com.furrowforms/furrow-forms
com.furrowforms/furrow-forms
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/43b2bec5-f6d8-4844-a207-8aa5e8250476/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.furrowforms/furrow-forms"
title: null
description: "Form backend an agent runs end to end: provision forms, snippets, spam, signed webhooks."
version: "1.0.1"
homepage_url: "https://furrowforms.com/ai"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.furrowforms"
display_name: "com.furrowforms"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/useburrow/furrow-forms"
provider: "github"
owner: "useburrow"
name: "furrow-forms"
verified: false
packages[1]
0{4}
registry_type: "npm"
identifier: "@furrowforms/mcp"
version: "1.0.1"
transport: "stdio"
transports[2]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.furrowforms.com/mcp"
endpoint_host: "api.furrowforms.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[29]
0{9}
name: "archive_client"
title: "Archive client"
effect: "WRITE"
effect_confidence: 0.901
capabilities[0]
risk_severity: "LOW"
fingerprint: "6b52a47cdfd63c023ab3d9fdb484a1a517f153ec01d9b0ebfa3faa89245c9cff"
input_schema_fingerprint: "a60e396b29dfffea41960537ca74b6d9e6c1c6b7ea5ed15d6ea44f81fd566005"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: null
1{9}
name: "archive_form"
title: "Archive form"
effect: "WRITE"
effect_confidence: 0.916
capabilities[0]
risk_severity: "LOW"
fingerprint: "a4b46aa9fd012a0e58b3eac4aca1aec8f6418299f5a8526ad141644e10a5a387"
input_schema_fingerprint: "6c7df17cf7d96d58526ce4caa55a36e4352fe2243e076ff51d02b2e7e6ac20f2"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: null
2{9}
name: "archive_project"
title: "Archive project"
effect: "WRITE"
effect_confidence: 0.916
capabilities[0]
risk_severity: "LOW"
fingerprint: "764d803eabb73cb8586f63e18d48dcef0560e9d367dc526ddb2b7db77cc55d77"
input_schema_fingerprint: "9bbc941b4789aeb6562abd628cad293498fb0c36100423d5c08e4998abe2cd83"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: null
3{9}
name: "bootstrap_site"
title: "Bootstrap site"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[10]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.824
1{2}
capability: "AUTHENTICATION"
confidence: 0.641
2{2}
capability: "EMAIL"
confidence: 0.99
3{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.942
4{2}
capability: "FILE_ACCESS"
confidence: 0.759
5{2}
capability: "MESSAGING"
confidence: 0.728
6{2}
capability: "PERSONAL_DATA"
confidence: 0.969
7{2}
capability: "SECRETS"
confidence: 0.792
8{2}
capability: "SECURITY_CONTROL"
confidence: 0.666
9{2}
capability: "SOURCE_CODE"
confidence: 0.768
risk_severity: "MEDIUM"
fingerprint: "8ddc29cf100f40116ee04b361888523169a08929d6fe52e3f891da73623dea08"
input_schema_fingerprint: "d5be75effd1ea1950de2b65aaf21d431c6e0fa1f1bb3ec24e2e271bd75c811f3"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: true
openWorldHint: null
4{9}
name: "create_client"
title: "Create client"
effect: "WRITE"
effect_confidence: 0.79
capabilities[0]
risk_severity: "LOW"
fingerprint: "88ed432b11ee3c3e8ec6270935d90e6f2306a3511fb4c301f61452fc3c6d15f0"
input_schema_fingerprint: "13dbb2b95e619d27bb9eb0fc16cbb86dca208a5b2de52f2a65b028ec36156f6e"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: true
openWorldHint: null
5{9}
name: "create_form"
title: "Create form"
effect: "WRITE"
effect_confidence: 0.822
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.887
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.773
2{2}
capability: "PERSONAL_DATA"
confidence: 0.88
3{2}
capability: "SOURCE_CODE"
confidence: 0.556
risk_severity: "MEDIUM"
fingerprint: "8881f0e41576811a9736fb90e8b00812e34b97cdb8585697b488c65e351ada1e"
input_schema_fingerprint: "1f6509fe5b15480fd0732c6b2b70d24117823f0018e945b70d85d844fb6a4e41"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: true
openWorldHint: null
6{9}
name: "create_project"
title: "Create project"
effect: "WRITE"
effect_confidence: 0.822
capabilities[7]
0{2}
capability: "AUTHENTICATION"
confidence: 0.577
1{2}
capability: "EMAIL"
confidence: 0.938
2{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.815
3{2}
capability: "FILE_ACCESS"
confidence: 0.666
4{2}
capability: "PERSONAL_DATA"
confidence: 0.898
5{2}
capability: "SECRETS"
confidence: 0.695
6{2}
capability: "SECURITY_CONTROL"
confidence: 0.666
risk_severity: "HIGH"
fingerprint: "925063d8cec6f63ccbf0785ac26c035c6561685c9e6c2b5a33ae5381b6b096fa"
input_schema_fingerprint: "c8bb58c9fffccd984eefd247f9a23f58e0132b287e45c1bd642e0d20cf167dad"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: true
openWorldHint: null
7{9}
name: "create_upgrade_link"
title: "Create upgrade link"
effect: "WRITE"
effect_confidence: 0.848
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.53
1{2}
capability: "MESSAGING"
confidence: 0.632
risk_severity: "MEDIUM"
fingerprint: "413e5197fa580a65a978b3340a83ba3ba140e67a23b4521e450d99cbc9aaa3bb"
input_schema_fingerprint: "94374fbd5ec483d97704af8e393c53c4ccd97ca0d27691b0519dfbcef816951a"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: false
openWorldHint: null
8{9}
name: "get_account"
title: "Get account"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.834
risk_severity: "MEDIUM"
fingerprint: "370c1d672343651b8d6555dcb2304d53ef04851159e33863fa9e5ef7fc2353e1"
input_schema_fingerprint: "085e31e620592c23a9d82718306694303fd6702033e169413c873df898ee3a13"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
9{9}
name: "get_client"
title: "Get client"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "2cf058660b5f8361957a3e460dbc755b1253bd7bbef02bfdc41c82b5fb0b3c9c"
input_schema_fingerprint: "a60e396b29dfffea41960537ca74b6d9e6c1c6b7ea5ed15d6ea44f81fd566005"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
10{9}
name: "get_form"
title: "Get form"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "95f2c66fcaf39b331cfd8b4647565ee5a56bb1015d51cb3c8eff1fa53c7756b9"
input_schema_fingerprint: "6c7df17cf7d96d58526ce4caa55a36e4352fe2243e076ff51d02b2e7e6ac20f2"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
11{9}
name: "get_project"
title: "Get project"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.779
risk_severity: "INFO"
fingerprint: "bad2d0198b41cfe995dfe1a1ba07dc5719133f2dbbad71cae20a47facfc6224f"
input_schema_fingerprint: "9bbc941b4789aeb6562abd628cad293498fb0c36100423d5c08e4998abe2cd83"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
12{9}
name: "get_snippet"
title: "Get form snippet"
effect: "READ"
effect_confidence: 0.879
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.8
risk_severity: "INFO"
fingerprint: "c8458c93118cd8ac9c763328a796f5b10294ee112d1456b27edaca49d6317e6d"
input_schema_fingerprint: "0a498a0c6e10ad70768eb4dc6ae5f6f6f928b36e3bf63b99085b1387af559569"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
13{9}
name: "get_submission"
title: "Get submission"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "2a420824e2167dfca03c5098aab3a922133b7d2ff8e0ed8428d6cad2db98abb8"
input_schema_fingerprint: "88a0cd68df6360d6ebc3ccb02bd99406d2b30cbbbb3d214b1fe16fbd75a91238"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
14{9}
name: "list_clients"
title: "List clients"
effect: "READ"
effect_confidence: 0.908
capabilities[1]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.577
risk_severity: "INFO"
fingerprint: "7903302a207714f5915ecf60d6b0ed8da503f0b9cfcd323e7cbd8faa1fb01ad3"
input_schema_fingerprint: "c13feaf65cf8c660eaf38e27ba5198ee5c4816ee5a0d5d00a7da982387ca7a93"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
15{9}
name: "list_forms"
title: "List forms"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.577
risk_severity: "INFO"
fingerprint: "cb60a2a8e4141a5800b7314a16fc89600b00923720177d2629611523caad65f5"
input_schema_fingerprint: "592c4c5e5ea718b4214933510296f5c1fe5497146249b0b8cd11e348b77a24ff"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
16{9}
name: "list_projects"
title: "List projects"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.577
risk_severity: "INFO"
fingerprint: "d708d51dab0994a00d4c4bd060bc0ac341973525fbbe68280e8793276fc944fa"
input_schema_fingerprint: "1a3fb992dcd71795952c985a7d53cb9487e3ac7bc0ba39a279a9debf3519a2fb"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
17{9}
name: "list_submissions"
title: "List submissions"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "ce29dd2ecce85c3ee8df4f9c713d7b9a5014917bdaf5f6433cf02ac34c25f65c"
input_schema_fingerprint: "dab8e585e10605c6d2e8865655793897bbcd7ca5e7b5d02b59013b449a5e6416"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
18{9}
name: "list_teams"
title: "List teams"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.724
risk_severity: "MEDIUM"
fingerprint: "21c95c9ffb89796fb00d3ae8f82f7657b32e0fa661a7546078aef010fee6dbcc"
input_schema_fingerprint: "93ab7499dc3c616f8db8780fed0d9f69270803cda913882ad2ef3943db8d7225"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
19{9}
name: "move_client"
title: "Move client to another team"
effect: "WRITE"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.601
risk_severity: "MEDIUM"
fingerprint: "6305c624b5c6a0cd461a999b69845e0a46c7c3da8455bc287ad3f47db612c67b"
input_schema_fingerprint: "e4781d6a28647800f31f4849b53d53bf05aebafdec61750fe87ddf95e77dc12d"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: null
20{9}
name: "rotate_project_inbox"
title: "Rotate project inbox link"
effect: "WRITE"
effect_confidence: 0.822
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.834
1{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "48606a47c82a0d8d31360fafd08ad548cf9e8dc3b81ba006898cd2f9c1885273"
input_schema_fingerprint: "9bbc941b4789aeb6562abd628cad293498fb0c36100423d5c08e4998abe2cd83"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: null
21{9}
name: "test_sms"
title: "Test SMS"
effect: "READ"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.91
risk_severity: "MEDIUM"
fingerprint: "d00cf6c3d2739597202f6f7961a242cd4b2ded513bdaf28e122b086939ce3d3a"
input_schema_fingerprint: "9bbc941b4789aeb6562abd628cad293498fb0c36100423d5c08e4998abe2cd83"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: false
openWorldHint: null
22{9}
name: "test_webhook"
title: "Test webhook"
effect: "WRITE"
effect_confidence: 0.533
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.901
risk_severity: "MEDIUM"
fingerprint: "9a151de79af113a6e935d259fe24b68c2e7192ed8076e4b1ed316bdce79acf84"
input_schema_fingerprint: "9bbc941b4789aeb6562abd628cad293498fb0c36100423d5c08e4998abe2cd83"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: false
openWorldHint: null
23{9}
name: "update_account"
title: "Update account"
effect: "WRITE"
effect_confidence: 0.917
capabilities[8]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.53
1{2}
capability: "AUTHENTICATION"
confidence: 0.661
2{2}
capability: "EMAIL"
confidence: 0.601
3{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.666
4{2}
capability: "MESSAGING"
confidence: 0.83
5{2}
capability: "PERSONAL_DATA"
confidence: 0.711
6{2}
capability: "SECRETS"
confidence: 0.661
7{2}
capability: "SECURITY_CONTROL"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "e2c70de958073cf922e615df0a182734712657c980229c3088cfa8fabaa7044e"
input_schema_fingerprint: "c702ccec2065385890dc99203f8dacba792a1052f95376ceaa125b9b8f1bd3b9"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: true
openWorldHint: null
24{9}
name: "update_client"
title: "Update client"
effect: "WRITE"
effect_confidence: 0.885
capabilities[0]
risk_severity: "LOW"
fingerprint: "86069f7681669e09208f42c5db8376014cf7e7680c240c73e54bd4b34e2a146b"
input_schema_fingerprint: "a1b9086ea8d384937bcaa111334e06406afbbf29e9df6cb9d278c620bd8b2993"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: true
openWorldHint: null
25{9}
name: "update_form"
title: "Update form"
effect: "WRITE"
effect_confidence: 0.902
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.887
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.773
2{2}
capability: "PERSONAL_DATA"
confidence: 0.859
3{2}
capability: "SOURCE_CODE"
confidence: 0.623
risk_severity: "MEDIUM"
fingerprint: "74908815367282a6c3fdcae9054aabd3737d7ad20d618e137d31808b7aa57b09"
input_schema_fingerprint: "a94522d809cb56010a0ccb1113cc4541b94044bdc6442fa6ab85790fd7106eec"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: true
openWorldHint: null
26{9}
name: "update_project"
title: "Update project"
effect: "WRITE"
effect_confidence: 0.917
capabilities[8]
0{2}
capability: "AUTHENTICATION"
confidence: 0.577
1{2}
capability: "EMAIL"
confidence: 0.927
2{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.882
3{2}
capability: "FILE_ACCESS"
confidence: 0.666
4{2}
capability: "MESSAGING"
confidence: 0.539
5{2}
capability: "PERSONAL_DATA"
confidence: 0.913
6{2}
capability: "SECRETS"
confidence: 0.695
7{2}
capability: "SECURITY_CONTROL"
confidence: 0.783
risk_severity: "HIGH"
fingerprint: "b01572a53a624d7c88c014b921593dd0c7dd83d08f1d378a6173b656d1e2276c"
input_schema_fingerprint: "4de15aed3c5454bbd5c946a6309f56d68fcbd63cbd94159e96e0323053dd1d4f"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: true
openWorldHint: null
27{9}
name: "update_team"
title: "Update team"
effect: "WRITE"
effect_confidence: 0.902
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.586
1{2}
capability: "MESSAGING"
confidence: 0.88
risk_severity: "MEDIUM"
fingerprint: "9613252f02250d6f8068d900c50001d8c9ade36ae7ed191ef7c9d7ac376c0ad7"
input_schema_fingerprint: "a103f750c41300d5481bf79fbdd8d7c05da8c059fe12776f78e5cab17db79c46"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: true
openWorldHint: null
28{9}
name: "upsert_project_webhook"
title: "Upsert project webhook"
effect: "WRITE"
effect_confidence: 0.944
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.963
1{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "b60e45217696126f1ef0b62782559b5a10c3a68232e7db3386e8951cbf3ad176"
input_schema_fingerprint: "2a7fa1e871a41a27acd4ac1b4375c83a9b4029c28f182dccf9796fe511297a8e"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: true
openWorldHint: null
resources[9]
0{4}
key: "furrow://docs/file-uploads"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "e12d05bb4dadb64354667a6dd9ae63d482d7d599444269a42dd51c12bb72aa20"
1{4}
key: "furrow://docs/multi-value-fields"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "235eb4eff0f335f5f57439f70d71e982bced00aa89bbb73bfc3430547f30d4a8"
2{4}
key: "furrow://docs/register"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "db6d4d7d3915251b6a823ebe0ffd1976427ff061284bccceb6df8d08fd5c8a22"
3{4}
key: "furrow://docs/reserved-fields"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "156c849581f4fdc0e9d1e7ba612ad46ef862349ab61bea8e25ee04c165ec362e"
4{4}
key: "furrow://docs/submit-success"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "54134d0274cdb1be49f9be7ec12a070ea7170684e0c78d2da98b8eeec87c2697"
5{4}
key: "furrow://docs/testing"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "77e5cdfd2d4ead12eb31fada40ac66078ccc976ec4c64eafb9d48b5f75af82a9"
6{4}
key: "furrow://docs/text-alerts"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "72418c3a395a9330696ed1625dd6593d9368f9931976dae1f472d4e37a55c9b1"
7{4}
key: "furrow://docs/workflow"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "2641bff4f3867044117df83cb8b3aa37c680acf893747ca7a457415704150c14"
8{4}
key: "furrow://projects/{id}"
kind: "template"
mime_type: "application/json"
fingerprint: "7880bd0c7fef91506c8bbb914193a9793856d21d9ce5df1085167d6dea95b68a"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.furrowforms.com"
registrable_domain: "furrowforms.com"
source: "transport"
findings[16]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "CRITICAL"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "bootstrap_site"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "bootstrap_site"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "create_project"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "create_project"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "update_account"
8{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "update_project"
9{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "update_project"
10{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "upsert_project_webhook"
11{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "create_form"
12{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "get_snippet"
13{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "update_form"
14{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "bootstrap_site"
15{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "get_snippet"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.furrowforms/furrow-forms"
registry_content_sha256: "343a7e92ba993fbb597aac84c9562a18712710c7b295477d2672e833c01f3fba"
scan_snapshot_fingerprint: "fdc04e2b0349e37fa3d750881a3b7dc7c110f2289374781b4152ac816bdaffba"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T19:58:27.229Z"
observed_at: "2026-11-14T05:01:41.274+00:00"
registry_published_at: "2026-08-26T20:10:18.479191+00:00"
registry_updated_at: null