{"status":"attested","page":"https://annalist.dev/mcp/io.github.eltociear/repo-security-scanner","statement":{"type":"annalist.mcp-check/v1","issuer":"https://annalist.dev","subject":{"name":"io.github.eltociear/repo-security-scanner","url":"https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner"},"issued_at":"2026-10-17T01:08:37Z","valid_until":"2026-10-24T01:08:37Z","grade":"B","score":75,"facts":{"probes_7d":3,"up_pct_7d":67,"median_ms":284,"access":"oauth","tools_count":null,"tools_changed_14d":false,"last_tools_change":null,"domain_age_days":6345,"registry_status":"active"},"flags":["often_down"],"reasons":["-25: answered 67% of our probes in 7 days"],"method":"mcp-1","evidence":{"probes":"derived/checks/mcp/probes/","ledger":"https://github.com/ryanroskowski/annalist-ledger"}},"signature":"T5kxdLLx-hz1WmLNF1f96GCqj6W2fjXcQUK3BrZt592CV9O-3_LB9as7XSMQJW4lO8PjV8NseFqMDihhGej8Cw","key_id":"187e49f200625a2f","public_key_url":"https://api.annalist.dev/.well-known/annalist-key.json","how_to_verify":"Ed25519 signature (base64url) over the RFC 8785 canonical JSON of `statement`, checked with the public key at https://api.annalist.dev/.well-known/annalist-key.json (key_id must match). Then check valid_until. The probes behind it are archived daily, and each day's archive hashes are in the public ledger."}