MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/f5dffeea-4b59-433d-99bc-ae81cf2b7d7a/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.hiddenswap/swap"
title: "HiddenSwap"
description: "No-KYC crypto swaps, no account or email. Read-only quotes, coins, swap links, order status."
version: "1.1.0"
homepage_url: "https://hiddenswap.com/open-source"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.hiddenswap"
display_name: "com.hiddenswap"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/hiddenswap/hiddenswap-mcp"
provider: "github"
owner: "hiddenswap"
name: "hiddenswap-mcp"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://hiddenswap.com/mcp"
endpoint_host: "hiddenswap.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[4]
0{9}
name: "get_order_status"
title: "Check an order"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "ed489c83cbf9c0da6576294264c17045cd4a4bd64c4e2a8d76328316bb341b36"
input_schema_fingerprint: "4c0d350e72ec409f8fa406335648d9f56be1d859fb218880de5c8510a0d33261"
annotations{5}
title: "Check an order"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "get_pair_info"
title: "Check a swap pair"
effect: "READ"
effect_confidence: 0.933
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.73
1{2}
capability: "PERSONAL_DATA"
confidence: 0.66
risk_severity: "MEDIUM"
fingerprint: "7c19ba63a8d4b4173d7eb060518fae66c9dcdd7831f35734421502d05ea96528"
input_schema_fingerprint: "52d999c10926f64b39ffe68a65245e9c57fbc88571c3c0a61ee889b55901e693"
annotations{5}
title: "Check a swap pair"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_quote"
title: "Get a swap estimate"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.73
1{2}
capability: "PERSONAL_DATA"
confidence: 0.66
risk_severity: "MEDIUM"
fingerprint: "2ed29d29c31af66737eb56c79c671617ee16acd655418c7f6d57c58f952eed91"
input_schema_fingerprint: "2602cde10a548cf3053f0b9b7d618f207b1a6e059e619fbd7775954b3df5c789"
annotations{5}
title: "Get a swap estimate"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
3{9}
name: "search_coins"
title: "Find coins and networks"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "38032c6b66a33a547ed752ff3434a17857e78bb5cefa757e24fbcb8708656156"
input_schema_fingerprint: "a16063ca90185d4d7df4b8dcd35350293418f9882c93323b50cccb04a3acf9ed"
annotations{5}
title: "Find coins and networks"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "hiddenswap.com"
registrable_domain: "hiddenswap.com"
source: "transport"
findings[1]
0{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.hiddenswap/swap"
registry_content_sha256: "e39b198d5a114cc5235d6417f645ed2b721049e489107bfc13153271e23f78ee"
scan_snapshot_fingerprint: "bcbd921d42800985d23524a45b5be4d494cac19c0f7f8997ee367a2a7f2991d4"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:47:43.815Z"
observed_at: "2026-11-14T06:35:48.287+00:00"
registry_published_at: "2026-09-19T14:17:43.000888+00:00"
registry_updated_at: null