MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/4714dda4-999f-482c-bc61-e79b484acd1f/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.giftroam/giftroam"
title: null
description: "Send real gifts to 190+ countries: search, check delivery, get a secure checkout link."
version: "0.3.0"
homepage_url: "https://giftroam.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.giftroam"
display_name: "com.giftroam"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.giftroam.com/mcp"
endpoint_host: "mcp.giftroam.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[6]
0{9}
name: "check_delivery"
title: "Check delivery feasibility"
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.641
risk_severity: "LOW"
fingerprint: "fa673458d5666fd169391044062b5228079c732e01bb8c9ccff9c27b96747a82"
input_schema_fingerprint: "e986855dfdf993c0137cdbcdcb0478edb628e29c6e6b1b70e5050c7c80ae76b1"
annotations{5}
title: "Check delivery feasibility"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "create_checkout"
title: "Create a checkout link"
effect: "WRITE"
effect_confidence: 0.885
capabilities[3]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.669
1{2}
capability: "PAYMENT"
confidence: 0.94
2{2}
capability: "PERSONAL_DATA"
confidence: 0.624
risk_severity: "HIGH"
fingerprint: "74aabd77eb96c189cb14cc92e8ff6ffb41d635bb44dd6207db79a8711fa1a515"
input_schema_fingerprint: "67100186a036011d35e2f9574d4e14bb2e8f43a0ff6234b9e61d54079c76a433"
annotations{5}
title: "Create a checkout link"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
2{9}
name: "get_gift_details"
title: "Get gift details"
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.61
risk_severity: "LOW"
fingerprint: "07642c90ff21611bb5e00cee7356a52d428982ed82c59bbf42fad52dcaf41e52"
input_schema_fingerprint: "45ede606e6302e82a21630cf778a56b9ccd4c3a9579caff15ae89f8be2a1265b"
annotations{5}
title: "Get gift details"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "get_order_status"
title: "Get order status"
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.592
risk_severity: "MEDIUM"
fingerprint: "63e9f7820a8e7fcfaa7455c430f795441205898e239bebb79156144013ad76ab"
input_schema_fingerprint: "7b013f4c451753ceb7e1ce42dff74b3b995d1c21055fa0e889f325df701c5665"
annotations{5}
title: "Get order status"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "list_my_orders"
title: "List my orders (signed-in)"
effect: "READ"
effect_confidence: 0.857
capabilities[2]
0{2}
capability: "LOCATION"
confidence: 0.64
1{2}
capability: "PERSONAL_DATA"
confidence: 0.653
risk_severity: "LOW"
fingerprint: "699898194da2e62e78c5f0a19d490a669cbf74375a5910af0172339d3ecb32df"
input_schema_fingerprint: "67b242ab1268754379e5d6b28242433285ca5104edc2c6cde02c5ed1426121ec"
annotations{5}
title: "List my orders (signed-in)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "search_gifts"
title: "Search gifts deliverable to a country"
effect: "READ"
effect_confidence: 0.933
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.681
risk_severity: "LOW"
fingerprint: "f7ddac3189dcc031a04ca1e7bbac0edea22f11f53b72bffe4e6c2c06e78040e9"
input_schema_fingerprint: "22be8a743ed56b9b557a733f9ae0b788fdce9995a21b9946224fafe665f8c041"
annotations{5}
title: "Search gifts deliverable to a country"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[10]
0{4}
key: "giftroam://countries"
kind: "resource"
mime_type: "application/json"
fingerprint: "4dd5b6421747759efaabf72db75bbf5001c3e9722c747d484f3d38239333b694"
1{4}
key: "giftroam://occasions"
kind: "resource"
mime_type: "application/json"
fingerprint: "69fb54b90f36f4282502a9d7fb2a33cf5c04838b77fe234ad7bb65bcaa121bf7"
2{4}
key: "ui://giftroam/app.html@v1"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "db5ce6f32cbb1a82e17808c7c821e111e928549ddb0b9f4b962d3c17ca95283f"
3{4}
key: "ui://giftroam/app.html@v2"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "569580325201c1101cfb9b1786c5072a9edd7879d362c6466007c21f4d84ca60"
4{4}
key: "ui://giftroam/app.html@v3"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "36750674b1e7b117ef0765696819746d55464eb5f8fa5b067629608fb0a1f33d"
5{4}
key: "ui://giftroam/app.html@v4"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "e78875b8ecc7eb14f91482b255b196fac8048df69ab9ffdc547a459afa1ce827"
6{4}
key: "ui://giftroam/app.html@v5"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "c8c2f274e75875f1559295add8f2a710f97ffd15441f3c9d0dfcf343c60499e2"
7{4}
key: "ui://giftroam/app.html@v6"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "a45dcaef902cb971b5c053e47cb727c239d524124e600b4f06645aa584842a8b"
8{4}
key: "ui://giftroam/app.html@v7"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "ee9aad7eb1d4cfaad289285fb4d380133326378a1956579e7e15bea899d55ee9"
9{4}
key: "ui://giftroam/app.html@v8"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "5fdefaec4e463d32b50f898e7b10471a439cae49d3cad6114cf11d89c815dc19"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/ui"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.giftroam.com"
registrable_domain: "giftroam.com"
source: "transport"
findings[3]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_order_status"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.giftroam/giftroam"
registry_content_sha256: "a19ff6ce50d005726488e8e4e4d79cbcfc2edca591b00390290af7ea68b8e19f"
scan_snapshot_fingerprint: "925818cf4278c32c9e099f20d8289338772773f3dcc9528f6503a8a8b6d42d90"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:47:00.972Z"
observed_at: "2026-11-14T05:39:59.903+00:00"
registry_published_at: "2026-08-21T18:13:14.968829+00:00"
registry_updated_at: null