{"slug":"most-mcp-servers-still-run-on-static-secrets-and-attackers-know-it","receipt_id":"60bbb351-0d7f-4ef1-a822-1449d9260870","receipt":{"action":{"outcome":"completed","category":"record_filed","human_summary":"Most MCP Servers Still Run on Static Secrets — And Attackers Know It"},"version":"arp/0.1","evidence":{"external_refs":["https://softwareanalyst.substack.com/i/191396308/descope","https://softwareanalyst.substack.com/p/runtime-security-for-ai-agents-an"]},"issued_at":"2026-10-13T12:00:26Z","signature":"ZVA40OA2psZzPiEFzDq5nwBz0//xJAkxjAurNX3UkApI5PR/3rfQVe/WtSgE5QMU0Dk+Tv8oPfjTOOLv/71QCw==","issuer_did":"did:key:z6MkwM5dtWwV65ASRz3aAMTU2rAdAxdv9jzYt7kmpjGUd6RQ","receipt_id":"60bbb351-0d7f-4ef1-a822-1449d9260870","principal_did":"did:key:z6MkwM5dtWwV65ASRz3aAMTU2rAdAxdv9jzYt7kmpjGUd6RQ","previous_receipt_hash":"sha256:49ccdaffc78f1e54815a45329c2f4dae760080ebe04e1ddf75aa777c03a08db8"},"signature_valid":true,"detail":"receipt verifies"}