MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/45b10f71-a52b-469f-bca6-eb00d3b987f6/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.hellogymmy/gymmy"
title: "Gymmy"
description: "Find gyms and studios, see classes and prices, and book with Gymmy."
version: "1.0.0"
homepage_url: "https://hellogymmy.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.hellogymmy"
display_name: "com.hellogymmy"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/zdeadex/gymmy-mcp"
provider: "github"
owner: "zdeadex"
name: "gymmy-mcp"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://hellogymmy.com/api/mcp"
endpoint_host: "hellogymmy.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[14]
0{9}
name: "book_class"
title: "Book a class"
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "LOW"
fingerprint: "9cc1001f6e2f4468864ce9bfdaa7fd0bfdf8bf2793198c19be46dc769033bc5b"
input_schema_fingerprint: "81b83392e010a683cfcff9d93172d1387a0a73719c391317087c11952e98c0a0"
annotations{5}
title: "Book a class"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
1{9}
name: "book_dropin"
title: "Buy and book a class"
effect: "WRITE"
effect_confidence: 0.902
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.708
1{2}
capability: "PERSONAL_DATA"
confidence: 0.888
risk_severity: "HIGH"
fingerprint: "5ee2afc98e5e853c45469db7d2adbf1f8f8da4caa7ea0b6959a1e76b04911bc2"
input_schema_fingerprint: "c710e6b51487089874a8cdffcd28bef97930cfbf51d56c7152fa558b1877e705"
annotations{5}
title: "Buy and book a class"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
2{9}
name: "cancel_booking"
title: "Cancel a booking"
effect: "WRITE"
effect_confidence: 0.917
capabilities[1]
0{2}
capability: "CALENDAR"
confidence: 0.805
risk_severity: "LOW"
fingerprint: "ecb4861dd852896865383d2642da5e50354cb43a86c3721f63b830df2987e16b"
input_schema_fingerprint: "81b83392e010a683cfcff9d93172d1387a0a73719c391317087c11952e98c0a0"
annotations{5}
title: "Cancel a booking"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
3{9}
name: "checkout_status"
title: "Payment status"
effect: "WRITE"
effect_confidence: 0.747
capabilities[3]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.828
1{2}
capability: "PAYMENT"
confidence: 0.854
2{2}
capability: "PERSONAL_DATA"
confidence: 0.567
risk_severity: "HIGH"
fingerprint: "f880948c70af5b84787f767d2b62a9324bf17decc267d977378973c01b9191dd"
input_schema_fingerprint: "44321bcb565b86a7ffd9c060e62b91ba0ffe4424b04af8f2b57cb3bd074fbb2b"
annotations{5}
title: "Payment status"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "get_gym"
title: "Gym details"
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "dfeea7dcbc59e10563ea674148550b290a1413c3225c125d24d46be3cb555039"
input_schema_fingerprint: "80fd06333024d6e1d364381df64c675168a1f7884fa131d6120e5cfc24ed9cc7"
annotations{5}
title: "Gym details"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "get_prices"
title: "Prices and offers"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "INFO"
fingerprint: "435b56d547e85a42840dff57c5d9c806c7bbd409142dd49679a9a9db38e3b834"
input_schema_fingerprint: "80fd06333024d6e1d364381df64c675168a1f7884fa131d6120e5cfc24ed9cc7"
annotations{5}
title: "Prices and offers"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "get_schedule"
title: "Class schedule"
effect: "READ"
effect_confidence: 0.72
capabilities[1]
0{2}
capability: "CALENDAR"
confidence: 0.55
risk_severity: "INFO"
fingerprint: "6ca078a9a2ea32a15ed4965c76534bd7590811fdfc2c5ff76e183b9ff8336209"
input_schema_fingerprint: "df316c6bca60468047e260a2a4c6926462d023b436af8f3cdfe1e94aafe02148"
annotations{5}
title: "Class schedule"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "join_gym"
title: "Join a gym"
effect: "WRITE"
effect_confidence: 0.902
capabilities[2]
0{2}
capability: "PAYMENT"
confidence: 0.724
1{2}
capability: "PERSONAL_DATA"
confidence: 0.868
risk_severity: "LOW"
fingerprint: "a7801b6ed137597ad64e542c19a42599a7fac415bec212bc116973fb12485cc9"
input_schema_fingerprint: "0fe9bf71f2f6514c7112347470001220e05f2bea3f6c5212be8d22434149cbe0"
annotations{5}
title: "Join a gym"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
8{9}
name: "my_bookings"
title: "My bookings"
effect: "WRITE"
effect_confidence: 0.65
capabilities[1]
0{2}
capability: "CALENDAR"
confidence: 0.675
risk_severity: "LOW"
fingerprint: "5ce94ab735892f1d73cac8fe83208c7eef8c24c4fae730b2f1a30c1afcb66f8e"
input_schema_fingerprint: "a55914c5f652c1b81ff01e90e1a445dee2c66a1ab3e47a3ea3e54eb81a628aae"
annotations{5}
title: "My bookings"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "my_gyms"
title: "My gyms"
effect: "UNKNOWN"
effect_confidence: 0.2
capabilities[0]
risk_severity: "LOW"
fingerprint: "dfd7a07605b0f4619e65e56e60f5418d061864421ae04aba4286a9be8552fec9"
input_schema_fingerprint: "136dd20f60b75d27c8d41d8d830eb32406774ca2bd7cacff15de58636a7f6353"
annotations{5}
title: "My gyms"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "my_schedule"
title: "My gyms' schedule"
effect: "WRITE"
effect_confidence: 0.703
capabilities[0]
risk_severity: "LOW"
fingerprint: "a8a8eb237835081fd647d94c1cf4b22a2ab8fa47d33abdb328309e5b2a65087e"
input_schema_fingerprint: "4f4f6260d24d4ee6b4f70eab88b89eb3bbabfd1a32bcc45b5a342f8a215f1ff8"
annotations{5}
title: "My gyms' schedule"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "search_classes"
title: "Find a class to drop in"
effect: "READ"
effect_confidence: 0.832
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.894
risk_severity: "LOW"
fingerprint: "2602847f55f556673379a13bbf1aacca2e921ea88b4e71e03ffdf8e0f9bfb906"
input_schema_fingerprint: "27e54d776aa238024b2a428c772553a7131e2a163cb4ea647e3c568481333014"
annotations{5}
title: "Find a class to drop in"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
12{9}
name: "search_gyms"
title: "Search gyms and studios"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.892
risk_severity: "LOW"
fingerprint: "2a29c53016ae108bd14b84ea6c01d6b9bda289f904490ec65a206a071b00047a"
input_schema_fingerprint: "bb393cc3110d7b7fc89d9a531d6e0f553446dede87beb6f518d003c0d97cc663"
annotations{5}
title: "Search gyms and studios"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
13{9}
name: "start_trial"
title: "Start a trial class"
effect: "WRITE"
effect_confidence: 0.822
capabilities[0]
risk_severity: "LOW"
fingerprint: "3c6de072cf444f71e68f89525aa0873f090d7d2cf9c407f6173fa69aa91db01c"
input_schema_fingerprint: "86243c249f2e8a5ff188308755fb74e2a5ebd17380bdf4176692f993508e8bab"
annotations{5}
title: "Start a trial class"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[2]
0{4}
key: "ui://gymmy/widget-skybridge.html"
kind: "resource"
mime_type: "text/html+skybridge"
fingerprint: "6a32a04f3711233f6cb369fcbaf4a083871294208c4eefe6a10698b1f13fc0d0"
1{4}
key: "ui://gymmy/widget.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "62828ead96b5baf15f090516cfdec30c628f29c8fb32fabf5d9b57111b8c1f51"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "hellogymmy.com"
registrable_domain: "hellogymmy.com"
source: "transport"
findings[8]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "checkout_status"
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "my_bookings"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "my_schedule"
4{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "start_trial"
5{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "book_dropin"
6{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "join_gym"
7{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "my_gyms"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.hellogymmy/gymmy"
registry_content_sha256: "b7aca2834d664ddaa8f69725ef8bb34c977e77b3e7a5f868704974e2c506b171"
scan_snapshot_fingerprint: "827112267c934977108cf4681848eecd4f50e4e19f74fdce8ad05e9bd01407b9"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:52:23.701Z"
observed_at: "2026-11-12T16:57:11.087+00:00"
registry_published_at: "2026-10-20T13:49:47.965194+00:00"
registry_updated_at: null