Galactic Bridge: sourcing and delivery to Africa
com.galacticbridge/sourcing
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/b7750b95-ea45-4f4d-820f-f330e4202999/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.galacticbridge/sourcing"
title: "Galactic Bridge: sourcing and delivery to Africa"
description: "Delivered-cost estimates with import taxes, sourcing requests, tracking and supplier applications."
version: "1.0.0"
homepage_url: "https://galacticbridge.com/agents/"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.galacticbridge"
display_name: "com.galacticbridge"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://galacticbridge.com/mcp"
endpoint_host: "galacticbridge.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-06-18"
supported_versions[0]
transport_type: "streamable-http"
tools[9]
0{9}
name: "apply_as_supplier"
title: "Apply as a supplier or logistics partner"
effect: "WRITE"
effect_confidence: 0.898
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.582
1{2}
capability: "PERSONAL_DATA"
confidence: 0.713
risk_severity: "MEDIUM"
fingerprint: "570ad705f9bc3419f5331afb5b44971b8ad756ad6dfe41ba90f474b1ecfc8483"
input_schema_fingerprint: "5344efdfc652a671a1ed88c468d9dd175e1f55306ef2a37233b3e9df1fda00fe"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
1{9}
name: "classify_product"
title: "Tariff code and import rules (Uganda)"
effect: "READ"
effect_confidence: 0.846
capabilities[0]
risk_severity: "INFO"
fingerprint: "fa77a8b862beced57c1671a78c07380468b6282df8b39e5aeb148fe0d600b9c3"
input_schema_fingerprint: "cebac53ce031241c7fe17dac896436e4060a4a5806d107f63f245ebab2288b2b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "create_payment_link"
title: "Secure payment link (card / mobile money)"
effect: "WRITE"
effect_confidence: 0.836
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.97
risk_severity: "MEDIUM"
fingerprint: "850e6678e9eb2cde415ffff7835ad5aba5d1a34b2c4659ffac01c3c6589a54fc"
input_schema_fingerprint: "97e2e04c71d51805920b76f9676217da8facbe8f3a274eaa6bd672ec9c01550d"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
3{9}
name: "estimate_delivered_cost"
title: "Delivered-cost estimate to Uganda"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "b6a2b44b7015d3c22c314155abadb155636214d3555fd0cd2f801e6a265a1c8f"
input_schema_fingerprint: "8d7624b4ff6f2217be21fdf2fba14b3c18eff42ad1414324724ea92bd5badbe3"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "get_payment_options"
title: "How to pay for a request"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.834
risk_severity: "MEDIUM"
fingerprint: "19f9136e5bc40e2d669f30ff59fe1aaa0dc83f92534539f92dcaf44398babd35"
input_schema_fingerprint: "64d6b82567c5463ba09d34c493bbfd91509c99d42c42bbb5385641006789d47d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "get_service_info"
title: "What Galactic Bridge does"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "INFO"
fingerprint: "490ab71fb40d6b4647ef75577b7d9a5405d02f3f673ca5ab094f12017ad5fb53"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "list_routes"
title: "Routes and their status"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.805
risk_severity: "LOW"
fingerprint: "f99e017c014ba85e2b74b30071770a8ade99705ba73ed101571d6b19edfb0acd"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "submit_sourcing_request"
title: "Submit a sourcing request for a person"
effect: "WRITE"
effect_confidence: 0.917
capabilities[3]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.539
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.61
2{2}
capability: "PERSONAL_DATA"
confidence: 0.957
risk_severity: "HIGH"
fingerprint: "ebda7fd655bd5e8a1c69470110d2b848c8fa5ec5ef8d897d78c6f441a0e32c10"
input_schema_fingerprint: "ed6389b037990665da65cadb46ef0a0c1aca18bf8a9f8777be9cff9fd936c97b"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
8{9}
name: "track_request"
title: "Status of a request"
effect: "WRITE"
effect_confidence: 0.65
capabilities[2]
0{2}
capability: "LOCATION"
confidence: 0.5
1{2}
capability: "SECRETS"
confidence: 0.669
risk_severity: "HIGH"
fingerprint: "1281d340df50bb1dbcf29fb2ac81946013c3e09a4791084687749942284b86ea"
input_schema_fingerprint: "64d6b82567c5463ba09d34c493bbfd91509c99d42c42bbb5385641006789d47d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "galacticbridge.com"
registrable_domain: "galacticbridge.com"
source: "transport"
findings[10]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "track_request"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "create_payment_link"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_payment_options"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "track_request"
7{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "create_payment_link"
8{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "get_payment_options"
9{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "track_request"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.galacticbridge/sourcing"
registry_content_sha256: "552f9246cd67cae108ab7d5539c97bded45f65efba65446a217161dfa052378e"
scan_snapshot_fingerprint: "03c7f132e00cd065c0ecea3c6a79b5b64cf8eb319d90b3b54d74cc956c2855e9"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T13:56:59.777Z"
observed_at: "2026-11-14T11:46:35.139+00:00"
registry_published_at: "2026-11-14T10:05:52.327529+00:00"
registry_updated_at: null