MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/51b66b93-8529-40a1-9167-a66b3c2340bf/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "ai.com.mcp/petstore"
title: "Petstore MCP Server"
description: "Swagger Petstore API (v1.0.27) as MCP for testing and prototyping powered by the HAPI MCP server"
version: "0.6.0"
homepage_url: "https://run.mcp.com.ai"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "ai.com.mcp"
display_name: "ai.com.mcp"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/la-rebelion/hapimcp"
provider: "github"
owner: "la-rebelion"
name: "hapimcp"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://petstore.run.mcp.com.ai/mcp"
endpoint_host: "petstore.run.mcp.com.ai"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-06-18"
supported_versions[0]
transport_type: "streamable-http"
tools[19]
0{9}
name: "addPet"
title: null
effect: "WRITE"
effect_confidence: 0.747
capabilities[0]
risk_severity: "LOW"
fingerprint: "3e72b14cf4d01cc5cc362e61c806fafb09abbf4c427690ad1d6280f6474f68dd"
input_schema_fingerprint: "6806207243f3b1b93389c561a1280e6f81f2fcfeafd5098617a52bd97f9c443f"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "createUser"
title: null
effect: "WRITE"
effect_confidence: 0.836
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.956
1{2}
capability: "AUTHENTICATION"
confidence: 0.577
2{2}
capability: "PERSONAL_DATA"
confidence: 0.98
risk_severity: "MEDIUM"
fingerprint: "aa0346e851fe16070d20550bdc7930690cba1af21fb331a1118c8a5f22660906"
input_schema_fingerprint: "af04fb4eba45b79fc4ec464b372a68148aef75dc43efbfe145c0d3685f283003"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "createUsersWithListInput"
title: null
effect: "WRITE"
effect_confidence: 0.808
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.956
1{2}
capability: "AUTHENTICATION"
confidence: 0.577
2{2}
capability: "PERSONAL_DATA"
confidence: 0.98
risk_severity: "MEDIUM"
fingerprint: "a0eaba3a3f3e7b1eb9e93021132c77307fe9f564d01d356f04d19aaf7c092c7c"
input_schema_fingerprint: "22fbb290fb13a8d97efb9f75a7ba354d20eb4092cdd4a7711fa7efcac8438d82"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "deleteOrder"
title: null
effect: "DELETE"
effect_confidence: 0.808
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.618
risk_severity: "HIGH"
fingerprint: "46e32fcff0065c99b32ca6ac28456f1fe509944fa44ef0081ac95beeda6a9b66"
input_schema_fingerprint: "c6569bacbe823949cd6338d0be2336a9d54573872036a33b77eb4336b62ab246"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
4{9}
name: "deletePet"
title: null
effect: "DELETE"
effect_confidence: 0.808
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "8070bb78d0ad4b2e99070be44e9729084ebbc1dfea1481e90c06bb78a1a60026"
input_schema_fingerprint: "d48b856cbc6b7064deb068d2d8f9951290b2330908d5c70a1d11958a6e5fe90b"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
5{9}
name: "deleteUser"
title: null
effect: "DELETE"
effect_confidence: 0.808
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.586
1{2}
capability: "PERSONAL_DATA"
confidence: 0.867
risk_severity: "HIGH"
fingerprint: "4a7c7a30045605700649207ec3b96bb2ab40f837f89a626067f455e9124d4046"
input_schema_fingerprint: "016bfda740a32b91c6dc0de214311788663fd8d7383ac5c5d9336135d6e773f7"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
6{9}
name: "findPetsByStatus"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[0]
risk_severity: "INFO"
fingerprint: "382fd724d55bafbf10f2414d17c2886f3ca2334c90a4e443324a22b96bf0a50a"
input_schema_fingerprint: "8bf60e2c116f3305b97394d8320e8cfcf68a6a102fcd3c4ec87eb28ba6e175a7"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
7{9}
name: "findPetsByTags"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[0]
risk_severity: "INFO"
fingerprint: "2fb17f7a5d5875bf11d9f735aef00ed208f1a00021b2d290dca1beef90bfc74a"
input_schema_fingerprint: "963034cee216630c7f65ca34a7328db8009286d2beeff03d5235d67d57e240ca"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
8{9}
name: "getInventory"
title: null
effect: "READ"
effect_confidence: 0.836
capabilities[0]
risk_severity: "INFO"
fingerprint: "749628e074799ddf33877059fd4d7fda43492f7f736751f38eaa184ea171f2a7"
input_schema_fingerprint: "3f66c439fe88cf2d4157db2c5bb6de33dd5a226c4518798f507edbaabd740182"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
9{9}
name: "getOrderById"
title: null
effect: "READ"
effect_confidence: 0.836
capabilities[0]
risk_severity: "INFO"
fingerprint: "1b26610003c65cef4af986a4b2bbc3999c03a856e03064afcee5e9c16c3adf6a"
input_schema_fingerprint: "c6569bacbe823949cd6338d0be2336a9d54573872036a33b77eb4336b62ab246"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
10{9}
name: "getPetById"
title: null
effect: "READ"
effect_confidence: 0.836
capabilities[0]
risk_severity: "INFO"
fingerprint: "41eec9939f83caeee6af7d25d7eb72229f78989de8101763abaeac96725a54d5"
input_schema_fingerprint: "5f3580e3bd3ff27f28950d5ea1c089510bfeaf3f440f39115ba7bc0da36c8da3"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
11{9}
name: "getUserByName"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.586
1{2}
capability: "PERSONAL_DATA"
confidence: 0.915
risk_severity: "LOW"
fingerprint: "e6eea8937c2d4188158bf3dfda5c07e18fd69ddeb9c58b3460316841b4253ecd"
input_schema_fingerprint: "016bfda740a32b91c6dc0de214311788663fd8d7383ac5c5d9336135d6e773f7"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
12{9}
name: "loginUser"
title: null
effect: "WRITE"
effect_confidence: 0.808
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.586
1{2}
capability: "AUTHENTICATION"
confidence: 0.789
2{2}
capability: "PERSONAL_DATA"
confidence: 0.844
risk_severity: "MEDIUM"
fingerprint: "4042177256f6fa7163ed23f16be02282fe97bee0df4bc9a4b57400b0253adf97"
input_schema_fingerprint: "5a984dd21d0348d86aee0f81a2219e9fb453b8037d79d8517520d6451a24be01"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
13{9}
name: "logoutUser"
title: null
effect: "WRITE"
effect_confidence: 0.836
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.7
1{2}
capability: "PERSONAL_DATA"
confidence: 0.796
risk_severity: "LOW"
fingerprint: "f48489be1c6571cbaa40fa764a5c9fb31326f32b5bb4b25f1e82ce0c9a2cf9eb"
input_schema_fingerprint: "3f66c439fe88cf2d4157db2c5bb6de33dd5a226c4518798f507edbaabd740182"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
14{9}
name: "placeOrder"
title: null
effect: "WRITE"
effect_confidence: 0.836
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.793
risk_severity: "HIGH"
fingerprint: "d50a6403aa9ec41ef5217b13c0561172dca3d1928a4189e3ba5d9fdc0f5250f6"
input_schema_fingerprint: "6c3ecde30dbcc14f8f41daf558676e3d492035f05bb2e6cb5b90044883d73877"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
15{9}
name: "updatePet"
title: null
effect: "WRITE"
effect_confidence: 0.808
capabilities[0]
risk_severity: "LOW"
fingerprint: "1d031930741aeb5291ada0dd936168811a0a49fee6c3945a2fe2980e3f4985e4"
input_schema_fingerprint: "74d8af49cce39fb77c6f2f11fe6a44aea1ffef9faf6d34ffa9c2916b9ffb5c8c"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
16{9}
name: "updatePetWithForm"
title: null
effect: "WRITE"
effect_confidence: 0.836
capabilities[0]
risk_severity: "LOW"
fingerprint: "3e4a996850363ba4ba1dff78eed4b0caff9c8e1ede7cff2e7575bfff62ee43f6"
input_schema_fingerprint: "5dd2b34e7b2ed9bd80b709eb834e33b552a6bf3c125a30063c6fcb81fa8d70fc"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
17{9}
name: "updateUser"
title: null
effect: "WRITE"
effect_confidence: 0.836
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.86
1{2}
capability: "AUTHENTICATION"
confidence: 0.725
2{2}
capability: "PERSONAL_DATA"
confidence: 0.987
risk_severity: "MEDIUM"
fingerprint: "27e2e74ebbcab99c016577970386ad24ae2c60dff9e32572dc35d3bf4f1a2c4a"
input_schema_fingerprint: "1a05f409d6717d7cb8a41e59245b8d0532659c45c704432f5d724a29b0c234de"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
18{9}
name: "uploadFile"
title: null
effect: "WRITE"
effect_confidence: 0.808
capabilities[1]
0{2}
capability: "FILE_ACCESS"
confidence: 0.745
risk_severity: "MEDIUM"
fingerprint: "f5c3f78d1b6a2445f3f01701947004a6197ecfa5261f0b0bf2b32da14791b919"
input_schema_fingerprint: "37f86784595bef5dcc8ad7d63b3a6b637cb880c1ec565e2323b36ed35df8afeb"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[3]
0{4}
key: "http://localhost:3000/.well-known/oauth-authorization-server"
kind: "resource"
mime_type: "application/json"
fingerprint: "9f74e845ae37ffc17c4c96c99591212b0f6e2a25389d743774513bee44cf536c"
1{4}
key: "http://localhost:3000/.well-known/oauth-protected-resource"
kind: "resource"
mime_type: "application/json"
fingerprint: "8c0f89dbf440646cf1df95493ab44251c0bbd4077988b1af5605f09b3052bac1"
2{4}
key: "http://localhost:3000/hapimcp-299.json"
kind: "resource"
mime_type: "application/json"
fingerprint: "c4876902660977d090a1811dec7c52a29af03605e4e921f938d0e844da6743e6"
prompts[1]
0{2}
name: "system"
fingerprint: "e959152b4bb8b196cbbc2295a17278b0f2eeb9dc96baec78f65d25e5357604e8"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "petstore.run.mcp.com.ai"
registrable_domain: "mcp.com.ai"
source: "transport"
findings[11]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-PROMPT-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Prompt metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "createUser"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "createUsersWithListInput"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "deletePet"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "loginUser"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "updateUser"
8{6}
check_id: "SQ-TOOL-DESTRUCTIVE-NO-ANNOTATION"
category: "annotations"
severity: "LOW"
title: "Destructive tool without annotations"
subject_type: "tool"
subject_name: "deleteOrder"
9{6}
check_id: "SQ-TOOL-DESTRUCTIVE-NO-ANNOTATION"
category: "annotations"
severity: "LOW"
title: "Destructive tool without annotations"
subject_type: "tool"
subject_name: "deletePet"
10{6}
check_id: "SQ-TOOL-DESTRUCTIVE-NO-ANNOTATION"
category: "annotations"
severity: "LOW"
title: "Destructive tool without annotations"
subject_type: "tool"
subject_name: "deleteUser"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "ai.com.mcp/petstore"
registry_content_sha256: "b78d7f6c8933d3e56814bf4f0c060c5e7e92324579d6ea762e59ad501d764273"
scan_snapshot_fingerprint: "7594700d9644c692212102f4cab1017b8e2cb62819acb20246d04a10f53e9feb"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:17:04.869Z"
observed_at: "2026-11-12T05:27:45.544+00:00"
registry_published_at: "2026-01-07T14:13:05.674855+00:00"
registry_updated_at: null