← The evidence ledger
Evidence row 811058
Observed , by probe.mcp/1.
- Kind
- mcp.tools
- About
- endpoint a3e6242d-d8d8-4840-bbe1-57365bb907e0
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- f4214744dceb4a2274c1096489250197f1961a7ddd716340662ad430f4288b85
- Leaf
- 0x7795287e81289c430780065ca6dda4f94d67f3aceaa97ac7c06968042656d167
What was observed
{
"count": 8,
"tools": [
{
"description": "解析证书(PEM / base64-DER / 裸 DER):全字段展开 + 整链吊销检查(OCSP / CRL,含交叉证书)+ 上传链时验证匹配关系并识别根证书。",
"inputSchema": {
"properties": {
"cert": {
"description": "证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER",
"type": "string"
},
"chain": {
"description": "可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER",
"type": "string"
},
"check_revocation": {
"description": "是否执行整链吊销检查(OCSP / CRL,含交叉证书),默认 true",
"type": "boolean"
}
},
"required": [
"cert"
],
"type": "object"
},
"name": "cert.decode"
},
{
"description": "证书 / 私钥 / CSR 匹配验证(SubjectPublicKeyInfo SHA-256 指纹比对)。",
"inputSchema": {
"properties": {
"cert": {
"description": "证书 PEM",
"type": "string"
},
"csr": {
"description": "CSR PEM",
"type": "string"
},
"key": {
"description": "私钥 PEM",
"type": "string"
},
"mode": {
"enum": [
"cert-key",
"cert-csr",
"key-csr"
],
"type": "string"
},
"password": {
"description": "加密私钥的密码(可选)",
"type": "string"
}
},
"required": [
"mode"
],
"type": "object"
},
"name": "cert.match"
},
{
"description": "证书 / 密钥格式转换:PEM / P12 / JKS 任意方向(含同格式重置密码)。",
"inputSchema": {
"properties": {
"cert_pem": {
"description": "PEM 源:证书",
"type": "string"
},
"chain_pem": {
"description": "PEM 源:链(可选)",
"type": "string"
},
"enable_aia_fill": {
"description": "源不带链时尝试 AIA 拉取",
"type": "boolean"
},
"key_pem": {
"description": "PEM 源:私钥",
"type": "string"
},
"source_alias": {
"description": "JKS 别名",
"type": "string"
},
"source_blob_base64": {
"description": "P12/JKS 源 base64",
"type": "string"
},
"source_kind": {
"enum": [
"pem",
"p12",
"jks"
],
"type": "string"
},
"source_password": {
"type": "string"
},
"target_alias": {
"description": "目标别名,P12/PFX 默认 server,JKS 默认 tomcat",
"type": "string"
},
"target_kind": {
"enum": [
"pem",
"p12",
"jks"
],
"type": "string"
},
"target_password": {
"description": "P12/JKS 目标必填",
"type": "string"
}
},
"required": [
"source_kind",
"target_kind"
],
"type": "object"
},
"name": "convert.run"
},
{
"description": "解析 CSR(PEM / base64-DER / 裸 DER):Subject、公钥算法、SAN、请求扩展、SPKI 指纹、自签名完整性校验。",
"inputSchema": {
"properties": {
"csr": {
"description": "CSR 内容:PEM 文本 / base64-DER / 裸 DER",
"type": "string"
}
},
"required": [
"csr"
],
"type": "object"
},
"name": "csr.decode"
},
{
"description": "生成 RSA / ECC 私钥与对应 CSR;入参为 Subject + 算法 + 哈希 + SAN。",
"inputSchema": {
"properties": {
"algorithm": {
"enum": [
"RSA-2048",
"RSA-3072",
"RSA-4096",
"EC-P256",
"EC-P384",
"EC-P521"
],
"type": "string"
},
"hash_alg": {
"description": "RSA 适用;ECC 由曲线决定",
"enum": [
"SHA-256",
"SHA-384",
"SHA-512"
],
"type": "string"
},
"subject": {
"properties": {
"common_name": {
"description": "CN,支持中文域名及通配符,自动转换为 IDNA/Punycode。会自动作为第一个 SAN 加入(现代 CA 要求 CN 出现在 SAN 中)",
"type": "string"
},
"country": {
"description": "C 国家代码 ISO 3166-1 alpha-2,会自动转大写(必填)",
"type": "string"
},
"locality": {
"description": "L 城市(可选)",
"type": "string"
},
"organization": {
"description": "O 组织名(可选,DV 证书通常不需要)",
"type": "string"
},
"province": {
"description": "ST 省/州(可选)",
"type": "string"
},
"san": {
"description": "额外的 Subject Alternative Names(可选;CN 已自动包含)",
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"common_name",
"country"
],
"type": "object"
}
},
"required": [
"subject",
"algorithm"
],
"type": "object"
},
"name": "csr.generate"
},
{
"description": "DCV 预检 — DNS(TXT/CNAME)或 HTTP 文件验证模式。返回完整事件流(同步等待)。",
"inputSchema": {
"properties": {
"domain": {
"description": "DNS 模式必填:主机记录名",
"type": "string"
},
"expected_token": {
"description": "可选;粘贴期望值启用字节级匹配",
"type": "string"
},
"file_url": {
"description": "HTTP 模式必填;协议头可省略,系统自动探测 http+https",
"type": "string"
},
"mode": {
"enum": [
"dns",
"http"
],
"type": "string"
},
"record_type": {
"description": "DNS 模式记录类型,默认 txt",
"enum": [
"txt",
"cname"
],
"type": "string"
},
"target_ca": {
"description": "可选;letsencrypt | digicert | sectigo | godaddy | globalsign | zerossl",
"type": "string"
}
},
"required": [
"mode"
],
"type": "object"
},
"name": "dcv.check"
},
{
"description": "列出已支持的 CA(用于挑战路径推导与 CAA 比对)。",
"inputSchema": {
"properties": {},
"type": "object"
},
"name": "dcv.list_cas"
},
{
"description": "HTTPS 体检:常规 TLS 与国密 TLCP、RSA/SM2 证书、RSA 根信任、整链 OCSP/CRL(含交叉证书)、协议套件及评级。同步等待全部完成。",
"inputSchema": {
"properties": {
"force": {
"description": "true 跳过缓存,强制重扫",
"type": "boolean"
},
"host": {
"description": "FQDN,可带 :port",
"type": "string"
},
"port": {
"description": "可选;默认从 host 解析或回退 443",
"type": "integer"
}
},
"required": [
"host"
],
"type": "object"
},
"name": "inspect.run"
}
]
}What the leaf hashes
{"body":"f4214744dceb4a2274c1096489250197f1961a7ddd716340662ad430f4288b85","id":811058,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793226371364333,"prev":null,"subject":"a3e6242d-d8d8-4840-bbe1-57365bb907e0","subject_kind":"endpoint"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (231336 rows).
- 0x779515ac682837917c4504598447ba926ae3507d00c4b8938bb5aa893316cb1c
- 0x6d8b5640934fb1d1308c94972771283406f14ecb0955733e8d56c47593ca876b
- 0x302dece1f92788407b8781fe0b35498614c4a2dcee4e68f3269ea2d9e5ac62a3
- 0xe9429439213f1b25ab4129ab9f7762fd995e820dcf0bc74a492af077d3d47da8
- 0x2c80d262fc204f12549757828c6f8af8ab70f722c59a69396f54aff09d1f7a94
- 0x9f31942a98331037b655d2e5f3a716471272e5d02c0797122fc8dadd733b96ac
- 0x3f0d8bf0a9c2da62638ffaf79ffbf8878fe779a9df59014402e00e08afa2489a
- 0x118a37b22901ff263771e36a37a36ff32849caf28b5c5938b18e322955141519
- 0xded684cf19606af94e7d13b24f66701f305809a60096b6aa22ef14b1e565359d
- 0x4a835c055c42bda08f3e843f64a6ee0f323608cb47b06acb49cb810b6d804cc0
- 0xe209b6b6dacfeadbcbdb5f7131c54e98ddedd7daf948ebca4c8d8abd89cd9fc9
- 0xdb715aef70540cf2462c6d23ed65a7b4f80c4d46060d218b3f284831fef0fc9e
- 0x95d7bc27dc9ea43e607251bd7e1cdfa9e00b59b71051b5db78fe06bf25becc5b
- 0x40581185279a8bf075dca3a4c3a5648ec6f62098ba7402cbc097d5cc707e0840
- 0xab4e84d781dccd579dcf5c47a356a4a2e6cac58a2aefdf3543a3fa15238fa4db
- 0x74cf00e07b52415c2184cf20be69d195ed2725497a6892c2f3e449497c17d0ec
- 0x7a743a0a09057bae687051274e1d45bf973bd36a1a4ba16a191b5d29e3bdfa2a
- 0xe027395fafb7fc41921c42ca0542524ea22204cbd5908b70b27f3d5fb26f5d0f
- Day root
- 0x2c19037464cc4c493624565f01775d6446fc78eaa118fc6865bfe2bfca9ff78e
- Chained
- 0xd1d7dee8322ceff8f4c8d83aa1fe4a4466825c2af1c97dbde3d35db61234f7be
- Published
- On Arc Testnet, block 69584042: 0x8bae2b1d097834c8b458513862d70d29ee807e98dc2e863b27250131c15b35ae