HobbyCardIndex Card Prices
com.hobbycardindex/card-prices
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/21bc7122-f3cd-44e0-9362-89dea74ae638/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.hobbycardindex/card-prices"
title: "HobbyCardIndex Card Prices"
description: "Real sold prices for 16M+ sports and trading cards: raw and graded by grade, with card page links."
version: "1.1.0"
homepage_url: "https://hobbycardindex.com/developers"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.hobbycardindex"
display_name: "com.hobbycardindex"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/charmanroofing-pixel/hci-api-examples"
provider: "github"
owner: "charmanroofing-pixel"
name: "hci-api-examples"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://hobbycardindex.com/api/v1/mcp"
endpoint_host: "hobbycardindex.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[4]
0{9}
name: "get_card_prices"
title: "Card prices by grade"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.675
risk_severity: "LOW"
fingerprint: "8d3cc65084607d15e8fb458540cf91944c450fdc4e4879e1f3d5cfe4c75cb5de"
input_schema_fingerprint: "a8ca7ead96d3dafa79045bd5d8952ccd7c28bc796e0562d5ca696667e2eddef1"
annotations{5}
title: "Card prices by grade"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "list_plans"
title: "Commercial API plans and prices"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "761450b5a5db671f37450e9ba7ccddfda7793286c0364b8e1dad2d06c2d46e65"
input_schema_fingerprint: "5b7cba94fc9c1b4cf9477f4aff808f53a59cad9c64d75ef0c7ad096b7d2df949"
annotations{5}
title: "Commercial API plans and prices"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "search_cards"
title: "Search card prices"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "a9e20ff642879ccf7b1fb7768ca576156e108e9e0ea1b67b6a4c89ef67f0d811"
input_schema_fingerprint: "c2fd6387b217a65ff58786e7a9c2e0d55acfee072efdcff2543d1c7489ea7e61"
annotations{5}
title: "Search card prices"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "start_checkout"
title: "Buy a Commercial API plan"
effect: "WRITE"
effect_confidence: 0.917
capabilities[3]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.708
1{2}
capability: "PAYMENT"
confidence: 0.729
2{2}
capability: "PERSONAL_DATA"
confidence: 0.76
risk_severity: "HIGH"
fingerprint: "462fe602a2624d4d8e911d6c798795cfac3a307fffbaedfd64aaf60c38a76785"
input_schema_fingerprint: "14048fa139b2e6ea08bd9ba06b6578cec3edce2ac439bd8b70e622a7addadd2a"
annotations{5}
title: "Buy a Commercial API plan"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "hobbycardindex.com"
registrable_domain: "hobbycardindex.com"
source: "transport"
findings[2]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "list_plans"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.hobbycardindex/card-prices"
registry_content_sha256: "a0f55ae96d5db203da37f5670e86a300a12e684457161cd0178f2f8671ded586"
scan_snapshot_fingerprint: "1516ca7ca52766cce3f344c864f4a25f9b8383d591d132229618baedb2e273e5"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T06:13:46.625Z"
observed_at: "2026-11-11T19:03:42.876+00:00"
registry_published_at: "2026-11-02T14:14:25.653873+00:00"
registry_updated_at: null