MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/ad946588-6c6e-4eca-b856-95989d553645/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.headcountlabs/jobs"
title: "Headcount Labs"
description: "Job postings search: find, count and read open jobs from employer career sites, with pay and links."
version: "1.2.0"
homepage_url: "https://headcountlabs.com/mcp/"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.headcountlabs"
display_name: "com.headcountlabs"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/HeadcountLabs/headcountlabs-mcp"
provider: "github"
owner: "HeadcountLabs"
name: "headcountlabs-mcp"
verified: false
packages[0]
transports[2]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.headcountlabs.com/mcp"
endpoint_host: "api.headcountlabs.com"
auth_type: "unknown"
1{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.headcountlabs.com/mcp/public"
endpoint_host: "api.headcountlabs.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[9]
0{9}
name: "count_jobs"
title: "Count jobs"
effect: "READ"
effect_confidence: 0.933
capabilities[2]
0{2}
capability: "HR"
confidence: 0.641
1{2}
capability: "PERSONAL_DATA"
confidence: 0.921
risk_severity: "MEDIUM"
fingerprint: "31b5fc738996a6260dc55770a508015c58c28f1ef3bb9e81f604e266bdab4635"
input_schema_fingerprint: "f30f636e29ba3b55e8f67971c0b0dd06e2c6787f36ad18bb296b7e2528badbae"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "get_job"
title: "Get job details"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "9b398c3a899c0fdc1babb1732e81fef7454a30eec2b330fcea74360a249edda7"
input_schema_fingerprint: "dea7c937ed15ff4df2433fb8fd7718d929d72b03cc59555f8a56b8050ac074e5"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "list_fields"
title: "List job fields and filters"
effect: "READ"
effect_confidence: 0.933
capabilities[0]
risk_severity: "INFO"
fingerprint: "a9f3d649919e0325a68fe11568b5a37b04c92b31b17e24644e04c93eab606560"
input_schema_fingerprint: "cc2c1b212a04c8581e79eab59c0336dd3fa3f729ef333a82e7293b4a9fc8926f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "market_breakdown"
title: "Rank a job market dimension"
effect: "READ"
effect_confidence: 0.776
capabilities[0]
risk_severity: "INFO"
fingerprint: "7706d51189d7fa281b354cd107523f25ab6b74e2e2298d6088afa137eb183b5c"
input_schema_fingerprint: "73b37c645177421cc594475331c2ec16a9bd6883876e309ac54dbe403ed6f2db"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "market_dimensions"
title: "List market dimensions"
effect: "READ"
effect_confidence: 0.776
capabilities[0]
risk_severity: "INFO"
fingerprint: "8a03413c154d243476372e43e5a9951427e4fa396ce585223a67771ef576711c"
input_schema_fingerprint: "6183db746f69a413e067ebf8dbd77dae459d57da52a184295311aabefc89865f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "market_lookup"
title: "Look up a job market figure"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.53
risk_severity: "INFO"
fingerprint: "4e1667a77ebd54cabd1950ed52a9d7556678c08465fd33365c46aaaffe6e6ece"
input_schema_fingerprint: "b9587381c792ac635ae9d71c6bb2ceb6942b341294ec727bbee73dd8a27942e1"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "salary_range"
title: "Salary range for a role"
effect: "WRITE"
effect_confidence: 0.533
capabilities[3]
0{2}
capability: "HR"
confidence: 0.724
1{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.641
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "HIGH"
fingerprint: "2d91b7fc248ee36a897067340155b6582b5a1d8c162abdb69f7a9eaf88cf08b2"
input_schema_fingerprint: "10c6ee888b8ac9f7af5bbb1d2ca169b9a21f3ac98435dd4fa5fa842b05034f79"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "search_docs"
title: "Search the Headcount Labs docs"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "HR"
confidence: 0.61
1{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "ff2ba4b9d5d97368285e6086740c2fac59d7dff8be96479fa21a0eea0729d487"
input_schema_fingerprint: "6d3d784c0c8dc5bb39dd7fa4a47b9bed83a3f61f212af38f5151424efc1d6611"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "search_jobs"
title: "Search jobs"
effect: "READ"
effect_confidence: 0.921
capabilities[5]
0{2}
capability: "HR"
confidence: 0.746
1{2}
capability: "LOCATION"
confidence: 0.82
2{2}
capability: "PAYMENT"
confidence: 0.653
3{2}
capability: "PERSONAL_DATA"
confidence: 0.907
4{2}
capability: "SOURCE_CODE"
confidence: 0.53
risk_severity: "MEDIUM"
fingerprint: "df506f649f1675b0fabb73cd3f43eae265b94c5ff79ca6df2be6e7d4f5044612"
input_schema_fingerprint: "bd470aacd59520359feb00ec485fb90a3e88fdd08e9c9a2360631fce28ecb0ff"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[4]
0{4}
key: "ui://headcountlabs/job-cards-v1.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "588e986e07d57f1764b564555ac910d5747d059aa4c88784e3a2fc2d2f97572a"
1{4}
key: "ui://headcountlabs/job-cards-v2.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "f6c78df8ff4b9ba46a9011f3979ea1ff9cb3344a89d63335a042ccd4e85571f6"
2{4}
key: "ui://headcountlabs/job-cards-v3.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "e73020a3460ac14c1d412367c97cde9ddae36c2f9169db34f065eca71439d45a"
3{4}
key: "ui://headcountlabs/job-cards-v4.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "88f59fa25c68696f62a8100dfe06b3e6d4525966e359be3402eef3e79637e440"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.headcountlabs.com"
registrable_domain: "headcountlabs.com"
source: "transport"
findings[5]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "CRITICAL"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "salary_range"
3{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "count_jobs"
4{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "search_jobs"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.headcountlabs/jobs"
registry_content_sha256: "0d9d97037b6aac2d942b9dc79372dbf617b7a0db49f773a351bf42bdacc9b08b"
scan_snapshot_fingerprint: "c5be0650ff818c5fc12479014af71381fcb5ac9f0e8084dfea66272591f8dfdb"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:35:55.811Z"
observed_at: "2026-11-12T08:11:22.988+00:00"
registry_published_at: "2026-10-18T23:19:49.235559+00:00"
registry_updated_at: null