MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/1ca33bc6-b177-4ccb-983c-35b057521367/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.satsdns/satsdns"
title: "SatsDNS"
description: "DNS hosting, secondary DNS and dynamic DNS paid per call in sats; optional Nostr account tools."
version: "0.2.10"
homepage_url: "https://satsdns.com/docs#mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.satsdns"
display_name: "com.satsdns"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.satsdns.com/mcp"
endpoint_host: "api.satsdns.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[21]
0{9}
name: "account_objects"
title: "Your SatsDNS account: objects, invoices, state (free, API key or signature)"
effect: "READ"
effect_confidence: 0.32
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.53
1{2}
capability: "PAYMENT"
confidence: 0.76
2{2}
capability: "SECRETS"
confidence: 0.695
risk_severity: "HIGH"
fingerprint: "c0fd075154d50844bf21f24ec91dbfbb764dff784eecaa537e0735190cea177c"
input_schema_fingerprint: "ee20e4c9a78ef8a41eb66cc41f0bf9d4622c15510ebb2e890ed8fda4aa6de11e"
annotations{5}
title: "Account objects"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "account_order"
title: "Order with your Nostr account (pay check is free; else an invoice in sats)"
effect: "WRITE"
effect_confidence: 0.697
capabilities[5]
0{2}
capability: "AUTHENTICATION"
confidence: 0.53
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.53
2{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.539
3{2}
capability: "PAYMENT"
confidence: 0.938
4{2}
capability: "SECRETS"
confidence: 0.601
risk_severity: "HIGH"
fingerprint: "45df32ff6ba41c837fd0eb938ce8a0febb505d8865d2c78f96dbaf82ec17544f"
input_schema_fingerprint: "af8d076dc0a94fb2ce40c92a2f618887ae6060da3d69845be81751e1124ae705"
annotations{5}
title: "Account order"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
2{9}
name: "check"
title: "Check a paid call and its price (free)"
effect: "READ"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.567
risk_severity: "LOW"
fingerprint: "fbd8461427cb8a5e1bd6760c550eed3eb9fc19f37f41b378adc3045a4e1f852c"
input_schema_fingerprint: "a7e046eef3943a81b772c487992cc66e228575c73e69973459311a6d1fbc9acf"
annotations{5}
title: "Check (free)"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
3{9}
name: "claim"
title: "Move a token-bought zone or hostname into your account (free, signature + token)"
effect: "WRITE"
effect_confidence: 0.87
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.817
1{2}
capability: "SECRETS"
confidence: 0.921
risk_severity: "HIGH"
fingerprint: "50c6113cfd92e70e2af2eb2e385a46dc3b0ef12d769c48217049b16eeebeb82f"
input_schema_fingerprint: "6064f5b93d6bd252945fc6b30e46e3828854983fcf2322293eacc5c78dcb0dc4"
annotations{5}
title: "Claim"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
4{9}
name: "dnssec_info"
title: "DNSSEC DS record for the registrar (free, token)"
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.857
1{2}
capability: "SECRETS"
confidence: 0.831
risk_severity: "MEDIUM"
fingerprint: "a33f8e47dcefba227e0f2547518dbaf9dca44e87b57862ee521c14a6b4b80a01"
input_schema_fingerprint: "31372a0cc90417bf79b34abba2050a390c864003cf8a7d42ae7b563433052ace"
annotations{5}
title: "DNSSEC info"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
5{9}
name: "domain_check"
title: "Domain availability and price (free)"
effect: "READ"
effect_confidence: 0.524
capabilities[0]
risk_severity: "INFO"
fingerprint: "c10e7dddb49673a9d3ba50558f705e100f7e597d0d00e60db7e54aebb962e870"
input_schema_fingerprint: "1439f25fcb90421a3e78456b25dab0b74cb6b8c9b741922f3a8d88e136324277"
annotations{5}
title: "Domain check (free)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
6{9}
name: "hostname_create"
title: "Dynamic DNS hostname under dynkite.com (200 sats 30d, 2,000 sats 1y)"
effect: "WRITE"
effect_confidence: 0.766
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "21e8307f8773e75a5f9a98af21bd9729eaf825e93605b58a3cf0da63b4ebf258"
input_schema_fingerprint: "babc3da8f8b1ea267ecd460ec55f2ae19a305bcbea513539f46c5b44e426d197"
annotations{5}
title: "Hostname create (paid)"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
7{9}
name: "hostname_reminders"
title: "Expiry reminders for a dynamic hostname by Nostr DM (free, token)"
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.857
1{2}
capability: "MESSAGING"
confidence: 0.801
2{2}
capability: "SECRETS"
confidence: 0.857
risk_severity: "MEDIUM"
fingerprint: "84af18631747131fe745a0744ba2669a2592d1fef897151071426f4c9270bd3e"
input_schema_fingerprint: "74edeed30b1523023b84a529e4e2174c7b0242a0abd71c0c3495c3a5fb49c794"
annotations{5}
title: "Hostname reminders"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
8{9}
name: "hostname_status"
title: "Dynamic hostname status (free, token)"
effect: "UNKNOWN"
effect_confidence: 0.2
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.857
1{2}
capability: "SECRETS"
confidence: 0.831
risk_severity: "MEDIUM"
fingerprint: "7432de92927030e10ab1483b2184045cd7b59b8d18379d9a334f5569adf2c8bd"
input_schema_fingerprint: "4512ea4929705a7c1dcc15a5b80ea15796aa80d21d4cc72889f3edd159b9d2e7"
annotations{5}
title: "Hostname status"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
9{9}
name: "hostname_update"
title: "Update a dynamic hostname's addresses (free, token)"
effect: "WRITE"
effect_confidence: 0.697
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.857
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.718
2{2}
capability: "SECRETS"
confidence: 0.831
risk_severity: "HIGH"
fingerprint: "1634525fef4c084e1ae6339ff537761a164de1bf8388037bfac3628d1df3195a"
input_schema_fingerprint: "913e3e84682059c9d086de44b24f3b79e6d8bc8b12a03d6a7ebf84d11d67b585"
annotations{5}
title: "Hostname update"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
10{9}
name: "info"
title: "Prices, nameservers and how to pay (free)"
effect: "UNKNOWN"
effect_confidence: 0.2
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.53
risk_severity: "LOW"
fingerprint: "65b00d573a4867d025b7591f51626deee8fc06355a0bffda8376d9753f909794"
input_schema_fingerprint: "d746974fa9afd5e951f76f9af38954b0ad7f436f2120dc974da65e5ee39f856f"
annotations{5}
title: "Info (free)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
11{9}
name: "order_status"
title: "Status of an account order's invoice (free, API key or signature)"
effect: "WRITE"
effect_confidence: 0.703
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.53
1{2}
capability: "PAYMENT"
confidence: 0.844
2{2}
capability: "SECRETS"
confidence: 0.695
risk_severity: "HIGH"
fingerprint: "182229b9c85f078aace959cba03baf02f4ce1399a56a0dad15270abc1838ec60"
input_schema_fingerprint: "de43732950232fade973f852b7e26b358ecf63afbcf844853e84bfb90c993a48"
annotations{5}
title: "Order status"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
12{9}
name: "records_change"
title: "Change DNS records (free, token)"
effect: "WRITE"
effect_confidence: 0.848
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.857
1{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.767
2{2}
capability: "SECRETS"
confidence: 0.831
risk_severity: "HIGH"
fingerprint: "2891c47637b7aee30066fd7ecc804cb82e684672083799d7fd53961f2158ec26"
input_schema_fingerprint: "19c12992997b10f71fe20ef61f9542d5a0260f1b5417b74b0ce5e747bcd7d2ca"
annotations{5}
title: "Records change"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
13{9}
name: "records_list"
title: "List DNS records (free, token)"
effect: "READ"
effect_confidence: 0.76
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.857
1{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.767
2{2}
capability: "SECRETS"
confidence: 0.831
risk_severity: "HIGH"
fingerprint: "0f7563c8ae4d5236b53c6005766ca4a888094792a6c499100303a6db6f2d7db8"
input_schema_fingerprint: "0791fccdd40087c956112e548f31dbc742d1bef0644761b5f442b26c86305e8d"
annotations{5}
title: "Records list"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
14{9}
name: "renew"
title: "Renew a zone (500 / 5,000 sats) or hostname (200 / 2,000 sats)"
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "LOW"
fingerprint: "0c7114a390e313059f67135178c306e10e8a77989b92b5610d3bb16eebb789a5"
input_schema_fingerprint: "926b0c6e440fad72621e9055bafa11472315c8bf0e6d47da9f20ce0e3ac50677"
annotations{5}
title: "Renew (paid)"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
15{9}
name: "renewal_address"
title: "Lightning address that renews a zone or hostname (free, token)"
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.857
1{2}
capability: "SECRETS"
confidence: 0.831
risk_severity: "MEDIUM"
fingerprint: "c997e50e598c88cec3c23619e105fd229ded8a7362fe3dd220f73aec4de25e9e"
input_schema_fingerprint: "9f8ec32c762b975f291147b48b3410f478b46f5259a4ea11c4f24542380d424a"
annotations{5}
title: "Renewal address"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
16{9}
name: "secondary_create"
title: "Secondary DNS for your zone (500 sats 30d, 5,000 sats 1y)"
effect: "WRITE"
effect_confidence: 0.639
capabilities[1]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.641
risk_severity: "HIGH"
fingerprint: "4d98bbe64b0f495742259da53377c7677913f65f922767437861df9027db863f"
input_schema_fingerprint: "5a28916b692d9b304ce17c01a48da08ef706e1278742d38f2b0acbc089eead1e"
annotations{5}
title: "Secondary create (paid)"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
17{9}
name: "token_rotate"
title: "Replace a management token (free, token or signature)"
effect: "ADMIN"
effect_confidence: 0.5
capabilities[2]
0{2}
capability: "SECRETS"
confidence: 0.751
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.5
risk_severity: "HIGH"
fingerprint: "3c1b6ba87a4f665d43c12b1ac421f9b68e8a02525f182a4f519c7803f95e4964"
input_schema_fingerprint: "977d67f42e6b2234d48f0653788fc18142bcf464c31996cf703dd5f71cdd9a24"
annotations{5}
title: "Token rotate"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: true
18{9}
name: "zone_add_queries"
title: "Add 1 million queries to a zone (200 sats)"
effect: "ADMIN"
effect_confidence: 0.45
capabilities[1]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.586
risk_severity: "HIGH"
fingerprint: "dcc3a5a40f2fcf2814e615bfe3baaa87cff099bcccb0efe73bd49eb70f2e581e"
input_schema_fingerprint: "eb0c170b74a1aafd206c84b921528f18367fec406c9c33e9962c93ab1c0355f7"
annotations{5}
title: "Add queries (paid)"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
19{9}
name: "zone_create"
title: "Host a DNS zone (500 sats 30d, 5,000 sats 1y)"
effect: "WRITE"
effect_confidence: 0.766
capabilities[1]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.731
risk_severity: "HIGH"
fingerprint: "4b035ba97d5ffc7b3c92c95a656c818def5ee309233414a3ad5914a5988906ff"
input_schema_fingerprint: "e4abf7ac27b2a5dbe260cf5c47d7902eea54ffac5f5ca9b0daeab32c03c4f7e3"
annotations{5}
title: "Zone create (paid)"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
20{9}
name: "zone_status"
title: "Zone status (free, token)"
effect: "UNKNOWN"
effect_confidence: 0.2
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.857
1{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.586
2{2}
capability: "SECRETS"
confidence: 0.831
risk_severity: "MEDIUM"
fingerprint: "156328a032eb809b8132d16aaff2e1a5a54ef6e444793622fe75703872340e59"
input_schema_fingerprint: "31372a0cc90417bf79b34abba2050a390c864003cf8a7d42ae7b563433052ace"
annotations{5}
title: "Zone status"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.satsdns.com"
registrable_domain: "satsdns.com"
source: "transport"
findings[44]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "account_objects"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "account_order"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "claim"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "dnssec_info"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "dnssec_info"
8{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "hostname_create"
9{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "hostname_reminders"
10{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "hostname_reminders"
11{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "hostname_status"
12{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "hostname_status"
13{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "hostname_update"
14{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "hostname_update"
15{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "order_status"
16{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "records_change"
17{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "records_change"
18{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "records_list"
19{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "records_list"
20{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "renewal_address"
21{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "renewal_address"
22{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "secondary_create"
23{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "token_rotate"
24{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "zone_create"
25{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "zone_status"
26{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "zone_status"
27{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "account_objects"
28{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "account_order"
29{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "claim"
30{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "order_status"
31{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "token_rotate"
32{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "dnssec_info"
33{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "hostname_reminders"
34{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "hostname_status"
35{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "info"
36{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "renewal_address"
37{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "zone_status"
38{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "account_objects"
39{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "account_order"
40{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "claim"
41{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "order_status"
42{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "token_rotate"
43{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "token_rotate"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.satsdns/satsdns"
registry_content_sha256: "95e9d08199a3bcdeea889985540fbe1125baf3f22418c25d1bbb43729ac36cff"
scan_snapshot_fingerprint: "f6757a51964f7d44b26041bce6eaa8ba6a3df8e4df478872cce55b1098e79ce8"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:36:57.912Z"
observed_at: "2026-11-12T06:24:25.895+00:00"
registry_published_at: "2026-11-12T05:05:09.214596+00:00"
registry_updated_at: null