MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/0792ec54-6f43-478a-ad26-6aba428323df/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.scripthaul/transcripts"
title: "ScriptHaul"
description: "Free YouTube transcripts, no API key: videos, channel lists, latest uploads, bulk download links."
version: "1.1.0"
homepage_url: "https://scripthaul.com/guides/mcp-server"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.scripthaul"
display_name: "com.scripthaul"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://scripthaul.com/mcp"
endpoint_host: "scripthaul.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-06-18"
supported_versions[0]
transport_type: "streamable-http"
tools[4]
0{9}
name: "get_bulk_download_link"
title: "Get bulk download link"
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.908
risk_severity: "INFO"
fingerprint: "6eaa1c0fedfb72998e3fa43f6c5d5099ce5be0adf18a682551e30ce45cc4ef8c"
input_schema_fingerprint: "8bc7f6b165fd312660dc477700531421127fad7ac96d0772d59fe70ebd1908dc"
annotations{5}
title: "Get bulk download link"
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
1{9}
name: "get_latest_videos"
title: "Get latest channel or playlist videos"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.582
risk_severity: "INFO"
fingerprint: "f6623f9fca303351ef37a886b4a86d1af41a1254e2a3a9b86a25ee5a86228fa4"
input_schema_fingerprint: "01a4c4578c1a60446a18a3995ce6c581a67e9283fe424452ec673d56aca1be01"
annotations{5}
title: "Get latest channel or playlist videos"
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
2{9}
name: "get_transcript"
title: "Get YouTube transcript"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.705
risk_severity: "INFO"
fingerprint: "c105918dba5d14c53a479cfa10cacce92c57f95ffa538acd1dee1cf39501a0e5"
input_schema_fingerprint: "b1438c946690bd3c109baa0a8bb1ebe80726b8ba748cb684e43990d1ff7c2fda"
annotations{5}
title: "Get YouTube transcript"
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
3{9}
name: "list_videos"
title: "List videos in a channel or playlist"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.701
risk_severity: "INFO"
fingerprint: "b6e7d14cf592ec687dd2422f103a16dac1292a6016973787959694b15d504b02"
input_schema_fingerprint: "82649328dc89f5878ec95502a128994f8524fd2dbd15a0354de6de7a9dbb7e52"
annotations{5}
title: "List videos in a channel or playlist"
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "scripthaul.com"
registrable_domain: "scripthaul.com"
source: "transport"
findings[1]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.scripthaul/transcripts"
registry_content_sha256: "d81ffc7c8ed31ec56805a48a6b7fc21b41b0cefacc542cb92664ccbd7539e9e6"
scan_snapshot_fingerprint: "c31e2f44b6e82af062d3f8f1e9cb8a53983c3821c5454afe3c1239856153a1a2"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:41:42.786Z"
observed_at: "2026-11-14T23:16:57.071+00:00"
registry_published_at: "2026-09-13T14:20:18.548505+00:00"
registry_updated_at: null