MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/86878192-1784-4ca8-b879-bff3d156680d/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.grabbitapp/grabblist"
title: "Grabblist"
description: "Save and organize web finds in persistent, user-controlled collections for AI assistants."
version: "2.2.1"
homepage_url: "https://grabbitapp.com/docs/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.grabbitapp"
display_name: "com.grabbitapp"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.grabbitapp.com/api/mcp"
endpoint_host: "mcp.grabbitapp.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[22]
0{9}
name: "add_item"
title: null
effect: "WRITE"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.779
risk_severity: "MEDIUM"
fingerprint: "6a72a35f61b205e415b30c4bb97883e190fce1c38bb3caddb4dadb29e117b3d3"
input_schema_fingerprint: "45abb1f27cc4cbf9dc7bc7639a7c40435bb3836b754663ec8a1ce37a890965e5"
annotations{5}
title: "Add Item"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
1{9}
name: "add_to_collection"
title: null
effect: "ADMIN"
effect_confidence: 0.65
capabilities[0]
risk_severity: "INFO"
fingerprint: "365820bad9db517448bad29a0f0f30c7c089030c7f553d6c5438040391c3b82a"
input_schema_fingerprint: "0bb5f24ad01f620a720a8ee947f8e0e5e73abea625e2adf99f25db43c482d4ea"
annotations{5}
title: "Add to Collection"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "create_collection"
title: null
effect: "WRITE"
effect_confidence: 0.885
capabilities[0]
risk_severity: "LOW"
fingerprint: "ef83b93aae8303f7dc3119012c5286b799f4fd86fb75cb8e56ef1a051dc6a8c5"
input_schema_fingerprint: "8ee99ba6641b38f9414db65418bac04bbae1c0f492a7db2b8977f3812d5fb957"
annotations{5}
title: "Create Collection"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
3{9}
name: "delete_collection"
title: null
effect: "DELETE"
effect_confidence: 0.913
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "1273d631bdf03efa4767cf49006c17d1b1de72773f5dc337677528425bc76bbb"
input_schema_fingerprint: "137cc2ede7ee3ff43fccbbd31f581551d74de2ea9b19d703346652b5c1e60dfa"
annotations{5}
title: "Delete Collection"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
4{9}
name: "delete_item"
title: null
effect: "DELETE"
effect_confidence: 0.843
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "7e3bbffbb6c457d2850d28d1d7a0cbc622995ba2210c56cac86eb001faa0503b"
input_schema_fingerprint: "631982ff7b86c2a479019bca69142964be9f5073ea08e63c732442ed2c039a37"
annotations{5}
title: "Delete Item"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
5{9}
name: "get_collection_activity"
title: null
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "fe8431d46a851124a8c80e6e2c03ff2d8f855dd0950108376b9e2df1702fb79c"
input_schema_fingerprint: "73c7ffa09cfb8e454322d2eb6e2bb26817343ba05d99894fc02d33eee53c7c84"
annotations{5}
title: "Get Collection Activity"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "get_item"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "dd9c7c011404a7a4e2e03fd10b8ddc90aa7dfcd060f0fc510cd98aff4bf0ed40"
input_schema_fingerprint: "877c0cce319c3dd768fc974b625e6437ffaf40b6c3670ce5b8827284a34d55d3"
annotations{5}
title: "Get Item"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "get_item_graph"
title: null
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "b594ea9a9c1f1667b2d44e42ec954a7fb1fceac5f8403f0cbb679403bc29dcdd"
input_schema_fingerprint: "877c0cce319c3dd768fc974b625e6437ffaf40b6c3670ce5b8827284a34d55d3"
annotations{5}
title: "Get Item Graph"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "get_item_history"
title: null
effect: "WRITE"
effect_confidence: 0.533
capabilities[0]
risk_severity: "LOW"
fingerprint: "25f27c47d568703047be3ccde8b22899d7afc85f0d83f904bf213bc870881d63"
input_schema_fingerprint: "38ed493380b3c8aad6f0f13fc2705ec52566ba795419e511aab623408839b9ca"
annotations{5}
title: "Get Item History"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "get_wishlist"
title: null
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "d9b4bebc433ef132f29c79faa606ca5cc2ab2bceb7a01d42fd7c3794574f3bf6"
input_schema_fingerprint: "cd2f3a3847831ab0d0e14e1dc3bf568bdcca3c99a1fa8f833d5eb689aca98105"
annotations{5}
title: "Get Wishlist"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "link_items"
title: null
effect: "WRITE"
effect_confidence: 0.902
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.59
1{2}
capability: "PERSONAL_DATA"
confidence: 0.59
risk_severity: "MEDIUM"
fingerprint: "2b5731c7ce6d1fb6e60076d0d6b7e917e6fdc84ae01d46eaaf0dd633e00fa7af"
input_schema_fingerprint: "1eb352fae0e5b356f57c98eb67e081418795a164da92a82e18305ac6a3a40f02"
annotations{5}
title: "Link Items"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "list_collections"
title: null
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "444331341173707bcdd32fb02d293fa0382032ff427fac4261294f97ed08074a"
input_schema_fingerprint: "f5d10e58dd90fcbbf65784b541214b0bd1adfe9429cb804e6015ef9d27e38aeb"
annotations{5}
title: "List Collections"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
12{9}
name: "ping"
title: null
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "9ffac80d0824fd83d0e04b819291cc5894c9de664cbcd9284ffb71a0ebb0bbcf"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: "Ping"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
13{9}
name: "remove_from_collection"
title: null
effect: "ADMIN"
effect_confidence: 0.65
capabilities[0]
risk_severity: "INFO"
fingerprint: "268c86db8972a64cfd3a141d047088834703d13b2d5f57d3d96150a7bdf2b069"
input_schema_fingerprint: "ed2c0b7b4a27034af385df740fa9f335ac8d6beafdfbdc4e1115e70ef13d8f11"
annotations{5}
title: "Remove from Collection"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
14{9}
name: "restore_item"
title: null
effect: "WRITE"
effect_confidence: 0.79
capabilities[0]
risk_severity: "LOW"
fingerprint: "e284b519dd6d64f623aa4161cba32f55181de597d65afcf273708ae4fd2d17b4"
input_schema_fingerprint: "631982ff7b86c2a479019bca69142964be9f5073ea08e63c732442ed2c039a37"
annotations{5}
title: "Restore Item"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
15{9}
name: "search_saved"
title: null
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "eb0909becbcc98d4a62107ecf38cc4d8161e60d5f4abdac6affd87bf73517f6f"
input_schema_fingerprint: "84f80765529456307cc24c7d6b3c3b654c89bffd2251599b67628cab755382c7"
annotations{5}
title: "Search Saved Items"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
16{9}
name: "send_feedback"
title: null
effect: "WRITE"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.601
risk_severity: "MEDIUM"
fingerprint: "9ccebefbed1ebc7cb2a56ed9c3b5cbcca3d80a5c0d8b627759c5291ab4cadddc"
input_schema_fingerprint: "22cfb91961334214fd699efa3c182d6c0cce8c0b7ef40fa5c3b6762d038de693"
annotations{5}
title: "Send Feedback"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: false
17{9}
name: "set_pinned_items"
title: null
effect: "WRITE"
effect_confidence: 0.885
capabilities[0]
risk_severity: "LOW"
fingerprint: "a66744f4dfe2bd52ab6e3f9dbae44a9f20996375e8a4affa3f2f5fde25410a0e"
input_schema_fingerprint: "ffdddb7985a3564ca83e95761bd96e695e8f0234836f6efa03bd3561f834d3de"
annotations{5}
title: "Set Pinned Items"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
18{9}
name: "unlink_items"
title: null
effect: "DELETE"
effect_confidence: 0.587
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "edcfcf9012dd22f8e33ab6557bbf67ddc8dbd7ad1f85797c3144c53d2b90eeaa"
input_schema_fingerprint: "213fc30686ac293d5c227e10bc089311d6f4daf3d0b88b72e015560a89cd5887"
annotations{5}
title: "Unlink Items"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
19{9}
name: "update_collection"
title: null
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "LOW"
fingerprint: "7be6d8139e764543037e9aadfc3bfe1b7bb6aca90cc451dcad82d36d2d4f8695"
input_schema_fingerprint: "72f6175127d5565fa47aa38c55ea5de0af32f94315c82387d4721915399d429e"
annotations{5}
title: "Update Collection"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
20{9}
name: "update_item"
title: null
effect: "WRITE"
effect_confidence: 0.885
capabilities[0]
risk_severity: "LOW"
fingerprint: "97a26ee21c4d0ad7a28aff6b047078a295e613b376d3c7726da7edf46bcb38e9"
input_schema_fingerprint: "f70f6018714a41c1505aa3b6f3783d7cf353053e6bbfd2c3814131876d01bbc5"
annotations{5}
title: "Update Item"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
21{9}
name: "update_price"
title: null
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "LOW"
fingerprint: "7a436931af4e15aa3f4c1bd1f9b43f3e384dbbe3a911fab5c5773306f508d417"
input_schema_fingerprint: "e29e9860d4450524dd4f303f46e8586fc838a1f47750fd258fd353552e1a084b"
annotations{5}
title: "Update Price"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.grabbitapp.com"
registrable_domain: "grabbitapp.com"
source: "transport"
findings[6]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "get_item_history"
4{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "LOW"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "update_item"
5{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "send_feedback"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.grabbitapp/grabblist"
registry_content_sha256: "026260254a647639a19e62e724a3450b07ba7c2fa021eda1747a522e35ca2ebd"
scan_snapshot_fingerprint: "27ef970877bb864b5bb5339c7e660720610f978eb21a947c62e53d26e17224ea"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:55:05.203Z"
observed_at: "2026-11-13T17:36:21.179+00:00"
registry_published_at: "2026-11-04T12:34:41.468787+00:00"
registry_updated_at: null