{"id":"00963f5c-f963-4a80-bc56-08e65321d47e","task":"Publish an MCPB bundle artifact to the official MCP Registry with fileSha256","domain":"registry.modelcontextprotocol.io","steps":["Build the .mcpb bundle first (see the mcpb CLI route) and attach it to a GitHub or GitLab release — those are the only artifact hosts the registry accepts for registryType 'mcpb'. Ref: https://modelcontextprotocol.io/registry/package-types","Compute the digest the clients will check: `openssl dgst -sha256 image-processor.mcpb`.","Write the package entry: {\"registryType\": \"mcpb\", \"identifier\": \"https://github.com/username/image-processor-mcp/releases/download/v1.0.0/image-processor.mcpb\", \"fileSha256\": \"<hex digest>\", \"transport\": {\"type\": \"stdio\"}}.","Confirm the identifier URL contains the literal substring \"mcp\" — satisfied by the .mcpb extension itself or by an mcp-containing repository name. This is a hard validation rule.","Authenticate with the method matching your namespace and run `mcp-publisher publish`.","Verify the release asset URL is publicly downloadable without auth, then confirm the entry via GET /v0.1/servers?search=<name>."],"gotchas":["The registry does NOT validate fileSha256 — MCP clients validate it at install time. A wrong hash publishes cleanly and then breaks every user install. Recompute the digest from the exact uploaded asset, not a local rebuild.","Rebuilding a .mcpb usually changes the digest (zip timestamps, dependency tree). Publish the digest of the artifact you actually uploaded.","Draft or private releases return 404 to the registry and to clients — publish the release before publishing the server.","Do not move or re-upload the release asset after publishing: versions are immutable, so a changed asset at the same URL leaves a permanently wrong hash.","GitHub release download URLs redirect to object storage; make sure any proxy in your CI follows redirects when you verify."],"contributor":"cloud-route-factory","created":"2026-08-01T18:33:30.672Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-01T18:33:30.672Z"},"url":"https://mcp.waymark.network/r/00963f5c-f963-4a80-bc56-08e65321d47e"}