MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/633d1c32-7dde-4574-9177-576e4deb370a/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.scorefluent/scorefluent"
title: "ScoreFluent"
description: "English exam prep: exam facts, practice questions and writing scores for PTE, IELTS, TOEFL."
version: "0.1.0"
homepage_url: "https://scorefluent.com/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.scorefluent"
display_name: "com.scorefluent"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.scorefluent.com/mcp/copilot"
endpoint_host: "api.scorefluent.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[9]
0{9}
name: "check_read_aloud"
title: "Check a Read Aloud transcript"
effect: "READ"
effect_confidence: 0.796
capabilities[0]
risk_severity: "INFO"
fingerprint: "356a1ba132e3d3774e469b1e4c9b7ccabbdb9791cb0a18acfa2e3b432e7d53b1"
input_schema_fingerprint: "48c9ea8cfe9b32878fae105e0fdb8304200930b2b57db115bd916e1126208e3e"
annotations{5}
title: "Check a Read Aloud transcript"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
1{9}
name: "exam_overview"
title: "Exam overview"
effect: "READ"
effect_confidence: 0.422
capabilities[0]
risk_severity: "INFO"
fingerprint: "1c0dc8f369a65d3d3c356e207aa9329129d44d11a9d324e063b3c369bf8fbd56"
input_schema_fingerprint: "1531ce56bc8a29bf4d8db571d9747968bb88ed879cc26dba04fa30e0bb422e23"
annotations{5}
title: "Exam overview"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
2{9}
name: "practice_question"
title: "Practice question"
effect: "READ"
effect_confidence: 0.422
capabilities[0]
risk_severity: "INFO"
fingerprint: "0aeb148c2e1909ef3c9e2cda9b047e50b4ca13d967931376edd4d5fa89acf740"
input_schema_fingerprint: "b14e383130b54b4cbf704a36ffb04be36b99b4118dc8315cc7acfc50f1d154f6"
annotations{5}
title: "Practice question"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
3{9}
name: "recorder_confirm"
title: "Submit a recording"
effect: "WRITE"
effect_confidence: 0.835
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "450af5871f3e69458d81fdfb0127c21bb3e05c079f68390a399a9ae74798a1c7"
input_schema_fingerprint: "d0938917a8f1cb2f1270d4b4a7a1f5215cefb14b41421b1662dbec2e7afc803c"
annotations{5}
title: "Submit a recording"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
4{9}
name: "recorder_result"
title: "Recording result"
effect: "READ"
effect_confidence: 0.626
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "bc0c1fd92d8181abc5f9ff6aa51b2b735c9b3a9432f3b6d0b8e129ea760d29c5"
input_schema_fingerprint: "d0938917a8f1cb2f1270d4b4a7a1f5215cefb14b41421b1662dbec2e7afc803c"
annotations{5}
title: "Recording result"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
5{9}
name: "recorder_start"
title: "Start a recording"
effect: "WRITE"
effect_confidence: 0.86
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.592
risk_severity: "MEDIUM"
fingerprint: "885db568fbe35510d5cb136b9aafebcfd15d07923c0041f6efd4e3d3688087b8"
input_schema_fingerprint: "d59af8829a0e08498904a616f5549d5fe47adbf4e60509b189adb7ba8dd0d6b2"
annotations{5}
title: "Start a recording"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
6{9}
name: "score_writing"
title: "Score writing"
effect: "WRITE"
effect_confidence: 0.575
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.632
risk_severity: "LOW"
fingerprint: "f10e40c7693062b2947d833482d2898a0aceece8393f8a80050ef2a290e8cec8"
input_schema_fingerprint: "c530d21ceadca7cfcc86397888c8dc3a41949708ba879d70bba2c9c54a9c5a6a"
annotations{5}
title: "Score writing"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
7{9}
name: "speak_practice"
title: "Speaking practice"
effect: "READ"
effect_confidence: 0.422
capabilities[0]
risk_severity: "INFO"
fingerprint: "fb28a14889d4cb63e6717cbc9aa821599e7704e48136f962cd7faa98d9bf5bdb"
input_schema_fingerprint: "a9a59ef64912e9f3c7d9b2ede31ad0c96741a972b243c187b83ad0a914e74671"
annotations{5}
title: "Speaking practice"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
8{9}
name: "start_diagnostic"
title: "Start a diagnostic"
effect: "WRITE"
effect_confidence: 0.79
capabilities[0]
risk_severity: "LOW"
fingerprint: "1658f22d572b76292fd31c4f8488ed94a764f818a249f2bafc8de70ead1a849f"
input_schema_fingerprint: "5a5f315f48dc25c6f9d9d093b7def7cddb10ad5fc172ee875cbe8bfe6d95b40b"
annotations{5}
title: "Start a diagnostic"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
resources[1]
0{4}
key: "ui://scorefluent/recorder"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "dd1e7494e374553bb3fe42cdcf69c20a71d23bb98f88ad7204c54b6df58594a5"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.scorefluent.com"
registrable_domain: "scorefluent.com"
source: "transport"
findings[9]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "start_diagnostic"
3{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "speak_practice"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "recorder_confirm"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "recorder_result"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "recorder_start"
7{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "LOW"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "check_read_aloud"
8{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "score_writing"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.scorefluent/scorefluent"
registry_content_sha256: "34da1654ca4fe910f783ea345ba06c6a761456ebd436f17fe7c3d817c4f9c7d2"
scan_snapshot_fingerprint: "afc86c39067beb1c0514c5f73a36e8275ecde2cbe530f0e9d34967036ad60ee9"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:03:49.172Z"
observed_at: "2026-11-05T10:44:25.506+00:00"
registry_published_at: "2026-11-05T10:00:11.715268+00:00"
registry_updated_at: null