MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/a493830e-769c-4c07-8468-553075443e23/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.eckari/capabilities"
title: null
description: "Deterministic company, entity and location lookups for agents - per call, x402 or API key."
version: "0.1.0"
homepage_url: "https://eckari.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.eckari"
display_name: "com.eckari"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.eckari.com/mcp"
endpoint_host: "api.eckari.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[24]
0{9}
name: "company_uk_accounts"
title: "Check UK company accounts due dates on Companies House"
effect: "READ"
effect_confidence: 0.736
capabilities[0]
risk_severity: "INFO"
fingerprint: "bce42c9709dab98a8fefe9b00a3510b430e9ff7a46e8f13fb2b80b0105cb7afb"
input_schema_fingerprint: "1218baf45569e5ec81085c5e42b65fae7ef8cb4aa0a5d6a74f66bfaec6c7c3a8"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "company_uk_charges"
title: "List UK company charges and mortgages from Companies House"
effect: "WRITE"
effect_confidence: 0.673
capabilities[2]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.632
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.567
risk_severity: "LOW"
fingerprint: "ddaa2cd9cfa8579eb6ed1d33c9f6756b9b89a57e6c487a5d96cf9d2f9721c327"
input_schema_fingerprint: "c15a7f91a7861f37e109d709f1d243e4f4b1d04cee25d5dd56a2080b6fbf3475"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
2{9}
name: "company_uk_directors"
title: "List UK company directors from the Companies House officers register"
effect: "READ"
effect_confidence: 0.592
capabilities[2]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.53
1{2}
capability: "PERSONAL_DATA"
confidence: 0.567
risk_severity: "LOW"
fingerprint: "79167447b0944debcbf67f6b62d1e49611aa159e7cb9f4fdb5cc7b4c4b59de34"
input_schema_fingerprint: "37b505889967f5b0d57da2df9cb75cf8b896c17d53de97493bb3febb73fa818a"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
3{9}
name: "company_uk_filings"
title: "List UK company filing history from Companies House"
effect: "READ"
effect_confidence: 0.776
capabilities[0]
risk_severity: "INFO"
fingerprint: "09ba97c3f829b8f8513231583a4bd67d1db34a541b38cf38552e0fc621b7fddd"
input_schema_fingerprint: "77b816686390f12b8b1826bede8676b6c5f56dd4e1de9043dea169467cdabd40"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
4{9}
name: "company_uk_owners"
title: "List UK company beneficial owners (PSC) from Companies House"
effect: "READ"
effect_confidence: 0.592
capabilities[0]
risk_severity: "INFO"
fingerprint: "2a98d285ff882ce8f1c1998a95b5e84547854451c32fa40e70031de6f1cdd9d3"
input_schema_fingerprint: "6e3670828939336b404bf1a2d1d8766126ba2ac21923ef52c15cd8910f21f3d4"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
5{9}
name: "company_uk_profile"
title: "Get UK company profile from Companies House"
effect: "READ"
effect_confidence: 0.736
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.805
risk_severity: "LOW"
fingerprint: "4fdc96df7bec84448746ad98969277c22df6ff829b1bd1d73caf2bd9287d974a"
input_schema_fingerprint: "1218baf45569e5ec81085c5e42b65fae7ef8cb4aa0a5d6a74f66bfaec6c7c3a8"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
6{9}
name: "company_uk_registered_office"
title: "Get UK registered office address from Companies House"
effect: "WRITE"
effect_confidence: 0.5
capabilities[0]
risk_severity: "LOW"
fingerprint: "1922bd3c70c9ca23f61c419e97e993b90f7b6be6bb25ca6b62bd8815ca252e2e"
input_schema_fingerprint: "1218baf45569e5ec81085c5e42b65fae7ef8cb4aa0a5d6a74f66bfaec6c7c3a8"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
7{9}
name: "company_uk_search"
title: "Search Companies House for UK companies by name"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "2542b334938ae52b3d4e59ccc4f8ad687d75d49e6c923d7756ab1a61f40a5f74"
input_schema_fingerprint: "1ffbbe071a85b05c27fe08aa31dc52faa9b239b9c0aecce270bfae1224c18e35"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
8{9}
name: "company_uk_status"
title: "Check UK company status on Companies House"
effect: "READ"
effect_confidence: 0.736
capabilities[0]
risk_severity: "INFO"
fingerprint: "10fa1efcd793b8be5a377fc0790afbf65f1df37ab5295807c698133f3c6993b4"
input_schema_fingerprint: "dc6b02c2bc48849c834e2cab326625b083c7d613770a0d4e0b12cdfbe26d7a1e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
9{9}
name: "company_us_filings"
title: "List SEC EDGAR filings for a US company by ticker or CIK"
effect: "READ"
effect_confidence: 0.809
capabilities[0]
risk_severity: "INFO"
fingerprint: "9dec7e0724c1cdb84306404d7efe74dcd15142be314e585de9f4c784aedd0a35"
input_schema_fingerprint: "86c9aed852c74a5a8d926f6327b1db8a7f33c36cec52239e8a33d38f8a2cc6ed"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
10{9}
name: "company_us_filings_latest"
title: "Latest 10-K, 10-Q or 8-K for a US company by ticker or CIK"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "330eeaa136e0ed9e8ab9bfcefb2f4b5ad39a461a668f79e7686932b3578d9a88"
input_schema_fingerprint: "ed9ddc02b8e3332170d474c36b86e0c81e512703738e79eeb613d80810373b77"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
11{9}
name: "company_us_profile"
title: "US public company profile from SEC EDGAR by ticker or CIK"
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.805
risk_severity: "LOW"
fingerprint: "6f8b5f5404bb6727a3999341ecf183997d94339eda6b3d657712bac87610905e"
input_schema_fingerprint: "0c5139e68b8b0999e7ca805f5d5a0dd43fbc4d5f89aaa84e289e029d71fc8bf8"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
12{9}
name: "company_us_resolve"
title: "Resolve a US company name to its SEC CIK and ticker"
effect: "READ"
effect_confidence: 0.796
capabilities[0]
risk_severity: "INFO"
fingerprint: "0151a2110b6b6ad7c6fb493bc70a0a517d7de3d289e8d0f9f3d3f280ddb4b9fe"
input_schema_fingerprint: "23e58090657220fb9f6ded5e5dcbe5029de2735511892d41c0eb8a083153b35a"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
13{9}
name: "domain_expiry"
title: "Check domain expiry date and days remaining (RDAP)"
effect: "READ"
effect_confidence: 0.653
capabilities[0]
risk_severity: "INFO"
fingerprint: "ad17e948ac490b8bdc4c778c9e4501226d15ede10aa400e0e0380579c57484dc"
input_schema_fingerprint: "223b4e935b883165ce1da4611b0a625559c8c543149ce5732fb7eb1ae48961b7"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
14{9}
name: "domain_registration"
title: "WHOIS lookup for a domain, from the registry RDAP record"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "ffe5d08ea0439c7013721adb7775b9ef8035d70a0ad0ed3a831700d366528a29"
input_schema_fingerprint: "223b4e935b883165ce1da4611b0a625559c8c543149ce5732fb7eb1ae48961b7"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
15{9}
name: "entity_lei_profile"
title: "Get legal entity profile by LEI from the GLEIF register"
effect: "READ"
effect_confidence: 0.776
capabilities[2]
0{2}
capability: "LEGAL"
confidence: 0.669
1{2}
capability: "PERSONAL_DATA"
confidence: 0.724
risk_severity: "LOW"
fingerprint: "71eb847aaaa9b3ba457ffc0f15517943db67d173e45b3ff141b2191abe5a98cd"
input_schema_fingerprint: "58bdb8a4b32f876df406a1de89470282414a95ee0586c581995f371a8995e753"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
16{9}
name: "entity_lei_search"
title: "Search legal entities by name in the GLEIF LEI register"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "LEGAL"
confidence: 0.76
risk_severity: "INFO"
fingerprint: "44384f9d4ce19ad2bd64cdad2c78dc149732087f270ab5eb6d549d0fa3db6ce8"
input_schema_fingerprint: "1ccc19c80e2029e3cd4900570f228f4445783ecfb79615a5ab9d976d29200798"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
17{9}
name: "fx_reference_rate"
title: "Get the official ECB reference exchange rate for a pair (accounting, invoicing, reporting)"
effect: "READ"
effect_confidence: 0.653
capabilities[0]
risk_severity: "INFO"
fingerprint: "6ffab8708b2af89f6ccc3199c658207a9b72634a088723b04aae889ca3a7bda9"
input_schema_fingerprint: "6b159a9f964e332fa9e94218544dc5c9435be52b9ec7ecf4b16538a32a427d32"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
18{9}
name: "location_us_geocode"
title: "Geocode a US street address (Census, TIGER interpolated)"
effect: "READ"
effect_confidence: 0.888
capabilities[2]
0{2}
capability: "LOCATION"
confidence: 0.93
1{2}
capability: "PERSONAL_DATA"
confidence: 0.648
risk_severity: "LOW"
fingerprint: "7a11854526485210e3ad12995fd68c7148ca7b30058239b0cbc229982aeb5260"
input_schema_fingerprint: "cf7f664778f4c5fa47f4fe1bc8a6ad49f8e249cb97d68d053b0669bea13c2f4c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
19{9}
name: "location_us_geographies"
title: "Get US Census geographies for coordinates (state to ZCTA)"
effect: "READ"
effect_confidence: 0.776
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.985
risk_severity: "LOW"
fingerprint: "e10405dd0f9647355a9b28eab622b65c1b908e4cbf6ad44919b3eb599a4eaa08"
input_schema_fingerprint: "553696f2f2d7af97fab792c22672ca9b98b1627f86b07641f1ffb28c50802ec5"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
20{9}
name: "parcel_detect_carrier"
title: "Detect the carrier from a tracking number"
effect: "READ"
effect_confidence: 0.905
capabilities[2]
0{2}
capability: "LOCATION"
confidence: 0.82
1{2}
capability: "PERSONAL_DATA"
confidence: 0.616
risk_severity: "LOW"
fingerprint: "c2eba36e7b317982b5f380726f89cef3dcbc5c7c4c7f67b889c95721f161d59c"
input_schema_fingerprint: "0db6b3777b861eed09d48bdd10d2de650c4225528f568916cca39ad24f29aa69"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
21{9}
name: "weather_us_alerts"
title: "Get active US weather alerts for a point or state (NWS)"
effect: "READ"
effect_confidence: 0.592
capabilities[0]
risk_severity: "INFO"
fingerprint: "4816c265a081c9985ec150af7770d3212bcfd1920e8a91662088ae2b98c6e1a8"
input_schema_fingerprint: "ffdbadd19c7614f7b6e915337ad1a469862b35650e70a7e91b9c2dc5fa4e4bd7"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
22{9}
name: "weather_us_forecast"
title: "Get the US weather forecast for coordinates (NWS)"
effect: "READ"
effect_confidence: 0.796
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.954
risk_severity: "LOW"
fingerprint: "fea278e26d736e1e8d5cad135faf2a60654c435f86a9266114cbe42b8d6960d2"
input_schema_fingerprint: "115b4619c4eb34b5cc89e747ea586b5effe01b7c347abe689a611d08bca77c6f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
23{9}
name: "weather_us_observation"
title: "Get the latest US weather observation with its age (NWS)"
effect: "READ"
effect_confidence: 0.653
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.883
risk_severity: "LOW"
fingerprint: "3c020f3e00fe6e5a4eb8182c682af623a058a552466c1807869bf0725ba3e5b8"
input_schema_fingerprint: "bccf2bae27eaf19ae337814dc048ed30152edd2ff2bea09113517240266e5d66"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.eckari.com"
registrable_domain: "eckari.com"
source: "transport"
findings[14]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "company_uk_charges"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "company_uk_registered_office"
4{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "weather_us_forecast"
5{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "company_uk_charges"
6{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "company_uk_directors"
7{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "company_uk_owners"
8{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "company_uk_search"
9{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "company_us_filings"
10{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "entity_lei_search"
11{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "LOW"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "weather_us_alerts"
12{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "company_us_filings"
13{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "LOW"
title: "Unusually long model-facing text"
subject_type: "server"
subject_name: null
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.eckari/capabilities"
registry_content_sha256: "048a15cf361548824ce772f87455b7e8e130870d423d4a60190ed9b7a78247ea"
scan_snapshot_fingerprint: "50feb1eeed7909f1d70e3bd06c6b6677ca8f35ff8d6c079a24b5183cf95b30b0"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T01:59:44.667Z"
observed_at: "2026-11-14T00:56:21.708+00:00"
registry_published_at: "2026-08-18T12:06:17.359959+00:00"
registry_updated_at: null