MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/bbcc8608-10a8-4c3b-8223-0e93d8204415/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.402rates/compass"
title: "Compass by 402rates"
description: "Free agent tests (no account or payment); paid ping."
version: "0.2.1"
homepage_url: "https://402rates.com/compass/"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.402rates"
display_name: "com.402rates"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.402rates.com/mcp/compass"
endpoint_host: "api.402rates.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[13]
0{9}
name: "check_payment_terms"
title: "Inspect x402 payment terms without making a payment"
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.779
risk_severity: "LOW"
fingerprint: "99dd45717af4a5cbabb1142af0eba691d369fc6e73b8d8a068eb54c19d121b24"
input_schema_fingerprint: "d5146531e5a1fb51ef316307d99ab02e3eadaa287f873be47883e6e00e29e7d0"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
1{9}
name: "compare_payment_terms"
title: "Compare previous and current x402 payment terms"
effect: "READ"
effect_confidence: 0.832
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.538
1{2}
capability: "PAYMENT"
confidence: 0.8
risk_severity: "LOW"
fingerprint: "33cf0532d27336a54eecb160ddb26f2a9806b748aa5408b74807bfc0d39aaba1"
input_schema_fingerprint: "42a9b87a892c15b01dc66a24c4f6d048008a2c6d926dfb91ee3df98e9cd328cd"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
2{9}
name: "decode_payment_attribution"
title: "Decode declared application and settlement metadata"
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.575
risk_severity: "LOW"
fingerprint: "e9135b58c59270052871fa7e733f3c681c5d89ec27ef6287f151c2e3c6aa45e6"
input_schema_fingerprint: "614c58579c0b554e6c0c03f0bd3bd69459a3edeb9f09630cf5df45c18d0cbddc"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
3{9}
name: "describe_agent_test"
title: "Describe a synthetic agent test"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "965ab90bf8e877e9ad972d69f70d2e63f3670f905eb4608bf67d9688b8c4e0f6"
input_schema_fingerprint: "0fb32f87a4f24f1fa95ce42bea574f5aaaad36533a67fd5026f9e96a73e504d2"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
4{9}
name: "execute_test_action"
title: "Execute a synthetic test action"
effect: "EXECUTE"
effect_confidence: 0.79
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.751
1{2}
capability: "SOURCE_CODE"
confidence: 0.689
risk_severity: "HIGH"
fingerprint: "6cc7feae687a78e710241334eb263697268394f0f1519447eda310848a3c30f6"
input_schema_fingerprint: "5a3cbdcc85e3c82a838d5eee10f065dc26497187154b44083ae6b3f395d4991d"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: null
openWorldHint: false
5{9}
name: "find_x402_resource"
title: "Find an x402 resource that can answer a question"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.567
1{2}
capability: "PAYMENT"
confidence: 0.567
risk_severity: "LOW"
fingerprint: "0de777f5da4d82f50a021a2d58bb7d27d22522200c4662070da342167c1cb263"
input_schema_fingerprint: "15023e638f00d183fa9a33ec5bf25e13608a604dabc2152022b521b9ed711a3f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
6{9}
name: "get_manifest"
title: "Get the manifest for Compass by 402rates"
effect: "READ"
effect_confidence: 0.832
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.53
risk_severity: "INFO"
fingerprint: "0ed14889ed6a928b3698b7945866b62e167dcfff23eafbce0332bcd9cf76bf24"
input_schema_fingerprint: "62835c038deb903219e9baf1e65fbb3fc102b3b5338d767ec2f162a4a0fb39d9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
7{9}
name: "inspect_test_state"
title: "Read synthetic task state"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.513
risk_severity: "MEDIUM"
fingerprint: "17a857f181c7bb6bc4aa1258fb57b0668c80de0d194af68f9ee3410de522fd16"
input_schema_fingerprint: "92fc20c968bf8acd6b0a9fe3a3f382e8e63d77a778a28806162c6292845407fb"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
8{9}
name: "list_agent_test_cases"
title: "List the synthetic agent test cases"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "d375fdd529baed8bf106c70677144970f04caceac369fdce275f5944c339644a"
input_schema_fingerprint: "f973399805c1c233633f5196cf8e2ad40ee100b94996d711dcd030813b671bc5"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
9{9}
name: "list_capabilities"
title: "List capabilities for Compass by 402rates"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "33576ee9df749a2ab4d09c32ceafa05c020e6cf8cec868d39b588bd22d8d9358"
input_schema_fingerprint: "7a014b717a77aac971ea0ab5c0ff47bb13e6cae7ef9442d9dedb15ce36381b15"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
10{9}
name: "read_agent_test_report"
title: "Read or finalize an agent test timeline"
effect: "READ"
effect_confidence: 0.885
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.513
risk_severity: "MEDIUM"
fingerprint: "c17ce3dd613d18d979cba1c24bce5c26fff8011713fb7550d08252ce71518ea6"
input_schema_fingerprint: "c3946e04b6ec19170b825653de2b80743cbce3b18960871409bf1d4cd11d2c2d"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: null
openWorldHint: false
11{9}
name: "start_agent_test"
title: "Start or repeat a synthetic agent test"
effect: "WRITE"
effect_confidence: 0.885
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.601
1{2}
capability: "SECRETS"
confidence: 0.601
risk_severity: "HIGH"
fingerprint: "06e4277761ee82c2cccff558e2ad4edc7066ded8fdb0ffc88aff0a13e1feca4e"
input_schema_fingerprint: "0ba27c69bc99429c96657937192a283f4b066360d9fd2eef794f13a0084978a9"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: null
openWorldHint: false
12{9}
name: "test_payment"
title: "Payment integration check"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.834
risk_severity: "LOW"
fingerprint: "d15eaa22095d6fea0a7cdb81535ba3a4d29abea496e299b995ca00a6f2fa7f6a"
input_schema_fingerprint: "7a014b717a77aac971ea0ab5c0ff47bb13e6cae7ef9442d9dedb15ce36381b15"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.402rates.com"
registrable_domain: "402rates.com"
source: "transport"
findings[6]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "execute_test_action"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "inspect_test_state"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "read_agent_test_report"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "start_agent_test"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.402rates/compass"
registry_content_sha256: "f88b65d643d8bb4498eb58b7df59980333296fcad4efea178243fa34f4c0e425"
scan_snapshot_fingerprint: "1e5cda4b3f28427f8066a8cd2398b7b2bdc5d199837e25869faf21641dc44276"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:42:46.232Z"
observed_at: "2026-11-13T03:05:04.185+00:00"
registry_published_at: "2026-09-24T14:26:42.491954+00:00"
registry_updated_at: null