{
  "automatic_evidence_credit": false,
  "captures": [],
  "change_log": [
    {
      "after_hash": "5b9c41997dbe9170df46eb2d92023744895e0fea57cf8ff220f9e09ac7f48399",
      "before_hash": "b21f1bf83e81268d822b4b0c64ac2d96201a343236fdc42c69848fc9f48c05fe",
      "diff": {
        "changes": [
          {
            "compatibility_class": "BREAKING",
            "fact": "tool removed",
            "kind": "TOOL_REMOVED",
            "path": "tools[kenwea.notary.check]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "BREAKING",
            "fact": "tool removed",
            "kind": "TOOL_REMOVED",
            "path": "tools[kenwea.notary.getPublicKey]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "BREAKING",
            "fact": "tool removed",
            "kind": "TOOL_REMOVED",
            "path": "tools[kenwea.notary.verify]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[kenwea_notary_check]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[kenwea_notary_get_public_key]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[kenwea_notary_verify]",
            "security_relevant_field": false
          }
        ],
        "classified": true,
        "counts_by_class": {
          "BREAKING": 3,
          "INFO": 0,
          "NON_BREAKING": 3
        },
        "taxonomy_version": "1.0.0",
        "total": 6,
        "truncated": false
      },
      "entry_sha256": "68cca6b85b5bc75b1d5524f2c39468e13e88182dd22cc041d2ec55bc0ebd1f08",
      "evidence_class": "MANIFEST_CHANGE",
      "labels": [
        "MANIFEST_CHANGED",
        "TOOL_LIST_OR_TOOL_TEXT_CHANGED"
      ],
      "observed_at_utc": "2026-10-12T01:42:50Z",
      "previous_entry_sha256": "5243cf7847c585de763031fd135cc8e67321c0a451b9fbd380ac92ecdd29ef2e",
      "receipt_id": "aee64f1c-3d50-5eaf-bfcc-826fdee31f77",
      "receipt_url": "https://www.gaipagents.com/v1/free/receipts/aee64f1c-3d50-5eaf-bfcc-826fdee31f77",
      "sequence": 25641,
      "target_id": "obs_329d5455a6d1e974b020d518",
      "target_kind": "MCP_REMOTE",
      "target_locator": "https://mcp.kenwea.com/notary/v1"
    },
    {
      "after_hash": "b21f1bf83e81268d822b4b0c64ac2d96201a343236fdc42c69848fc9f48c05fe",
      "before_hash": "55712d1dc006fb77af92dba424c9f6803afd03267902d6b3007ad1d38a194992",
      "diff": {
        "changes": [
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "version minor",
            "kind": "VERSION_MINOR",
            "path": "version",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "INFO",
            "fact": "description changed",
            "kind": "DESCRIPTION_CHANGED",
            "path": "description",
            "security_relevant_field": false
          }
        ],
        "classified": true,
        "counts_by_class": {
          "BREAKING": 0,
          "INFO": 1,
          "NON_BREAKING": 1
        },
        "taxonomy_version": "1.0.0",
        "total": 2,
        "truncated": false
      },
      "entry_sha256": "36ba47b06dcc7bbf18c65b92b6b7e2e4ceeb930dba270a46cb61d32c6c26be8a",
      "evidence_class": "MANIFEST_CHANGE",
      "labels": [
        "MANIFEST_CHANGED"
      ],
      "observed_at_utc": "2026-10-10T23:02:18Z",
      "previous_entry_sha256": "1e1ae582764763947a834171aae3bc56441040ab67efd80b66ca7ab19abac549",
      "receipt_id": "234bf9de-c187-5380-ba11-8a72264a2de9",
      "receipt_url": "https://www.gaipagents.com/v1/free/receipts/234bf9de-c187-5380-ba11-8a72264a2de9",
      "sequence": 23430,
      "target_id": "obs_329d5455a6d1e974b020d518",
      "target_kind": "MCP_REMOTE",
      "target_locator": "https://mcp.kenwea.com/notary/v1"
    },
    {
      "after_hash": "55712d1dc006fb77af92dba424c9f6803afd03267902d6b3007ad1d38a194992",
      "before_hash": "8a8c208496d376c9e30fb7a5ff8b190f691791ef1febca5800f7f86dfeff39ee",
      "diff": {
        "changes": [
          {
            "compatibility_class": "INFO",
            "fact": "tool description changed",
            "kind": "TOOL_DESCRIPTION_CHANGED",
            "path": "tools[kenwea.notary.check].description",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "INFO",
            "fact": "tool description changed",
            "kind": "TOOL_DESCRIPTION_CHANGED",
            "path": "tools[kenwea.notary.getPublicKey].description",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "INFO",
            "fact": "tool description changed",
            "kind": "TOOL_DESCRIPTION_CHANGED",
            "path": "tools[kenwea.notary.verify].description",
            "security_relevant_field": false
          }
        ],
        "classified": true,
        "counts_by_class": {
          "BREAKING": 0,
          "INFO": 3,
          "NON_BREAKING": 0
        },
        "taxonomy_version": "1.0.0",
        "total": 3,
        "truncated": false
      },
      "entry_sha256": "56c60e62b05deb3b82428f56fcaaa51dfe3a4017ec56e472b5b8f41306088345",
      "evidence_class": "MANIFEST_CHANGE",
      "labels": [
        "MANIFEST_CHANGED",
        "TOOL_LIST_OR_TOOL_TEXT_CHANGED"
      ],
      "observed_at_utc": "2026-10-08T20:35:05Z",
      "previous_entry_sha256": "cc468b205c52de270576617c084b85ba9a13a3080daded187551cfced7f4b171",
      "receipt_id": "6502b4f9-5db4-5d19-b08d-6d0e1396e1f8",
      "receipt_url": "https://www.gaipagents.com/v1/free/receipts/6502b4f9-5db4-5d19-b08d-6d0e1396e1f8",
      "sequence": 20433,
      "target_id": "obs_329d5455a6d1e974b020d518",
      "target_kind": "MCP_REMOTE",
      "target_locator": "https://mcp.kenwea.com/notary/v1"
    }
  ],
  "check_outcomes": {
    "ask": {
      "changed_since": "https://www.gaipagents.com/v1/free/observatory/changed-since?url=<endpoint>",
      "changes_and_reachability": "https://www.gaipagents.com/v1/free/changes/subscribe?url=<endpoint>",
      "conformance": "https://www.gaipagents.com/v1/free/conformance/check?url=<endpoint>"
    },
    "published": false,
    "why": "Outcomes of GAIP's own checks (whether the endpoint answered, HTTP status, response time, conformance findings) are given only to a caller who asks about the URL, never on a public page, list or feed. The same applies to every target."
  },
  "conformance": {
    "findings": "GIVEN_TO_CALLER_ONLY",
    "meaning": "The rule catalogue this manifest was read against at the observed time. The finding codes go only to a caller who checks the URL (check_outcomes.ask.conformance).",
    "observed_at_utc": "2026-10-12T01:42:50Z",
    "protocol": "MCP",
    "rule_catalogue_route": "/v1/free/knowledge/conformance-rules",
    "rule_catalogue_version": "1.0.0"
  },
  "corrections": {
    "contact": "https://www.gaipagents.com/contact",
    "exclusion": "https://www.gaipagents.com/v1/free/observatory/corrections/exclusion",
    "opt_out": "POST kind OPT_OUT to the route; the target is withdrawn from public view at once (a pause). The site's owner makes it permanent at https://www.gaipagents.com/v1/free/observatory/corrections/exclusion.",
    "queued_for_review": 0,
    "route": "https://www.gaipagents.com/v1/free/observatory/corrections"
  },
  "declared_derivations": {
    "data_appetite": {
      "categories": {
        "free_text_large": {
          "fields": 1,
          "tools": 1
        }
      },
      "fields_read": 5,
      "observed_at_utc": "2026-10-12T01:42:50Z",
      "tools_read": 3
    },
    "dependency_domains": [
      {
        "domain": "github.com",
        "roles": [
          "repository"
        ]
      }
    ],
    "last_observed_at_utc": "2026-10-12T01:42:50Z",
    "meaning": "Derived by GAIP from what this agent declared, at the stated time: the categories of data its tools' input fields ask for (counts, by keyword rules gaip.data-appetite-rules.v1), the outside domains its declarations point to, and the operator as the agent itself publishes it. Facts about declarations, not an assessment of the agent or its operator.",
    "operator": {
      "as_published": "com.kenwea.www",
      "source_kind": "registry_namespace_domain"
    },
    "rules_version": "gaip.data-appetite-rules.v1",
    "schema_version": "gaip.declared-derivations.v1"
  },
  "latest": {
    "baseline_at_utc": "2026-10-01T14:39:32Z",
    "manifest_sha256": "5b9c41997dbe9170df46eb2d92023744895e0fea57cf8ff220f9e09ac7f48399",
    "observed_at_utc": "2026-10-12T01:42:50Z"
  },
  "metadata_signals": {
    "meaning": "Pattern rules are published only as aggregate rates across all observed targets (see the summary), never per party. GAIP issues no overall verdict and does not rank parties.",
    "overall_verdict": null,
    "per_target_results": null,
    "published": "AGGREGATE_ONLY_IN_SUMMARY",
    "rules": [
      {
        "rationale": "Zero-width, bidirectional-control and Unicode tag characters are not visible to a human reader but are read by language models. GAIP reports whether any occur; many have ordinary uses.",
        "rule_id": "OBS-SIG-001",
        "title": "Invisible or bidirectional-control Unicode characters in names or descriptions"
      },
      {
        "rationale": "Tool and skill descriptions are read by models. GAIP reports whether a description contains phrases shaped like instructions to a model (the patterns in GAIP's public conformance rule catalogue, plus the phrases listed in the Observatory method). Such phrases can be benign.",
        "rule_id": "OBS-SIG-002",
        "title": "Instruction-like text in descriptions"
      },
      {
        "rationale": "When a description refers to a tool name that only a different observed server publishes, a model using both servers may connect the two. GAIP reports whether such a reference occurs; shared names are common and often coincidental.",
        "rule_id": "OBS-SIG-003",
        "title": "Description names a tool published by a different observed server"
      },
      {
        "rationale": "Declared OAuth scopes whose names contain wildcard or whole-account wording (*, all, admin, root, full) request wide access by name. GAIP reports whether such a scope name is declared; it does not know what the scope grants.",
        "rule_id": "OBS-SIG-004",
        "title": "Declared authorization scopes with broad-access wording"
      }
    ],
    "third_party_scanners": [
      {
        "name": "Snyk agent-scan (formerly Invariant Labs mcp-scan)",
        "status": "NOT_RUN",
        "url": "https://github.com/snyk/agent-scan"
      },
      {
        "name": "Cisco AI Defense MCP Scanner",
        "status": "NOT_RUN",
        "url": "https://github.com/cisco-ai-defense/mcp-scanner"
      }
    ]
  },
  "method": "https://www.gaipagents.com/observatory",
  "notice": "Facts observed by GAIP at the stated time (UTC); they may be out of date. This is not an assessment of safety, quality, security, legality or trustworthiness of any party, and not a recommendation. To request a correction, add a right of reply or opt out, POST to https://www.gaipagents.com/v1/free/observatory/corrections or use https://www.gaipagents.com/contact.",
  "price_gbp": 0,
  "schema_version": "gaip.observatory.v1.target",
  "silent_changes_last_30_days": {
    "days": 30,
    "entries_read_at_most": 200,
    "kinds": [
      "tools_added",
      "tools_removed"
    ],
    "line": "In the last 30 days its declared tools or interface changed with no declared version change in 1 week: 2026-W42 (2026-10-12); kinds: tools added, tools removed.",
    "meaning": "Weeks (ISO) in which GAIP recorded a change to the agent's declared tools or interface (tools added or removed, descriptions re-worded, input or output schema, behaviour labels, sign-in, terms or prices, endpoint host) and no declared version (registry or card version, serverInfo.version) moved that week. A week whose version movement is not recorded is not counted. Dated facts from the public change log; not an assessment of the agent.",
    "weeks": [
      {
        "dates": [
          "2026-10-12"
        ],
        "kinds": [
          "tools_added",
          "tools_removed"
        ],
        "week": "2026-W42"
      }
    ],
    "weeks_with_silent_changes": 1
  },
  "snapshot": {
    "capabilities": [
      "tools"
    ],
    "description": "Signed, traced record of what an npm package or file attempts when run, network included. No key.",
    "name": "com.kenwea.www/notary",
    "parts": [
      "registry_server_json",
      "mcp_initialize_tools_list"
    ],
    "protocol": "MCP",
    "protocolVersion": "2025-11-25",
    "public_copy": "Text excerpts of at most 300 characters; input schemas and security schemes as SHA-256 and size only.",
    "remotes": [
      {
        "type": "streamable-http",
        "url": "https://mcp.kenwea.com/notary/v1"
      }
    ],
    "scopes": [],
    "serverInfo": {
      "name": "kenwea-notary",
      "version": "1.0.0"
    },
    "title": "Kenwea Notary",
    "tools": [
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": false,
          "openWorldHint": true,
          "readOnlyHint": true,
          "title": "Notarize what an artifact does"
        },
        "description": "Notarize what a file or npm package does at the moment Kenwea fetches it, and get a signed record anyone can check.\nInput: exactly one of artifactRef, a public https URL of a single file, npm tarball or Python wheel, or package, an npm package name such as express@4.18.2 (resolved to the exact tarba",
        "inputSchema": {
          "bytes": 445,
          "published": "HASH_ONLY",
          "sha256": "7a69a99d9f76aea64fac9f8a34d8443747e9ba24c5bff809ce4ebc5674090bcc"
        },
        "name": "kenwea_notary_check",
        "title": "Notarize what an artifact does"
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": true,
          "openWorldHint": false,
          "readOnlyHint": true,
          "title": "Get the notary's public key"
        },
        "description": "Return Kenwea's published Ed25519 notary key, so a signed record can be verified with your own code instead of kenwea_notary_verify.\nInput: none.\nBehavior: reads Kenwea's published key list (https://www.kenwea.com/.well-known/kenwea-attestation-keys.json) and caches it for an hour. Runs nothing, rea",
        "inputSchema": {
          "bytes": 33,
          "published": "HASH_ONLY",
          "sha256": "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
        },
        "name": "kenwea_notary_get_public_key",
        "title": "Get the notary's public key"
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": true,
          "openWorldHint": false,
          "readOnlyHint": true,
          "title": "Verify a signed Kenwea record"
        },
        "description": "Check a signed record produced by kenwea_notary_check: whether its signature is valid under Kenwea's published Ed25519 key, and what it attests.\nInput: payload and signature exactly as they appear in the record's signedAttestation. payload is a JSON string and must be passed byte for byte; re-serial",
        "inputSchema": {
          "bytes": 406,
          "published": "HASH_ONLY",
          "sha256": "a5ff6c4bef68f3ba8fdfe113f5d219e8e8cced55eb500c1bdb8083687605fdae"
        },
        "name": "kenwea_notary_verify",
        "title": "Verify a signed Kenwea record"
      }
    ],
    "version": "1.1.0"
  },
  "status_history": [
    {
      "manifest_partial": null,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "5b9c41997dbe9170df46eb2d92023744895e0fea57cf8ff220f9e09ac7f48399",
      "observed_at_utc": "2026-10-12T01:42:50Z",
      "protocol_version": "2025-11-25"
    },
    {
      "manifest_partial": null,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "b21f1bf83e81268d822b4b0c64ac2d96201a343236fdc42c69848fc9f48c05fe",
      "observed_at_utc": "2026-10-10T23:02:18Z",
      "protocol_version": "2025-11-25"
    },
    {
      "manifest_partial": false,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "55712d1dc006fb77af92dba424c9f6803afd03267902d6b3007ad1d38a194992",
      "observed_at_utc": "2026-10-09T21:48:12Z",
      "protocol_version": "2025-11-25"
    },
    {
      "manifest_partial": null,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "55712d1dc006fb77af92dba424c9f6803afd03267902d6b3007ad1d38a194992",
      "observed_at_utc": "2026-10-08T20:35:05Z",
      "protocol_version": "2025-11-25"
    },
    {
      "manifest_partial": false,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "8a8c208496d376c9e30fb7a5ff8b190f691791ef1febca5800f7f86dfeff39ee",
      "observed_at_utc": "2026-10-07T19:13:24Z",
      "protocol_version": "2025-11-25"
    },
    {
      "manifest_partial": false,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "8a8c208496d376c9e30fb7a5ff8b190f691791ef1febca5800f7f86dfeff39ee",
      "observed_at_utc": "2026-10-06T17:50:29Z",
      "protocol_version": "2025-11-25"
    },
    {
      "manifest_partial": false,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "8a8c208496d376c9e30fb7a5ff8b190f691791ef1febca5800f7f86dfeff39ee",
      "observed_at_utc": "2026-10-05T16:29:20Z",
      "protocol_version": "2025-11-25"
    },
    {
      "manifest_partial": false,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "8a8c208496d376c9e30fb7a5ff8b190f691791ef1febca5800f7f86dfeff39ee",
      "observed_at_utc": "2026-10-04T15:08:57Z",
      "protocol_version": "2025-11-25"
    },
    {
      "manifest_partial": false,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "8a8c208496d376c9e30fb7a5ff8b190f691791ef1febca5800f7f86dfeff39ee",
      "observed_at_utc": "2026-10-03T13:53:48Z",
      "protocol_version": "2025-11-25"
    },
    {
      "manifest_partial": null,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "8a8c208496d376c9e30fb7a5ff8b190f691791ef1febca5800f7f86dfeff39ee",
      "observed_at_utc": "2026-10-01T14:39:32Z",
      "protocol_version": "2025-11-25"
    }
  ],
  "target": {
    "corrections_route": "https://www.gaipagents.com/v1/free/observatory/corrections",
    "first_seen_at_utc": "2026-10-01T11:56:53Z",
    "kind": "MCP_REMOTE",
    "last_observed_at_utc": "2026-10-12T01:42:50Z",
    "locator": "https://mcp.kenwea.com/notary/v1",
    "name": "com.kenwea.www/notary",
    "source": "official-mcp-registry",
    "target_id": "obs_329d5455a6d1e974b020d518"
  }
}