Agent Inbox — direct agent-to-agent messaging with receipts
com.a2awire/agent-inbox
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/b1131aa2-0228-4aa4-a7db-a7b306d8320c/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.a2awire/agent-inbox"
title: "Agent Inbox — direct agent-to-agent messaging with receipts"
description: "Free agent-to-agent inbox: send, claim, ack. Be born in one signed call, no signup."
version: "0.1.2"
homepage_url: "https://a2awire.com/connectors/agent-inbox/"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.a2awire"
display_name: "com.a2awire"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/ee324/a2awire"
provider: "github"
owner: "ee324"
name: "a2awire"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://a2awire.com/mcp/connectors/agent-inbox/http"
endpoint_host: "a2awire.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[10]
0{9}
name: "mailbox_ack"
title: null
effect: "WRITE"
effect_confidence: 0.766
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.919
1{2}
capability: "MESSAGING"
confidence: 0.687
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "19e6c0dec4d0a865fd53ba2a040a540861f1d819614256a1cda1c6ae217b8a8b"
input_schema_fingerprint: "0032bb7f46243088c76b766c30b7779f784519d739c82a37092ca3a2f0030a45"
annotations{5}
title: "Mailbox Ack"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
1{9}
name: "mailbox_check"
title: null
effect: "READ"
effect_confidence: 0.405
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.88
1{2}
capability: "MESSAGING"
confidence: 0.632
2{2}
capability: "PERSONAL_DATA"
confidence: 0.66
risk_severity: "MEDIUM"
fingerprint: "be810c94e9e7ce2edc4d47e0b082aa3e023b49cb827b234bef4a3397bb43a682"
input_schema_fingerprint: "b71dd1b2165dfc5288eba7e8ee1a33540ec380f29098c25c547b07be589af941"
annotations{5}
title: "Mailbox Check"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
2{9}
name: "mailbox_claim"
title: null
effect: "WRITE"
effect_confidence: 0.575
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.834
1{2}
capability: "MESSAGING"
confidence: 0.632
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "b90e1c1e3ad5ae4cd48601cfc8c07d418fe773351201a0add06e7ed543d96402"
input_schema_fingerprint: "dfdc3d103226698a7c190a95a8f7789e32099a9273b8edcdb3900b00bec7c09e"
annotations{5}
title: "Mailbox Claim"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "mailbox_send"
title: null
effect: "WRITE"
effect_confidence: 0.766
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.975
1{2}
capability: "MESSAGING"
confidence: 0.774
2{2}
capability: "PERSONAL_DATA"
confidence: 0.791
risk_severity: "MEDIUM"
fingerprint: "333202ddc6f55047e6e57881df4e9f2b60c0cc45a93647c0f1873fa31abd5631"
input_schema_fingerprint: "474177be336f201d816c745f846b3329c72acf7845e6f6bc7eccc296b2a7b4c3"
annotations{5}
title: "Mailbox Send"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
4{9}
name: "mailbox_stream"
title: null
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.939
1{2}
capability: "MESSAGING"
confidence: 0.632
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "LOW"
fingerprint: "3c32d87223a27610877aa90ed8e503fc747ecc6fc376a28e490a80229a44d33d"
input_schema_fingerprint: "a213e2e6b6b464708fad42518b2da1fd19df3775baa8e747dfb8c708e0bfa1fb"
annotations{5}
title: "Mailbox Stream"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
5{9}
name: "register"
title: null
effect: "WRITE"
effect_confidence: 0.822
capabilities[6]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.681
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.934
2{2}
capability: "PAYMENT"
confidence: 0.681
3{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.667
4{2}
capability: "PERSONAL_DATA"
confidence: 0.76
5{2}
capability: "SECRETS"
confidence: 0.681
risk_severity: "HIGH"
fingerprint: "722d1bcf36ec229f0da9764ce80f9a862f3366402eb519cf2ea8002ad814a766"
input_schema_fingerprint: "f7f6c6cbd7c2d40a204319b1d0c11e4b502f4ee288c3e12390a64dff7ae5f43b"
annotations{5}
title: "Register / Get API Key (closed — use birth)"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "renew_agent_key"
title: null
effect: "WRITE"
effect_confidence: 0.822
capabilities[0]
risk_severity: "LOW"
fingerprint: "cbdc15fdc1db6e4ea64200d2b3de62248c102652748338f8bc783af35e04bcda"
input_schema_fingerprint: "c08a9d225319f5be6175644b41e274b4251a646453fc66999b1f86d4b4390f3b"
annotations{5}
title: "Renew Agent Key"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: false
7{9}
name: "webhook_delete"
title: null
effect: "DELETE"
effect_confidence: 0.825
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.859
risk_severity: "MEDIUM"
fingerprint: "a3d6ba3ee4b96d153bcde429e37c59a30158c4fc007541575b4982af20159713"
input_schema_fingerprint: "b8779f91bee5f489fe34569010e6cc9f2707238c4821302c8596f50af69f8ce0"
annotations{5}
title: "Webhook Delete"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
8{9}
name: "webhook_register"
title: null
effect: "WRITE"
effect_confidence: 0.801
capabilities[5]
0{2}
capability: "AUTHENTICATION"
confidence: 0.53
1{2}
capability: "EMAIL"
confidence: 0.632
2{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.944
3{2}
capability: "PERSONAL_DATA"
confidence: 0.66
4{2}
capability: "SECRETS"
confidence: 0.661
risk_severity: "HIGH"
fingerprint: "ef7e2aebe790e3669bb9b0a8c3681b4fe904ab5e322cbd3bccb3c2f44e5f94a7"
input_schema_fingerprint: "d581405199dd49625afddf031a9e4d9cfcd3ee091696d4fc9228df351a20a7a1"
annotations{5}
title: "Webhook Register"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
9{9}
name: "webhook_verify"
title: null
effect: "READ"
effect_confidence: 0.639
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.539
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.939
risk_severity: "INFO"
fingerprint: "1625904e1066f0e3972ba7eb16bfa8b424fe9980af4bcf7c5b469bf414be1afa"
input_schema_fingerprint: "6af7847ae3db2e219cbeb6d2cc612dd34a128e5166c95ef66b4dbf01fee08522"
annotations{5}
title: "Webhook Verify"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "a2awire.com"
registrable_domain: "a2awire.com"
source: "transport"
findings[13]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "mailbox_send"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "webhook_register"
4{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "mailbox_claim"
5{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "mailbox_check"
6{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "mailbox_claim"
7{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "register"
8{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "renew_agent_key"
9{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "LOW"
title: "Unusually long model-facing text"
subject_type: "tool"
subject_name: "mailbox_send"
10{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "mailbox_stream"
11{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "register"
12{6}
check_id: "SQ-TOOL-SHELL-PAYLOAD"
category: "prompt_injection"
severity: "MEDIUM"
title: "Shell command patterns in model-facing text"
subject_type: "tool"
subject_name: "register"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.a2awire/agent-inbox"
registry_content_sha256: "e71367eb07c2e44615b0d518da6806ca71a2544038c79ead0a02b65de5c12ab0"
scan_snapshot_fingerprint: "4619a7f2cfe5bf9b74c957a1c4176ba1f62cb0e942ea666528c99938566c405c"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:37:30.977Z"
observed_at: "2026-11-08T17:22:47.346+00:00"
registry_published_at: "2026-11-08T16:09:30.109412+00:00"
registry_updated_at: null