HemmaBo Host Booking Engine
com.hemmabo/hemmabo-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/68b582c2-328b-4c63-bd37-5035272aa096/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.hemmabo/hemmabo-mcp-server"
title: "HemmaBo Host Booking Engine"
description: "6 runtime tools: 2 HemmaBo tools, 2 host onboarding tools, and 2 VRP verification tools. Not an OTA."
version: "7.1.1"
homepage_url: "https://www.hemmabo.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.hemmabo"
display_name: "com.hemmabo"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/HemmaBo-se/hemmabo-mcp-server"
provider: "github"
owner: "HemmaBo-se"
name: "hemmabo-mcp-server"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://www.hemmabo.com/mcp"
endpoint_host: "www.hemmabo.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[6]
0{9}
name: "hemmabo_check_availability"
title: "Check Availability"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "CALENDAR"
confidence: 0.856
risk_severity: "INFO"
fingerprint: "12b3ac9e536c3e89e0c083c8c7aaae96df5aa2d3a5a65d33a16809b2ea92a008"
input_schema_fingerprint: "0503b5e34bb65af152688557c4ff743bbdf1cc2266d333b9b9656afa4a0cac26"
annotations{5}
title: "Check Availability"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
1{9}
name: "hemmabo_check_host_readiness"
title: "Host Readiness Check"
effect: "READ"
effect_confidence: 0.798
capabilities[4]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.804
1{2}
capability: "HR"
confidence: 0.774
2{2}
capability: "PAYMENT"
confidence: 0.653
3{2}
capability: "PERSONAL_DATA"
confidence: 0.878
risk_severity: "MEDIUM"
fingerprint: "3d5c46a2eb2e1e2c89fd4627f69c4376deb507e360feaf8c410c0471aaa13939"
input_schema_fingerprint: "1d45e4b42219eb920e724acebcc51d03863efffe29f119cab2fe3bb888bcda57"
annotations{5}
title: "Host Readiness Check"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
2{9}
name: "hemmabo_get_host_onboarding_link"
title: "Host Onboarding Link"
effect: "READ"
effect_confidence: 0.798
capabilities[4]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.513
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.87
2{2}
capability: "HR"
confidence: 0.926
3{2}
capability: "PERSONAL_DATA"
confidence: 0.856
risk_severity: "HIGH"
fingerprint: "c7b2769f0bed4ae2c39dcbb922a1f6ee5756f9f5d1fa8ae37395950cf688af57"
input_schema_fingerprint: "9a49c30a55329dc46430632d6766f22801b089a624008b1c8c7be6fe9bbf7611"
annotations{5}
title: "Host Onboarding Link"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
3{9}
name: "hemmabo_search_properties"
title: "Search Properties"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.815
risk_severity: "LOW"
fingerprint: "202b6671f0c090645fd68d131cdccf2b300fe2692dd219a1084d6bbcfdb1e44b"
input_schema_fingerprint: "5b079ebabbfd98fbf5946b681b1aa2a1df85bee91a580bbc7505b7f2474d1a79"
annotations{5}
title: "Search Properties"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
4{9}
name: "vrp_get_verified_stay_offer"
title: "Get Verified Stay Offer"
effect: "READ"
effect_confidence: 0.827
capabilities[3]
0{2}
capability: "CALENDAR"
confidence: 0.632
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.661
2{2}
capability: "PERSONAL_DATA"
confidence: 0.556
risk_severity: "LOW"
fingerprint: "da876c909a58c0951f5735c76222f4d7ff04796c0798ad491f56bb45f63b54f2"
input_schema_fingerprint: "e387a7af10e4d08a86f589e2fe469b03582d464502ab3aefd12b85151350accb"
annotations{5}
title: "Get Verified Stay Offer"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: true
5{9}
name: "vrp_verify_node"
title: "Verify Vacation Rental Node"
effect: "READ"
effect_confidence: 0.776
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.661
risk_severity: "INFO"
fingerprint: "2ea1e74dfc5a32da72609cc0a4ef9656c909448e0c9709d12847b8d85373b887"
input_schema_fingerprint: "4d0f4f29cf5cd5e4fd57b2b2c2d969be3361b8e5dabcca515df11dab7381ea47"
annotations{5}
title: "Verify Vacation Rental Node"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: true
resources[1]
0{4}
key: "ui://hemmabo/verified-stay-offer-v11.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "53ccb61688a61820decadee664b5a982788065e0a09f58e3dcb8d93c9ea9906a"
prompts[2]
0{2}
name: "host_start"
fingerprint: "57d0821e4bf0951deb446344fb89a26c2a6ac2466c57b84437374501458684ad"
1{2}
name: "trip_plan"
fingerprint: "f8ed8703f6bae9588ed6ad2b7fffe90de51f2e0d288d47f8444cf9e68e8ab2e8"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "www.hemmabo.com"
registrable_domain: "hemmabo.com"
source: "transport"
findings[2]
0{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "vrp_get_verified_stay_offer"
1{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "vrp_get_verified_stay_offer"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.hemmabo/hemmabo-mcp-server"
registry_content_sha256: "e96b329da00c75e67640be5be19b7aa4f2e8c225ac56f889843f98d08bf9175b"
scan_snapshot_fingerprint: "1a5fe83bb5d5c533fa7f0efec3ee49c4edc194491a4fe23cdcc669b1feadd9bc"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T07:01:54.926Z"
observed_at: "2026-11-14T01:36:12.064+00:00"
registry_published_at: "2026-11-13T19:27:36.373788+00:00"
registry_updated_at: null