MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/404f08a5-1b1f-44c1-aa36-a9a7d16d8080/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.scopelinq/scopelinq"
title: "ScopeLinq"
description: "Reads what was agreed and answers whether a new request is Included, citing only confirmed lines."
version: "1.0.0"
homepage_url: "https://scopelinq.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.scopelinq"
display_name: "com.scopelinq"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.scopelinq.com/mcp"
endpoint_host: "mcp.scopelinq.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[2]
0{9}
name: "check_scope_change"
title: "Check a request against what was agreed"
effect: "READ"
effect_confidence: 0.933
capabilities[0]
risk_severity: "INFO"
fingerprint: "47f6feadcd434f3d814fb682ff0fa7395e176f1f8743b9896939698caf858092"
input_schema_fingerprint: "98ce84623e13709fe43f4a9b905b22c4745727dac5c8091c04de56035022e670"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
1{9}
name: "draft_scope_record"
title: "Read what was agreed"
effect: "WRITE"
effect_confidence: 0.703
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.87
1{2}
capability: "LEGAL"
confidence: 0.567
2{2}
capability: "PERSONAL_DATA"
confidence: 0.66
risk_severity: "HIGH"
fingerprint: "f438d636643cefce285689aa2f00f8b71aa601e055344b47c4c4887d41fb6098"
input_schema_fingerprint: "8cd4b3d9bea566027c4b1e893b533743dd782fbe70226237b915003b81a1f730"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.scopelinq.com"
registrable_domain: "scopelinq.com"
source: "transport"
findings[3]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "draft_scope_record"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.scopelinq/scopelinq"
registry_content_sha256: "18705215fc12b990eeff9722e2834c6392c123f88cb2c8e4c564ce26f3de7bef"
scan_snapshot_fingerprint: "3a2fc63be37480db8bc0192cb58b5d748d3e817af5a0211869c0e52e5cef7975"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T01:51:44.266Z"
observed_at: "2026-11-14T23:11:06.097+00:00"
registry_published_at: "2026-09-15T20:33:31.652458+00:00"
registry_updated_at: null