MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/d485847b-34ee-44f5-913e-64c85867fc75/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.getleal/leal"
title: "Leal"
description: "Design and launch Apple Wallet and Google Wallet loyalty stamp cards for your shop, café or salon."
version: "1.0.0"
homepage_url: "https://www.getleal.com/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.getleal"
display_name: "com.getleal"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.getleal.com/mcp"
endpoint_host: "mcp.getleal.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[15]
0{9}
name: "create_card"
title: "Create a loyalty card"
effect: "WRITE"
effect_confidence: 0.917
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.773
1{2}
capability: "PERSONAL_DATA"
confidence: 0.837
risk_severity: "MEDIUM"
fingerprint: "ee78040202ee047b9d2f2a630f962339dafb06831f66b0d9b6decd3f5638a088"
input_schema_fingerprint: "f92e4140d48d58e8c2a947242afc84c1a6fc048945ec03d9aeb964b37eae389d"
annotations{5}
title: "Create a loyalty card"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
1{9}
name: "create_location"
title: "Add a store location"
effect: "WRITE"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.834
risk_severity: "LOW"
fingerprint: "d3f34c78c6e1f2e2ed14e72f6f9c5c975a423445d1938df170b80db4dfbf0e2e"
input_schema_fingerprint: "a3223ecfbe351d0f49172a1ff1fba2aa446ab559796c838e89774f6b94e82b70"
annotations{5}
title: "Add a store location"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
2{9}
name: "create_poster"
title: "Create a signup poster"
effect: "WRITE"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.53
risk_severity: "LOW"
fingerprint: "000b20a74e6cf7d94404fbeb67d3cde48e44e0d6dada63696e866fbdc8c7adec"
input_schema_fingerprint: "d986e1eacdf8a6e929e52a147b0a09ab6cfc1750e82bbc6821483c120e83022e"
annotations{5}
title: "Create a signup poster"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
3{9}
name: "create_reward"
title: "Add a reward to a card"
effect: "WRITE"
effect_confidence: 0.885
capabilities[0]
risk_severity: "LOW"
fingerprint: "7dac348370308f9d49fb7dbb5e91144853b5ccd7c311d11a2a402c578b2177df"
input_schema_fingerprint: "e46bc132df8fa46979ae98ab794fa44f3df66791d0ea42af22b12446ae150bf8"
annotations{5}
title: "Add a reward to a card"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
4{9}
name: "create_store"
title: "Create a store"
effect: "WRITE"
effect_confidence: 0.848
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.567
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.607
risk_severity: "MEDIUM"
fingerprint: "76602a47cc764ed6484288d669293fa63916e5c977370032873f5e3fefd39dbe"
input_schema_fingerprint: "4e30ddaf5e6edcd8575067d6ad7061b344b42a3f9e8e99a0ecfe0433e225c24c"
annotations{5}
title: "Create a store"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
5{9}
name: "get_brand_kit"
title: "Get brand kit from a website"
effect: "READ"
effect_confidence: 0.933
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.53
risk_severity: "INFO"
fingerprint: "0cc37aaa51459e47adf3324281e0f96718610a0633c2294a8958a87f490f39fa"
input_schema_fingerprint: "e743af8af0a44eae4dbf7fbad578376160f49cfbd9adc7de2c58ce190019ec97"
annotations{5}
title: "Get brand kit from a website"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
6{9}
name: "get_card"
title: "Show a loyalty card"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "4e9c6bc98030fd695beed2d748497553f8b15626271450c81236879086b34555"
input_schema_fingerprint: "6e2c209a405522b3bdeae14fbf7ae3c5d5214fd2b3dfff1162d3905629d35449"
annotations{5}
title: "Show a loyalty card"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "get_store_setup"
title: "Get store setup"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "c2985583683b3f64956c5bbaef9d18068fd5d99501e7020f1560c5161ebaadce"
input_schema_fingerprint: "36cec8d096593f2b1e3f05d141509e747743fafcb58d756e4fe6ea6ea523096d"
annotations{5}
title: "Get store setup"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "list_cards"
title: "List loyalty cards"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "bd93e3c81a01abc1f8493f8008776a6f42563b3f323c4fdf475f2662b78815d1"
input_schema_fingerprint: "d056898aa2bff2d2355bd9c6cc60621156b84b8f39017203468ed6441c38e75d"
annotations{5}
title: "List loyalty cards"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "list_design_options"
title: "List card design options"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "9d5adc8a48d6c519401b8644b362e6c7805db0b1267c1460bfcdced5b8e59c42"
input_schema_fingerprint: "93ab7499dc3c616f8db8780fed0d9f69270803cda913882ad2ef3943db8d7225"
annotations{5}
title: "List card design options"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "list_stores"
title: "List stores"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "d15aa22fe5b44225b66dd5e098fea61f47cedbbead1c53eae8fe7fe6e7b5b940"
input_schema_fingerprint: "93ab7499dc3c616f8db8780fed0d9f69270803cda913882ad2ef3943db8d7225"
annotations{5}
title: "List stores"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "preview_card_designs"
title: "Preview loyalty card designs"
effect: "READ"
effect_confidence: 0.943
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.773
1{2}
capability: "PERSONAL_DATA"
confidence: 0.774
risk_severity: "LOW"
fingerprint: "207c57c0927be9534010cfdc69585ba89a1c5e310ee21e890edf1d4969f0bc2b"
input_schema_fingerprint: "2f603a8a71208b59ddcd1e7523559cc4db5b906e2e8b47a294cfb4e3f84a6b14"
annotations{5}
title: "Preview loyalty card designs"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
12{9}
name: "update_card"
title: "Update a loyalty card"
effect: "WRITE"
effect_confidence: 0.902
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.773
1{2}
capability: "PERSONAL_DATA"
confidence: 0.679
risk_severity: "MEDIUM"
fingerprint: "2536a3a55d0ee046086c3b2b79ee1665792ca04090601d569bc394b990f711ed"
input_schema_fingerprint: "326b59f1ccb4773b1cc5d087594a01861e27d7e070d6035995560011ecc97e6e"
annotations{5}
title: "Update a loyalty card"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
13{9}
name: "update_reward"
title: "Update a reward"
effect: "WRITE"
effect_confidence: 0.885
capabilities[0]
risk_severity: "LOW"
fingerprint: "ae16e345322709463b5f776d26152a7442455448d61893636c686e6ff7ceacdf"
input_schema_fingerprint: "e550548cba034c526009f25e98184d8692d09e0d4d36f3c2cde22b5f9d206ad9"
annotations{5}
title: "Update a reward"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
14{9}
name: "update_store"
title: "Update store name and logo"
effect: "WRITE"
effect_confidence: 0.835
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.607
risk_severity: "MEDIUM"
fingerprint: "540eafda3a002f48dfe72502d8c7b27e5ccb234df243d201f9f26d82f6e34173"
input_schema_fingerprint: "d713fa97cf35b052ec41b53eb5b808944e439e68d1cee77850fefadf17783399"
annotations{5}
title: "Update store name and logo"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
resources[1]
0{4}
key: "ui://leal/card-preview-v1.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "d786a7c5a61fe971f309df1e5fc992a67db121e192067dfbd1dc6d6fe570a879"
prompts[2]
0{2}
name: "design_card_from_website"
fingerprint: "3f59edde881f83268a601b86b8d42f137867c9010ca23f6a5bc0b206f8aac3d2"
1{2}
name: "setup_loyalty_program"
fingerprint: "9a2d60f9e78504c331e605d4709d72feb88655c5c13f45274927c6617edfb673"
extensions[1]
0: "io.modelcontextprotocol/ui"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.getleal.com"
registrable_domain: "getleal.com"
source: "transport"
findings[6]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "create_card"
4{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "preview_card_designs"
5{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "update_card"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.getleal/leal"
registry_content_sha256: "32056c1150370ed173c117ebf74a38ee5c707a3b235a97fad1ffdfa343116c0e"
scan_snapshot_fingerprint: "f8be8be4e33fe10883762bbe800f98ce5d73dcb848d278f3d697960d42ce3fd6"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:55:18.373Z"
observed_at: "2026-11-07T15:05:45.5+00:00"
registry_published_at: "2026-10-28T13:16:41.798718+00:00"
registry_updated_at: null