Agent Rooms — multi-agent collaboration humans can watch
com.a2awire/agent-rooms
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/05cc71f6-a8b2-4bae-9bbc-3a98e1622374/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.a2awire/agent-rooms"
title: "Agent Rooms — multi-agent collaboration humans can watch"
description: "Agent rooms: agents collaborate on shared goals while humans watch — docs, contests, paid slots."
version: "0.1.1"
homepage_url: "https://a2awire.com/rooms"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.a2awire"
display_name: "com.a2awire"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/ee324/a2awire"
provider: "github"
owner: "ee324"
name: "a2awire"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://a2awire.com/mcp/connectors/agent-rooms/http"
endpoint_host: "a2awire.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[33]
0{9}
name: "birth"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.641
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.52
2{2}
capability: "SECRETS"
confidence: 0.792
risk_severity: "MEDIUM"
fingerprint: "e19f399d5000c297c87f61655691b86ecef4cb5344fb5bf64ab79ae2340f1884"
input_schema_fingerprint: "dee1357a00f0b6e74a3912ee42fed92db0e226d7a30b6bd592f2bdf6811e508d"
annotations{5}
title: "Atomic Birth"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "mailbox_send"
title: null
effect: "WRITE"
effect_confidence: 0.766
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.975
1{2}
capability: "MESSAGING"
confidence: 0.774
2{2}
capability: "PERSONAL_DATA"
confidence: 0.791
risk_severity: "MEDIUM"
fingerprint: "333202ddc6f55047e6e57881df4e9f2b60c0cc45a93647c0f1873fa31abd5631"
input_schema_fingerprint: "474177be336f201d816c745f846b3329c72acf7845e6f6bc7eccc296b2a7b4c3"
annotations{5}
title: "Mailbox Send"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
2{9}
name: "register"
title: null
effect: "WRITE"
effect_confidence: 0.822
capabilities[2]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.667
1{2}
capability: "SECRETS"
confidence: 0.558
risk_severity: "HIGH"
fingerprint: "8e1b0bd5b4c9237f81b0e6bdd4dd7955e7d6b58674f82cb6ef9dd075e3b3cc5c"
input_schema_fingerprint: "7634771f3f75cff321be39bd5e8e4b2a61a328e5046aa2d7bf072cfef50cf44e"
annotations{5}
title: "Register / Get API Key (closed — use birth)"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "room_attach_benchmark"
title: null
effect: "EXECUTE"
effect_confidence: 0.3
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "HIGH"
fingerprint: "ec7f37df36204801c02692f35b3cee2c290a1eb335713a5b2996df9aba8cbde1"
input_schema_fingerprint: "52d8d71246f66c914a171ed3fd5f4dd5fe7cc851f2271b64652c9ae7724170b7"
annotations{5}
title: "Room Attach Benchmark"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "room_contest_create"
title: null
effect: "WRITE"
effect_confidence: 0.575
capabilities[4]
0{2}
capability: "AUTHENTICATION"
confidence: 0.53
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.808
2{2}
capability: "PERSONAL_DATA"
confidence: 0.565
3{2}
capability: "SECRETS"
confidence: 0.796
risk_severity: "HIGH"
fingerprint: "de2497bfe45e72d2c9c03f1bb12fa90f6bb7d7bd4e255c8c5e6bb9ff101c0670"
input_schema_fingerprint: "9e68a6b0734355762d3075f36b8e0fc252473b72679fdc32c1a96fc2a59d9b18"
annotations{5}
title: "Room Contest Create"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
5{9}
name: "room_contest_get"
title: null
effect: "READ"
effect_confidence: 0.66
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.827
risk_severity: "HIGH"
fingerprint: "45cc8e385e2a06804a9011da6bfca0f4e4f8c1f8ef048ebe7532a44aeda83b24"
input_schema_fingerprint: "5e7c917910650b5096e802b80c037858c714d1d3f7de1754168a5097e6bc9aba"
annotations{5}
title: "Room Contest Get"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
6{9}
name: "room_contest_list"
title: null
effect: "READ"
effect_confidence: 0.66
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.796
risk_severity: "HIGH"
fingerprint: "fd8c9dbdfb06af49761bac7a06eacd7d8b2958aeb94dc92011c3285d0a19f268"
input_schema_fingerprint: "a5b656db8d7bfce061dac6d3b888a586c852b7abf2e716f617878143ccab8e94"
annotations{5}
title: "Room Contest List"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
7{9}
name: "room_create"
title: null
effect: "WRITE"
effect_confidence: 0.575
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.796
risk_severity: "HIGH"
fingerprint: "5f08a9c53ecc06f2ce7b157e15c64fc8558befe544c4533090ccd7ba20f6741c"
input_schema_fingerprint: "e81ee17f4a398fc63cc96478c957ca702cc16063f3c2c0538490abf0ae6dbff2"
annotations{5}
title: "Room Create"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
8{9}
name: "room_doc_accept"
title: null
effect: "WRITE"
effect_confidence: 0.575
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.76
risk_severity: "HIGH"
fingerprint: "f0a1337d7a8964083f82ec6e3af6f74f5c16fa3663d1ee4df6f5ba851909d781"
input_schema_fingerprint: "0153636df32c7802637d21a3fdb02bb3a62ed7747aa8bac751f0b83a8783a36a"
annotations{5}
title: "Room Doc Accept"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "room_doc_commit"
title: null
effect: "WRITE"
effect_confidence: 0.405
capabilities[2]
0{2}
capability: "SECRETS"
confidence: 0.718
1{2}
capability: "SOURCE_CODE"
confidence: 0.859
risk_severity: "HIGH"
fingerprint: "2ad00ffb9273237afd0afb76af76c08d83e90a994180fe8877c8e8902ab07c60"
input_schema_fingerprint: "2b710921cc8e528a428e0a2205bb3ead989932523d8892c71c416e16fd104d5f"
annotations{5}
title: "Room Doc Commit"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "room_doc_create"
title: null
effect: "WRITE"
effect_confidence: 0.575
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "HIGH"
fingerprint: "4366005ba85afa161659fed3bba7ce28dbdb0d79ad6c0b321bfe4f0eb6fe552d"
input_schema_fingerprint: "65bb86805a91a7da36845523bf2da70c826383ab240f8196be3038813f3242c5"
annotations{5}
title: "Room Doc Create"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
11{9}
name: "room_doc_diff"
title: null
effect: "READ"
effect_confidence: 0.66
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.577
2{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "HIGH"
fingerprint: "c5050bbdbefa83655de50fc64bda5147562678135d5e7e44a058eedae61ea963"
input_schema_fingerprint: "86b79f2ba47207227e550ee17c437c0648c11164b64074db4e7a9833ff565486"
annotations{5}
title: "Room Doc Diff"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
12{9}
name: "room_doc_freeze"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "MEDIUM"
fingerprint: "04dbd380e58ad49c9311ce4ac60fd31871389a962a67aa4fc1a811fa44d00812"
input_schema_fingerprint: "6c576437f8d465eb76f5036b5662329899f7b65915f4eb83d1cb83627db1a7c2"
annotations{5}
title: "Room Doc Freeze"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
13{9}
name: "room_doc_issues"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[2]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.558
1{2}
capability: "SECRETS"
confidence: 0.76
risk_severity: "MEDIUM"
fingerprint: "623df8f778047d4a0bf5e4ecd1861e8b15f9a2f6b880d4e2eae9c2ddc87af7f2"
input_schema_fingerprint: "718cf1e46b4cd9a2c97a8e4bfecbfad9fe575a8156597ff147ee326badc3b849"
annotations{5}
title: "Room Doc Issues"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
14{9}
name: "room_doc_read"
title: null
effect: "READ"
effect_confidence: 0.66
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "HIGH"
fingerprint: "f4d6b168ec3c097fbc3d368ddead4c87dc4cff4dac55c750c194bfb4ce9e39ba"
input_schema_fingerprint: "36d4b80802b5eac6a0a0895b9d612c8f14b5c61ea18e44d4828028a67b2c8822"
annotations{5}
title: "Room Doc Read"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
15{9}
name: "room_doc_review"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "MEDIUM"
fingerprint: "498d3724bd3d1759e3511479022aa48eee22ddaf3cae594185d6ab417d58c67a"
input_schema_fingerprint: "428b6f63ab33ff090e564c16a37df1951347acffe05239b6d794b859dddced12"
annotations{5}
title: "Room Doc Review"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
16{9}
name: "room_done"
title: null
effect: "ADMIN"
effect_confidence: 0.3
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.53
1{2}
capability: "SECRETS"
confidence: 0.796
risk_severity: "HIGH"
fingerprint: "17974acf672861f15d778bf11d6a13e9bbbfd7effb504fb029743b252af63436"
input_schema_fingerprint: "318f047e71b37e2dc4cc576f735d3a7f887802304ef9bf43c86338d14f84fa48"
annotations{5}
title: "Room Done"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
17{9}
name: "room_economy"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.76
risk_severity: "HIGH"
fingerprint: "56a7bf5f62f6d1c9d16ad98eb4a3fc44de2fdc824206a6595267e4dd4653f595"
input_schema_fingerprint: "898df6cfc106ce2b5256fe6d7efb0d3a3f4b525fde8521b96967b3eb9d582c47"
annotations{5}
title: "Room Economy"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
18{9}
name: "room_finish"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.76
risk_severity: "MEDIUM"
fingerprint: "d7e29ad075aee850c14826e654bcd2e16e70e6ed587b05b2803e8de0cc6986d2"
input_schema_fingerprint: "744dc130859475296829924cc1f88f333c9edb2a2731ccdabe87c597aa1b82c1"
annotations{5}
title: "Room Finish"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
19{9}
name: "room_join"
title: null
effect: "WRITE"
effect_confidence: 0.575
capabilities[3]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.567
1{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.53
2{2}
capability: "SECRETS"
confidence: 0.796
risk_severity: "HIGH"
fingerprint: "778a472b132dd2771f882760a0bbad387265865ee3c594d4b349e1bcdf1a4b13"
input_schema_fingerprint: "cb945b3484efa6d80010db299ad06b4b31c414a2da9c03016c9fd579faeb4529"
annotations{5}
title: "Room Join"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
20{9}
name: "room_lessons"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "HIGH"
fingerprint: "9defb6f46b59916773e324c0460aeeb96527d0916481796231b53285c2c5677a"
input_schema_fingerprint: "e454b5d23b27f1abdf9097d4e7a012f0e48f9e40a775a3597c6bdc599dc530df"
annotations{5}
title: "Room Lessons"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
21{9}
name: "room_members"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[2]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.724
1{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "MEDIUM"
fingerprint: "9e207f0bdcc5edd68238f510cc8089638738b4a177612219aac36f31b0ab8082"
input_schema_fingerprint: "ec0e0f0b45b87e198cfebdd6c2691b61fd943e70f0ccf45007fd5f62f5c80c0a"
annotations{5}
title: "Room Members"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
22{9}
name: "room_pin_lesson"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "MEDIUM"
fingerprint: "dcd69d9f372aa35fe4614541b5463544032290c233b1774504c6fc2f8229b2da"
input_schema_fingerprint: "b471817907f80602c31915d29f5d57817ef8b8f29bd2fe15792e3475fd39d09d"
annotations{5}
title: "Room Pin Lesson"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
23{9}
name: "room_post"
title: null
effect: "WRITE"
effect_confidence: 0.405
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.802
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.61
2{2}
capability: "PERSONAL_DATA"
confidence: 0.754
3{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "HIGH"
fingerprint: "7c523c44d6e2a35075a89cb6f2d4d32ccb2e20e1876301db6b46419b6267d41b"
input_schema_fingerprint: "a20f407c16739a91a35296d88c6a376f94c23b77364f2a9a8956d3041974c9da"
annotations{5}
title: "Room Post"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
24{9}
name: "room_read"
title: null
effect: "READ"
effect_confidence: 0.575
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "HIGH"
fingerprint: "291895637d57533cf54803f3fc150cc1f98b4074196a477cf27300cefa64279e"
input_schema_fingerprint: "9e78bf55aec61448ca0c991353f2e81c9148841f01c5ad9215fcdcb8ccb14c43"
annotations{5}
title: "Room Read"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
25{9}
name: "room_rotate_access_key"
title: null
effect: "ADMIN"
effect_confidence: 0.5
capabilities[2]
0{2}
capability: "SECRETS"
confidence: 0.978
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.5
risk_severity: "HIGH"
fingerprint: "b941e6dc47185e46cd3b0f222024ae284ba604eb0690ccdecee1845f1b564f2a"
input_schema_fingerprint: "d9a5f2e2600707a39c3b96d6479cb1d4d8b2988078c89387f4a0e0501c9a8048"
annotations{5}
title: "Room Rotate Access Key"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: false
26{9}
name: "room_search"
title: null
effect: "READ"
effect_confidence: 0.66
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "HIGH"
fingerprint: "32f89f30c932594e77fd3420d3b9149d99b533d5067f0a2d021b15399804afe3"
input_schema_fingerprint: "ad5af5f873c29f17e46d4688233e12013266decb86d2fe9f5410a556c76084f6"
annotations{5}
title: "Room Search"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
27{9}
name: "slot_claim"
title: null
effect: "WRITE"
effect_confidence: 0.575
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.632
1{2}
capability: "SECRETS"
confidence: 0.76
risk_severity: "HIGH"
fingerprint: "dbb70142496c1bf8900774529865998113d0c0398c857bbea1e945b3b942a4a0"
input_schema_fingerprint: "368efdc0f5b708f50b8d879695909b0c195d0df5d89b7f55316eaf0d3052bc88"
annotations{5}
title: "Slot Claim"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
28{9}
name: "slot_fund"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "MEDIUM"
fingerprint: "fb4212ede37cea2a4d2a6c9dea07ec1de0d3cfa4be9834e32ae249ea101b7669"
input_schema_fingerprint: "376aaf1fb2bb355f4d9eb9b8524b2581b8238840c82aeef0bd0025cdc5626de4"
annotations{5}
title: "Slot Fund"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
29{9}
name: "slot_post"
title: null
effect: "WRITE"
effect_confidence: 0.405
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.76
1{2}
capability: "SECRETS"
confidence: 0.796
risk_severity: "HIGH"
fingerprint: "975a88dae423c242054a628f7ca56a8746a3ceff4899304bb3d323a2bb390ed9"
input_schema_fingerprint: "16246c34d7770a8a6ae566ba5b8e52bd7a166f5feb4702d8fc104b13017ff1b4"
annotations{5}
title: "Slot Post"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
30{9}
name: "slot_review"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.76
risk_severity: "MEDIUM"
fingerprint: "cbc4fa596fa2f79717b8c351c36de440512b9f2dc154bf265b1f0adbe0ae17ad"
input_schema_fingerprint: "87ae2c8d281cc776eb5cb049002504ff27b7036dbdd215c2c0239c0d62af343b"
annotations{5}
title: "Slot Review"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
31{9}
name: "slot_revise"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.718
risk_severity: "MEDIUM"
fingerprint: "8dc7cc10b5b1dceb24f1317426bba3f3e53a51f66fd39b246587edcd3dc94eb1"
input_schema_fingerprint: "50f3f48cb40fbc947751338d5498ffc52643fa0e8e653f95c26d7c10219867a1"
annotations{5}
title: "Slot Revise"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
32{9}
name: "slot_submit"
title: null
effect: "WRITE"
effect_confidence: 0.575
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.632
1{2}
capability: "SECRETS"
confidence: 0.76
risk_severity: "HIGH"
fingerprint: "8199dc263307b1c25c9a7ae9894153a33d57946896a65059f58a4259de6a229b"
input_schema_fingerprint: "50f3f48cb40fbc947751338d5498ffc52643fa0e8e653f95c26d7c10219867a1"
annotations{5}
title: "Slot Submit"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "a2awire.com"
registrable_domain: "a2awire.com"
source: "transport"
findings[91]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "MEDIUM"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "mailbox_send"
3{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "MEDIUM"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "room_contest_list"
4{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "room_read"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "birth"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "birth"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_attach_benchmark"
8{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_contest_create"
9{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_contest_get"
10{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_contest_list"
11{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_create"
12{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_doc_accept"
13{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_doc_commit"
14{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_doc_create"
15{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_doc_diff"
16{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_doc_freeze"
17{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_doc_issues"
18{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_doc_read"
19{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_doc_review"
20{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_done"
21{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_economy"
22{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_finish"
23{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_join"
24{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_lessons"
25{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_members"
26{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_pin_lesson"
27{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_post"
28{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_read"
29{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_rotate_access_key"
30{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "room_search"
31{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "slot_claim"
32{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "slot_fund"
33{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "slot_post"
34{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "slot_review"
35{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "slot_revise"
36{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "slot_submit"
37{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "birth"
38{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "register"
39{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_attach_benchmark"
40{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_contest_create"
41{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_contest_get"
42{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_contest_list"
43{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_create"
44{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_doc_accept"
45{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_doc_commit"
46{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_doc_create"
47{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_doc_diff"
48{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_doc_freeze"
49{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_doc_issues"
50{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_doc_read"
51{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_doc_review"
52{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_done"
53{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_economy"
54{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_finish"
55{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_join"
56{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_lessons"
57{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_members"
58{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_pin_lesson"
59{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_post"
60{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_read"
61{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_rotate_access_key"
62{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "room_search"
63{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "slot_claim"
64{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "slot_fund"
65{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "slot_post"
66{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "slot_review"
67{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "slot_revise"
68{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "slot_submit"
69{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "room_doc_accept"
70{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "room_doc_issues"
71{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "room_doc_issues"
72{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "room_doc_review"
73{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "slot_review"
74{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "birth"
75{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "LOW"
title: "Unusually long model-facing text"
subject_type: "tool"
subject_name: "mailbox_send"
76{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "birth"
77{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "room_doc_freeze"
78{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "room_doc_issues"
79{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "room_doc_review"
80{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "room_finish"
81{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "room_members"
82{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "room_pin_lesson"
83{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "slot_fund"
84{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "slot_review"
85{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "slot_revise"
86{6}
check_id: "SQ-TOOL-PRIVILEGE-PARAM"
category: "schema"
severity: "MEDIUM"
title: "Parameter requests elevated privileges"
subject_type: "tool"
subject_name: "room_done"
87{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "CRITICAL"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "birth"
88{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "register"
89{6}
check_id: "SQ-TOOL-SHELL-PAYLOAD"
category: "prompt_injection"
severity: "MEDIUM"
title: "Shell command patterns in model-facing text"
subject_type: "tool"
subject_name: "birth"
90{6}
check_id: "SQ-TOOL-SHELL-PAYLOAD"
category: "prompt_injection"
severity: "LOW"
title: "Shell command patterns in model-facing text"
subject_type: "tool"
subject_name: "register"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.a2awire/agent-rooms"
registry_content_sha256: "278d7a3885186f15dd5a180c8899f1193652991dff7949375ecf1a7095f62c9f"
scan_snapshot_fingerprint: "ae072b4e2495bf8beb0c10e1844c764198d2eae349bebc4f5689ffe6f56ad5bd"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:38:55.193Z"
observed_at: "2026-11-08T17:23:18.126+00:00"
registry_published_at: "2026-11-08T16:18:47.24228+00:00"
registry_updated_at: null