REGISTRY UNREACHABLE · The registry API did not answer. The gate fails open with a warning; it never silently blocks, and never silently clears something it had already flagged.
STALE · An entry exists, but a newer release landed than the one reviewed. The gate warns.
STALE
TIER B · VERSION PINNED · BYTES NOT COMPARED
slack-mcp 0.9.1
npm · slack-mcp · fingerprint sxf1_0c93b7e2…9e4a0
IN TWENTY SECONDS
A newer release shipped than the one this verdict is about. The review below describes 0.8.2; the configuration points at 0.9.1. The gate warns and lets the call through, it will not present an old verdict as if it covered new code.
LINKAGE · WHAT THIS VERDICT IS ABOUT VS WHAT YOU INSTALLEDthe registry never sees your machine; the gate compares digests locally and keeps the answer there
REVIEWED BLOB
walrus:0x0c93…e4a0YOUR INSTALL
configured 0.9.1 · reviewed 0.8.2Bthe version reviewed is not the version configured
walrus:0x0c93…e4a0YOUR INSTALL
configured 0.9.1 · reviewed 0.8.2Bthe version reviewed is not the version configured
FINDINGS
No finding is published. A review that reaches no verdict has established nothing, and anything raised along the way is not a claim this registry will stand behind.
CAPABILITY SURFACEwhat the reviewed code can reach, from a static scan that does not ask the server what it does. Shown on clean verdicts too.
networkslack.com API hosts
filesystemnot present in the reviewed blob
process execnot present in the reviewed blob
env variablesSLACK_BOT_TOKEN
credentialsnot present in the reviewed blob
This code can reach: network · environment variables
PROVENANCE · WHAT WAS REVIEWED, WHEN, BY WHAT
COMMITd81a4f3609 (tag v0.8.2)
REVIEWED2026-03-30 10:05 UTC
SOURCE BLOBwalrus:0x0c93…e4a0
MODELqwen3-coder-480b
PROMPTp6 · 3 passes
INTEGRITYnot recorded
INDEXarkiv:verdictHead/0c93b7e2
VERDICT BLOBwalrus:0x0c93…e4a0
Any Ethereum client can read this verdict from the name above, and the response carries a signature made by the key the resolver names. That signature says the answer came from SureX. It does not say the review is right, and the gate that blocks tool calls does not read it.
getEnsText({ name, key: 'surex:state' })This review was automated. No human audited this code. The model and prompt version above produced every word of the finding.
DISAGREE WITH THIS VERDICT?
Anyone with standing can contest it: the maintainer, a user, or an agent that depends on this server. Rebuttals are stored as their own blob and shown beside the accusation with equal weight.
File a dispute