MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/58a8c2cb-9630-4aba-85b7-31d568d2a9af/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "ai.commercebook/commercebook"
title: "CommerceBook"
description: "Search and buy products from sellers and verified warehouses, sell surplus stock, post requests."
version: "0.6.0"
homepage_url: "https://commercebook.ai/for-agents"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "ai.commercebook"
display_name: "ai.commercebook"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/errc02/commercebook-agents"
provider: "github"
owner: "errc02"
name: "commercebook-agents"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://commercebook.ai/mcp"
endpoint_host: "commercebook.ai"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[6]
0{9}
name: "commercebook_account_start"
title: "Open an account"
effect: "WRITE"
effect_confidence: 0.801
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.849
1{2}
capability: "EMAIL"
confidence: 0.567
2{2}
capability: "PERSONAL_DATA"
confidence: 0.923
risk_severity: "MEDIUM"
fingerprint: "7032b274a97ed78575bac2b12e9972f7267c00ffd78e74ddeb4099e0e1e03e67"
input_schema_fingerprint: "8a2cb190d126ab803348017e14311fdb7199899882cb7bd2ea89afda15d00bde"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
1{9}
name: "commercebook_capabilities"
title: "Read what you can do here"
effect: "READ"
effect_confidence: 0.776
capabilities[2]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.624
1{2}
capability: "PERSONAL_DATA"
confidence: 0.556
risk_severity: "LOW"
fingerprint: "e7311adf6f2068066500b7ce18e4712f6d9bb0d0f1c38ee1b8a4997e1f8377e8"
input_schema_fingerprint: "98f33f5322a8d706c6273c45bade4716c6b6a023b9d29eb834612be8f6c733f6"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "commercebook_feedback"
title: "Tell CommerceBook what would help"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "4d7c5708c4f2389f66161cca458e0f85f03201aa05951ba2379d91c3692fae28"
input_schema_fingerprint: "e356ccaaa39ed2c8e94a8b856b24fcc6f0080a4fb50fd22df66da7614bf7cb70"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
3{9}
name: "commercebook_market"
title: "Read the market"
effect: "READ"
effect_confidence: 0.809
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.834
risk_severity: "LOW"
fingerprint: "57987e3fb0309013a5496d7ff7ce7861c332f66b6f814686ef098d872a69705b"
input_schema_fingerprint: "21ddfb3ba3c0734bead716c59ecbebd9aebaadc5dab45aee5414d51797d48f50"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "commercebook_start"
title: "Start here"
effect: "WRITE"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.735
risk_severity: "LOW"
fingerprint: "cf728c6a41f6ad4b9850bb479ff943b0c60e3eb0fbf97a9f8e454c0ba4fa9773"
input_schema_fingerprint: "2f6d2851cf949fad235f4e9c2c9d441b6a495bed496203d611e147c4bc46d3de"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "commercebook_tool_search"
title: "Find the tool for a task"
effect: "READ"
effect_confidence: 0.832
capabilities[1]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.53
risk_severity: "INFO"
fingerprint: "f059e27edd820d68c1b3c681849720fd6ccfcaeb17f233e47b9ea94da4e91c59"
input_schema_fingerprint: "057838ea852fa1bba3be3c10b3208fd2293c3299aaa316320f446fd5b7d3943b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "commercebook.ai"
registrable_domain: "commercebook.ai"
source: "transport"
findings[5]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "commercebook_market"
2{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "commercebook_capabilities"
3{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "commercebook_start"
4{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "commercebook_feedback"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "ai.commercebook/commercebook"
registry_content_sha256: "532135b71f0f718a529ecfccc0eaab95605560a2ab03806313140455f9993685"
scan_snapshot_fingerprint: "3ecaba2e5255bc814a5b31756f8a5314de11c07dcf7b4055a55cc9f32f709114"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:59:19.398Z"
observed_at: "2026-11-11T18:21:22.475+00:00"
registry_published_at: "2026-11-11T17:31:42.448375+00:00"
registry_updated_at: null