Skip to content
Squatch MCP

MCP Bill of Materials

A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/d7c32eab-9831-4e79-a699-05d5af764470/mcbom.

MCP Bill of Materials

root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "ai.ciphyr.agentmart/core"
title: "AgentMart core tools"
description: "The AgentMart shop with a shorter tool list: the same sign-in, balance and items as /mcp."
version: "2.1.1"
homepage_url: "https://agentmart.ciphyr.ai"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "ai.ciphyr.agentmart"
display_name: "ai.ciphyr.agentmart"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/mustafaakmese/agentmart-plugins"
provider: "github"
owner: "mustafaakmese"
name: "agentmart-plugins"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://agentmart.ciphyr.ai/mcp/core"
endpoint_host: "agentmart.ciphyr.ai"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[21]
0{9}
name: "buy"
title: "Buy an item"
effect: "WRITE"
effect_confidence: 0.917
capabilities[4]
0{2}
capability: "AUTHENTICATION"
confidence: 0.695
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.943
2{2}
capability: "PAYMENT"
confidence: 0.669
3{2}
capability: "SECRETS"
confidence: 0.695
risk_severity: "HIGH"
fingerprint: "3cf6d75e91ed778cd6de355b7965419967351e64fa3fc276ad6e9e53b64e9950"
input_schema_fingerprint: "e401dfa772fc29c77854d7ef4ff258f3f5ff1af94a3b6ac2eb158b58ec048027"
annotations{5}
title: "Buy an item"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: true
1{9}
name: "claim_refund"
title: "Claim store credit for a purchase"
effect: "WRITE"
effect_confidence: 0.928
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.859
1{2}
capability: "PAYMENT"
confidence: 0.575
risk_severity: "HIGH"
fingerprint: "4524b75089514a00f2d24f9468d5aeab56c4e2ac1b7a3930c7a67d0275ea1d30"
input_schema_fingerprint: "d9c0833b71ba395b8a6f21603a47f21c7023859db31ca2dd689844ed9748af7c"
annotations{5}
title: "Claim store credit for a purchase"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: false
2{9}
name: "create_passport"
title: "Create a passport"
effect: "WRITE"
effect_confidence: 0.79
capabilities[1]
0{2}
capability: "IDENTITY"
confidence: 0.915
risk_severity: "MEDIUM"
fingerprint: "0baa33b5f5ac33df91cbbd6fecb16f278f241a73c054356cf82d46fa6e7688f1"
input_schema_fingerprint: "a476191e2565c4bde6d3123e7040ec9775dab774192ad0dc41d90f24c27f63ca"
annotations{5}
title: "Create a passport"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
3{9}
name: "get_item"
title: "Show a catalog item"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "ba1848a2461c664786f576901a562a61b1b43129fc38a43e4f205194bb7545a4"
input_schema_fingerprint: "179d64fb5747547c1b1cea95992cd1c05910c2279b4cf209f6899e3cf3bd70a0"
annotations{5}
title: "Show a catalog item"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
4{9}
name: "get_order"
title: "Show an order"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "c083b5a46fa19cd39684c0babde053198a52edd3afd2974d5b6094998f243a39"
input_schema_fingerprint: "781d747ef571b7e725075e84ff4a6bea9a04c7a97117cafbff0762e09eb3a26d"
annotations{5}
title: "Show an order"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
5{9}
name: "inbox_ack"
title: "Mark an inbox message read"
effect: "WRITE"
effect_confidence: 0.881
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.908
1{2}
capability: "MESSAGING"
confidence: 0.718
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "7aaa070c603e1f91e7e82e41b79e0d9b661319ee43fb8a6f537c5593bac08c1d"
input_schema_fingerprint: "00d1db0da06cbf15ece2ac5da9e1e4528cf937b266d9a3260626d4bfb6d450c4"
annotations{5}
title: "Mark an inbox message read"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "inbox_delete"
title: "Delete an inbox message"
effect: "DELETE"
effect_confidence: 0.876
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.908
1{2}
capability: "MESSAGING"
confidence: 0.669
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "0ee9d962309152a3ffbc18c5c4d6f32987bc624b55a6799cdc44cb3b3f257fa2"
input_schema_fingerprint: "00d1db0da06cbf15ece2ac5da9e1e4528cf937b266d9a3260626d4bfb6d450c4"
annotations{5}
title: "Delete an inbox message"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
7{9}
name: "inbox_messages"
title: "Read my webhook inbox"
effect: "READ"
effect_confidence: 0.776
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.834
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.669
2{2}
capability: "MESSAGING"
confidence: 0.843
3{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "8b4b55e2ffd7b15bcfae890243984f829b2f0e8ff7a38bbe8bc3a4d171bcae46"
input_schema_fingerprint: "16aacac917f7c47902954b11f5b45265659e695b08c572f2bdad2c60ed4a3a93"
annotations{5}
title: "Read my webhook inbox"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
8{9}
name: "list_utilities"
title: "List my utilities"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "38fa4b8c709d8fdcadbb02fcf6787c1296a7bf369d7cd99b532af4b841553980"
input_schema_fingerprint: "a367dd2a3f49c62bcc6fb2635f76f03f7fc5b51051786efccecd12b8494cd7b3"
annotations{5}
title: "List my utilities"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
9{9}
name: "locker_delete"
title: "Delete from my memory locker"
effect: "DELETE"
effect_confidence: 0.895
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "fdc3b5282ec45b41b23c32849fba8407e7b86b348d63c78044fb70e0102a0d57"
input_schema_fingerprint: "4bbf19311a83ce03b5c3e6b980c409ac4e90d5c72f74c06ecbbda51dad721ae2"
annotations{5}
title: "Delete from my memory locker"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
10{9}
name: "locker_get"
title: "Read from my memory locker"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "57f799822af58b240e23603a2e08e0daabdccb44a6cb73321fbe8d7840a49575"
input_schema_fingerprint: "4bbf19311a83ce03b5c3e6b980c409ac4e90d5c72f74c06ecbbda51dad721ae2"
annotations{5}
title: "Read from my memory locker"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
11{9}
name: "locker_list"
title: "List my memory locker"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "4d50a406e256e48ffa76f4c64017d47a9b74c3fd02392ea7b4625b0d85181e6d"
input_schema_fingerprint: "12b1b9d2cd87b070fcd77f7543843953116f6dba4e11db2683f244368f838c6a"
annotations{5}
title: "List my memory locker"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
12{9}
name: "locker_put"
title: "Store in my memory locker"
effect: "WRITE"
effect_confidence: 0.86
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.669
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.558
risk_severity: "HIGH"
fingerprint: "463f89b29178b15406d2bab06da5fcb1d2f5de4d0ee21ef938ac5a46619db54d"
input_schema_fingerprint: "57722edde4685cd884906b0dbbf0ad8b1489c1688503e13211405f942e6265ce"
annotations{5}
title: "Store in my memory locker"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
13{9}
name: "new_download_link"
title: "Make a new kit download link"
effect: "WRITE"
effect_confidence: 0.848
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.567
risk_severity: "HIGH"
fingerprint: "c1ca39232115339e06a2ffeb7e49e5de96ead46430ff7e0dbccdbcfb0397ff21"
input_schema_fingerprint: "781d747ef571b7e725075e84ff4a6bea9a04c7a97117cafbff0762e09eb3a26d"
annotations{5}
title: "Make a new kit download link"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
14{9}
name: "revoke_passport"
title: "End this passport"
effect: "ADMIN"
effect_confidence: 0.65
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.856
1{2}
capability: "IDENTITY"
confidence: 0.834
2{2}
capability: "SECRETS"
confidence: 0.76
risk_severity: "HIGH"
fingerprint: "b61f2bb6bd49ef40e66fefddaefc07cf514488fe400e316f112ab68e347d580a"
input_schema_fingerprint: "0602931c3ab2e5ab38a841625080032becc3a1972019aaf3774f43192a03046b"
annotations{5}
title: "End this passport"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
15{9}
name: "search_catalog"
title: "Search the catalog"
effect: "READ"
effect_confidence: 0.933
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.789
1{2}
capability: "DATABASE_ACCESS"
confidence: 0.513
2{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.64
risk_severity: "MEDIUM"
fingerprint: "a4eeee8649f5cda509ea81f3077b6ffb87cd158080a21f7387e6b85caf93e614"
input_schema_fingerprint: "e06d51d2102bbdebdde2539749af012456615fad90cb2761a7e10c5245f3ed46"
annotations{5}
title: "Search the catalog"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
16{9}
name: "start_free"
title: "Ask for a free start for my human"
effect: "WRITE"
effect_confidence: 0.703
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.567
1{2}
capability: "PERSONAL_DATA"
confidence: 0.718
risk_severity: "MEDIUM"
fingerprint: "f4139d288e86420f998d213429b5ade89797f50acdbcf7bd86c82465501777bc"
input_schema_fingerprint: "5893d7fa46fdeb95f4ce669f08daf1b137a25510f09e31d0a80b6035206db8be"
annotations{5}
title: "Ask for a free start for my human"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
17{9}
name: "starter_status"
title: "Show my free start and starter credit"
effect: "READ"
effect_confidence: 0.776
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "9ee1eb3a566cfb311d09f25af3284bc58aa85c3cc77d74dd4496c0c21d5abf18"
input_schema_fingerprint: "0602931c3ab2e5ab38a841625080032becc3a1972019aaf3774f43192a03046b"
annotations{5}
title: "Show my free start and starter credit"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
18{9}
name: "top_up"
title: "Make a top-up pay link for my owner"
effect: "WRITE"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.95
1{2}
capability: "PAYMENT"
confidence: 0.914
risk_severity: "HIGH"
fingerprint: "610033f563b127183df15dbfde954370f77a919fdea5bb949d53763025ad8cd2"
input_schema_fingerprint: "c39f8572cf3b152ad9a0d691e709af97a0f8f8f3ef97801c024de2a13289bef7"
annotations{5}
title: "Make a top-up pay link for my owner"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
19{9}
name: "top_up_status"
title: "Check a top-up"
effect: "READ"
effect_confidence: 0.776
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "b2493f09daec9ca7af4e8fc9cc99cbb21759b211b56ff65df72cbed25a43d45e"
input_schema_fingerprint: "f820953d7ab2a7def9c308a7810c43adfc48652ba724035df7c9bb193fcdd502"
annotations{5}
title: "Check a top-up"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
20{9}
name: "whoami"
title: "Show my passport and balance"
effect: "READ"
effect_confidence: 0.921
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.718
1{2}
capability: "IDENTITY"
confidence: 0.834
2{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "2a3deb9f3e348533c51cc307f7051bbffdcbc40ddf39e84a34df83fa146e0f6a"
input_schema_fingerprint: "0602931c3ab2e5ab38a841625080032becc3a1972019aaf3774f43192a03046b"
annotations{5}
title: "Show my passport and balance"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "agentmart.ciphyr.ai"
registrable_domain: "ciphyr.ai"
source: "transport"
findings[26]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "top_up_status"
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "buy"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "buy"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "claim_refund"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "create_passport"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_item"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_order"
8{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "inbox_ack"
9{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "inbox_delete"
10{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "inbox_messages"
11{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "list_utilities"
12{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "locker_delete"
13{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "locker_get"
14{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "locker_list"
15{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "locker_put"
16{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "new_download_link"
17{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "revoke_passport"
18{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "search_catalog"
19{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "start_free"
20{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "starter_status"
21{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "top_up"
22{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "top_up_status"
23{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "whoami"
24{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "inbox_messages"
25{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "revoke_passport"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "ai.ciphyr.agentmart/core"
registry_content_sha256: "13f3ace2bc8695a32920170bbeeec359e7aeae65aa87929fe70fd7a5a48494a4"
scan_snapshot_fingerprint: "cc7ce0ab04e2e05a535ab06cad3415d9e00f70603a10d3a01717d160d2a38b8d"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:52:46.205Z"
observed_at: "2026-11-14T03:44:59.035+00:00"
registry_published_at: "2026-11-14T01:46:17.268675+00:00"
registry_updated_at: null