modelcontextprotocol/registry
Watch
1
0
Fork
You've already forked registry
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
registry/docs/reference
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
adam jones 8f5e17d0fe
 Enforce and document file hash requirement for MCPB packages (#368) 
## Summary
Implements mandatory file hash validation for MCPB (MCP Bundle) packages
to ensure file integrity and security.

## Changes
- **Validator enforcement**: MCPB packages now require `file_sha256`
field at publish time
- **Test coverage**: Updated all MCPB test cases to include valid
SHA-256 hashes
- **Documentation**: Updated publisher guide and schema to reflect hash
requirement
- **Error handling**: Clear error message when hash is missing

## Security Impact
This ensures the complete security workflow for MCPB packages:
1. Authors generate and provide SHA-256 hashes when publishing
2. Registry validates hash is present (but doesn't verify content)
3. MCP clients validate hash matches downloaded file before installation

Fixes #351
2025-09-08 11:38:25 -07:00
..
api Big docs tidy up in preparation for launch (#364) 2025-09-07 10:44:42 +01:00
cli Big docs tidy up in preparation for launch (#364) 2025-09-07 10:44:42 +01:00
server-json Enforce and document file hash requirement for MCPB packages (#368) 2025-09-08 11:38:25 -07:00
faq.md Big docs tidy up in preparation for launch (#364) 2025-09-07 10:44:42 +01:00
README.md Big docs tidy up in preparation for launch (#364) 2025-09-07 10:44:42 +01:00

README.md

Reference Documentation

Technical specifications and quick lookups for the MCP Registry.

API Reference

server.json Reference

CLI Reference

Quick Reference