MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/5d91f0e3-d6b2-445a-a99d-818f6c4f8000/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "co.heyspark.mcp/server"
title: null
description: "Search and discover local businesses. 30+ categories with verified contact info, hours, and reviews."
version: "1.0.0"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "co.heyspark.mcp"
display_name: "co.heyspark.mcp"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/jhibird/HeySpark-MCP"
provider: "github"
owner: "jhibird"
name: "HeySpark-MCP"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.heyspark.co/mcp"
endpoint_host: "mcp.heyspark.co"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[4]
0{9}
name: "get_business_details"
title: null
effect: "READ"
effect_confidence: 0.836
capabilities[0]
risk_severity: "INFO"
fingerprint: "5538b8bcb0dad165b8a6cba4402ec6b6f54484a7d87a6370177f4d532aa73d1f"
input_schema_fingerprint: "844c52f8de47fe831823867fe3c25ff109f5cdd140751c30f4f40d221d228a62"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "get_reviews_summary"
title: null
effect: "READ"
effect_confidence: 0.861
capabilities[0]
risk_severity: "INFO"
fingerprint: "397a6360c62c858ef034b40682c077ea3df5f85af271d62aac6aba534a13ba3f"
input_schema_fingerprint: "79c4abafbcd47f46cef4810c9168447d0a3cf206ac1cd9f878a01c99abb67281"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "list_categories"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[0]
risk_severity: "INFO"
fingerprint: "c8cc73ea584965774afa846cbc2aed64ddddc32cb1f0797f8d02d3081831b63f"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "search_businesses"
title: null
effect: "READ"
effect_confidence: 0.861
capabilities[2]
0{2}
capability: "LOCATION"
confidence: 0.824
1{2}
capability: "PERSONAL_DATA"
confidence: 0.695
risk_severity: "LOW"
fingerprint: "1c1a34930d00039e17e23b7d2cc1242fa171c894c2df57c0e17c258257da3c8f"
input_schema_fingerprint: "a3fade37e2c34a6b8c89e98446a2574e3c4926fece7005dae702e04c388e55ea"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.heyspark.co"
registrable_domain: "heyspark.co"
source: "transport"
findings[2]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "search_businesses"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "co.heyspark.mcp/server"
registry_content_sha256: "2918b1b303185ca1d1c1a7c226b066b7a3cbedbb0be16f9a1571431a5d6f2f86"
scan_snapshot_fingerprint: "9849aa6f303a9c4832000da47ce4e0b3b99ceb1b75c308055d0a3809f100c676"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:14:14.199Z"
observed_at: "2026-11-13T02:11:36.619+00:00"
registry_published_at: "2026-02-16T13:12:52.113124+00:00"
registry_updated_at: null