modelcontextprotocol/registry
Watch
1
0
Fork
You've already forked registry
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
registry/docs/guides
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
adam jones 8f5e17d0fe
 Enforce and document file hash requirement for MCPB packages (#368) 
## Summary
Implements mandatory file hash validation for MCPB (MCP Bundle) packages
to ensure file integrity and security.

## Changes
- **Validator enforcement**: MCPB packages now require `file_sha256`
field at publish time
- **Test coverage**: Updated all MCPB test cases to include valid
SHA-256 hashes
- **Documentation**: Updated publisher guide and schema to reflect hash
requirement
- **Error handling**: Clear error message when hash is missing

## Security Impact
This ensures the complete security workflow for MCPB packages:
1. Authors generate and provide SHA-256 hashes when publishing
2. Registry validates hash is present (but doesn't verify content)
3. MCP clients validate hash matches downloaded file before installation

Fixes #351
2025-09-08 11:38:25 -07:00
..
administration Big docs tidy up in preparation for launch (#364) 2025-09-07 10:44:42 +01:00
consuming Big docs tidy up in preparation for launch (#364) 2025-09-07 10:44:42 +01:00
contributing Big docs tidy up in preparation for launch (#364) 2025-09-07 10:44:42 +01:00
publishing Enforce and document file hash requirement for MCPB packages (#368) 2025-09-08 11:38:25 -07:00
README.md Big docs tidy up in preparation for launch (#364) 2025-09-07 10:44:42 +01:00

README.md

How-To Guides

Problem-oriented guides for specific tasks with the MCP Registry.

Publishing Servers

Consuming Registry Data

Contributing

Administration