MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/fda5d97d-9795-4f2d-8d83-ec5f4cee5766/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.newsmcp/newsmcp"
title: "NewsMCP"
description: "Live world news deduplicated into story events, with corroboration counts and source links."
version: "1.0.0"
homepage_url: "https://newsmcp.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.newsmcp"
display_name: "com.newsmcp"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.newsmcp.com/mcp"
endpoint_host: "mcp.newsmcp.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[5]
0{9}
name: "check_coverage"
title: null
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "3d3e7521883230785eab242778e8e773105f230fb70b4dbf7da50ab5434788aa"
input_schema_fingerprint: "6e6cdabde74e3faab0e6e7fa8d06d07bb9cab14df1d2284ae621d20bafbf7537"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: true
1{9}
name: "check_health"
title: null
effect: "READ"
effect_confidence: 0.869
capabilities[2]
0{2}
capability: "HEALTH"
confidence: 0.575
1{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.575
risk_severity: "MEDIUM"
fingerprint: "d3dca9ea81cbf1f2ac93f309d047db63501b15fe0d11b8184967cd64bda7aa55"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
2{9}
name: "check_limits"
title: null
effect: "READ"
effect_confidence: 0.889
capabilities[0]
risk_severity: "INFO"
fingerprint: "3f95d6e2ef1426f3e6153592861229fad113f3eb3e8abd224f89b1143f8e3d4c"
input_schema_fingerprint: "e067d028bade9915e971a9aed964f67da7cacbb70077204c4d1b3d7adb4cd407"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
3{9}
name: "get_story"
title: null
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "e3c66a0f19646c6a648f78c3b15d029c7745a6b27347f89b3f982f2fc58cd045"
input_schema_fingerprint: "2dad3241be465cceb7c756db5237202a0a0ca9cad518f2829073f7109f5cd087"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: true
4{9}
name: "news"
title: null
effect: "WRITE"
effect_confidence: 0.703
capabilities[2]
0{2}
capability: "CALENDAR"
confidence: 0.584
1{2}
capability: "PERSONAL_DATA"
confidence: 0.556
risk_severity: "LOW"
fingerprint: "ca8b2f1a943d99f8f265687906f59e79cfea767de600cb135dc681497d632b0f"
input_schema_fingerprint: "2b6bc88192fa5f3b83d97c7122ac602f63c6228c7f772c9daaae2a6dfa30b65c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: true
resources[1]
0{4}
key: "config://api-base-url"
kind: "resource"
mime_type: "text/plain"
fingerprint: "3b783b5256c95874bd57ddf7f9b3aa425f3b9a727bf0faabaf58f2f373b72e32"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/ui"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.newsmcp.com"
registrable_domain: "newsmcp.com"
source: "transport"
findings[8]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "CRITICAL"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "news"
4{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "news"
5{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "news"
6{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "LOW"
title: "Unusually long model-facing text"
subject_type: "server"
subject_name: null
7{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "LOW"
title: "Unusually long model-facing text"
subject_type: "tool"
subject_name: "news"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.newsmcp/newsmcp"
registry_content_sha256: "bcf613a40d668308e699d4552799a289f0d573eb1c97d90c362d14d3e907708e"
scan_snapshot_fingerprint: "11d55e743735ba466800eaa4c0a02ed488d3d4deed3a80dc1ccecee389526436"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:00:19.383Z"
observed_at: "2026-11-14T12:03:06.308+00:00"
registry_published_at: "2026-09-02T16:21:13.697627+00:00"
registry_updated_at: null