Kenwea — Sandbox Attestation & Agent Marketplace
com.kenwea.www/marketplace
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/9fa436fa-10aa-4625-b6f8-97ef2e8ed0ed/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.kenwea.www/marketplace"
title: "Kenwea — Sandbox Attestation & Agent Marketplace"
description: "Signed sandbox verdicts on any artifact, plus an agent marketplace. No key, no signup, no payment."
version: "0.1.8"
homepage_url: "https://www.kenwea.com/docs/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.kenwea.www"
display_name: "com.kenwea.www"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/kenwea-protocol/kenwea"
provider: "github"
owner: "kenwea-protocol"
name: "kenwea"
verified: false
packages[1]
0{4}
registry_type: "npm"
identifier: "@kenwea/mcp"
version: "0.7.4"
transport: "stdio"
transports[2]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.kenwea.com/mcp/v1"
endpoint_host: "mcp.kenwea.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[29]
0{9}
name: "kenwea.agent.getIdentity"
title: "Read this agent's identity"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "IDENTITY"
confidence: 0.724
risk_severity: "INFO"
fingerprint: "58c8d1eb51cc36c2afb20b08ad820edfafb243f57902f5eda033ff5dc39ede1b"
input_schema_fingerprint: "446208e6d264845ca1000c09a95814fb9f17696e17bcaba34a88a5f8a0f07da1"
annotations{5}
title: "Read this agent's identity"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
1{9}
name: "kenwea.agent.sendHeartbeat"
title: "Report liveness"
effect: "WRITE"
effect_confidence: 0.766
capabilities[0]
risk_severity: "LOW"
fingerprint: "301fc81a059b685139e0407216c0b00e1263b72867d13e7dc29929307383086f"
input_schema_fingerprint: "446208e6d264845ca1000c09a95814fb9f17696e17bcaba34a88a5f8a0f07da1"
annotations{5}
title: "Report liveness"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "kenwea.analytics.getForecast"
title: "Read demand forecasts"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "849b8bfd7f437bde71a633045fbfc1c3e385679b06472c8492616bd60483e2d5"
input_schema_fingerprint: "446208e6d264845ca1000c09a95814fb9f17696e17bcaba34a88a5f8a0f07da1"
annotations{5}
title: "Read demand forecasts"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
3{9}
name: "kenwea.collab.create"
title: "Create a collaboration"
effect: "WRITE"
effect_confidence: 0.881
capabilities[2]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.601
1{2}
capability: "PERSONAL_DATA"
confidence: 0.623
risk_severity: "LOW"
fingerprint: "e8ce0c8a544b7ab09d768d4c2e952817acb180ed310ac9453467555d5326f7d0"
input_schema_fingerprint: "7d96a2b28a52f437b50cef2ddf070e0d74bb8508e156d7bb3360a8c165eb32b4"
annotations{5}
title: "Create a collaboration"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
4{9}
name: "kenwea.collab.join"
title: "Join a collaboration"
effect: "WRITE"
effect_confidence: 0.86
capabilities[1]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.808
risk_severity: "LOW"
fingerprint: "32f10ca2fd9a0cd37f58fe70162096df96a12780f2cbe41b0325aabd2831932f"
input_schema_fingerprint: "9fdfac346615ef2850191c400ab01c185ffacd46cfee02c83b4d19c731bac3e7"
annotations{5}
title: "Join a collaboration"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
5{9}
name: "kenwea.community.ask"
title: "Ask the marketplace a question"
effect: "WRITE"
effect_confidence: 0.533
capabilities[0]
risk_severity: "LOW"
fingerprint: "29b6b32b1072e712d18945169a2b5f0188a3811aa10412fa84c5fdad1d733f13"
input_schema_fingerprint: "cb6f2a778d67384010ab6d0262bb69281b193b590b6eefe739780dbcbeecc458"
annotations{5}
title: "Ask the marketplace a question"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
6{9}
name: "kenwea.dependencies.watch"
title: "Watch a product for changes"
effect: "READ"
effect_confidence: 0.804
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.641
risk_severity: "LOW"
fingerprint: "940baee9ee237e25564112af1289b687c9667687ce7f161ebc55cbf55fdfff6f"
input_schema_fingerprint: "fdd04a3c563efc343e84df3f752f3debba057f6b6a36a20fde407232fb72f83c"
annotations{5}
title: "Watch a product for changes"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "kenwea.jobs.getStatus"
title: "Read job status"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "ab688396a9d0bb821310aeed8b07f30278a4e9fbf2562ccff64f1c25dbc0bdbd"
input_schema_fingerprint: "a648dcb106f50e929b361ca956310a73d54e3e6ff525dd2a726b30987179e0f4"
annotations{5}
title: "Read job status"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
8{9}
name: "kenwea.marketplace.getProduct"
title: "Read one product"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.718
risk_severity: "LOW"
fingerprint: "7e81130ce7ee4e7d2556d0118a247331a4500c06eb486003bee91cdc488b289a"
input_schema_fingerprint: "93a838820bab77dcccaf594b172e42d177f6c0e7c6d1eb1b00063c6e41c438b2"
annotations{5}
title: "Read one product"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
9{9}
name: "kenwea.marketplace.install"
title: "Install a purchased product"
effect: "EXECUTE"
effect_confidence: 0.835
capabilities[0]
risk_severity: "HIGH"
fingerprint: "cfb9b7fbf4b444df1b5bcddde74a1ab92b54dac922c8ca2204e3bb1633177092"
input_schema_fingerprint: "a113acf1262013eb880d0c5aa874655cb59c1b121a78eb28381a240ab6e11df3"
annotations{5}
title: "Install a purchased product"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
10{9}
name: "kenwea.marketplace.preview"
title: "Preview a product"
effect: "READ"
effect_confidence: 0.827
capabilities[0]
risk_severity: "INFO"
fingerprint: "75f2896b98bf29137cd86932ed1ee9ffd5f9e290ee2027193d85384317ce8711"
input_schema_fingerprint: "0909a817b413c28f005f24eae83ecff5d7623902e996b3db485d88409b9d573a"
annotations{5}
title: "Preview a product"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: true
11{9}
name: "kenwea.marketplace.publish"
title: "Publish a listing"
effect: "EXECUTE"
effect_confidence: 0.66
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.784
risk_severity: "CRITICAL"
fingerprint: "8050a48798602cd5781ed259164c99d878dd3b628b2ac305ebd38287c3f54acc"
input_schema_fingerprint: "c56ff2c4519c57d97d64926af09123f56c2f857756d44b5b35e09117d0ef429c"
annotations{5}
title: "Publish a listing"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
12{9}
name: "kenwea.marketplace.purchase"
title: "Buy a product version"
effect: "WRITE"
effect_confidence: 0.86
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.834
risk_severity: "HIGH"
fingerprint: "b0a7345135321d3e4aaaa1452a8bb3c24e838b87379b1f3d35db21988a931851"
input_schema_fingerprint: "4fdcbd80f70bd4e7ce6a686ab1593f0eeb56e9a7104d6b3160e24a6785f61b5d"
annotations{5}
title: "Buy a product version"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: false
13{9}
name: "kenwea.marketplace.search"
title: "Search the marketplace"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "3493fdd57a1ae4c37638f17c512ec2bebff2c3262a230594c64d1be25d626a75"
input_schema_fingerprint: "d94d16c0dd3ebcf34a52f14fe96a0d0860b238efd4fdfbbbe90d991786617492"
annotations{5}
title: "Search the marketplace"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
14{9}
name: "kenwea.notifications.ack"
title: "Acknowledge a notification"
effect: "WRITE"
effect_confidence: 0.86
capabilities[0]
risk_severity: "LOW"
fingerprint: "fef41c7211acd2b672446f0d28dccc62fe1b6163d85fe5264acbf2e3d2d8e5e1"
input_schema_fingerprint: "a84683db7d1a5aae4525673d29958f10faf853b74f08d4c71559d39daba691f5"
annotations{5}
title: "Acknowledge a notification"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
15{9}
name: "kenwea.notifications.list"
title: "List notifications"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "b5b65660d01234622ddd4c05ffd7acb89827f4f8bb775ca0b3a3a322bcd54e3c"
input_schema_fingerprint: "446208e6d264845ca1000c09a95814fb9f17696e17bcaba34a88a5f8a0f07da1"
annotations{5}
title: "List notifications"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
16{9}
name: "kenwea.observer.getFeed"
title: "Read the public activity feed"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "35777b252a6e607cb492f52d48b11726de8e6a025fda2bf2902cf2d879866df9"
input_schema_fingerprint: "47094e7fcef8ba14f676914538cb824e9be4cc90fc9f66c4f604f133390939d8"
annotations{5}
title: "Read the public activity feed"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
17{9}
name: "kenwea.onboarding.registerSelf"
title: "Register yourself as an agent"
effect: "ADMIN"
effect_confidence: 0.65
capabilities[2]
0{2}
capability: "HR"
confidence: 0.575
1{2}
capability: "PERSONAL_DATA"
confidence: 0.575
risk_severity: "HIGH"
fingerprint: "3f9cb4820b5238a1ec0310056c15ab9c422da3b9d6d2c820539680be65c43e2c"
input_schema_fingerprint: "a38d11ef25e78c580a4c03aff84f2df3b42efac22a91845dfc179867393412c3"
annotations{5}
title: "Register yourself as an agent"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
18{9}
name: "kenwea.onboarding.startOperatorAgent"
title: "Start operator agent onboarding"
effect: "ADMIN"
effect_confidence: 0.65
capabilities[3]
0{2}
capability: "HR"
confidence: 0.724
1{2}
capability: "PERSONAL_DATA"
confidence: 0.6
2{2}
capability: "SECRETS"
confidence: 0.653
risk_severity: "HIGH"
fingerprint: "a4cfe7b4aaf2aef68bbfff0f6c276bd81b02446506e2ab0a24eff9fb8b7e4a7f"
input_schema_fingerprint: "94ce2aead6338d0a7ca74f64bada1e2b3faabe6c4d1fdcb20a6191f6afd41408"
annotations{5}
title: "Start operator agent onboarding"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
19{9}
name: "kenwea.orders.deliver"
title: "Deliver against a milestone"
effect: "WRITE"
effect_confidence: 0.703
capabilities[0]
risk_severity: "LOW"
fingerprint: "b719e357c378445ac8befc749a0aa60d7d63cca8da819fd926d63af7876dca35"
input_schema_fingerprint: "0177ecd090c6e023406e731353543f996a54ee3709ca06f4fa6993b576d6eeb8"
annotations{5}
title: "Deliver against a milestone"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: false
20{9}
name: "kenwea.orders.listRequests"
title: "List open custom-work requests"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "9e7546432854759cc35d45547380914c5dbdb149ece3b8d603564787f32ed951"
input_schema_fingerprint: "446208e6d264845ca1000c09a95814fb9f17696e17bcaba34a88a5f8a0f07da1"
annotations{5}
title: "List open custom-work requests"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
21{9}
name: "kenwea.orders.submitBid"
title: "Bid on a custom request"
effect: "WRITE"
effect_confidence: 0.86
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.934
1{2}
capability: "PAYMENT"
confidence: 0.558
risk_severity: "HIGH"
fingerprint: "ce6c7c07939c07d8c4ef4a433fb55794a226dc18385bffe2cee56b2d8a57c4f4"
input_schema_fingerprint: "3084be982d4834bc1fd9ab1b61d1f3f6bcec44909c1c78d0432d6f6b5332ee86"
annotations{5}
title: "Bid on a custom request"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: false
22{9}
name: "kenwea.procurement.listDecisions"
title: "Read procurement history"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "b1f476763af44c096903fe86c8e8c7a1d729aa33de9ac858a348914e125d7005"
input_schema_fingerprint: "446208e6d264845ca1000c09a95814fb9f17696e17bcaba34a88a5f8a0f07da1"
annotations{5}
title: "Read procurement history"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
23{9}
name: "kenwea.recommendations.listRelatedProducts"
title: "List related products"
effect: "READ"
effect_confidence: 0.905
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.669
risk_severity: "LOW"
fingerprint: "3efd1b55436990f1ae2940b3ba8066b8fe286632919296114c60d07f96599e05"
input_schema_fingerprint: "8ebcd4118c5899b434bd21b0cb5de816a529bfc1cb29aa9b389aad2ec2d85ba4"
annotations{5}
title: "List related products"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
24{9}
name: "kenwea.reputation.getGraph"
title: "Read a reputation graph"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "9422b3b7eecd73de4c2f15e95826662c50cccc9683e3873f138f0bc1f5b1675c"
input_schema_fingerprint: "bc44c83a6cb669b9b41ede85520549ab2a81731773ba414f0d964cc21e5b9638"
annotations{5}
title: "Read a reputation graph"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
25{9}
name: "kenwea.sandbox.check"
title: "Notarize what an artifact does"
effect: "EXECUTE"
effect_confidence: 0.703
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.687
1{2}
capability: "FILE_ACCESS"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "4b9ead15ab4c1bf4662a6591fa25cb0622ba033e35acd244ef826648c1245eb0"
input_schema_fingerprint: "cdda6365a8e08738c8c84669686fb8309e45664417584f17c8551c6f00d570ac"
annotations{5}
title: "Notarize what an artifact does"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
26{9}
name: "kenwea.scale.getStatus"
title: "Read platform capacity"
effect: "WRITE"
effect_confidence: 0.703
capabilities[0]
risk_severity: "INFO"
fingerprint: "c5e45356aebb5f50588713c1783e92dc3690aede45fbd3e8e646aa99a521c1a7"
input_schema_fingerprint: "446208e6d264845ca1000c09a95814fb9f17696e17bcaba34a88a5f8a0f07da1"
annotations{5}
title: "Read platform capacity"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
27{9}
name: "kenwea.wallet.getBalance"
title: "Read wallet balance"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "269a486980a8a447babaa4b44732bcf28a96e2333e99d68d31c02831bac59d76"
input_schema_fingerprint: "446208e6d264845ca1000c09a95814fb9f17696e17bcaba34a88a5f8a0f07da1"
annotations{5}
title: "Read wallet balance"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
28{9}
name: "kenwea.wallet.listTransactions"
title: "List wallet transactions"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "6c6c35c5a8ce7b74a5245a68f47b13f63956842017c5c95fc4be1a24accb94a9"
input_schema_fingerprint: "446208e6d264845ca1000c09a95814fb9f17696e17bcaba34a88a5f8a0f07da1"
annotations{5}
title: "List wallet transactions"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.kenwea.com"
registrable_domain: "kenwea.com"
source: "transport"
findings[10]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "kenwea.scale.getStatus"
3{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "kenwea.onboarding.registerSelf"
4{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "kenwea.marketplace.publish"
5{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "kenwea.marketplace.publish"
6{6}
check_id: "SQ-TOOL-OVERLY-BROAD"
category: "tool_design"
severity: "MEDIUM"
title: "Runs arbitrary code with open-world access"
subject_type: "tool"
subject_name: "kenwea.marketplace.publish"
7{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "kenwea.marketplace.publish"
8{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "kenwea.onboarding.registerSelf"
9{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "kenwea.onboarding.startOperatorAgent"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.kenwea.www/marketplace"
registry_content_sha256: "97de7ef3e29a1e97494a0e6a24ee6521f236153d33645ecdbdcbd24a49b623ca"
scan_snapshot_fingerprint: "8d2c78d62ec996b75682623e94ce7f4a00db84de5f7d27b3f3b7538bd59ce644"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:15:36.395Z"
observed_at: "2026-11-09T06:09:40.982+00:00"
registry_published_at: "2026-10-31T22:22:12.750333+00:00"
registry_updated_at: null