{
  "automatic_evidence_credit": false,
  "captures": [],
  "change_log": [
    {
      "after_hash": "cb535a9c14d1d3ee78299ac32e94872f38084941a8e70fa80d6b760fc48088c0",
      "before_hash": "cb535a9c14d1d3ee78299ac32e94872f38084941a8e70fa80d6b760fc48088c0",
      "diff": {
        "changes": [
          {
            "compatibility_class": "INFO",
            "fact": "Declared provider, version, model, operator or AI self-disclosure changed",
            "kind": "DECLARED_INGREDIENTS_CHANGED",
            "path": "$.declared_ingredients_changed",
            "security_relevant_field": false
          }
        ],
        "classified": true,
        "counts_by_class": {
          "BREAKING": 0,
          "INFO": 1,
          "NON_BREAKING": 0
        },
        "taxonomy_version": null,
        "total": 1,
        "truncated": false
      },
      "entry_sha256": "28fa3d1a546c9a72e13d72510616a6f6669ac3b6f63fd94a6b9a5631d46cbde7",
      "evidence_class": "FACT_CHANGE",
      "labels": [
        "DECLARED_INGREDIENTS_CHANGED"
      ],
      "observed_at_utc": "2026-11-09T04:42:52Z",
      "previous_entry_sha256": "1912f91a8596b0420535e99e9ddcf43bc5f50879b00c7fdbe672d30ad4290bb1",
      "receipt_id": null,
      "receipt_url": null,
      "sequence": 76534,
      "target_id": "obs_37f992e2932d59d3afc209c0",
      "target_kind": "MCP_REMOTE",
      "target_locator": "https://appside.build/mcp"
    },
    {
      "after_hash": "cb535a9c14d1d3ee78299ac32e94872f38084941a8e70fa80d6b760fc48088c0",
      "before_hash": "35ad2c89ed1fb2114bc11cdbcf3cdbc50ed587d68adecaacdfc2f91cdb43b24e",
      "diff": {
        "changes": [
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[claim_mcp_listing]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[confirm_mcp_claim]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[create_account]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[get_app]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[register_app]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[search_apps]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[submit_index_entry]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[submit_mcp_server]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "tool added",
            "kind": "TOOL_ADDED",
            "path": "tools[verify_app]",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "INFO",
            "fact": "tool description changed",
            "kind": "TOOL_DESCRIPTION_CHANGED",
            "path": "tools[get_sdk_status].description",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "NON_BREAKING",
            "fact": "version minor",
            "kind": "VERSION_MINOR",
            "path": "version",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "INFO",
            "fact": "description changed",
            "kind": "DESCRIPTION_CHANGED",
            "path": "description",
            "security_relevant_field": false
          },
          {
            "compatibility_class": "INFO",
            "fact": "field changed",
            "kind": "FIELD_CHANGED",
            "path": "title",
            "security_relevant_field": false
          }
        ],
        "classified": true,
        "counts_by_class": {
          "BREAKING": 0,
          "INFO": 3,
          "NON_BREAKING": 10
        },
        "taxonomy_version": "1.0.0",
        "total": 13,
        "truncated": false
      },
      "entry_sha256": "1912f91a8596b0420535e99e9ddcf43bc5f50879b00c7fdbe672d30ad4290bb1",
      "evidence_class": "MANIFEST_CHANGE",
      "labels": [
        "MANIFEST_CHANGED",
        "TOOL_LIST_OR_TOOL_TEXT_CHANGED"
      ],
      "observed_at_utc": "2026-11-09T04:42:52Z",
      "previous_entry_sha256": "c9b3a4a15a231fc985e9f71a6cd9a33f30b90e8bcb4c670b1bcc6984fafc0d55",
      "receipt_id": "5bae8502-dcb7-5188-942d-4adc1dfef6ea",
      "receipt_url": "https://www.gaipagents.com/v1/free/receipts/5bae8502-dcb7-5188-942d-4adc1dfef6ea",
      "sequence": 76533,
      "target_id": "obs_37f992e2932d59d3afc209c0",
      "target_kind": "MCP_REMOTE",
      "target_locator": "https://appside.build/mcp"
    }
  ],
  "check_outcomes": {
    "ask": {
      "changed_since": "https://www.gaipagents.com/v1/free/observatory/changed-since?url=<endpoint>",
      "changes_and_reachability": "https://www.gaipagents.com/v1/free/changes/subscribe?url=<endpoint>",
      "conformance": "https://www.gaipagents.com/v1/free/conformance/check?url=<endpoint>"
    },
    "published": false,
    "why": "Outcomes of GAIP's own checks (whether the endpoint answered, HTTP status, response time, conformance findings) are given only to a caller who asks about the URL, never on a public page, list or feed. The same applies to every target."
  },
  "conformance": {
    "findings": "GIVEN_TO_CALLER_ONLY",
    "meaning": "The rule catalogue this manifest was read against at the observed time. The finding codes go only to a caller who checks the URL (check_outcomes.ask.conformance).",
    "observed_at_utc": "2026-11-09T04:42:52Z",
    "protocol": "MCP",
    "rule_catalogue_route": "/v1/free/knowledge/conformance-rules",
    "rule_catalogue_version": "1.0.0"
  },
  "corrections": {
    "contact": "https://www.gaipagents.com/contact",
    "exclusion": "https://www.gaipagents.com/v1/free/observatory/corrections/exclusion",
    "opt_out": "POST kind OPT_OUT to the route; the target is withdrawn from public view at once (a pause). The site's owner makes it permanent at https://www.gaipagents.com/v1/free/observatory/corrections/exclusion.",
    "queued_for_review": 0,
    "route": "https://www.gaipagents.com/v1/free/observatory/corrections"
  },
  "declared_derivations": {
    "data_appetite": {
      "categories": {
        "email": {
          "fields": 2,
          "tools": 2
        }
      },
      "fields_read": 32,
      "observed_at_utc": "2026-11-09T04:42:52Z",
      "tools_read": 13
    },
    "dependency_domains": [],
    "last_observed_at_utc": "2026-11-09T04:42:52Z",
    "meaning": "Derived by GAIP from what this agent declared, at the stated time: the categories of data its tools' input fields ask for (counts, by keyword rules gaip.data-appetite-rules.v1), the outside domains its declarations point to, and the operator as the agent itself publishes it. Facts about declarations, not an assessment of the agent or its operator.",
    "operator": {
      "as_published": "build.appside",
      "source_kind": "registry_namespace_domain"
    },
    "rules_version": "gaip.data-appetite-rules.v1",
    "schema_version": "gaip.declared-derivations.v1"
  },
  "latest": {
    "baseline_at_utc": "2026-10-26T07:56:51Z",
    "manifest_sha256": "cb535a9c14d1d3ee78299ac32e94872f38084941a8e70fa80d6b760fc48088c0",
    "observed_at_utc": "2026-11-09T04:42:52Z"
  },
  "metadata_signals": {
    "meaning": "Pattern rules are published only as aggregate rates across all observed targets (see the summary), never per party. GAIP issues no overall verdict and does not rank parties.",
    "overall_verdict": null,
    "per_target_results": null,
    "published": "AGGREGATE_ONLY_IN_SUMMARY",
    "rules": [
      {
        "rationale": "Zero-width, bidirectional-control and Unicode tag characters are not visible to a human reader but are read by language models. GAIP reports whether any occur; many have ordinary uses.",
        "rule_id": "OBS-SIG-001",
        "title": "Invisible or bidirectional-control Unicode characters in names or descriptions"
      },
      {
        "rationale": "Tool and skill descriptions are read by models. GAIP reports whether a description contains phrases shaped like instructions to a model (the patterns in GAIP's public conformance rule catalogue, plus the phrases listed in the Observatory method). Such phrases can be benign.",
        "rule_id": "OBS-SIG-002",
        "title": "Instruction-like text in descriptions"
      },
      {
        "rationale": "When a description refers to a tool name that only a different observed server publishes, a model using both servers may connect the two. GAIP reports whether such a reference occurs; shared names are common and often coincidental.",
        "rule_id": "OBS-SIG-003",
        "title": "Description names a tool published by a different observed server"
      },
      {
        "rationale": "Declared OAuth scopes whose names contain wildcard or whole-account wording (*, all, admin, root, full) request wide access by name. GAIP reports whether such a scope name is declared; it does not know what the scope grants.",
        "rule_id": "OBS-SIG-004",
        "title": "Declared authorization scopes with broad-access wording"
      }
    ],
    "third_party_scanners": [
      {
        "name": "Snyk agent-scan (formerly Invariant Labs mcp-scan)",
        "status": "NOT_RUN",
        "url": "https://github.com/snyk/agent-scan"
      },
      {
        "name": "Cisco AI Defense MCP Scanner",
        "status": "NOT_RUN",
        "url": "https://github.com/cisco-ai-defense/mcp-scanner"
      }
    ]
  },
  "method": "https://www.gaipagents.com/observatory",
  "notice": "Facts observed by GAIP at the stated time (UTC); they may be out of date. This is not an assessment of safety, quality, security, legality or trustworthiness of any party, and not a recommendation. To request a correction, add a right of reply or opt out, POST to https://www.gaipagents.com/v1/free/observatory/corrections or use https://www.gaipagents.com/contact.",
  "price_gbp": 0,
  "schema_version": "gaip.observatory.v1.target",
  "silent_changes_last_30_days": {
    "days": 30,
    "entries_read_at_most": 200,
    "kinds": [],
    "line": null,
    "meaning": "Weeks (ISO) in which GAIP recorded a change to the agent's declared tools or interface (tools added or removed, descriptions re-worded, input or output schema, behaviour labels, sign-in, terms or prices, endpoint host) and no declared version (registry or card version, serverInfo.version) moved that week. A week whose version movement is not recorded is not counted. Dated facts from the public change log; not an assessment of the agent.",
    "weeks": [],
    "weeks_with_silent_changes": 0
  },
  "snapshot": {
    "capabilities": [
      "resources",
      "tools"
    ],
    "description": "Game web store docs plus a free app catalog: agents list, verify and search apps and games.",
    "name": "build.appside/mcp",
    "parts": [
      "registry_server_json",
      "mcp_initialize_tools_list"
    ],
    "protocol": "MCP",
    "protocolVersion": "2025-03-26",
    "public_copy": "Text excerpts of at most 300 characters; input schemas and security schemes as SHA-256 and size only.",
    "remotes": [
      {
        "type": "streamable-http",
        "url": "https://appside.build/mcp"
      }
    ],
    "scopes": [],
    "serverInfo": {
      "name": "appside-mcp",
      "version": "0.2.0"
    },
    "title": "Appside Docs and App Catalog",
    "tools": [
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": false,
          "openWorldHint": true,
          "readOnlyHint": false
        },
        "description": "Get a domain-proof token with file URLs and DNS TXT records for an MCP listing. Publish the exact token at any supplied URL or TXT name (exact host only). Pass token or an Authorization: Bearer header on HTTP /mcp. Never publish credentials.",
        "inputSchema": {
          "bytes": 132,
          "published": "HASH_ONLY",
          "sha256": "51e7d9c00717287ea7205c3f0165b567bb95369c5092fca20d98db125e68deab"
        },
        "name": "claim_mcp_listing",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": false,
          "openWorldHint": true,
          "readOnlyHint": false
        },
        "description": "Confirm domain proof after publishing the exact verification token at a supplied file URL or DNS TXT name. DNS propagation may take time. Pass token or an Authorization: Bearer header on HTTP /mcp. Never publish credentials.",
        "inputSchema": {
          "bytes": 132,
          "published": "HASH_ONLY",
          "sha256": "51e7d9c00717287ea7205c3f0165b567bb95369c5092fca20d98db125e68deab"
        },
        "name": "confirm_mcp_claim",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": false,
          "openWorldHint": true,
          "readOnlyHint": false
        },
        "description": "Create an Appside account without a form. Save the bearer token securely; it is shown once. Give the human the claimUrl. Unclaimed accounts expire after 30 days.",
        "inputSchema": {
          "bytes": 270,
          "published": "HASH_ONLY",
          "sha256": "1dc496cb4d4644857a702d62de9dd86ec3ad24921d98f9829a8c0682659515e7"
        },
        "name": "create_account",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": true,
          "openWorldHint": true,
          "readOnlyHint": true
        },
        "description": "Get a verified public app by registration id or slug. Pending, expired or moderated listings are not returned; no private contacts or verification tokens are exposed.",
        "inputSchema": {
          "bytes": 118,
          "published": "HASH_ONLY",
          "sha256": "7cd67fa24d884336c9a996a72819b6b8e77222a00f082cc4b3b7790cd24d6dac"
        },
        "name": "get_app",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": true,
          "openWorldHint": false,
          "readOnlyHint": true
        },
        "description": "Get Appside published payment fee and fixed-fee policy.",
        "inputSchema": {
          "bytes": 62,
          "published": "HASH_ONLY",
          "sha256": "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
        },
        "name": "get_pricing",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": true,
          "openWorldHint": false,
          "readOnlyHint": true
        },
        "description": "Get a repository SDK example and its documented verification status. Grant items only on verified backend delivery.",
        "inputSchema": {
          "bytes": 194,
          "published": "HASH_ONLY",
          "sha256": "f68c53b10bbdda3bdcd53fc830d39ae99621208e91c2baad6156651370fd8441"
        },
        "name": "get_sdk_snippet",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": true,
          "openWorldHint": false,
          "readOnlyHint": true
        },
        "description": "List all SDK download URLs, install instructions and scoped verification status, or select one platform.",
        "inputSchema": {
          "bytes": 170,
          "published": "HASH_ONLY",
          "sha256": "5edcb60dfa5e8d55966602ff76d3bb77cb8c5eb1f96181bb1a4415276892b7ce"
        },
        "name": "get_sdk_status",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": false,
          "openWorldHint": true,
          "readOnlyHint": false
        },
        "description": "List any app or game you built in the Appside public app catalog. No Appside store or account required. Supply plain-text metadata and your website or exact https://<account>.itch.io/<game> page (or App Store/Google Play listing for a store-only app). Returns an id and ownership token; publish the t",
        "inputSchema": {
          "bytes": 1299,
          "published": "HASH_ONLY",
          "sha256": "da6eab81ae3630a0d9d2826848959ff3c19525fcd11516cf7ce7f6c389002e2e"
        },
        "name": "register_app",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": true,
          "openWorldHint": true,
          "readOnlyHint": true
        },
        "description": "Search verified public apps and games by text, category or playable web build. Pending, expired and moderated listings are excluded.",
        "inputSchema": {
          "bytes": 350,
          "published": "HASH_ONLY",
          "sha256": "77bcd3b2665928ae4db938836a10f40d9d69c87379771729c3ee99b31aa5af20"
        },
        "name": "search_apps",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": true,
          "openWorldHint": false,
          "readOnlyHint": true
        },
        "description": "Search Appside public developer Markdown; returns source links and excerpts.",
        "inputSchema": {
          "bytes": 138,
          "published": "HASH_ONLY",
          "sha256": "e78f8095aafbe0a6dbf3f93f4df1bb5b86cdd08a9d03523dcf07361f019bb68b"
        },
        "name": "search_docs",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": false,
          "openWorldHint": true,
          "readOnlyHint": false
        },
        "description": "Submit a web store to the Index for review; does not establish ownership or publish automatically. Pass token or an Authorization: Bearer header on HTTP /mcp. Never publish credentials.",
        "inputSchema": {
          "bytes": 134,
          "published": "HASH_ONLY",
          "sha256": "a11f20a09f36943eee2518d1b7dc30ce437c99972337e3dd691dea9ede059454"
        },
        "name": "submit_index_entry",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": false,
          "openWorldHint": true,
          "readOnlyHint": false
        },
        "description": "Submit an MCP server for connectivity checks. Domain proof is still required to claim ownership. Pass token or an Authorization: Bearer header on HTTP /mcp. Never publish credentials.",
        "inputSchema": {
          "bytes": 136,
          "published": "HASH_ONLY",
          "sha256": "9a131b4c0bdd2e85933150fd1cee03faee77aa494215dd60e6d99c5300debdba"
        },
        "name": "submit_mcp_server",
        "title": null
      },
      {
        "annotations": {
          "destructiveHint": false,
          "idempotentHint": true,
          "openWorldHint": true,
          "readOnlyHint": false
        },
        "description": "Verify a pending registration after publishing the returned token at /.well-known/appside-verify.txt or in a meta name=\"appside-verify\" content=\"TOKEN\" tag on the submitted website. For itch.io, put the token anywhere in the public text of the exact submitted game page (edit its description). Store-",
        "inputSchema": {
          "bytes": 265,
          "published": "HASH_ONLY",
          "sha256": "44141f75fc0afd80764a66e8df572d4843f70d169b8fb47cc62e1b0052dc39ab"
        },
        "name": "verify_app",
        "title": null
      }
    ],
    "version": "0.2.0"
  },
  "status_history": [
    {
      "manifest_partial": null,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "cb535a9c14d1d3ee78299ac32e94872f38084941a8e70fa80d6b760fc48088c0",
      "observed_at_utc": "2026-11-09T04:42:52Z",
      "protocol_version": "2025-03-26"
    },
    {
      "manifest_partial": null,
      "manifest_parts": [
        "registry_server_json",
        "mcp_initialize_tools_list"
      ],
      "manifest_sha256": "35ad2c89ed1fb2114bc11cdbcf3cdbc50ed587d68adecaacdfc2f91cdb43b24e",
      "observed_at_utc": "2026-10-26T07:56:51Z",
      "protocol_version": "2025-03-26"
    }
  ],
  "target": {
    "corrections_route": "https://www.gaipagents.com/v1/free/observatory/corrections",
    "first_seen_at_utc": "2026-10-26T06:37:55Z",
    "kind": "MCP_REMOTE",
    "last_observed_at_utc": "2026-11-09T04:42:52Z",
    "locator": "https://appside.build/mcp",
    "name": "build.appside/mcp",
    "source": "official-mcp-registry",
    "target_id": "obs_37f992e2932d59d3afc209c0"
  }
}