MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/354ad37a-1850-4da2-af77-1d184e44767e/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "ai.cotal/cotal"
title: "COTAL actions (cotal.ai)"
description: "cotal.ai actions: product overview, site search, build log, feedback, Cloud waitlist, updates, calls"
version: "1.1.0"
homepage_url: "https://cotal.ai"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "ai.cotal"
display_name: "ai.cotal"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/Cotal-AI/Cotal"
provider: "github"
owner: "Cotal-AI"
name: "Cotal"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://cotal.ai/mcp"
endpoint_host: "cotal.ai"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[12]
0{9}
name: "cotal_draft_post"
title: "Stage a build-log article"
effect: "WRITE"
effect_confidence: 0.747
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.765
1{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "af15531fde0cd10b15ebf957bbe2f9bfb1bf55192502aab404853ade02000e24"
input_schema_fingerprint: "deb623a4b9c1104d72e97ff469406bec21a189838d4e4c9093b55f51681f1081"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
1{9}
name: "cotal_get_my_post"
title: "Read a staged article"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "0614415eced025fca2b0d15b04a37ad6dba4583e86151857715afd43c3c4d824"
input_schema_fingerprint: "fba2f4ec3331f867d4506cf8ce8d318b90d6276cd6b80b90805ba26b5091ffce"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "cotal_get_post"
title: "Read a build-log post"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "a455ab20bdc8ec283c8efef7493a7863170a924d5dfccf02ce6b1b7548111b95"
input_schema_fingerprint: "d54f0e9e91bc1f1bf734a289df67f1c776d66abcfcef648150b23135d8e083e3"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "cotal_join_waitlist"
title: "Join the Cotal Cloud waitlist"
effect: "WRITE"
effect_confidence: 0.902
capabilities[4]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.718
1{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.61
2{2}
capability: "EMAIL"
confidence: 0.567
3{2}
capability: "PERSONAL_DATA"
confidence: 0.896
risk_severity: "HIGH"
fingerprint: "79bdc1b81d175c9c96e2de03255af4eb9794b65525eed7875a8b720333aac7f2"
input_schema_fingerprint: "447e3a9f07ec37d020a12773d5ce1510311a288f3c25b7e9c5b3d4c962760f30"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "cotal_list_my_posts"
title: "List my staged articles"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "0cc9759ecc417dfc121c7750ab0da03127b0084fe15a8a2bb6fc15e39b005108"
input_schema_fingerprint: "7ebc6230622b4f87c483fe35e8ccfa0e33219d44808e91c6c87f258bddf26ef2"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "cotal_list_posts"
title: "List build-log posts"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "e73ea88cec6207d0b87f7e1363f91ae5f4d19196e87fd48fadf5cb3cbae3dc31"
input_schema_fingerprint: "133f637b36a8d18413cb57ba62e0415f9b97695e10af3588896a0cfc58fd3523"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "cotal_overview"
title: "What Cotal is"
effect: "READ"
effect_confidence: 0.626
capabilities[0]
risk_severity: "INFO"
fingerprint: "16ac72843e9e77d5ea40e20391a966f53c5baf9eb024b393c89c7bf176690a5b"
input_schema_fingerprint: "7409c39bbb255a2a0dbe4e12bf25c2a843c85b77243891d2215bcc6439480ce9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "cotal_request_call"
title: "Request a call with the founders"
effect: "WRITE"
effect_confidence: 0.885
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.53
1{2}
capability: "MESSAGING"
confidence: 0.648
2{2}
capability: "PERSONAL_DATA"
confidence: 0.813
risk_severity: "MEDIUM"
fingerprint: "49a13b1f3ded701af9cd8ca4ee99534045c24a4df1d01f13e4ddf8a9036768c8"
input_schema_fingerprint: "5187970425f3d4df7d9db8741f9be50efb5eafc41dc6729605615f8dec8f75b5"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
8{9}
name: "cotal_search"
title: "Search cotal.ai"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "ba7c9c70b6606c39413846c10c27981f5b304dc82fdb49db6d5cb039ee9c9ecc"
input_schema_fingerprint: "62de875ba1240ad28c799a6c5aede3f4450cd6c9f41b36e83ff6a702f6f26258"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "cotal_submit_feedback"
title: "Send feedback to the Cotal team"
effect: "EXECUTE"
effect_confidence: 0.6
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.53
1{2}
capability: "MESSAGING"
confidence: 0.669
2{2}
capability: "PERSONAL_DATA"
confidence: 0.76
risk_severity: "CRITICAL"
fingerprint: "8fbbe22463071109a334889b7f3bf3776c739e34695b82d2e0795509ad31c631"
input_schema_fingerprint: "f38c5a6c028a216d11c9ed2fb2493f5fcf3a5d7bc8a43e585f7d699c1280c077"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
10{9}
name: "cotal_subscribe_newsletter"
title: "Subscribe to Cotal updates"
effect: "WRITE"
effect_confidence: 0.885
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.53
1{2}
capability: "EMAIL"
confidence: 0.783
2{2}
capability: "PERSONAL_DATA"
confidence: 0.867
risk_severity: "MEDIUM"
fingerprint: "1472a9452a9285238632bb2cdc87d1c93662c72ee72e9f593095702a73f5d722"
input_schema_fingerprint: "03165dcb63e15292394032d81866b54e2a661640ef1218cb8e99e04669c58aff"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "cotal_update_post"
title: "Revise a staged article"
effect: "WRITE"
effect_confidence: 0.703
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.61
1{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "623b6e619535d40ddefcff50db8b73699b9acf38abc04ec25e4a1c1f2c2701f0"
input_schema_fingerprint: "f8dcea2fa5b979df81f2eccdce65642c89ddcf39bc2756d5d8b823125a1cf8c2"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[5]
0{4}
key: "cotal://auth.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "16de98e05c6b7eb97df35402b51ba9b3a63cc27e44eb8305670038da4cc562be"
1{4}
key: "cotal://llms.txt"
kind: "resource"
mime_type: "text/plain"
fingerprint: "af1ae95f476c03b20ba3fbccc22a81b41ba33718cef39017848d8dca1d5ca480"
2{4}
key: "cotal://manifest.json"
kind: "resource"
mime_type: "application/json"
fingerprint: "9b468c8910ca1fa0bdf28fac6d5f267740aefce005f7aa5d11c6238e6d19981f"
3{4}
key: "cotal://openapi.json"
kind: "resource"
mime_type: "application/openapi+json"
fingerprint: "921d379a9a91f6f8863f6f5cb760245a2bb971f862ee3e4b6a6082dd3fff6fe0"
4{4}
key: "cotal://pricing.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "b7d2aac66a8d55df3419d19dd3cb6e68781a4e9a30d3f1bb2337b32ddaaa487a"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "cotal.ai"
registrable_domain: "cotal.ai"
source: "transport"
findings[6]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "cotal_draft_post"
2{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "cotal_submit_feedback"
3{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "cotal_submit_feedback"
4{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "cotal_update_post"
5{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "cotal_submit_feedback"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "ai.cotal/cotal"
registry_content_sha256: "a83369f94b30aad80c489e9f0e10065848a1e2922216a411cce49631e8bddbea"
scan_snapshot_fingerprint: "f113a096f34ca71b61a85c29d9db763d8e0cac671e949790281944d752814087"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:37:44.145Z"
observed_at: "2026-11-12T05:30:36.524+00:00"
registry_published_at: "2026-09-08T01:10:30.100621+00:00"
registry_updated_at: null