MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/2b6c26b6-a872-47c7-ae4e-e401dfab1a76/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "cloud.coredls.vigia/vigia"
title: "Vigía"
description: "What breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP."
version: "0.6.0"
homepage_url: "https://vigia.coredls.cloud"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "cloud.coredls.vigia"
display_name: "cloud.coredls.vigia"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/MatiasDelosSantos/vigia"
provider: "github"
owner: "MatiasDelosSantos"
name: "vigia"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://vigia.coredls.cloud/mcp"
endpoint_host: "vigia.coredls.cloud"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[12]
0{9}
name: "changes_since_cutoff"
title: "What changed since my knowledge cutoff"
effect: "WRITE"
effect_confidence: 0.861
capabilities[0]
risk_severity: "LOW"
fingerprint: "27e93daf589c3591fa53322f5c79b245402d5af880528a728217554b549b8485"
input_schema_fingerprint: "0c7ec76d0f34c8d6c7bbef23db8e9fe81ef5416a9abb8ae48c7c466b9bb34c5f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "check_dependencies"
title: "Check dependencies"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "4b66bd5689fb9c6b58fc5f11b16f6bf82c083a4c59c3dbdb12d3dd1da168fdab"
input_schema_fingerprint: "82a3bfe9e6c8ab8ad8f09fb2795cb1fcb19e14564de799fd6061cac6f34b433d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
2{9}
name: "eol_status"
title: "Software end-of-life status"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "582684f4f13567025b272b9c795f44da3fedb94bbb262589330a7e4ac6642f4e"
input_schema_fingerprint: "dc482cca9027ff7e20c9dbd68dd0af844f435c59bf6bcea329cff97673dde87d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "find_compatible_version"
title: "Newest compatible version"
effect: "READ"
effect_confidence: 0.869
capabilities[0]
risk_severity: "INFO"
fingerprint: "f9aeeecc7ee52b1273b34c80b2f8700523f333395cb6ff061a631ad1eb4671f7"
input_schema_fingerprint: "a3fa7699b39d2090cf8ef2101566245bd59294d4e682cff8502aa512b8e7b4d5"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
4{9}
name: "find_package"
title: "Find package"
effect: "READ"
effect_confidence: 0.933
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.522
risk_severity: "INFO"
fingerprint: "9b475ec440c3b706bb4b6f879329536cdc8a91a6336b726a6a12095960639042"
input_schema_fingerprint: "809d16c55e2ae598d33317b242e2aef0fa4cb3abe4238195505347ce93cfa211"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: null
5{9}
name: "list_versions"
title: "List package versions"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "0fb68c9f9b87747e30cf2ca1d35b67a23303530591125029aa8ca876df4b3c43"
input_schema_fingerprint: "f15b1f72e758d6cb12d692ceeef11b868d7c2fb1d4ce88336a6c38ab9d08f00e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
6{9}
name: "model_status"
title: "AI model status and pricing"
effect: "READ"
effect_confidence: 0.626
capabilities[0]
risk_severity: "INFO"
fingerprint: "d68de1b7d0122d52158fc8539c0be9250bb7e1a9d15ea16433f7c47e4b78574c"
input_schema_fingerprint: "a2bf4671ac63e47e2e3486c3b50cbaa9a4f12932c9370a175eb7b19bad7cb4f3"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: null
7{9}
name: "package_status"
title: "Package status"
effect: "WRITE"
effect_confidence: 0.603
capabilities[0]
risk_severity: "LOW"
fingerprint: "fe8a9e20fcb476868da0f0d7104c7763b4cc09f492268d8a7842b3f966041a97"
input_schema_fingerprint: "a36b34155647a5272962aa662243a4fc4a4d3c6df817c635c82599c9cfbe7eb7"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
8{9}
name: "recent_changes"
title: "Recent changes"
effect: "READ"
effect_confidence: 0.682
capabilities[0]
risk_severity: "INFO"
fingerprint: "e6e0cef5eaebcc97db13c42949ca0c6f187c8fabd58fac4a6e07c7dcb28bba7c"
input_schema_fingerprint: "b8257400350661ccd194eb33aef538f559ad72f3a5db779de4d3caa689788a03"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: null
9{9}
name: "symbol_status"
title: "Does this API exist in this version?"
effect: "READ"
effect_confidence: 0.682
capabilities[0]
risk_severity: "INFO"
fingerprint: "5a2bbea32126ad7be8421189b10e0b9b57d10f4378b3956ce79a4743af3e912c"
input_schema_fingerprint: "14c849c7b5d4fe76959c71c4c23d3fe8ed3ec65b74653c54a21be30881046774"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
10{9}
name: "upgrade_impact"
title: "Upgrade impact (what breaks)"
effect: "WRITE"
effect_confidence: 0.848
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.746
risk_severity: "MEDIUM"
fingerprint: "a6dba816ae279fae8c837b5c3998d95367d9660b321869a899531ee936db4759"
input_schema_fingerprint: "5bbe5ce126965667549a1e736d1722064fd690845586b48ae21549edf7ccc674"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
11{9}
name: "version_status"
title: "Version status and vulnerabilities"
effect: "READ"
effect_confidence: 0.933
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.539
risk_severity: "INFO"
fingerprint: "dda173947dda9c65c6f287a6356c6aef844843548f99e91640d8b69feac480b6"
input_schema_fingerprint: "c2a122bc7e03334db444a3534db746c6cc91087583e2052d9a5a9b812663682a"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "vigia.coredls.cloud"
registrable_domain: "coredls.cloud"
source: "transport"
findings[4]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "changes_since_cutoff"
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "package_status"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "upgrade_impact"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "cloud.coredls.vigia/vigia"
registry_content_sha256: "a3cc3161a76b65704ba39f5fad2c706a6959ae20d836ac1089817bcc854ee4cb"
scan_snapshot_fingerprint: "3ded14b8f57215fe29ed84abde6324adb396e996d4395c57084439e1c3b051d3"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:38:32.147Z"
observed_at: "2026-11-13T01:26:18.148+00:00"
registry_published_at: "2026-10-10T22:10:04.787055+00:00"
registry_updated_at: null