MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/af8cad22-d4d8-4bf6-8216-c29c2a483932/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.hutlists/hutlists"
title: "Hutlists — Alpine huts"
description: "Search 5,630 mountain huts in the Alps: records, elevation, season, booking, availability."
version: "1.0.0"
homepage_url: "https://hutlists.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.hutlists"
display_name: "com.hutlists"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://hutlists.com/mcp"
endpoint_host: "hutlists.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[5]
0{9}
name: "get-hut"
title: "Get Hut Tool"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "fd71e68f818bc780618b4094bcf5ee454e77ad47e5d19f2ea36e9457c455c517"
input_schema_fingerprint: "147831a56f04f54548974955a98693deb4729f31f9ebcf0b3a8791c82803a683"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
1{9}
name: "get-hut-availability"
title: "Get Hut Availability Tool"
effect: "READ"
effect_confidence: 0.857
capabilities[3]
0{2}
capability: "CALENDAR"
confidence: 0.724
1{2}
capability: "EMAIL"
confidence: 0.577
2{2}
capability: "PERSONAL_DATA"
confidence: 0.577
risk_severity: "MEDIUM"
fingerprint: "48edb7af3db50b07591023c5d00b2e2e9114aa5e8c48e92ea3a9f2e100d40eaf"
input_schema_fingerprint: "05c4adf299ebcb77878b2b8d64e18a3b3f612065d2d75fd8d102324938f216b6"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
2{9}
name: "list-guides"
title: "List Guides Tool"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "bb5fc596eff89c7ca5ef08740bec85c4b7a477f05bd6c1e16cf0c0961347ba30"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
3{9}
name: "list-regions"
title: "List Regions Tool"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "a6026117397108a979a69bb07d5832005655efb510ce6479c7b4d5f41c21382a"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
4{9}
name: "search-huts"
title: "Search Huts Tool"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "9202a642f1d906476c62b58b184e0e82ec9b0371f85af25811d550f529ed4f82"
input_schema_fingerprint: "0acef5c63c4ad93499cd0aaace3843b50397e0d4d21d0bfd8249e4bc49809708"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "hutlists.com"
registrable_domain: "hutlists.com"
source: "transport"
findings[2]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.hutlists/hutlists"
registry_content_sha256: "0b886151cfdbfeba093429e322906664c21e4eb20bd9242f68ba52d6ee267104"
scan_snapshot_fingerprint: "bc72ab4ad31626536a0d2c6aa1b250208d399808446b2ffe3f7810daf78d8374"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T06:08:13.888Z"
observed_at: "2026-11-14T06:45:10.343+00:00"
registry_published_at: "2026-09-24T09:50:27.816865+00:00"
registry_updated_at: null