MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/0a7d33c5-71ac-4294-9883-4cffe775ce5f/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.goodailabs/arrakis"
title: "Arrakis"
description: "Rent GPUs at live prices and serve any Hugging Face model, with spend caps for AI agents."
version: "0.1.0"
homepage_url: "https://arrakis.goodailabs.com/agents"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.goodailabs"
display_name: "com.goodailabs"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://arrakis.goodailabs.com/mcp"
endpoint_host: "arrakis.goodailabs.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[16]
0{9}
name: "deploy_model"
title: "Deploy a Hugging Face model"
effect: "WRITE"
effect_confidence: 0.79
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.53
1{2}
capability: "PERSONAL_DATA"
confidence: 0.567
2{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "eb707761a1e03c1f384680be15899dcc751104139ec5744bfb43717818fec599"
input_schema_fingerprint: "5f7d1a72f112d79c81bac2b298bea298c971eaf090b5229e283547a89b1be6b2"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "get_balance"
title: "Balance and spend cap"
effect: "READ"
effect_confidence: 0.72
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.675
risk_severity: "LOW"
fingerprint: "e6e1121c3c8bfefaa9579e569a2bd3202240e0890c1c76dee13ca583603b13d0"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
2{9}
name: "get_events"
title: "What happened to my machines"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "a1759a1464222980e4759a3996bb768dd1b2bd9f3f7854bd7e4abac018dc60f6"
input_schema_fingerprint: "78554811dcfd2e9d70a40a92f17a85b8d10356b1f91a55835f38e19c4521eb93"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
3{9}
name: "get_instance"
title: "Get an instance"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "d20a5c1ca93d7dc2d5d0097be4e788e09a51d4b65d3f7c7ef4efa2f96a8a1c7d"
input_schema_fingerprint: "add3b6ac66639c41de8421af013ab654acbf307bf46b5000855667ef739e53c1"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
4{9}
name: "get_market_summary"
title: "Market summary"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "INFO"
fingerprint: "11a76c6feaf9348d5802dad5cd042e6094490de88d18bb21cab3afc8954447b4"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
5{9}
name: "get_partner_earnings"
title: "Partner codes and earnings"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "PAYMENT"
confidence: 0.567
1{2}
capability: "PERSONAL_DATA"
confidence: 0.64
risk_severity: "LOW"
fingerprint: "ca86f814299edd5de25dca29aaf22f502cda90eed1df27e9bb2a07a12d8cd17a"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
6{9}
name: "instance_ssh_keys"
title: "SSH keys on a machine"
effect: "EXECUTE"
effect_confidence: 0.7
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.632
1{2}
capability: "SECRETS"
confidence: 0.91
risk_severity: "HIGH"
fingerprint: "0df6e6c7fe6cd1bcb774db004c0862cc0ff3716f877281b980f62a7e3e417af1"
input_schema_fingerprint: "7ad0174e7f177748a51d7f816ab1e498f88ab21f3e7f460a5c5cde7da7b07f1d"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
7{9}
name: "join_partner_program"
title: "Join the partner program"
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "LOW"
fingerprint: "1e18d596a4e334851b30a500e71dab05769958dfe891852472a96a48270dde8a"
input_schema_fingerprint: "03aa6cd5e9e26ec8e34d92de24617ed8f6ca3798436e0171cd6cfb7939cd11f8"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
8{9}
name: "list_images"
title: "List images"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "82b5a4e5734a543d817f4c3b1c5579d5355700d1049225ba5a2f02ac49a8dbf7"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
9{9}
name: "list_instances"
title: "List instances"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "acd5d972caec6ffc4e6f606d0393b12c2f6467cd9330b7307946b8cacfed4c1d"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
10{9}
name: "list_ssh_keys"
title: "List saved SSH keys"
effect: "EXECUTE"
effect_confidence: 0.603
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.894
risk_severity: "HIGH"
fingerprint: "cb61148808a4ff5bc0db3e92cdbd25699db32d3dd8bc146fc20a0320d1e24583"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
11{9}
name: "plan_deploy"
title: "Plan a model deploy (free)"
effect: "READ"
effect_confidence: 0.878
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "81435aeeb400147512af9b7b02baba5ab0378feb60da9768a2037d5cf848e0a4"
input_schema_fingerprint: "61b5779ff0d15dab4e9741183abf7c857b7b6fe32d985473abc74c3f9de1fb8f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
12{9}
name: "rent_gpu"
title: "Rent a GPU machine"
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.53
risk_severity: "LOW"
fingerprint: "80bba84672ccba7f566129ab90e824a508b4afcd39989570e7754fd0eb16f375"
input_schema_fingerprint: "b903291cd04d40245acba47f788102e4e022f9027003d1f05d249a154793d177"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
13{9}
name: "schedule_removal"
title: "Schedule removal"
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "LOW"
fingerprint: "c3d67024bac853a5a44cb7a5a11f781ba030e9bd49341cd9ca6feb4051544599"
input_schema_fingerprint: "de189b7c8a05ce940b55cea3eef04556ea3f214e2176b5f18c89950adc2f85da"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
14{9}
name: "search_gpus"
title: "Search GPUs"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "054c95357c247724bf43db2b1969954cf71b89634c8a5926340e9b5d3304cde9"
input_schema_fingerprint: "05972ba4c3a4a37c41a5d4e3bf6208f27d5eeea4b586e2e05bba053517046217"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
15{9}
name: "terminate_instance"
title: "Terminate an instance"
effect: "DELETE"
effect_confidence: 0.866
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "9d0ae9e1697652e1c0a07ea63ea01dbb0eaf1e30b491d3c62485d82517e169ab"
input_schema_fingerprint: "add3b6ac66639c41de8421af013ab654acbf307bf46b5000855667ef739e53c1"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "arrakis.goodailabs.com"
registrable_domain: "goodailabs.com"
source: "transport"
findings[9]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "list_ssh_keys"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "deploy_model"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "plan_deploy"
5{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "instance_ssh_keys"
6{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "rent_gpu"
7{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "rent_gpu"
8{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "list_ssh_keys"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.goodailabs/arrakis"
registry_content_sha256: "4e423c55e720b32057a9f84f9847e53b195b069277a50c7a864af6658acd1023"
scan_snapshot_fingerprint: "dc95000342ec8bda3108f63fbc4bbbd4172e2d5649652b8149f38a775933fb96"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:57:54.714Z"
observed_at: "2026-11-08T20:39:01.576+00:00"
registry_published_at: "2026-10-31T05:42:44.133622+00:00"
registry_updated_at: null