agent-tools (x402 + MCP + A2A directory)
cloud.agent-tools/agent-tools-mcp
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/0c948812-a3f6-4333-9530-4774758c5aeb/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "cloud.agent-tools/agent-tools-mcp"
title: "agent-tools (x402 + MCP + A2A directory)"
description: "Discover x402 services, MCP servers and A2A agents by intent — agent-tools.cloud directory."
version: "0.5.2"
homepage_url: "https://agent-tools.cloud"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "cloud.agent-tools"
display_name: "cloud.agent-tools"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/AgentTools-Cloud/AgentToolsCollection"
provider: "github"
owner: "AgentTools-Cloud"
name: "AgentToolsCollection"
verified: false
packages[1]
0{4}
registry_type: "pypi"
identifier: "agent-tools-mcp"
version: "0.5.2"
transport: "stdio"
transports[2]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://agent-tools.cloud/mcp-discovery/"
endpoint_host: "agent-tools.cloud"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[23]
0{9}
name: "ask_services"
title: null
effect: "READ"
effect_confidence: 0.869
capabilities[0]
risk_severity: "INFO"
fingerprint: "d12c108eca02e640ca24b38bcacd6a4d7152976edbd002785cc3ceb6281076fa"
input_schema_fingerprint: "a98f32a388a6f47c5141b77d3421ea04974e9aa92013b90597218e865c11d51c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
1{9}
name: "claim_service_url"
title: null
effect: "WRITE"
effect_confidence: 0.745
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.939
1{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.567
risk_severity: "MEDIUM"
fingerprint: "cdc2ca604358923a6f6ccaef5bd9adba8953ea10aa9baf17b3bc6ca4b5b0e55f"
input_schema_fingerprint: "e750bf90ab4fd052e00fe9e4f62cf57ec66fc489b28523220cbdaf2c30b8b9b1"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
2{9}
name: "create_api_key"
title: null
effect: "ADMIN"
effect_confidence: 0.808
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.837
risk_severity: "HIGH"
fingerprint: "15c054f8bf067c749b9a74c60684ca2c72ac850af13f530c171e1a16afec03db"
input_schema_fingerprint: "df79004e51be5d7b5aaee6cb95cab2f088ebfb1a1b8c8be8809cd2069960a640"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
3{9}
name: "directory_stats"
title: null
effect: "READ"
effect_confidence: 0.524
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "7d448f91b4d8c98742ace6ce6037729570e31d0b600da9a083672aeda814b5f8"
input_schema_fingerprint: "4aa1829941b105da155d634378a51062ee3c7bfbd7372bd0c01103d189855c38"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
4{9}
name: "edit_owned_listing"
title: null
effect: "WRITE"
effect_confidence: 0.861
capabilities[0]
risk_severity: "LOW"
fingerprint: "fe58caf8879e4bb6c9850379961de0355fb5422f414dee27c1e654d9929fc42c"
input_schema_fingerprint: "ef8be6ef0751d4a81c18ee1c70b2222dc8334af3d41db1c36db82d9285b32b9e"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
5{9}
name: "execute_paid_verification"
title: null
effect: "EXECUTE"
effect_confidence: 0.65
capabilities[1]
0{2}
capability: "AUTHENTICATION"
confidence: 0.513
risk_severity: "HIGH"
fingerprint: "b6dd47499e45c37c32ecd525041e06948b1d7808667b99480b8a3d243cf0b577"
input_schema_fingerprint: "5cc309f046c692f453f98df5e94ad3dea7355f9553877f7614d9d13453bab719"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: true
6{9}
name: "get"
title: null
effect: "READ"
effect_confidence: 0.869
capabilities[0]
risk_severity: "INFO"
fingerprint: "cac82d109ea5796060fa8d2df4ae1e77df00c5390c8371a7f7bc16894748199c"
input_schema_fingerprint: "96fe1bbe30ece3bedfe3633fba3323fc190cbf1cd0153d69bdc67d59d540545d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
7{9}
name: "get_article"
title: null
effect: "READ"
effect_confidence: 0.869
capabilities[0]
risk_severity: "INFO"
fingerprint: "c22442222c6383f393be5f14c2f3095c55464b32047d73f27395471fa8e1811d"
input_schema_fingerprint: "effcc75a41dd7438cc79d7d2f4b1e42e3c481c048c52f2e940e1ba6eb9ade494"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
8{9}
name: "get_mcp_server"
title: null
effect: "READ"
effect_confidence: 0.869
capabilities[0]
risk_severity: "INFO"
fingerprint: "ec77398351973c9bdeec40c7a7e4d1fffa4e2bf9a9d6cd8038cdd5a388bd239e"
input_schema_fingerprint: "6c9137e95855acb226517d313264d7c535cb1dc9b37449822ef931c4d32d9161"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
9{9}
name: "get_methodology"
title: null
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "fb187f976c2e11456805196ad28f39a78ec0af6a675ef5736bf62f760b2f0623"
input_schema_fingerprint: "e8eefdc051a804a88b048d052fbcb6c1b48ae3899cf7222c01869d2c95b230e3"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
10{9}
name: "get_owned_listing"
title: null
effect: "READ"
effect_confidence: 0.889
capabilities[0]
risk_severity: "INFO"
fingerprint: "95f5bac2baf5cc94543af8a024691d622f040a43e5d0a75d374dfcbdf54cf256"
input_schema_fingerprint: "17cececb3348e944602cdaa2ca3aac9735c386e397a3c6816c20eef7e9d187e1"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
11{9}
name: "get_paid_verification"
title: null
effect: "READ"
effect_confidence: 0.846
capabilities[1]
0{2}
capability: "AUTHENTICATION"
confidence: 0.586
risk_severity: "MEDIUM"
fingerprint: "c37313ccbd5e7dc1511c9ce32b9725f40a468713be55143780f36e4be1f2d960"
input_schema_fingerprint: "8aa564ce3443f4e76295b314bfc65b1bb00cad6064dff94bc93884ddf3189417"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
12{9}
name: "list_articles"
title: null
effect: "READ"
effect_confidence: 0.869
capabilities[0]
risk_severity: "INFO"
fingerprint: "a9f7dcc32dc7bd97ab8617c7a0aaedee81c8b986b2ca4848c9633a2019c2fd4a"
input_schema_fingerprint: "2abbfe866e0f66704a0f15b30f217bfdf34cb5e7f810306653c592d473c0bafb"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
13{9}
name: "list_categories"
title: null
effect: "READ"
effect_confidence: 0.846
capabilities[0]
risk_severity: "INFO"
fingerprint: "d295be462105f463edb457584a65431d82de6dc1e45a1d4521195ac013b31273"
input_schema_fingerprint: "6c1e203d1e2b40fc380a9954c6e39d0eafd648017e19cfe77fcfb19385a3eeb2"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
14{9}
name: "prepare_paid_verification"
title: null
effect: "READ"
effect_confidence: 0.533
capabilities[1]
0{2}
capability: "AUTHENTICATION"
confidence: 0.648
risk_severity: "MEDIUM"
fingerprint: "d2d23e49bca2f55f3baf8822472a09449a6548e780d5e6e926f9eb501d745725"
input_schema_fingerprint: "6afe119c204ee36a97ddf73c660af67c45ee9e70577de6ce73223f758296ad18"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
15{9}
name: "register"
title: null
effect: "WRITE"
effect_confidence: 0.703
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.804
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.52
risk_severity: "HIGH"
fingerprint: "18bca4975dac7a3c31067a565c2d6fa4b3d6f91d3dc262bdfd2f8921da0560b9"
input_schema_fingerprint: "90fc06bd5a53078e434bc9534ea721553653ce7b7a3dff8ff95cfcc1917bada2"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
16{9}
name: "scan_mcp_safety"
title: null
effect: "READ"
effect_confidence: 0.836
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.872
risk_severity: "INFO"
fingerprint: "a684d00f8d49674e41a7ac37d037ece08d699465bc4bb37b77a544847bfbb41b"
input_schema_fingerprint: "2a78299d8d97dcb6785dcc898b68c6c96210b1b197ddde68c3ed4d6203d1cdfc"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
17{9}
name: "search"
title: null
effect: "READ"
effect_confidence: 0.889
capabilities[0]
risk_severity: "INFO"
fingerprint: "1bf09a9f39aef3e62e9398cc33ca89bc5f4d095a9c5b109e625e594d339badf9"
input_schema_fingerprint: "727eb526ebbc10f51bae6053382bc8060c69b8d49847485dacb438888545ee49"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
18{9}
name: "search_a2a_agents"
title: null
effect: "READ"
effect_confidence: 0.869
capabilities[0]
risk_severity: "INFO"
fingerprint: "d78461682c1ffb86e0303b492c4eb2f0d65a1ab8faf4ae7cf6b0c1ad77d79d00"
input_schema_fingerprint: "010f74e707e77cb67cc94b4ebf831f52de340b9ce463563149b1dfb03e90aad0"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
19{9}
name: "search_mcp_servers"
title: null
effect: "READ"
effect_confidence: 0.869
capabilities[0]
risk_severity: "INFO"
fingerprint: "e369082e831433880c7ae04fd31fccc5f4b3050b89e41374b21d22790cf1321e"
input_schema_fingerprint: "f6cf771d9025635daebb967d9eeb3ca4256dd1872f9ac46ceceee96fc99ef60e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
20{9}
name: "search_resources"
title: null
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "ae9cbc69f138db66774425eef4b42a9650d63a0f638abf6614ad64f4a2c0c943"
input_schema_fingerprint: "1e7500a1bf28abb308087f383790e71c5dda5d1d81b40fb011156eb8c03f60a5"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
21{9}
name: "stats"
title: null
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "e9328ec1b285d45e2d0e8d23dec06792f5ea233d010647b6eb565f6877feee7c"
input_schema_fingerprint: "1bb9badcb185058df1a0cf1d6401b56efd8b5eba4a460d9dc53d513a3e8e310a"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
22{9}
name: "verify_service_url"
title: null
effect: "READ"
effect_confidence: 0.836
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.586
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.816
2{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.567
risk_severity: "MEDIUM"
fingerprint: "b35a739872c3a6765d64e1bdfee8225e7646d872632cf62c3a7b2d0cfb822d99"
input_schema_fingerprint: "8dfe8cae684b7376d4cac13c5ad350a178e5d0236ba851dc1226201c69844b16"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "agent-tools.cloud"
registrable_domain: "agent-tools.cloud"
source: "transport"
findings[15]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "directory_stats"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "execute_paid_verification"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_paid_verification"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "prepare_paid_verification"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "verify_service_url"
7{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "scan_mcp_safety"
8{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "create_api_key"
9{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "directory_stats"
10{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "scan_mcp_safety"
11{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "scan_mcp_safety"
12{6}
check_id: "SQ-TOOL-PREFERENCE-MANIPULATION"
category: "prompt_injection"
severity: "CRITICAL"
title: "Pressures the AI model to prefer this tool"
subject_type: "tool"
subject_name: "scan_mcp_safety"
13{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "CRITICAL"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "scan_mcp_safety"
14{6}
check_id: "SQ-TOOL-SHELL-PAYLOAD"
category: "prompt_injection"
severity: "CRITICAL"
title: "Shell command patterns in model-facing text"
subject_type: "tool"
subject_name: "scan_mcp_safety"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "cloud.agent-tools/agent-tools-mcp"
registry_content_sha256: "50286de0ed4b7623da3bc5d971a6901fc3e76b10d6f4dfa4b57f5c6cc1123dbd"
scan_snapshot_fingerprint: "b4d17e9c1f6bf0408ecdf728bce4091a16399d945d1fadb73af1f56c3e6c7c88"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:02:36.293Z"
observed_at: "2026-11-14T05:30:42.507+00:00"
registry_published_at: "2026-11-14T04:39:43.929187+00:00"
registry_updated_at: null