{
  "schema": "sml.directory-authority/v1",
  "brand": "SCRIPTMASTERLABS",
  "legal_name": "Script Master Labs, LLC",
  "canonical_host": "scriptmasterlabs.com",
  "last_updated": "2026-10-24",
  "authority_note": "Directory pages are discovery surfaces, not product or payment authority. Fresh execution-origin HTTP and SCRIPTMASTERLABS canonical manifests outrank cached third-party directory metadata.",
  "canonical_products": [
    {
      "name": "x402 Gateway",
      "landing_page": "https://scriptmasterlabs.com/x402-gateway",
      "mcp": "https://mcp-x402.onrender.com/mcp",
      "scope": "Read-only discovery of x402 paid APIs and fresh payment requirements. Does not sign, spend, or settle; caller controls authorization and budget.",
      "registry": {
        "name": "com.scriptmasterlabs/x402-gateway",
        "version": "1.4.0",
        "latest_record": "https://registry.modelcontextprotocol.io/v0.1/servers/com.scriptmasterlabs%2Fx402-gateway/versions/latest",
        "remote": "https://mcp-x402.onrender.com/mcp?registry=scriptmasterlabs",
        "runtime_version": "2.1.11",
        "verified_at": "2026-10-25T01:20:41Z",
        "verification": "Both bare and registry-tagged remotes returned HTTP 200 for initialize and tools/list; tools: sml_discover, sml_status, x402_contract. Registry version and runtime version are separate identifiers."
      }
    },
    {
      "name": "Provider Trust",
      "landing_page": "https://scriptmasterlabs.com/provider-trust-api",
      "mcp": "https://provider-trust-mcp.onrender.com/mcp",
      "scope": "Inspect provider identity, runtime status, payment-surface evidence, and uncertainty before an agent trusts or spends."
    },
    {
      "name": "SqueezeOS",
      "landing_page": "https://scriptmasterlabs.com/stack",
      "mcp": "https://squeezeos-api.onrender.com/mcp",
      "scope": "Broad API and tool routing with live route and payment authority resolved from SqueezeOS."
    },
    {
      "name": "GhostKey",
      "landing_page": "https://scriptmasterlabs.com/agent-api-buyers-guide",
      "mcp": "https://ghostkey-mcp.onrender.com/mcp",
      "scope": "Scoped browser session bridge. Does not export credentials or autonomously spend."
    },
    {
      "name": "Robinhood RWA Intelligence",
      "landing_page": "https://scriptmasterlabs.com/robinhood-rwa-intelligence",
      "mcp": "https://sml-robinhood-rwa-intelligence.onrender.com/mcp",
      "scope": "Read-only prediction-market and tokenized-stock/RWA evidence; no brokerage access or trade execution."
    }
  ],
  "observed_directory_state": [
    {
      "directory": "Official MCP Registry",
      "identifier": "com.scriptmasterlabs/x402-gateway",
      "observed_at": "2026-10-24",
      "state": "latest_record_correct",
      "version": "1.4.0",
      "url": "https://registry.modelcontextprotocol.io/v0.1/servers/com.scriptmasterlabs%2Fx402-gateway/versions/latest",
      "observed_runtime": "https://mcp-x402.onrender.com/mcp?registry=scriptmasterlabs",
      "note": "Latest active record verified directly. Version 1.3.0 remains active but isLatest=false."
    },
    {
      "directory": "MCPRush",
      "identifier": "scriptmasterlabs/x402-gateway-inspect-paid-api-terms-mcp",
      "observed_at": "2026-10-24",
      "state": "stale_install_instructions",
      "url": "https://mcprush.com/scriptmasterlabs/x402-gateway-inspect-paid-api-terms-mcp",
      "observed_version": "1.3.0",
      "canonical_runtime": "https://mcp-x402.onrender.com/mcp",
      "note": "Public quickstart still installs the dead legacy host. Publisher is shown as unclaimed. Directory refresh/owner edit is outstanding; no correction request was sent by this audit."
    },
    {
      "directory": "MCPIndex",
      "identifier": "com.scriptmasterlabs/x402-gateway",
      "observed_at": "2026-10-24",
      "state": "latest_record_refreshed",
      "version": "1.4.0",
      "url": "https://mcpindex.ai/server/com-scriptmasterlabs-x402-gateway",
      "note": "Live page shows v1.4.0; search snippets can still show v1.3.0. Listing is not runtime or payment proof."
    },
    {
      "directory": "Glama",
      "identifier": "com.scriptmasterlabs/x402-gateway",
      "observed_at": "2026-10-24",
      "state": "canonical_runtime_present_no_legacy_host",
      "observed_runtime": "https://mcp-x402.onrender.com/mcp",
      "canonical_runtime": "https://mcp-x402.onrender.com/mcp",
      "note": "Connector page returned 200, contains canonical runtime and no legacy GitLab-main hostname. Supersedes the September 18 stale-URL observation.",
      "url": "https://glama.ai/mcp/connectors/com.scriptmasterlabs/x402-gateway"
    },
    {
      "directory": "Smithery",
      "identifier": "timothy-walton45/mcp-x402",
      "observed_at": "2026-09-18",
      "state": "legacy_personal_namespace_not_current_authority",
      "note": "Observed copy describes a historical broad x402 product set and is not current SCRIPTMASTERLABS product authority."
    },
    {
      "directory": "Smithery",
      "identifier": "timothy-walton45/scriptmaster-vending-router",
      "observed_at": "2026-09-18",
      "state": "legacy_personal_namespace_not_current_authority",
      "note": "Observed listing references historical GitHub/XRPL-era material and is not current SCRIPTMASTERLABS authority."
    },
    {
      "directory": "MCP.so",
      "observed_at": "2026-09-18",
      "state": "no_scriptmasterlabs_listing_found",
      "note": "Public searches for SCRIPTMASTERLABS, x402 Gateway, Provider Trust, and timothy-walton45 returned no listing."
    }
  ],
  "truth_boundaries": [
    "Directory presence is discovery, not proof of runtime health, settlement, adoption, ranking, or customer usage.",
    "A 402 challenge is not settlement proof.",
    "Historical GitHub, XRPL, RLUSD, 402Proof, auto-spend, or broad tool-count claims do not become current merely because a directory cache still shows them.",
    "Use https://scriptmasterlabs.com/agent.md and current /.well-known manifests before relying on third-party directory text."
  ],
  "registry_resolution": {
    "selection_rule": "Resolve /versions/latest or require official.isLatest=true. Do not choose an arbitrary version from a search response.",
    "legacy_version": "1.3.0",
    "legacy_remote": "https://mcp-x402-gitlab-main.onrender.com/mcp",
    "legacy_http_status": 404,
    "legacy_registry_status": "active, isLatest=false",
    "replacement_version": "1.4.0",
    "note": "v1.4.0 was published 2026-10-24T09:47:43.418653Z. The old record remains historical, not a working failover. Do not install or probe the legacy remote as the current gateway. Historical WITAN measurements remain historical evidence."
  }
}