MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/a662d33c-2d0c-431f-88d9-67ddc14e8bc6/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.humanmailbox/mailbox"
title: "Human Mailbox"
description: "A physical postal address in Germany for AI agents. A human opens, scans and forwards your mail."
version: "1.0.0"
homepage_url: "https://humanmailbox.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.humanmailbox"
display_name: "com.humanmailbox"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://humanmailbox.com/mcp"
endpoint_host: "humanmailbox.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[32]
0{9}
name: "accept_quote"
title: "Accept a quote"
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "10e40c6df74ad23324fbf130ebea1fa118a83560428ce7a0c3f9b9595e65b7d0"
input_schema_fingerprint: "313b28bb00be6c14cbb4a58589683f5f8da72f6fd39a3ef461a0a4fca19c47d1"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "announce_shipment"
title: "Announce a shipment"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "53e5d9ce0f8bb058441b25dd54adda9ace81650e458381a4ea94fb11188412af"
input_schema_fingerprint: "7c45d7f48ec12448234f5eed5a977f9ba7bcc76dc55c027aadfcd3664ce660eb"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "buy_bundle"
title: "Prepay letters"
effect: "WRITE"
effect_confidence: 0.808
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.7
risk_severity: "HIGH"
fingerprint: "601a436770569976822cd458584336d78f7f439ff82ae181798e7cde9c4b5d9d"
input_schema_fingerprint: "51ace135ac97680bece3fbede20b4aec249f04a5acd0c78dbdd45e1815b94ba6"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "cancel_request"
title: "Cancel an order"
effect: "WRITE"
effect_confidence: 0.885
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "89b44e377bcaf16d6bf9cf4bb92c5ceb69f397e36fdf71a7609225d7d785dea5"
input_schema_fingerprint: "313b28bb00be6c14cbb4a58589683f5f8da72f6fd39a3ef461a0a4fca19c47d1"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
4{9}
name: "check_inquiry"
title: "Answer to an inquiry"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "9ad9b8b884c54b857513b771d2d9b61eb6554ea4feb895f84fe4257a65845f46"
input_schema_fingerprint: "0c1ac43cbf281287c2eb61f00255eb6069bf3a3a94de808d9d25d11b286dcd06"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
5{9}
name: "check_top_up"
title: "Check a top-up"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "0993e6164ae23b4673d42c71c7a5a0a92741f7d68950edfc3d9e1b3285e9ef37"
input_schema_fingerprint: "313b28bb00be6c14cbb4a58589683f5f8da72f6fd39a3ef461a0a4fca19c47d1"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
6{9}
name: "contact_human"
title: "Ask the human (inquiry)"
effect: "READ"
effect_confidence: 0.49
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.641
1{2}
capability: "PERSONAL_DATA"
confidence: 0.87
risk_severity: "MEDIUM"
fingerprint: "f69d2875b8a03c0c81534104808b4eb1b98f5d6c09d03d2f32cbde08d4a96b9b"
input_schema_fingerprint: "051e52080b2774a20a25239d995767eeeeec344c3b3746a33ce0fd0aa692768a"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
7{9}
name: "express_interest"
title: "Tell us you are interested"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "880ba24fe4b91b29186f0835dbdd37cd766dff01a91f15b26071d725e2a8388d"
input_schema_fingerprint: "14e4bac253d8b042dcd1956a07b3875b34d6b5e239fbd1813a7f79a0d90e77e4"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
8{9}
name: "get_account"
title: "My account"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "07367e9b69c60ad7593d8e126c064c5253f341d88cddf17d244f556176a179a4"
input_schema_fingerprint: "84a0884f45ebdf0b3947c20fee7c5e4335c740bcc15e8843ec64238f3f7d252c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
9{9}
name: "get_address"
title: "My postal address"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "0704e64ffbab8983e347f8c3734c0c89c6cfcf5473c2cb6536a2294f616d9860"
input_schema_fingerprint: "6b8690e36928f8d633ece481edf29706374ace284fe15bf2be22b5289cdaae52"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
10{9}
name: "get_balance"
title: "Balance"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "aa0b7b43b5f1328cf1ec4eeb9a9caf590328ed4cb7e31b38efb90ec18308d444"
input_schema_fingerprint: "84a0884f45ebdf0b3947c20fee7c5e4335c740bcc15e8843ec64238f3f7d252c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
11{9}
name: "get_item"
title: "Look at an item"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "4a5d3e782611e2c5fcf9a0cb4a931af35848d3015dfb5f9d58067c867d5577d3"
input_schema_fingerprint: "313b28bb00be6c14cbb4a58589683f5f8da72f6fd39a3ef461a0a4fca19c47d1"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
12{9}
name: "get_prices"
title: "Prices"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.771
risk_severity: "LOW"
fingerprint: "3cbab7912ca85662b5440f7082a916736ffd395562de98b83a8d9f534467a013"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
13{9}
name: "get_request"
title: "One order"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "05b025b33a4a91eef16ace4adba2ff05f545e8d9f82dc3d54fd32cf40fc3c6c8"
input_schema_fingerprint: "313b28bb00be6c14cbb4a58589683f5f8da72f6fd39a3ef461a0a4fca19c47d1"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
14{9}
name: "get_subscription"
title: "Mailbox subscription"
effect: "READ"
effect_confidence: 0.762
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.61
1{2}
capability: "PAYMENT"
confidence: 0.724
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "008fb3de329b8450339582b513a5cfee29b44535a244dda9633765bc7b5d8fd9"
input_schema_fingerprint: "84a0884f45ebdf0b3947c20fee7c5e4335c740bcc15e8843ec64238f3f7d252c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
15{9}
name: "get_summary"
title: "Costs and orders overview"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "2c583baae248f96c4a99388bb4ddfbf5b4763fde399ec0b66938911934acb723"
input_schema_fingerprint: "84a0884f45ebdf0b3947c20fee7c5e4335c740bcc15e8843ec64238f3f7d252c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
16{9}
name: "list_codes"
title: "Code vault"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.586
1{2}
capability: "SECRETS"
confidence: 0.577
risk_severity: "HIGH"
fingerprint: "7f3f31769ae216e568d41c228c7da52eb1164079cbfc764e5595e57331cfebed"
input_schema_fingerprint: "84a0884f45ebdf0b3947c20fee7c5e4335c740bcc15e8843ec64238f3f7d252c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
17{9}
name: "list_invoices"
title: "Invoices"
effect: "READ"
effect_confidence: 0.72
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.883
risk_severity: "MEDIUM"
fingerprint: "37155a0e1dfbd0251b9efcf61308c62788f802a0582c92582f1b106986458a98"
input_schema_fingerprint: "84a0884f45ebdf0b3947c20fee7c5e4335c740bcc15e8843ec64238f3f7d252c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
18{9}
name: "list_items"
title: "Mail that arrived"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "2dd508d94d74779062ccda4235953ccd305b35f2f543b527a6d9b0457fcfa243"
input_schema_fingerprint: "dc733225dd2d77c463eddc0b8841f1a6deb1264b84c9645f57356134bbebe5c9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
19{9}
name: "list_messages"
title: "Messages"
effect: "WRITE"
effect_confidence: 0.67
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "6a0d5542027f5690fc8bb1552b54d44e155cc8157424c3319f7d42b3a732d092"
input_schema_fingerprint: "84a0884f45ebdf0b3947c20fee7c5e4335c740bcc15e8843ec64238f3f7d252c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
20{9}
name: "list_requests"
title: "My orders"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "5968acb6324a8d57d7b3454dc8dde066005db6b90b91df73048d0e9a49219259"
input_schema_fingerprint: "dc733225dd2d77c463eddc0b8841f1a6deb1264b84c9645f57356134bbebe5c9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
21{9}
name: "list_shipments"
title: "Announced shipments"
effect: "READ"
effect_confidence: 0.72
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "3b743ee6a67728bcaa852959111c6ca36bc4d46ee69178acdac8dcf0d211789f"
input_schema_fingerprint: "0c01753799a6c415f633546f3efd1f2ea9d9a17e6c84c42dc041abffd409d033"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
22{9}
name: "pay_item"
title: "Pay for a waiting item"
effect: "WRITE"
effect_confidence: 0.79
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.834
risk_severity: "MEDIUM"
fingerprint: "049d3e864b9c93fab0b86db24bc5ff6b4c104667424cd655a7385a1c1ec16f3d"
input_schema_fingerprint: "313b28bb00be6c14cbb4a58589683f5f8da72f6fd39a3ef461a0a4fca19c47d1"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
23{9}
name: "pay_subscription"
title: "Prepay the mailbox"
effect: "WRITE"
effect_confidence: 0.65
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.61
1{2}
capability: "PAYMENT"
confidence: 0.788
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "c64706e0a2677d5983205a98f923d7285e5bb18c7c5c829d0dafd50d35a450fb"
input_schema_fingerprint: "d4ca0c1334f37c981a404e6543c90a83650be8e017cb4ed4442450aa096c00e5"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
24{9}
name: "register_mailbox"
title: "Register a mailbox"
effect: "WRITE"
effect_confidence: 0.902
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.926
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.601
2{2}
capability: "PERSONAL_DATA"
confidence: 0.826
risk_severity: "MEDIUM"
fingerprint: "8a70cddab975f8ea99fc30a9aca3756bc4c56c40fd4d92a900a655ef82655db6"
input_schema_fingerprint: "cc381f738a87d3514c8a4034041ddb89720a852838ac8db7cac42e28deef6042"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: true
25{9}
name: "request_action"
title: "Order an action"
effect: "WRITE"
effect_confidence: 0.822
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.669
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.795
2{2}
capability: "PERSONAL_DATA"
confidence: 0.99
risk_severity: "HIGH"
fingerprint: "dcdb0a042d57312b9b9d430d8e8e149c027080d9f71ac6c5fd6c5fd2b7d239a2"
input_schema_fingerprint: "77a7b0037e2d2b3a32a6dccebc87b8de59865f2c880ff42941d977d372a6b559"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: false
idempotentHint: null
openWorldHint: true
26{9}
name: "request_invoice"
title: "Request an invoice"
effect: "WRITE"
effect_confidence: 0.848
capabilities[2]
0{2}
capability: "PAYMENT"
confidence: 0.901
1{2}
capability: "PERSONAL_DATA"
confidence: 0.884
risk_severity: "MEDIUM"
fingerprint: "98056542b04ee0a6fe0b050aecf55b4107a9557f69108d939e8994667a8bae0a"
input_schema_fingerprint: "a1e6079bf550717fe1137e52600c11087ab50a7089c32fdeb509be83d4522fa9"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
27{9}
name: "reveal_codes"
title: "Reveal codes"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "AUTHENTICATION"
confidence: 0.586
risk_severity: "MEDIUM"
fingerprint: "76621d917d39f041808a790dde5e57a39564ce412569ee83c3e8ea86f145b22c"
input_schema_fingerprint: "4a5066f0b6078efa215d4458459d7d46e1f547dba772595499867d34e158b364"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
28{9}
name: "send_message"
title: "Message the human"
effect: "WRITE"
effect_confidence: 0.885
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.746
1{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "3d50d08486ec58058dcaa82f26ffb8ee02184f2b620b0d286254c35d459498a9"
input_schema_fingerprint: "284fa97812284c7c25acf560810f3943e0f2432cff498bbaa044e57380abfccf"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
29{9}
name: "start_demo"
title: "Try it: demo mailbox"
effect: "WRITE"
effect_confidence: 0.65
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.61
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.64
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "HIGH"
fingerprint: "f28921af074f2acdc719683a60d90a0d72966ccd89b101732804512520bcbdf1"
input_schema_fingerprint: "a7cb648fe8ea1f46d601a7ff2c63617caa1b9a4c82841118e89727b101a2a3df"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
30{9}
name: "top_up"
title: "Top up balance"
effect: "WRITE"
effect_confidence: 0.603
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.894
1{2}
capability: "PAYMENT"
confidence: 0.64
risk_severity: "HIGH"
fingerprint: "dce822936b162acad343c0c3e80f45532aa7c787c5905608e322453afd96bc3f"
input_schema_fingerprint: "b823857bf8f54fa82b3c9e00563ce4f7816c2b0123fc9f190a9e88d7d9a81472"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
31{9}
name: "update_account"
title: "Change account settings"
effect: "WRITE"
effect_confidence: 0.79
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.64
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.766
2{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.55
3{2}
capability: "PERSONAL_DATA"
confidence: 0.744
risk_severity: "MEDIUM"
fingerprint: "9e6a13bff9ec12902bd5259010f4de4e45dbba2133a182206d33271eebf51e01"
input_schema_fingerprint: "ef25a2f88a312035508534290c0293ed5540820f4cf9054c15d73dd28d670d28"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "humanmailbox.com"
registrable_domain: "humanmailbox.com"
source: "transport"
findings[40]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "list_messages"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "accept_quote"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "announce_shipment"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "buy_bundle"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "cancel_request"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "check_inquiry"
8{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "check_top_up"
9{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "contact_human"
10{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_account"
11{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_address"
12{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_balance"
13{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_item"
14{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_request"
15{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_subscription"
16{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_summary"
17{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "list_codes"
18{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "list_invoices"
19{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "list_items"
20{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "list_messages"
21{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "list_requests"
22{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "list_shipments"
23{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "pay_item"
24{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "pay_subscription"
25{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "request_action"
26{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "request_invoice"
27{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "reveal_codes"
28{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "send_message"
29{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "top_up"
30{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "update_account"
31{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "start_demo"
32{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "LOW"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "announce_shipment"
33{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "request_action"
34{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "request_action"
35{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "request_action"
36{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "announce_shipment"
37{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "express_interest"
38{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "reveal_codes"
39{6}
check_id: "SQ-TOOL-RECIPIENT-REDIRECT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to change recipients or destinations"
subject_type: "tool"
subject_name: "update_account"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.humanmailbox/mailbox"
registry_content_sha256: "0d4728396217d0d4ea160074af3187961d3f5c675d1f5b8434daac8d5bca6749"
scan_snapshot_fingerprint: "8dc0a6410037f7b0edc1e62237051d57598c0bb1a1bc182a4c0c34c6ce74f1e5"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:01:54.063Z"
observed_at: "2026-11-08T15:51:46.184+00:00"
registry_published_at: "2026-10-29T21:21:07.841997+00:00"
registry_updated_at: null