MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/d075b8e9-1a8c-465f-8f7c-2e2d16c0e2ab/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.ribqa/sentinel-aleph"
title: "Sentinel Aleph"
description: "Crypto signals, public ledger, BTC chart read, news, your strategies and backtests. No trading."
version: "2.1.0"
homepage_url: "https://ribqa.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.ribqa"
display_name: "com.ribqa"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://ribqa.com/api/v1/mcp"
endpoint_host: "ribqa.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[17]
0{9}
name: "create_strategy"
title: "Create strategy"
effect: "WRITE"
effect_confidence: 0.917
capabilities[0]
risk_severity: "LOW"
fingerprint: "58574c2758f73dfe2e0310fb9159f2bb654eb36b3a7676f6297450c5354642c9"
input_schema_fingerprint: "dc4e0a9673b47e406622e69c2c44b0389304f86bd31dae9e6007374f94153f64"
annotations{5}
title: "Create strategy"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
1{9}
name: "delete_strategy"
title: "Delete strategy"
effect: "DELETE"
effect_confidence: 0.843
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "edcc8719edab592dcfc1d02999fe96c2f39b58b34b2219e713aa968d2eaae3d4"
input_schema_fingerprint: "9370a2245698be2dcc7da2fbf7405988a6aa5c018992bfadc30101fb84c0a96d"
annotations{5}
title: "Delete strategy"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
2{9}
name: "get_backtest"
title: "Backtest"
effect: "READ"
effect_confidence: 0.869
capabilities[0]
risk_severity: "INFO"
fingerprint: "497fc317d6f94cca65acd3bfbe463f3efb45898d1927f1e8d5d314012a6ae0da"
input_schema_fingerprint: "c803b6be47dabef4c103c608d5759a806a4f7910b00a902a4d55ebda31349717"
annotations{5}
title: "Backtest"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "get_before_you_trade"
title: "Before you trade"
effect: "READ"
effect_confidence: 0.889
capabilities[0]
risk_severity: "INFO"
fingerprint: "cb33c86973dfbfa949efd080c799420aecc7bf2e1261328c36de7fb4b63d34ce"
input_schema_fingerprint: "ea8dab772d4767a00d6d84ee6b987ca055c0a156c1402a9fdcf8f6f523351636"
annotations{5}
title: "Before you trade"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "get_btc_chart_read"
title: "BTC chart read"
effect: "READ"
effect_confidence: 0.889
capabilities[0]
risk_severity: "INFO"
fingerprint: "321c059e2bca89f21767a4817b9e7921b05b48854878f7b5577fec1c5f96a393"
input_schema_fingerprint: "70f1142ce5a31c056143ca178b56f17918c1ff3a96cb51b32e6f59305a80a820"
annotations{5}
title: "BTC chart read"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "get_market_snapshot"
title: "Market snapshot"
effect: "READ"
effect_confidence: 0.889
capabilities[0]
risk_severity: "INFO"
fingerprint: "aebf67f981bd6cd802d44ea86981fd19238ea3e94923f861c5bf44ec53a9af6c"
input_schema_fingerprint: "4b08816159b674734ef638782b67d058823b806255f6815de0c5579fab8ee956"
annotations{5}
title: "Market snapshot"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "get_my_backtests"
title: "My backtests"
effect: "READ"
effect_confidence: 0.869
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.567
risk_severity: "HIGH"
fingerprint: "e28179ce5e971e45cfdd00b0d3e0561d89b58912dc3d6325b6ab06b048a4251f"
input_schema_fingerprint: "4d5ed0138d87eeaaa6e358d38a045d45037d296f2db55748af77061a3725cc1d"
annotations{5}
title: "My backtests"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "get_my_bots"
title: "My bots"
effect: "READ"
effect_confidence: 0.889
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.567
risk_severity: "HIGH"
fingerprint: "6ac35e8abe09a48f21a175dbc36cf9e8ed9529895207da993aa77e19573a55d2"
input_schema_fingerprint: "d746974fa9afd5e951f76f9af38954b0ad7f436f2120dc974da65e5ee39f856f"
annotations{5}
title: "My bots"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "get_my_strategies"
title: "My strategies"
effect: "READ"
effect_confidence: 0.869
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.567
risk_severity: "HIGH"
fingerprint: "1db0fa729ead702c1adcd91fd3d5ec3c7b7b8cc798b227f2ede3733fe02350be"
input_schema_fingerprint: "4fcbf724f5b1fe979b1472196d108e750d922283b202f2f2353cc43ac1ca5319"
annotations{5}
title: "My strategies"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "get_news"
title: "Crypto news"
effect: "READ"
effect_confidence: 0.889
capabilities[0]
risk_severity: "INFO"
fingerprint: "15afc9cdcd70f08db69c62f8c611c0fbfc8ed94b4e84537b1a019f5cdd246616"
input_schema_fingerprint: "c6e33c3ef3a5ea278c5897d58234117352fa4cd2c67605a05d17c53849bf229a"
annotations{5}
title: "Crypto news"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "get_open_signals"
title: "Open signals"
effect: "READ"
effect_confidence: 0.933
capabilities[0]
risk_severity: "INFO"
fingerprint: "4f56fbd328ba4dbd36d04a7417562f0b1ba7364eff92a9df915303bd52d37041"
input_schema_fingerprint: "b89cc28557947f219f4883165cc27ab38b5383019e65cbb6bbe65af575681c19"
annotations{5}
title: "Open signals"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "get_signal_ledger"
title: "Signal ledger"
effect: "READ"
effect_confidence: 0.846
capabilities[0]
risk_severity: "INFO"
fingerprint: "5920d554888f8afef7a932a0f08ccacae10cb3a5203d48e54b0f01a935272649"
input_schema_fingerprint: "37c6d73230992e1a0b7fc5ac8bfb3f58c00e08fca1f07d1ed070f9a8a8e7259d"
annotations{5}
title: "Signal ledger"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
12{9}
name: "get_strategy"
title: "Strategy"
effect: "READ"
effect_confidence: 0.869
capabilities[0]
risk_severity: "INFO"
fingerprint: "92cd9eb08e93d23ba0bdad65482fc64f61c904adfa04a6de6ae4f0b7f26632c2"
input_schema_fingerprint: "c418225e5f6216bd5addb58c4ca5c2dca37e5289a979121973a6708d9f77cc67"
annotations{5}
title: "Strategy"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
13{9}
name: "get_ticker"
title: "Ticker"
effect: "READ"
effect_confidence: 0.889
capabilities[0]
risk_severity: "INFO"
fingerprint: "5f5bb4a25025477c5529851740fa035910fbab223a7678f2b70c7306b1ea7487"
input_schema_fingerprint: "9450e57d9ff7bd24d7e601138852b39d475b32e76306d2b3680f2b08b6e4f3a0"
annotations{5}
title: "Ticker"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
14{9}
name: "get_vetoed_signals"
title: "Vetoed signals"
effect: "READ"
effect_confidence: 0.889
capabilities[0]
risk_severity: "INFO"
fingerprint: "7ae04d16ff5bba0d5813fec43ceb6cfea6e5b8e4bfa6f3c724f2344ef88b7c84"
input_schema_fingerprint: "508a5d6c62198063dae1706a9629142517173e0e2ded0be8bd31ec5484e4f79a"
annotations{5}
title: "Vetoed signals"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
15{9}
name: "run_backtest"
title: "Run backtest"
effect: "EXECUTE"
effect_confidence: 0.79
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.73
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.688
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "HIGH"
fingerprint: "5e1c295eacb21c67c63f11c502c67896857f122d489d6067f310dab367e9e336"
input_schema_fingerprint: "89e667062364fee5cd0fc2dc84fc10fc280522040586786f26da95ecc26885f6"
annotations{5}
title: "Run backtest"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
16{9}
name: "update_strategy"
title: "Update strategy"
effect: "WRITE"
effect_confidence: 0.917
capabilities[0]
risk_severity: "LOW"
fingerprint: "6010969abcc8613023588e39a9df719fae9db5c815dd61d73df460e98f147c06"
input_schema_fingerprint: "e3cf6b0db03e61e3c862f2d178e981ec359b214232ad75261e0abf1f9e71ca44"
annotations{5}
title: "Update strategy"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "ribqa.com"
registrable_domain: "ribqa.com"
source: "transport"
findings[6]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "get_before_you_trade"
3{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_signal_ledger"
4{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "update_strategy"
5{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "get_market_snapshot"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.ribqa/sentinel-aleph"
registry_content_sha256: "531292fd43f00cc4ae0406111bc183c1fed134e0f9916e52c0d079b9c0be584d"
scan_snapshot_fingerprint: "aac555e50b19ee53cad9af9bf671c9ba116f13ed24192e4b696d8bb933943abd"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:59:18.202Z"
observed_at: "2026-11-06T10:30:56.31+00:00"
registry_published_at: "2026-10-22T14:50:48.469276+00:00"
registry_updated_at: null