MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/eebc439a-dc21-4bb4-9f4f-1bafbbb65978/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "ai.chucho/chucho"
title: "chucho — Book Direct"
description: "Find vacation rentals worldwide by describing the trip, check host prices and book direct."
version: "1.0.0"
homepage_url: "https://chucho.ai/install.md"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "ai.chucho"
display_name: "ai.chucho"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/chucho-ai/agent"
provider: "github"
owner: "chucho-ai"
name: "agent"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://chucho.ai/mcp"
endpoint_host: "chucho.ai"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-06-18"
supported_versions[0]
transport_type: "streamable-http"
tools[15]
0{9}
name: "explore_nearby"
title: "Explore what's around a stay area"
effect: "READ"
effect_confidence: 0.933
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.791
risk_severity: "LOW"
fingerprint: "01c0a6b299ea9b2f0a2d0ac4be48193698e0432935c716bf2ee4ac4423c3e439"
input_schema_fingerprint: "8295bc2a846143b34584e0a3adf1914aac35a5680f11d30e7610bb34291ef7aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "get_booking_link"
title: "Get host booking link"
effect: "READ"
effect_confidence: 0.933
capabilities[1]
0{2}
capability: "CALENDAR"
confidence: 0.859
risk_severity: "INFO"
fingerprint: "9337558b0b17a76792c55cb01834309497fb614653064396055045ab2e43667c"
input_schema_fingerprint: "48b7b16ca40ac40935743dae4f6f3cf31128d45a1df0b2d2ad1ac6c9b5e3dddd"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_enquiry_form"
title: "Read booking enquiry form"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "3a21f8ac929bd2566f010a51adfeb34f97b019d4bc461882924d626e44769363"
input_schema_fingerprint: "2e08ab00eddd9508102bff0c3aa0ec05d63d4032341f0623b5e3225893196344"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "get_filters"
title: "Discover public filters"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "4e6814c3754d537cc265bbb4649ebda81fa1e6181ffc8fce6e169b861e430cda"
input_schema_fingerprint: "d2405588d1305428cef10e2f6677522d3debad5c3764fac6d42cfe1bbb72a94f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "get_property"
title: "Read public property facts"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "PAYMENT"
confidence: 0.99
1{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.672
risk_severity: "LOW"
fingerprint: "3c24029e9fa6f4808717b4f4aacd698df47c30b2db9f54de79330e0c5802754a"
input_schema_fingerprint: "2e08ab00eddd9508102bff0c3aa0ec05d63d4032341f0623b5e3225893196344"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "get_stay_areas"
title: "Find public stay areas"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "f68eba1e920623943b68204abef7bd4f6fa31d5fb26f4adf5d464983a04ef302"
input_schema_fingerprint: "9c7615c4b2efe2adea4c3f84640eb7449c75e1a18b5e48c9568f9ab790add00d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "get_stay_estimate"
title: "Find a price for flexible dates"
effect: "READ"
effect_confidence: 0.902
capabilities[2]
0{2}
capability: "PAYMENT"
confidence: 0.968
1{2}
capability: "PERSONAL_DATA"
confidence: 0.653
risk_severity: "LOW"
fingerprint: "84c59ae9af8342557186897636e9bc376cebf9953d57ecc33356d0cf45b54f17"
input_schema_fingerprint: "90e0c7789ee0324658514b4d099118f41903dd0f3d7fae0602c89374693c3bd9"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
7{9}
name: "get_stay_quote"
title: "Check stay dates and pricing"
effect: "READ"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.95
risk_severity: "LOW"
fingerprint: "e5c3580595f3602c1a3035f045bd09f8dc3e8e399b4c21a84b5eef491502b9f1"
input_schema_fingerprint: "98d2a8fac50ad57f53b848c0894f7b0a7fc624980553b8cd434839109a9d8859"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
8{9}
name: "inspect_travel_video"
title: "Explore a travel video"
effect: "READ"
effect_confidence: 0.879
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.701
1{2}
capability: "LOCATION"
confidence: 0.694
risk_severity: "LOW"
fingerprint: "cf182f062744ec0eb159d5c0a229403f5170c83e9a57f70600b5aabbcb34424d"
input_schema_fingerprint: "e7cf779f5bc51c884156760cf9d07b3290fdb7a01f27028c3b0c017d14dd95ea"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: true
9{9}
name: "prepare_enquiry"
title: "Prepare enquiry for guest review"
effect: "READ"
effect_confidence: 0.533
capabilities[0]
risk_severity: "INFO"
fingerprint: "c909feb29e11b9a03d657c910614905edb6a8618e3978bebda2513ef25410e60"
input_schema_fingerprint: "99f4dbd9c17269f770d8a93a3c983da2b4014813f5134594bc1f785229bc43f3"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "record_property_event"
title: "Record anonymous property interaction"
effect: "WRITE"
effect_confidence: 0.822
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "70d540f2112d7ec1288ca2557d9cef4f58288e3e45063724d59e49377a16518a"
input_schema_fingerprint: "ef727d4d5b28706eef9b7de9b0df5faef46938f61c817b63b36646aa4b6733a5"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
11{9}
name: "render_properties"
title: "Show vacation homes"
effect: "READ"
effect_confidence: 0.921
capabilities[3]
0{2}
capability: "PAYMENT"
confidence: 0.99
1{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.721
2{2}
capability: "PERSONAL_DATA"
confidence: 0.834
risk_severity: "LOW"
fingerprint: "26e7dd7860d859c54ba7939c54d9d1e26c640a4c441ab504f12803c06d84212a"
input_schema_fingerprint: "4f9beedffa35bfec90edd52895d40b77deff9360b33b6983819b4712058d8add"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
12{9}
name: "search_nearby_properties"
title: "Find nearby vacation homes"
effect: "READ"
effect_confidence: 0.933
capabilities[3]
0{2}
capability: "LOCATION"
confidence: 0.779
1{2}
capability: "PAYMENT"
confidence: 0.99
2{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.672
risk_severity: "LOW"
fingerprint: "e3aaf683ecc4a75af882aff2c723cefa18817841c0053a9ff0418e48f2896de2"
input_schema_fingerprint: "e9536d2bb2847d0665251749798b03c3b2b850a7c5f1f00c1365bb5ad4119c69"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
13{9}
name: "search_properties"
title: "Find vacation homes"
effect: "READ"
effect_confidence: 0.902
capabilities[5]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.565
1{2}
capability: "PAYMENT"
confidence: 0.99
2{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.953
3{2}
capability: "PERSONAL_DATA"
confidence: 0.935
4{2}
capability: "SOURCE_CODE"
confidence: 0.667
risk_severity: "LOW"
fingerprint: "522db009891048c77c3e6a818485be6e681cd32e6376d291b0ea992b3371b871"
input_schema_fingerprint: "472e8c9f9c710533b2116d07717ec4e60066cb75c046a5b92c27a7589a83d87d"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
14{9}
name: "submit_enquiry"
title: "Submit guest-approved enquiry"
effect: "WRITE"
effect_confidence: 0.917
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "1e9ac36a370ccb29ddf086c7e0ac67cabf6e7c3f849c44b5abea2ce7cf661cb2"
input_schema_fingerprint: "2b37813de27b02aa780cab2fd48e30640a6d4894f38351caa9876d96dcf90751"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
resources[1]
0{4}
key: "ui://chucho/homes-40898c691aa1c0cf.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "0936e96658318abc4355e60d4c127316b832579cae99cafa272115fa9299947d"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "chucho.ai"
registrable_domain: "chucho.ai"
source: "transport"
findings[10]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "render_properties"
3{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "search_properties"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "record_property_event"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "submit_enquiry"
6{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "record_property_event"
7{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "render_properties"
8{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "search_properties"
9{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "LOW"
title: "Unusually long model-facing text"
subject_type: "tool"
subject_name: "search_properties"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "ai.chucho/chucho"
registry_content_sha256: "7d839bbebddf60e1176ad9a3258a6b81682f35e1a26e04a51d0e4558c8eaa461"
scan_snapshot_fingerprint: "53cfcc2538221165e3835699f43ab00e603129a38a07f5c8a7fab3816010f8d0"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:38:45.923Z"
observed_at: "2026-11-06T09:47:10.93+00:00"
registry_published_at: "2026-10-22T14:03:44.153274+00:00"
registry_updated_at: null