MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/f793eae8-6a19-4402-9e66-b0093a9a0b5d/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "co.promptguard/security"
title: "PromptGuard"
description: "Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client"
version: "1.2.5"
homepage_url: "https://promptguard.co"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "co.promptguard"
display_name: "co.promptguard"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/promptguardhq/promptguard"
provider: "github"
owner: "promptguardhq"
name: "promptguard"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@promptguard/mcp-server"
version: "1.2.5"
transport: "stdio"
1{4}
registry_type: "oci"
identifier: "ghcr.io/promptguardhq/promptguard-mcp-server:1.2.5"
version: null
transport: "stdio"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.promptguard.co/mcp"
endpoint_host: "api.promptguard.co"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[13]
0{9}
name: "promptguard_get_fleet_status"
title: "Get Shadow AI fleet status"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "8413f074d0abc2058bbaf4a8397dcc55c977af351003973427261ff63dd3bb5d"
input_schema_fingerprint: "7c93eb77a46141f5d4d056f654b54f0a7ada27ae67e7a821ed579b4474f4287a"
annotations{5}
title: "Get Shadow AI fleet status"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
1{9}
name: "promptguard_get_usage"
title: "Get usage this month"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "20f277c700f27806036845d41936bd0986ddb9f56009db2008b2b4cabc62cc36"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: "Get usage this month"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
2{9}
name: "promptguard_list_audit_log"
title: "List audit log entries"
effect: "READ"
effect_confidence: 0.908
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.955
risk_severity: "INFO"
fingerprint: "e4cc4cf7cfd0452e765c773bc7432dd9c554018838eb1e86e4e59dfe7713885d"
input_schema_fingerprint: "1093b8d2b0ea06745b6534bf524f9bb20144fc27da02e2da07118a1d545193ca"
annotations{5}
title: "List audit log entries"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
3{9}
name: "promptguard_list_events"
title: "List security events"
effect: "READ"
effect_confidence: 0.933
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.76
risk_severity: "INFO"
fingerprint: "76511dfa03fa2d34e39dfad8ef1faee0f26182fd6a75a0b90d1298438df812f2"
input_schema_fingerprint: "1222e35921a82758fb394ed72afa5199e148a80d80151fb8076632397eb92c83"
annotations{5}
title: "List security events"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
4{9}
name: "promptguard_list_policies"
title: "List policies"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.844
risk_severity: "INFO"
fingerprint: "d6659867aa0f074524ae8769aedff128b488f8353b5f594936213f2ca819976a"
input_schema_fingerprint: "e96ae7e7f1dfa2dccd18457336e04ae9a3c870d0381ad558e844c124db2f08b6"
annotations{5}
title: "List policies"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
5{9}
name: "promptguard_list_projects"
title: "List projects and their configuration"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "abd2fbda87bbfb266a9837e598e76f86466c6133d22ca708812fe4ecbb03bd37"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: "List projects and their configuration"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
6{9}
name: "promptguard_list_red_team_tests"
title: "List red-team tests"
effect: "READ"
effect_confidence: 0.921
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.567
1{2}
capability: "MESSAGING"
confidence: 0.805
2{2}
capability: "SECURITY_CONTROL"
confidence: 0.694
risk_severity: "MEDIUM"
fingerprint: "4f580ee9efc22cc8e3d9784fb93fec3bc161381dfe08664c334b05ef7f5314d4"
input_schema_fingerprint: "ec9acc59c7af8bd4666ea51045d0f85ca1b07829556903bfccdfc9695b0b772e"
annotations{5}
title: "List red-team tests"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
7{9}
name: "promptguard_list_webhook_deliveries"
title: "List webhook deliveries"
effect: "READ"
effect_confidence: 0.908
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.901
risk_severity: "INFO"
fingerprint: "4d6193ac9f93918d1dcf3aa7b8085af3c0ee158b7cf3e88784aa25c2874024c2"
input_schema_fingerprint: "639fbaa62b213db3944ae44bb418021377a272223e0f56e8b2471611d427712a"
annotations{5}
title: "List webhook deliveries"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
8{9}
name: "promptguard_propose_suppression"
title: "Suppress a rule on a project"
effect: "DELETE"
effect_confidence: 0.363
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.601
risk_severity: "MEDIUM"
fingerprint: "2bf6f7676703fa25ddb0e870f318cddba4999c78fc513750c29a6b36665bd5c9"
input_schema_fingerprint: "874a0201c566156ad0d9bf2f0dcdbc3800a2a4bbbe9e13d54fcc203f9bc60f81"
annotations{5}
title: "Suppress a rule on a project"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: false
9{9}
name: "promptguard_redact"
title: "Redact PII"
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.76
risk_severity: "LOW"
fingerprint: "24abd01dbf2739db58d49388b9619fb0e74bc6638dbe49a04093dbedede959cb"
input_schema_fingerprint: "4874fbdf61d60ced3b8f845c4a98a172777d1424dd6377e4db7920d98c95d10f"
annotations{5}
title: "Redact PII"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
10{9}
name: "promptguard_scan_code"
title: "Find LLM SDK calls in code"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.539
risk_severity: "INFO"
fingerprint: "9b3c31d6e239d502e77a2d0157b2f42492bbf7bab942b8d807324d804a8b76ea"
input_schema_fingerprint: "ba73109161883bfb57c2c01d3de5b46fc0fc401e1c0cac5f1aeeb5302d414945"
annotations{5}
title: "Find LLM SDK calls in code"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "promptguard_scan_text"
title: "Scan text for threats"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "13766a18be1835bcd61f2f23a60ca4f83304f138f59b33a680095e50a801f11f"
input_schema_fingerprint: "1faae1e932b2ac9cdbda681376e2f1ab2bc07f75a88deccafe2fd57a92344044"
annotations{5}
title: "Scan text for threats"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
12{9}
name: "promptguard_status"
title: "PromptGuard status"
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.64
risk_severity: "INFO"
fingerprint: "7a782464a602b7a2fbe0df2561546589cdf58cfbf1fad8f0e345be13a507be1f"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: "PromptGuard status"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[1]
0{4}
key: "ui://widget/promptguard-v1.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "ba5dc745fc4a9346a03f89937f614dc5941d129c90f7b0120e5da9a377b76927"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/ui"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.promptguard.co"
registrable_domain: "promptguard.co"
source: "transport"
findings[2]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "HIGH"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "promptguard_list_red_team_tests"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "co.promptguard/security"
registry_content_sha256: "e76b07cb0a916e9128126f1deedc8254cf9a57999e6bc17c5818c2e52b7c3705"
scan_snapshot_fingerprint: "aa599670d90b948dce510d9d76e71ce364991c3a01d4e458544e5a2209f769c0"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:52:34.066Z"
observed_at: "2026-11-13T05:27:06.559+00:00"
registry_published_at: "2026-11-13T03:36:26.827352+00:00"
registry_updated_at: null