{"id":123803,"recorded_at":"2026-10-26T14:40:23.731306Z","observed_at":"2026-10-26T14:40:23.731265Z","subject_kind":"source_record","subject":"x402_bazaar:https://verdict.kechlab.com/v1/mcp-vet","kind":"listing","method":"baseline/1","body":{"endpoints":[["x402","https://verdict.kechlab.com/v1/mcp-vet"]],"name":"Verdict L402","owner_address":"0xb36c56a749f81ffeb44a134082dd4744e1d254eb","raw":{"accepts":[{"amount":"21400","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":120,"network":"eip155:8453","payTo":"0xb36c56A749f81FFeb44a134082DD4744E1d254Eb","scheme":"exact"}],"description":"Before an agent installs an MCP server, skill or tool: is the description poisoned (hidden orders to the agent), does it ask for more permissions than its purpose, does it imitate a known tool? Code checks (lookalike names, broad permissions, hidden text) then a reading of the descriptions. Judges t","extensions":{"bazaar":{"info":{"input":{"body":{"description":"Returns the current weather for a city name.","name":"weather-lookup","permissions":["network"],"tools":[{"description":"Current weather for a city","name":"get_weather"}]},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"mode":"mcp-vet","paid_sats":20,"payment_hash":"x402:<sha256 hex>","receipt":{"payload":{"at":"<ISO 8601 time>","kid":"<signing key id>","mode":"mcp-vet","payment_hash":"x402:<sha256 hex>","v":1,"verdict_sha256":"<sha256 hex of the verdict>"},"signature":"<base64url Ed25519 signature>"},"verdict":{"checks":{"broad_permissions":[],"hidden_text":0,"lookalike":null},"decision":"allow","reasons":[],"rule":"block if data-sending request >= 0.7, or orders to the agent >= 0.7 with leak >= 0.4 or deception >= 0.5, or hidden text with orders >= 0.5 ; review if a code check or any score >= 0.6 ; otherwise allow","scores":{"deceptive":0.02,"exfiltration":0.01,"overreach":0.03,"poisoned":0.02}}},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"description":{"description":"description of the tool","type":"string"},"name":{"description":"name of the tool or server","type":"string"},"permissions":{"description":"(optional) list of requested permissions (e.g. filesystem:write, network, shell)","items":{"type":"string"},"type":"array"},"tools":{"description":"(optional) list of { name, description } of the exposed functions","items":{"type":"object"},"type":"array"}},"required":["name","description"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-20T13:33:30.002Z","quality":{"l30DaysTotalCalls":1,"l30DaysUniquePayers":1,"lastCalledAt":"2026-10-20T13:33:29.4Z"},"resource":"https://verdict.kechlab.com/v1/mcp-vet","serviceName":"Verdict L402","tags":["mcp","supply-chain","ai-agents"],"type":"http","x402Version":2},"source":"x402_bazaar","summary":"Before an agent installs an MCP server, skill or tool: is the description poisoned (hidden orders to the agent), does it ask for more permissions than its purpose, does it imitate a known tool? Code checks (lookalike names, broad permissions, hidden text) then a reading of the descriptions. Judges t"},"body_sha256":"5323aa4cbab6b7c00707213b5e01e3cc5fb1bf3d2d6552e35d525539ed99d2ad","prev_id":null,"leaf":"0xb3d8dd667dbc337b262c93d477f79c3c51219ea9497954f3073bdcf828fbdaf1","leaf_text":"{\"body\":\"5323aa4cbab6b7c00707213b5e01e3cc5fb1bf3d2d6552e35d525539ed99d2ad\",\"id\":123803,\"kind\":\"listing\",\"method\":\"baseline/1\",\"observed_us\":1793025623731265,\"prev\":null,\"subject\":\"x402_bazaar:https://verdict.kechlab.com/v1/mcp-vet\",\"subject_kind\":\"source_record\"}","day":{"day":"2026-10-26","leaves":296695,"root":"0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8","chained":"0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a","anchor_chain":"eip155:5042002","anchor_tx":"0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae","anchor_block":69251483},"proof":["0xb3d85978e847927d379bf4a558d910f04bf5bfeada0ec85a7295bb0e91ec570e","0x2f9ffca5bb941f94fed2b1669c2fa6cccd3cb9406a67185fd9bf5a52c582b8be","0x7021cb551bb8b2a1ac146f0769ad6310908dbae331c79df29c88d453125088c6","0xa61f46d2e448afbb30561b0df35ff1db04874968c9406caca9566c81141b972c","0x856993d2fc9e4cec44135acf71a1d8fdb2e8bcbde358aa6e2e9ce0471a924655","0x0afbcece58bcfe0e1956a0c9d7fe9396f0ec452eba73f2426f1d5075795b835b","0xf219a16be6f019c78749e1017910a344daa34a1a4e9db65483963cfe3bccf8df","0xa4d6ba21661b46644dc21e22c3055a93e5e4c5ee27e875439eafba540a62a664","0x1febf46acae5d729433fefda7e1123eb690cce1d18b908d70421662873f455b7","0xf04f1893fe6291cdbc16182b9a16bead5bf9b24bd4e846024218e2491f79cc69","0xc50bb1c2185da1e4294f4829be5412051ce30550dd05a2a26962841b3ba2399d","0x3d6ec9d5ef8daa604601742088e213da0a439db6eff6ce50ec3ffb264a60ddd3","0x3b1c0e225d1b1cb24cd5d5ea4af2de20ed68a1eaf8b61924ed1b81e4b9cf7e39","0x083427e39db4dd470662401f6db5db8fadf084fc4274cf8621b368416952b78b","0x1a74ed3b3756b9cd946da49701bcec120ec88645013da99fa9eea60b39e1a570","0x123ec8bee20ddc55223eeef5a4f4d6c4b6416515adbb911c56759f5cde56e452","0xd0651cb9bc8155eb52b5247d506e74b8a935057dc190ba52091702ac25ed3a40","0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f","0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a"]}