MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/779d6513-2429-4886-b1a8-f148dbeedf77/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "ai.com.mcp/registry"
title: "MCP Registry Server"
description: "Publish and discover MCP servers via the official MCP Registry. Powered by HAPI MCP server."
version: "1.0.0"
homepage_url: "https://run.mcp.com.ai"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "ai.com.mcp"
display_name: "ai.com.mcp"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/modelcontextprotocol/registry"
provider: "github"
owner: "modelcontextprotocol"
name: "registry"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://registry.run.mcp.com.ai/mcp"
endpoint_host: "registry.run.mcp.com.ai"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-06-18"
supported_versions[0]
transport_type: "streamable-http"
tools[3]
0{9}
name: "getV01Servers"
title: "List MCP servers"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "c6aaa44ae517084dbb161a45b150b516fe7aab1c7fc3ea2f6c2d31452e64ad1f"
input_schema_fingerprint: "707f0cc9e56422c92002b00bde2439eeef3ffc3b169310fb7366e9ce106e720a"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: null
1{9}
name: "getV01ServersServerNameVersions"
title: "List all versions of an MCP server"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "be8425bfb0853acc14e04cdf1440b907b58a570c402f447dd902eac7aa86f562"
input_schema_fingerprint: "cfa08939ba198372e4394b2f959235b856241f202e08360d5b9a17674f920a41"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: null
2{9}
name: "getV01ServersServerNameVersionsVersion"
title: "Get specific MCP server version"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "202055200681fda2a654211b332aac0a2fc9ce1de62df37c5080ea22c53ee8cd"
input_schema_fingerprint: "1e9d561fd9fb1e03bd260c0cc4d0bf0dcaabaf36f0c0fb9a91650417beef4965"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: null
resources[2]
0{4}
key: "http://localhost:3000/.well-known/bearer-protected-resource"
kind: "resource"
mime_type: "application/json"
fingerprint: "073c02ec7e20a04c34252a2100bc6c0ccba96db58d1c07307ce8aa4f26b5e925"
1{4}
key: "http://localhost:3000/registry.json"
kind: "resource"
mime_type: "application/json"
fingerprint: "3a8cfef11a2698831c0c1e61e4300901187aaf5190d311a9821f4ca35edab9a8"
prompts[1]
0{2}
name: "system"
fingerprint: "e959152b4bb8b196cbbc2295a17278b0f2eeb9dc96baec78f65d25e5357604e8"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "registry.run.mcp.com.ai"
registrable_domain: "mcp.com.ai"
source: "transport"
findings[2]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-PROMPT-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Prompt metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "ai.com.mcp/registry"
registry_content_sha256: "f1d343d400eb2d9a7ee960418d20e065727eadd8de08e203a10efd3880dcb64c"
scan_snapshot_fingerprint: "173e8afa1eb2002735021bc3576a9bd8aa179a288a5a087f737f45b6c9085f3b"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:29:37.180Z"
observed_at: "2026-11-12T05:27:52.059+00:00"
registry_published_at: "2026-01-10T22:33:54.03436+00:00"
registry_updated_at: null