Nova Inbox Agent by Nova (CIVAI)
co.civai.nova/nova-inbox-agent
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/2e92ffbd-6457-40da-b596-07b1939f1130/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "co.civai.nova/nova-inbox-agent"
title: "Nova Inbox Agent by Nova (CIVAI)"
description: "Read and send mail from your Nova Inbox (@nova.civai.co) for OTPs, directory signups, and inbound m…"
version: "1.1.0"
homepage_url: "https://nova.civai.co/agent/nova-inbox-agent"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "co.civai.nova"
display_name: "co.civai.nova"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://nova.civai.co/mcp/agents/nova-inbox-agent"
endpoint_host: "nova.civai.co"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[7]
0{9}
name: "compose_message"
title: null
effect: "WRITE"
effect_confidence: 0.808
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.973
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.766
2{2}
capability: "MESSAGING"
confidence: 0.724
3{2}
capability: "PERSONAL_DATA"
confidence: 0.796
risk_severity: "MEDIUM"
fingerprint: "95568df590f39566a96d1cb9fafb032ef04c1ed539ad8947e24590057231ca94"
input_schema_fingerprint: "4c885b221a1f7a1c31275542826e4e2fff25df4293ea45eea4b38669cac89b63"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "converse"
title: null
effect: "WRITE"
effect_confidence: 0.45
capabilities[0]
risk_severity: "LOW"
fingerprint: "080779c252f90785abf4d64314918f52c14367a382ea7d18fa95f7a72aa0c94e"
input_schema_fingerprint: "2e510dc6fbc1978a572bd4e1921743bde8904c62c4bc61ceb7091a0cb6ec65b7"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "get_attachment"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.751
1{2}
capability: "MESSAGING"
confidence: 0.632
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "d2e4f7e7e8ad53b5fd181a8fa91e5c0468300548556348d046c3a3713c58dc5f"
input_schema_fingerprint: "a1818bba3aec539447b1e8f4c90c6c3bae5ebd20ab5daf8e16e700b43f1f751a"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "get_inbox_address"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.82
1{2}
capability: "PERSONAL_DATA"
confidence: 0.796
risk_severity: "MEDIUM"
fingerprint: "52614204f8a1d2d5aa446eb519ff8a4c2b66b6d11de5906e0603db34a8dcbf9a"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
4{9}
name: "list_messages"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.783
risk_severity: "MEDIUM"
fingerprint: "cf03c794b3280740ebf6d7ef8efe67b1609f645799f60a3af97c0f2431e1a8af"
input_schema_fingerprint: "a8ed7aa1fad763e4b81a965ed3bcecc93be27fb717bee4cbb3770cd4044189fc"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
5{9}
name: "list_thread"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.851
1{2}
capability: "MESSAGING"
confidence: 0.724
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "832b9dae5d10bb4543ef99228396ee318c01f3bb524d88080f62901ad32f4865"
input_schema_fingerprint: "767352300f3b4a6170d3125e42123997374effcd66d29a95f69475525c42e675"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
6{9}
name: "read_message"
title: null
effect: "READ"
effect_confidence: 0.836
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.718
1{2}
capability: "MESSAGING"
confidence: 0.783
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "f58a430aa979dd0cd5217da800bc856dea759ec61ef30c1ddacfe78ae9619c33"
input_schema_fingerprint: "465ce2df7859fbc9ff652272cc74c3eeb1801abfb2f663d75b2533ca23dd8a55"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "nova.civai.co"
registrable_domain: "civai.co"
source: "transport"
findings[4]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "list_thread"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "co.civai.nova/nova-inbox-agent"
registry_content_sha256: "f595370a6deda029a3d77da57294db56296090668a10c852dc21882a262ca1f4"
scan_snapshot_fingerprint: "34b88704758675dac237e8052e5d7f324179740204742ea5f213ef2b02d27a85"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T07:01:58.089Z"
observed_at: "2026-11-13T02:05:38.097+00:00"
registry_published_at: "2026-09-21T17:14:26.747275+00:00"
registry_updated_at: null