Skip to content
Squatch MCP

MCP Bill of Materials

A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/9a44ef04-b0fb-44fd-9a6d-2742939a6e89/mcbom.

MCP Bill of Materials

root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.securitystartups/catalog"
title: "Security Startups"
description: "Search a curated directory of young security companies and its CC BY 4.0 stats. Read-only, no key."
version: "0.2.0"
homepage_url: "https://securitystartups.com/for-agents"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.securitystartups"
display_name: "com.securitystartups"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://securitystartups.com/mcp"
endpoint_host: "securitystartups.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[6]
0{9}
name: "check_if_listed"
title: "Check if a company is listed"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "6cb24aabe0ca1e0c612959a2a5858242186796c6fb458c268f28b7e82f942893"
input_schema_fingerprint: "2d67dc195149a2f5416c608d36997233038183f5dd2174d364277e9a02ac2330"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "get_startup"
title: "Get one security startup"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "1b94d695d3b5870cd7230ebe7fb4b156aee1faffd6c48cdcb3afce58c77c4267"
input_schema_fingerprint: "288a9a5113a0cc0e384f334dbfd0fab9c5389ffcc2cfc96b9f8ce902bdf94251"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_stats"
title: "Get directory stats"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "fb872c6e7c0aa6fc770cc9d6980e91b7b5bd1b590aca6ef9a30c0eeac7d074b9"
input_schema_fingerprint: "cd222ec32aa7925d704c8f3096c9768581bea7b4e628988294ab5b13dbe7481a"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "get_stats_history"
title: "Get stats history"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "6baf5f3edb7c3542921dff6c70fead832d72021e9cc99e46754840bc6277bd64"
input_schema_fingerprint: "87b0a6ff27bfc96b9a73e9b3ca516cb618e08eca32d01275c04b9b87e5a169a2"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "list_categories"
title: "List categories"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "269c1c64a9e3fa39a8850ad1673ea8c004e8d1ed1d843e996ad8e028c763cd27"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "search_startups"
title: "Search security startups"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.669
risk_severity: "INFO"
fingerprint: "498b1d1a4bc327923fa1f20ea53b1e7b3bab03352459eb684c4e09b8ead1f6e7"
input_schema_fingerprint: "0ee18581cf25586d1cd8fff44d62dbeaa0c60b7a4de0dbcb2ade68d82aefa901"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "securitystartups.com"
registrable_domain: "securitystartups.com"
source: "transport"
findings[1]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.securitystartups/catalog"
registry_content_sha256: "3c46bcc8eb65ffac30d20d981d48b5e352915a9a8ee81414080ac9c1e9285c51"
scan_snapshot_fingerprint: "7314e37f9367266b12ce4c17c758f9c50766c64dbb638e8eb67432698b8fb97e"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:50:40.364Z"
observed_at: "2026-11-13T08:08:03.015+00:00"
registry_published_at: "2026-11-04T10:35:53.980975+00:00"
registry_updated_at: null