MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/77833356-d51d-4b89-b211-8c51662ef84d/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.glpwinner/glp-winner"
title: "GLP Winner"
description: "Compare US GLP-1 telehealth prices, coupons, reviews, and compounding pharmacies."
version: "1.3.3"
homepage_url: "https://www.glpwinner.com/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.glpwinner"
display_name: "com.glpwinner"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://www.glpwinner.com/api/mcp"
endpoint_host: "www.glpwinner.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[8]
0{9}
name: "compare_glp1_providers"
title: "Compare providers side by side"
effect: "READ"
effect_confidence: 0.908
capabilities[2]
0{2}
capability: "PAYMENT"
confidence: 0.687
1{2}
capability: "PERSONAL_DATA"
confidence: 0.718
risk_severity: "LOW"
fingerprint: "699a2f064a5a77322caedadbc64f5889047b06e125d4ae7464932d33233d0db0"
input_schema_fingerprint: "579c0ed64c92913b80e813c025c497fdf99242dd9347ad646161457e6d66e883"
annotations{5}
title: "Compare providers side by side"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "find_glp1_provider_or_pharmacy"
title: "Find a provider or pharmacy by name"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "HEALTH"
confidence: 0.675
1{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.675
risk_severity: "MEDIUM"
fingerprint: "bdb77c9ff452cffcf099d982684fdcf9a7b5977ed61bd32e47e0df9e7155e22d"
input_schema_fingerprint: "a8af547dabc737eb291521086a2f1228c6ed82a63ac9e06c06c9d4df697ad083"
annotations{5}
title: "Find a provider or pharmacy by name"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_glp1_pharmacy"
title: "Get a compounding pharmacy’s profile"
effect: "READ"
effect_confidence: 0.908
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.641
risk_severity: "LOW"
fingerprint: "0b1459d18b70c0fbce9197b9a5ec3fa85a4de54a4f8de6cf4f5bc3d93dc6e991"
input_schema_fingerprint: "151500c4e0f235d9458a142dfd54566b03aaf3fda655536daf48232ee8bc15fd"
annotations{5}
title: "Get a compounding pharmacy’s profile"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "get_glp1_provider"
title: "Get a GLP-1 provider’s details"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "PAYMENT"
confidence: 0.632
1{2}
capability: "PERSONAL_DATA"
confidence: 0.831
risk_severity: "LOW"
fingerprint: "6d689c28f9baaa500fe29e284d53d848b642fe8773d9c1e23a3530afbdf490c3"
input_schema_fingerprint: "0a72c1c8432c0d62fbcab4406544be1d821915f0759a8a61eb6c8824084e5f76"
annotations{5}
title: "Get a GLP-1 provider’s details"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "get_glp1_reviews"
title: "Read what reviewers say"
effect: "WRITE"
effect_confidence: 0.603
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.718
risk_severity: "LOW"
fingerprint: "a25abe8bbca59ab7b14cf0fb5e7aa765aa11c3655acb51d0631953f2d0dcefc9"
input_schema_fingerprint: "13b3159b6d496ff5cd955de81fec1455d64dac10dc18491abac79396118f6c62"
annotations{5}
title: "Read what reviewers say"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "get_glp1_signup_link"
title: "Get a sign-up link"
effect: "EXECUTE"
effect_confidence: 0.533
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.834
1{2}
capability: "PERSONAL_DATA"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "8186b0d577c1a49fc77cbfa2bb9dd75165c710ecf0ccb1425fc45e374cc5f367"
input_schema_fingerprint: "df5d4fa6cde5e58b97aaef21c83a30123988b814f116aa4fdf2865eae8af3ef2"
annotations{5}
title: "Get a sign-up link"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
6{9}
name: "search_glp1_providers"
title: "Search GLP-1 providers"
effect: "READ"
effect_confidence: 0.921
capabilities[3]
0{2}
capability: "HEALTH"
confidence: 0.823
1{2}
capability: "PERSONAL_DATA"
confidence: 0.661
2{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.823
risk_severity: "MEDIUM"
fingerprint: "80392f392171966be7f9164c423db9f9bb2d218281808967c07b5d0d57756f58"
input_schema_fingerprint: "45260e099c3cfe21a1d01381b5d2560e81351a98bd4f19a6711f968a65352b7b"
annotations{5}
title: "Search GLP-1 providers"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "search_glp1_reviews"
title: "Search review text"
effect: "READ"
effect_confidence: 0.933
capabilities[0]
risk_severity: "INFO"
fingerprint: "23ec7ff7ca2173a62ea13e58490e8ac7a3793812e9670285163220e59db0462d"
input_schema_fingerprint: "2e5c1c23f4ab58673e9d26485be6b7e3c044be80fdc8d80baa2b783b4d151296"
annotations{5}
title: "Search review text"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "www.glpwinner.com"
registrable_domain: "glpwinner.com"
source: "transport"
findings[5]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "get_glp1_reviews"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "get_glp1_signup_link"
4{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "get_glp1_signup_link"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.glpwinner/glp-winner"
registry_content_sha256: "e378806c74ede8626e69ee346d464c72c811e847863bbd36388c637dcf8cd81b"
scan_snapshot_fingerprint: "a98cb2b7234c72b145023bd36bf248f01f796e107021e3f8306a23aed61c9bc0"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:54:09.625Z"
observed_at: "2026-11-14T01:32:43.923+00:00"
registry_published_at: "2026-11-13T20:24:39.714481+00:00"
registry_updated_at: null