MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/d06e6597-8903-4376-bc3b-d3b77b4ce0ca/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "ai.facesign/facesign-mcp"
title: null
description: "Build and test FaceSign step-up verification flows from your AI coding tool"
version: "0.1.0"
homepage_url: "https://docs.facesign.ai/docs/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "ai.facesign"
display_name: "ai.facesign"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.facesign.ai/mcp"
endpoint_host: "mcp.facesign.ai"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[5]
0{9}
name: "export_app"
title: null
effect: "EXECUTE"
effect_confidence: 0.66
capabilities[8]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.584
1{2}
capability: "AUTHENTICATION"
confidence: 0.99
2{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.513
3{2}
capability: "EMAIL"
confidence: 0.607
4{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.841
5{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.935
6{2}
capability: "PERSONAL_DATA"
confidence: 0.99
7{2}
capability: "SECURITY_CONTROL"
confidence: 0.699
risk_severity: "CRITICAL"
fingerprint: "155f35629904a3ec9072dc6b3ef0cd7b1d402bdecc57a82907b7e744e8d65003"
input_schema_fingerprint: "60edd3c3c9a92f3529541db448f621fd7c0d27e62e2b6f55325aea1a9bf7fe0c"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "get_session"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "decd5692766c690b43abd7632ae517063d213e2f1d043881b9054dc787b8fab4"
input_schema_fingerprint: "f5e33de41524c26b0e0cf07994603bb4c3ac7a4509fea6f3c38b17414c4f426f"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "launch_session_ui"
title: null
effect: "EXECUTE"
effect_confidence: 0.65
capabilities[7]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.584
1{2}
capability: "AUTHENTICATION"
confidence: 0.99
2{2}
capability: "EMAIL"
confidence: 0.607
3{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.841
4{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.935
5{2}
capability: "PERSONAL_DATA"
confidence: 0.99
6{2}
capability: "SECURITY_CONTROL"
confidence: 0.699
risk_severity: "HIGH"
fingerprint: "6bf30e7994059f70efc87e297b0458b663d2763b001e21185521730c58a2789d"
input_schema_fingerprint: "5c8f3ada1004400cb1296de5a609e2372c74166b51f113275ea13699cacab163"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "list_sessions"
title: null
effect: "READ"
effect_confidence: 0.836
capabilities[0]
risk_severity: "INFO"
fingerprint: "ebffc6c7b70a78856e644b7c1e7765e9f87047cf2bb370a650c82b758af30fa0"
input_schema_fingerprint: "aa91c28b62407e5fc63af33558c90e6d195c6d0203f7329d6235011b005ff2c8"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
4{9}
name: "set_api_key"
title: null
effect: "WRITE"
effect_confidence: 0.861
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.53
1{2}
capability: "SECRETS"
confidence: 0.91
risk_severity: "HIGH"
fingerprint: "5b1a161a4117bb5955ee69971ab300da2cb9e9600e1c02f724afa7af510cbd76"
input_schema_fingerprint: "ea0c5667d365e778ea7f8eecb74310836f09a67e429e887bc8ca3f7f42de42aa"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[8]
0{4}
key: "facesign://catalog"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "f81bcc2a982481ce6c0453ed1005f834dd84484534f697a9379188be03f4fe98"
1{4}
key: "facesign://flow-best-practices"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "63d0e10c4c2d55cf077fa77eb186ab7771b8608091bc0769c055850cf1c697f6"
2{4}
key: "facesign://html-examples"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "f6a5fbbe8eff71e7466a6e92655af4bbcb8d71ce709050fe2e82ce8b75603a97"
3{4}
key: "facesign://interview-guidance"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "1dfa424fb048bed9ffa581c42cee28a622a71095e10e9b52c08424c9edbfce67"
4{4}
key: "facesign://node-types"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "09582668c206ec49bfe02f1d67cb27a154327cf5765be1012d0a29c494d8e43e"
5{4}
key: "facesign://recap-reference"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "53f67fa395373ce69ca391365c75b34dd0ea7a5955487663e6d18d04bc1567fd"
6{4}
key: "facesign://recap-sections"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "0959fc6c9b79e994f0da623682c31c89c534151153bcd18a90c53c2533a7d6c4"
7{4}
key: "facesign://session-data-types"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "5fb20273ec1b421962eaa1d62a94cde228b759a6f3096d50f8b998fbc2b03c03"
prompts[1]
0{2}
name: "create-verification-flow"
fingerprint: "908ef936a7c9cbd18469715daff679373eb335e514862a87e0254484b4557d46"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.facesign.ai"
registrable_domain: "facesign.ai"
source: "transport"
findings[23]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
4{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "MEDIUM"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "launch_session_ui"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_session"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "set_api_key"
7{6}
check_id: "SQ-TOOL-DESTRUCTIVE-NO-ANNOTATION"
category: "annotations"
severity: "LOW"
title: "Destructive tool without annotations"
subject_type: "tool"
subject_name: "export_app"
8{6}
check_id: "SQ-TOOL-DESTRUCTIVE-NO-ANNOTATION"
category: "annotations"
severity: "LOW"
title: "Destructive tool without annotations"
subject_type: "tool"
subject_name: "launch_session_ui"
9{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "export_app"
10{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "launch_session_ui"
11{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "export_app"
12{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "export_app"
13{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "export_app"
14{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "launch_session_ui"
15{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "launch_session_ui"
16{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "launch_session_ui"
17{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "export_app"
18{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "launch_session_ui"
19{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "MEDIUM"
title: "Unusually long model-facing text"
subject_type: "tool"
subject_name: "export_app"
20{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "MEDIUM"
title: "Unusually long model-facing text"
subject_type: "tool"
subject_name: "launch_session_ui"
21{6}
check_id: "SQ-TOOL-OVERLY-BROAD"
category: "tool_design"
severity: "MEDIUM"
title: "Runs arbitrary code with open-world access"
subject_type: "tool"
subject_name: "export_app"
22{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "export_app"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "ai.facesign/facesign-mcp"
registry_content_sha256: "e78152f64d0767c2e5e52709491148e719833366ecc4fa0b0e4af638634e923a"
scan_snapshot_fingerprint: "f42f0a236ca996bb0b24e7bbedf76edfff16a5dc3deab0b25898c22c7525072d"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:51:10.107Z"
observed_at: "2026-11-12T06:02:55.449+00:00"
registry_published_at: "2026-08-19T03:20:57.988155+00:00"
registry_updated_at: null