties": true,
"properties": {
"example": {
"ok": true
},
"type": {
"type": "string"
}
},
"required": [
"type",
"example"
],
"type": "object"
}
},
"required": [
"input",
"output"
],
"type": "object"
}
},
"offer-receipt": {
"info": {
"offers": [
{
"format": "jws",
"signature": "eyJhbGciOiJFZERTQSIsImtpZCI6ImRpZDp3ZWI6YWdlbnRzLmRhZWRhbHVzZGV2ZWxvcG1lbnRncm91cC5jb20ja2V5cy0xIn0.eyJ2ZXJzaW9uIjoxLCJyZXNvdXJjZVVybCI6Imh0dHBzOi8vYWdlbnRzLmRhZWRhbHVzZGV2ZWxvcG1lbnRncm91cC5jb20vdjEvbWNwLXRvb2wtc2VjdXJpdHktYXVkaXQiLCJzY2hlbWUiOiJleGFjdCIsIm5ldHdvcmsiOiJlaXAxNTU6ODQ1MyIsImFzc2V0IjoiMHg4MzM1ODlmQ0Q2ZURiNkUwOGY0YzdDMzJENGY3MWI1NGJkQTAyOTEzIiwicGF5VG8iOiIweDhBZkJENTIyRjhhMTZCRWExODRiNDFjNTkzQjg5MjVhNjY4MzBCYzYiLCJhbW91bnQiOiIxMDAwMCIsInZhbGlkVW50aWwiOjE3OTI4OTk1OTJ9.4F-QRlo3e4J-Vj1jK3m7KgLa5cs8YevvOlFKpI73CqazKe-aJg6JWxi_BQWv5JFhKxVgoyKk1tZQD0NAhWptAw"
}
]
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"offers": {
"items": {
"properties": {
"format": {
"const": "jws",
"type": "string"
},
"signature": {
"type": "string"
}
},
"required": [
"format",
"signature"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"offers"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-25T03:34:52.846Z",
"quality": {
"l30DaysTotalCalls": 6,
"l30DaysUniquePayers": 2,
"lastCalledAt": "2026-10-25T03:34:52.575Z"
},
"resource": "https://agents.daedalusdevelopmentgroup.com/v1/mcp-tool-security-audit",
"serviceName": "DDG Agent-Payable Services",
"tags": [
"general",
"ai-agents",
"x402",
"agent-commerce"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "MCP/tool permission and auth-boundary audit: tool-risk matrix, dangerous capability flags, prompt-injection exposure. Fully automated: delivered inline in the paid call (no operator queue)."
}What the leaf hashes
{"body":"9f78d7a6eda51bc739771e92051405d109a0663c6dac0eb5e11fc4f5d3468058","id":63043,"kind":"listing","method":"baseline/1","observed_us":1793025454221169,"prev":null,"subject":"x402_bazaar:https://agents.daedalusdevelopmentgroup.com/v1/mcp-tool-security-audit","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x30aecfe02702e2df8a42b28c8a75fc8f4fbf311e4cf7634ffff2666706d4bda8
- 0x6e812d00d3a5320c295062617c6685f98a8f763bd7b421628fa62135f288e57d
- 0xc997354023d8e45a047874e6bcd661072844ffd2e76333830672d88cd9114ada
- 0xbbeb7d00166608d202fcf377b4cb38a811cc881ac27fc6abffd33f48ad061f04
- 0x650ad1ef203c936bf4de52b2db5afd80b60839a8df3ee2bc11847b09634f30aa
- 0x6f7e8baf49d53a3efcbb34cffa94318b7fadf365bc2e4ef286693e18a515ce5d
- 0xf44c0cebdcc3b4f1556684339c8beea4e4b0bd926be3680dc2a486d42b6e44ae
- 0x6752cb22f2e17d332b0bcad5f02d609e44802bbea0355fc500efd0939b0a61f2
- 0x25ba1b9145475ea9ef33090e367d91a0fd38d074fef51cf5ad78e396de8c39ee
- 0x0886695ce8b00ff9cb3b286883a23d258a3fbdfe296f9e24a8b5f848bccd41cb
- 0x66b4d790d6ae725a0af009d5a6edacaec5a6147d597bc8410a97be11d56a00d1
- 0xd85c7204d76d26255c94ef4caa12c05addd08238caa5cdc3888ea60b74e6b940
- 0x36a44931b230976c04691d90bf3a25ed4111d74c78b672850d8025a911ca88dd
- 0x683955a5b2250ad50568d022a6580d8739b6aff1356779d72a773b088e7c289c
- 0x610738e0c43687aded83c613c73de8b5226c73c375858a167436461c522ea213
- 0x06d71bfa7d8b41d62c8836efc2c601e1cc3772d9453596b2ae4950887f3310ca
- 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
- 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae