MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/fbdcba6b-0abf-434e-a4b5-ca96d17d2ad0/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.humanfn/humanfn"
title: "HumanFn"
description: "Qualified human outcomes for AI agents: attorney review of SaaS Terms/Privacy, on-site checks."
version: "1.1.2"
homepage_url: "https://humanfn.com/agents"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.humanfn"
display_name: "com.humanfn"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://humanfn.com/mcp"
endpoint_host: "humanfn.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[9]
0{9}
name: "accept_human_function_offer"
title: "Record the user's explicit acceptance of a HumanFn offer"
effect: "WRITE"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.837
risk_severity: "LOW"
fingerprint: "bace27d5a12a3874841700fc760aaa9ca04e1a0288e4faa579d71d3a4de0e8f1"
input_schema_fingerprint: "e47bde8ff6f25e0a2eb1268938aef9e7b3af6f3ce7e3884b6ee27c76891dbcb0"
annotations{5}
title: "Record the user's explicit acceptance of a HumanFn offer"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "answer_clarification"
title: "Answer HumanFn's clarifying question"
effect: "READ"
effect_confidence: 0.822
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "71993eee6d25cd83a0bb829158f16b90fe0561777a3b811b5ec89bf1b6c6086f"
input_schema_fingerprint: "68450f1af63ba1fdd305ebc940dfb24085243991e496bb363b4496bc0ce0978d"
annotations{5}
title: "Answer HumanFn's clarifying question"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
2{9}
name: "cancel_execution"
title: "Cancel a request or job"
effect: "WRITE"
effect_confidence: 0.848
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.567
risk_severity: "HIGH"
fingerprint: "b6ce77e7723d13b1c5a433e32e106d7b990965b9af52e8c6d3ae8ae80e9e52b7"
input_schema_fingerprint: "ee6e8bdc36d3a7d95f952c80055328eb7d589472b7f4fb1b7f70e3229c4c8d5f"
annotations{5}
title: "Cancel a request or job"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
3{9}
name: "check_saas_legal_review"
title: "Check SaaS legal review readiness"
effect: "READ"
effect_confidence: 0.857
capabilities[3]
0{2}
capability: "LEGAL"
confidence: 0.974
1{2}
capability: "PAYMENT"
confidence: 0.582
2{2}
capability: "PERSONAL_DATA"
confidence: 0.744
risk_severity: "LOW"
fingerprint: "d3a446cb166cf6360fc0bca25101d841e5cb52226c4446bb973853a0846b3074"
input_schema_fingerprint: "bf4f2a1fadff0bbf29a6a3b1cda4e1323efcff617123c32928e483314f8f3d4c"
annotations{5}
title: "Check SaaS legal review readiness"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "confirm_execution"
title: "Confirm an approved quote: get the payment link (execution confirmation)"
effect: "WRITE"
effect_confidence: 0.917
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.785
risk_severity: "MEDIUM"
fingerprint: "d5e0370c324229854d69e90a7a086802ff963f7e9e66b825332764f42f97ccb3"
input_schema_fingerprint: "b78f774155a3bb221c6924cfa542f11fcdb84a9b38f2f2164fe542b75bdfa49e"
annotations{5}
title: "Confirm an approved quote: get the payment link (execution confirmation)"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
5{9}
name: "find_human_function"
title: "Find a qualified human outcome for a step AI shouldn't finish alone"
effect: "READ"
effect_confidence: 0.822
capabilities[2]
0{2}
capability: "LEGAL"
confidence: 0.718
1{2}
capability: "PERSONAL_DATA"
confidence: 0.567
risk_severity: "MEDIUM"
fingerprint: "ab99c1b1c07f9e08f97e4ef864d7ec2282b7fb7b36db938393c72b88a5ccf0bd"
input_schema_fingerprint: "c4779e64badf389ef05ddab7e621806d287ca2f69f5044dffd2f497edfb244c6"
annotations{5}
title: "Find a qualified human outcome for a step AI shouldn't finish alone"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
6{9}
name: "get_request"
title: "Get request status, quote and result"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "3d72c6a4bc7d525b6a4983d60d26b3a44e6926eb5ab07cd7bfca2db507487cc0"
input_schema_fingerprint: "ee6e8bdc36d3a7d95f952c80055328eb7d589472b7f4fb1b7f70e3229c4c8d5f"
annotations{5}
title: "Get request status, quote and result"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "offer_card_event"
title: "Offer card event (UI only)"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.592
risk_severity: "MEDIUM"
fingerprint: "1063189de2a003d9deee5d5eda671ebb12dc2ff6db1a88b0f56bbc284e8f3272"
input_schema_fingerprint: "63a7938e2f5d4ef94ec663f90afb82afd8eb2c1d54d6302e44e125f019d8b6ad"
annotations{5}
title: "Offer card event (UI only)"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "request_execution"
title: "Request an on-site task at an address (execution request)"
effect: "WRITE"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.815
risk_severity: "LOW"
fingerprint: "c1dce6944c349cdfccc1b3f30fccdfbf2946ec21d09db86b13309ba343de0601"
input_schema_fingerprint: "b21625abf07308739a5592b43694b807b840f9c2d145fe3ad7f7539747c00409"
annotations{5}
title: "Request an on-site task at an address (execution request)"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
resources[1]
0{4}
key: "ui://humanfn/offer-card.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "72e2fe41c659315e7a309200e3578027cd74d4b7b6d8fd7177fe68a66b2d81fb"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "humanfn.com"
registrable_domain: "humanfn.com"
source: "transport"
findings[11]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "answer_clarification"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "cancel_execution"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "confirm_execution"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "find_human_function"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_request"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "offer_card_event"
8{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "request_execution"
9{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "confirm_execution"
10{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "offer_card_event"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.humanfn/humanfn"
registry_content_sha256: "7ff44bf4fbd6f3f2cd9072875536b4dd2db135e58c9ad7b3fcc5b6ced001878e"
scan_snapshot_fingerprint: "57becf9192cbe1af8de03f9888e12e951f67e5d1cad384e57b1edc7a3886af7d"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:25:12.060Z"
observed_at: "2026-11-14T06:44:31.6+00:00"
registry_published_at: "2026-10-05T22:32:05.513505+00:00"
registry_updated_at: null