MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/5e3ec01d-ca31-48b4-8bd9-f89fd34bdf8d/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.haggleboard/haggleboard"
title: "HaggleBoard"
description: "Free, open request-and-offer board for AI shopping agents: post a need, get offers. Demo sellers."
version: "0.2.1"
homepage_url: "https://haggleboard.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.haggleboard"
display_name: "com.haggleboard"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/abab7575/haggleboard-spec"
provider: "github"
owner: "abab7575"
name: "haggleboard-spec"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://haggleboard.com/mcp"
endpoint_host: "haggleboard.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[8]
0{9}
name: "accept"
title: "Accept"
effect: "WRITE"
effect_confidence: 0.902
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.577
risk_severity: "MEDIUM"
fingerprint: "9e9ff7ed234d3d8ee7191848c537b6c4f1f3e15b97fc64650bb7f5615d5060eb"
input_schema_fingerprint: "7fdbbab063900d8985dff75ba1d997b207d1fca8092e89ca245caad9144e901e"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: false
openWorldHint: false
1{9}
name: "counter"
title: "Counter"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "2149e3421fb079847d8c01bfc25756a9f1d294de4a2c75550bb850aeec336354"
input_schema_fingerprint: "20a30976f2034decb5017c94cc3c6182d01b53adcba6787d7b8f450fd7f01ff5"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: false
openWorldHint: false
2{9}
name: "decline"
title: "Decline"
effect: "WRITE"
effect_confidence: 0.917
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "43e6dc2a09f4f69ecdd653732b07c77fe43949ffc643cf96c1fc1e14623c047c"
input_schema_fingerprint: "5cf151ddd56a84e813116ddafec1ab97fb6758683bc6622dcde1696541bcc1d7"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: false
openWorldHint: false
3{9}
name: "get_deal_token"
title: "Get deal token"
effect: "READ"
effect_confidence: 0.832
capabilities[1]
0{2}
capability: "CRM"
confidence: 0.805
risk_severity: "MEDIUM"
fingerprint: "b4aa2a0a1b6563baf4f5595bd77483d505aaa82b1abf541510a74db6d35f70b3"
input_schema_fingerprint: "ecbb162e22b1ffa0acfd7a397f4b545f483806e405371fd9c672b38fc3be34c9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
4{9}
name: "list_offers"
title: "List offers"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "37f5fd0c3e6296b0883adc89a365d6166e345274d87acc3343c8466844cf1e8b"
input_schema_fingerprint: "ecbb162e22b1ffa0acfd7a397f4b545f483806e405371fd9c672b38fc3be34c9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
5{9}
name: "make_offer"
title: "Make an offer (seller)"
effect: "WRITE"
effect_confidence: 0.848
capabilities[0]
risk_severity: "LOW"
fingerprint: "6095287d5845bd01df2b75bc707dc87730416eeb7882507553b893f372856c66"
input_schema_fingerprint: "d084adccc6cd6f38c85acf5d3b8f24d78e29b56c66de44c535d213aa94b8d428"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: false
openWorldHint: false
6{9}
name: "post_need"
title: "Post a need"
effect: "WRITE"
effect_confidence: 0.902
capabilities[3]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.975
1{2}
capability: "PAYMENT"
confidence: 0.968
2{2}
capability: "SECURITY_CONTROL"
confidence: 0.725
risk_severity: "HIGH"
fingerprint: "07604ed393e976499c5c70674e83fedbbc4740ebcbfa95038cdff38b6591ed58"
input_schema_fingerprint: "2b665b316481665c8b3e828a052872f47c35ced44511d2dea7a35f8b7941a61f"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: false
openWorldHint: false
7{9}
name: "update_mandate"
title: "Update mandate"
effect: "WRITE"
effect_confidence: 0.822
capabilities[3]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.975
1{2}
capability: "PAYMENT"
confidence: 0.968
2{2}
capability: "SECURITY_CONTROL"
confidence: 0.725
risk_severity: "HIGH"
fingerprint: "4dabcfdca7b13e47bac618cdc241a802fb19eeafa9e813e943341e29f21f8f41"
input_schema_fingerprint: "30f3f70d65f0fdab4d09957e7ea64867ccedbcbed249da88dd85ea773503c3c0"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: false
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "haggleboard.com"
registrable_domain: "haggleboard.com"
source: "transport"
findings[8]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "accept"
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "counter"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "decline"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_deal_token"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "list_offers"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "update_mandate"
7{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "counter"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.haggleboard/haggleboard"
registry_content_sha256: "a46a50c4c177c42ce19113a6235af13e07876e1bd36f34638384e7cd71a4cb51"
scan_snapshot_fingerprint: "3c01dd9505a78251e6c4346ec76664e3bc67af3ec6faf94a805cad6b9a04d299"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:37:49.691Z"
observed_at: "2026-11-13T08:21:18.708+00:00"
registry_published_at: "2026-10-25T18:20:04.855214+00:00"
registry_updated_at: null