MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/06902f86-8a00-411c-a892-6c1fcc73b295/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "co.youraitools/toolfit"
title: "ToolFit + MCPCheck"
description: "Audit, pin and diff agent tool lists; preflight and watch remote MCP servers. Free tier; x402."
version: "0.1.1"
homepage_url: "https://api.youraitools.co/toolfit/"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "co.youraitools"
display_name: "co.youraitools"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.youraitools.co/toolfit/mcp"
endpoint_host: "api.youraitools.co"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[6]
0{9}
name: "audit_tools"
title: "Audit a tool list (ToolFit)"
effect: "READ"
effect_confidence: 0.933
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.601
risk_severity: "INFO"
fingerprint: "3527d68ae2cb4d2ca0aeafd6a9bdc8701dfb046dc98e0790714cb13e6b6e945d"
input_schema_fingerprint: "b418679f0a9d0de9034793fce8ee7f6ffbf4bf739386e9534a3e8ea93427876d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
1{9}
name: "check_mcp_server"
title: "Preflight a remote MCP server (MCPCheck)"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.661
risk_severity: "INFO"
fingerprint: "810c792214e4de7ec727dd683fa2ed50e7b4f39261f341e2dd7f7e70672eb11a"
input_schema_fingerprint: "27746190477345d0f71fa8a5adbf9d9f71286774856072ce8efcdf6c11784d53"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
2{9}
name: "diff_tools"
title: "Diff a tool list against a pin (ToolFit)"
effect: "READ"
effect_confidence: 0.879
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.601
risk_severity: "MEDIUM"
fingerprint: "79f303d8823578a91b98d8dc85427f48d2e21e8c4682bb9a040c1579b1efff19"
input_schema_fingerprint: "f253987018854f248986f53adbecb5d3dbc3c6ab79719aaa0fbf9106c364e2af"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
3{9}
name: "watch_cancel"
title: "Cancel a ToolFit watch"
effect: "WRITE"
effect_confidence: 0.7
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "5b9a8e1aedde1fa1bb97f96d3ffc51608578cc17e1ae2960aed6d300332356f9"
input_schema_fingerprint: "10757a10b4e6f486ad85bd92fe12ff2fca729ce8c8e6566e35387162bdfd0005"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
4{9}
name: "watch_mcp_server"
title: "Watch a remote MCP server for changes (ToolFit)"
effect: "READ"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.952
risk_severity: "INFO"
fingerprint: "01cc1a57a4a41ea3a6d9a2cf864db97da42f6fc308b210bd328058c3f007ea12"
input_schema_fingerprint: "0e580e3ccea8fdae033d1a4b4b787c03d96ee26e6752ad53eb9916198d6caee8"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: false
openWorldHint: true
5{9}
name: "watch_status"
title: "Status of a ToolFit watch"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "d2508eb125087c752a4b045ea9dab38ddf3b8e252478a49b6f3f9ef75ffe4e65"
input_schema_fingerprint: "10757a10b4e6f486ad85bd92fe12ff2fca729ce8c8e6566e35387162bdfd0005"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.youraitools.co"
registrable_domain: "youraitools.co"
source: "transport"
findings[5]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "diff_tools"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "watch_cancel"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "watch_status"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "co.youraitools/toolfit"
registry_content_sha256: "ff8ee539cea0a08c5c4dc82c3a83c7c64955d10411342ad8902937bb8a2c8b04"
scan_snapshot_fingerprint: "13b5b911e436edb1a6a87d23faff7b177293e0a02d02cbf60f675160c2b69c28"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:51:17.109Z"
observed_at: "2026-11-12T11:00:44.418+00:00"
registry_published_at: "2026-10-24T18:59:10.563652+00:00"
registry_updated_at: null