a4sx sessions
com.session-exchange/sessions
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/16e02219-62c1-4d8d-a572-4ce26afd0179/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.session-exchange/sessions"
title: "a4sx sessions"
description: "Search reviewed coding-agent sessions on a4sx anonymously; sign in (OAuth) to load or save sessions."
version: "0.1.2"
homepage_url: "https://session-exchange.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.session-exchange"
display_name: "com.session-exchange"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/crossvault/a4sx-mcp"
provider: "github"
owner: "crossvault"
name: "a4sx-mcp"
verified: false
packages[1]
0{4}
registry_type: "pypi"
identifier: "a4sx-mcp"
version: "0.1.0rc2"
transport: "stdio"
transports[2]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://session-exchange.com/mcp"
endpoint_host: "session-exchange.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[7]
0{9}
name: "acquire_session"
title: "Acquire session"
effect: "ADMIN"
effect_confidence: 0.533
capabilities[0]
risk_severity: "INFO"
fingerprint: "85bd9d94ad788e096e0645234a2df3fb2f41d489c1c6d091b03a81f4980d5ea1"
input_schema_fingerprint: "712275eb94b83ca28d6ed600f1d9b2061e238dbdf5a07f47f1fc5cd14f52864e"
annotations{5}
title: "Acquire session"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "fetch_session_context"
title: "Load session as context"
effect: "READ"
effect_confidence: 0.832
capabilities[1]
0{2}
capability: "AUTHENTICATION"
confidence: 0.915
risk_severity: "INFO"
fingerprint: "1cd8f6686a890c20ea74f9f351c13dcaf348eb46f510ab1ec4feb5b18f64de91"
input_schema_fingerprint: "13c7727861ee5a742ae4e657e6593e0f26208f60c55c933f0c650e608596f822"
annotations{5}
title: "Load session as context"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_purchase_request"
title: "Purchase request status"
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "dd7c08c790e4c55441f574eb238be4682385ee2341f0e12245d8a1e3101e1321"
input_schema_fingerprint: "e4a82b68d6609031718c20f6df058838579724267a9c62e0e0506f994eb58de9"
annotations{5}
title: "Purchase request status"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "get_session_summary"
title: "Session summary"
effect: "READ"
effect_confidence: 0.846
capabilities[0]
risk_severity: "INFO"
fingerprint: "068946d2afe2378c647c2568782a419018e23f72921c4a2f31567350c3bd1048"
input_schema_fingerprint: "9960237c63af9ea52d11796b013d1dde51bcbde8fd2c1fd8d08b89b7ae60b8c2"
annotations{5}
title: "Session summary"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "publish_session"
title: "Save session to library"
effect: "WRITE"
effect_confidence: 0.917
capabilities[0]
risk_severity: "LOW"
fingerprint: "8839686622495db26fc8a89dc3bcdf54b8259cd4398cbde786fb2f1faef4b0f4"
input_schema_fingerprint: "357a9991f0172342880347546f8ee8eca9ab3b92a28231d4186c374493438320"
annotations{5}
title: "Save session to library"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
5{9}
name: "request_purchase"
title: "Request a purchase"
effect: "WRITE"
effect_confidence: 0.881
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.724
risk_severity: "HIGH"
fingerprint: "9c803d968b8d257662d7df1787098190a82a3e189c65886902563e28dbb97138"
input_schema_fingerprint: "5a9be9c56a0fb9318e47e191262555b64ed8bcb38198a7010d9d4049c66c7dda"
annotations{5}
title: "Request a purchase"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
6{9}
name: "search_sessions"
title: "Search sessions"
effect: "READ"
effect_confidence: 0.933
capabilities[0]
risk_severity: "INFO"
fingerprint: "859ae0f467b1b14ba93ddf83db881c1b3c0896f255ba0c9c08326d2f2f90946e"
input_schema_fingerprint: "2b685650efd7dd7cb7fb3a8af0b792b350eb48df3e1c6b1d9995ec95ca675abd"
annotations{5}
title: "Search sessions"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "session-exchange.com"
registrable_domain: "session-exchange.com"
source: "transport"
findings[5]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "publish_session"
3{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "LOW"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "publish_session"
4{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "publish_session"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.session-exchange/sessions"
registry_content_sha256: "ec3a49b1ef2435e523e6743f9d5462d239fe485a81426c42a10c6cecb763c3f5"
scan_snapshot_fingerprint: "e493ab974a040a78981690a86e6edb3b287816df9113a8737fdd48bc3e516c2e"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:50:14.053Z"
observed_at: "2026-11-06T21:20:22.771+00:00"
registry_published_at: "2026-10-16T21:58:45.058886+00:00"
registry_updated_at: null