MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/07149fdd-bb86-4c21-87e7-b4e8f11f7966/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.praxikon/praxikon"
title: "Praxikon"
description: "EU AI Act and GDPR checks with sources: classify an AI system, trace each duty, find the supervisor."
version: "2.3.1"
homepage_url: "https://www.praxikon.com/en/ai-assistant"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.praxikon"
display_name: "com.praxikon"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://www.praxikon.com/api/mcp"
endpoint_host: "www.praxikon.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[9]
0{9}
name: "answer_question"
title: "Answer a short general question about the AI Act or the GDPR"
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.856
risk_severity: "LOW"
fingerprint: "7c49e898456425c6100a570f69ad8669ecbbc54d8512c90068972333d64ec977"
input_schema_fingerprint: "b3340415923e6ecfab04e8a979998bdfb43cfc4c03251bbe944b9f9b616d1e43"
annotations{5}
title: "Answer a short general question about the AI Act or the GDPR"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
1{9}
name: "check_case"
title: "Case check: GDPR and EU AI Act"
effect: "READ"
effect_confidence: 0.798
capabilities[2]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.641
1{2}
capability: "PERSONAL_DATA"
confidence: 0.986
risk_severity: "CRITICAL"
fingerprint: "b2d506366af18b1945d703f7217576a63e51a2fc7063de24d8c5095375a26087"
input_schema_fingerprint: "beffce0f18c2eb7e87c49ad0d8601204b9d6ff4cf5c04812818d9d071a0a8b29"
annotations{5}
title: "Case check: GDPR and EU AI Act"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
2{9}
name: "classify_system"
title: "Classify one AI system against the routes of the Regulation"
effect: "READ"
effect_confidence: 0.857
capabilities[6]
0{2}
capability: "CRM"
confidence: 0.53
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.582
2{2}
capability: "LEGAL"
confidence: 0.63
3{2}
capability: "LOCATION"
confidence: 0.61
4{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.907
5{2}
capability: "PERSONAL_DATA"
confidence: 0.774
risk_severity: "LOW"
fingerprint: "77fd958d134b6abb17bb7c5d51c849b7df190089451e0853e89fe630feae3736"
input_schema_fingerprint: "d386a594e5e12c67450866a0c9294b7da93dc8f4c69efa438ad56b0766420472"
annotations{5}
title: "Classify one AI system against the routes of the Regulation"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
3{9}
name: "explain_applicability"
title: "The legal path behind one obligation, not only the outcome"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "LEGAL"
confidence: 0.661
risk_severity: "INFO"
fingerprint: "698703bcd7080c3c78a1a52bbf0b7ba2049a9eb0115a62d7b01fcb6fc6331879"
input_schema_fingerprint: "cf564b701cdb0de84249fa65939bbf77583309113b6a6d0ed0a687f021d1b07a"
annotations{5}
title: "The legal path behind one obligation, not only the outcome"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
4{9}
name: "export_dpia_intake"
title: "DPIA intake as a Word file"
effect: "READ"
effect_confidence: 0.762
capabilities[4]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.53
1{2}
capability: "FILE_ACCESS"
confidence: 0.735
2{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.577
3{2}
capability: "PERSONAL_DATA"
confidence: 0.779
risk_severity: "CRITICAL"
fingerprint: "ff7005dba329035030fe8b9d321a7799d1786a3448d6217c4ca669c358c70fe9"
input_schema_fingerprint: "3fb179eda32240c0ce07bfb07f2eafb3b88d169aeb5f42146afd21f4e894bad7"
annotations{5}
title: "DPIA intake as a Word file"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
5{9}
name: "get_applicable_obligations"
title: "Which obligations the decision engine indicates for one system"
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "f87e005e0d489cb55712b482a4b3a60af47075444548d6a380250e0d1dc750df"
input_schema_fingerprint: "b000bbc11b7191f2eb068d2b8d66431a0f998845a69609181bebee7c3944e45e"
annotations{5}
title: "Which obligations the decision engine indicates for one system"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
6{9}
name: "get_national_enforcement"
title: "Who supervises, per member state"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.844
risk_severity: "LOW"
fingerprint: "8592d5aa51de280f7237564a40b09c763a0c8e3d2544904b958b4f601db51ca1"
input_schema_fingerprint: "80bb45498a7338853e85165989838a53ce8de75a91aad0b78b74333b18c627c0"
annotations{5}
title: "Who supervises, per member state"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
7{9}
name: "get_source_provenance"
title: "Where a published statement comes from"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "73c6e6d1ca9082764997cb32517a5dc64c550186e6e94216f4139da0975749be"
input_schema_fingerprint: "76f842850ae56f77b6741b33c14c4a3d8bf3916930c4757d2a7d02f315296d44"
annotations{5}
title: "Where a published statement comes from"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
8{9}
name: "request_expert_review"
title: "Request a call with a human expert"
effect: "WRITE"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.74
risk_severity: "LOW"
fingerprint: "522389f258f687ab05d8232f9a95db3d247ce51205bdb05130f6ab3c861ec5e8"
input_schema_fingerprint: "a8fce4469580aaec33df679b13a8aabc471525349d9925187645d856656e44f5"
annotations{5}
title: "Request a call with a human expert"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
resources[0]
prompts[4]
0{2}
name: "ai-act-classificatie"
fingerprint: "be839822e546eab131819b249da0666c7d2abe1661ffaada9f4895d278172211"
1{2}
name: "dpia-scan"
fingerprint: "8d3e88a533b5cf5712a43fd68376fcae99cc26972e2d162a1a562c89b0c38f46"
2{2}
name: "fria-voorbereiding"
fingerprint: "82d94365a2e43af0f4bbba8b4e2a0ef65f06aaa2b4dd4147b31423df82958be2"
3{2}
name: "leverancierscheck-ai"
fingerprint: "9b5b7f1ee7adbf0663dff040ca8cd2d6c97aee45a0a5b63fc4d7f61471c1b70c"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "www.praxikon.com"
registrable_domain: "praxikon.com"
source: "transport"
findings[14]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "request_expert_review"
4{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "request_expert_review"
5{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "answer_question"
6{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "check_case"
7{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "classify_system"
8{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "explain_applicability"
9{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "export_dpia_intake"
10{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "get_applicable_obligations"
11{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "get_national_enforcement"
12{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "get_source_provenance"
13{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "request_expert_review"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.praxikon/praxikon"
registry_content_sha256: "fcf3ec235fbd96c2c78aa97259fdefd154434b63ac904186de9dec82e3fdf6d9"
scan_snapshot_fingerprint: "2d05d6fd94cf5727205739eaa9855b54b3b3a03020dfa6050232a4308c8315b1"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T01:51:39.809Z"
observed_at: "2026-11-14T13:56:12.087+00:00"
registry_published_at: "2026-10-11T12:07:49.7929+00:00"
registry_updated_at: null