MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/26c6b488-eef1-4876-be6e-3a563b76ef59/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.shapesoda/vectorizer"
title: "Shapesoda"
description: "Vectorize images: PNG/JPG to SVG, PDF, EPS, DXF. Turns logos, icons and scans into clean vectors."
version: "1.0.0"
homepage_url: "https://shapesoda.com/api#mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.shapesoda"
display_name: "com.shapesoda"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://shapesoda.com/mcp"
endpoint_host: "shapesoda.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[5]
0{9}
name: "create_upload"
title: "Create upload link"
effect: "WRITE"
effect_confidence: 0.885
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.539
1{2}
capability: "FILE_ACCESS"
confidence: 0.82
risk_severity: "MEDIUM"
fingerprint: "b6c4702816adba53d367d86ab4236a4e0a8657c62fdebe03090bba22b1126033"
input_schema_fingerprint: "06051cfcdbac35d8081ffb0ed333c6a80749b7dac69f8561c30c9c6408915fc8"
annotations{5}
title: "Create upload link"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
1{9}
name: "get_usage"
title: "Get usage"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "1b893fed7643a221fd194edcf6f1d70b86b86b9aa6aaff7b46a4579f42c0ad59"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: "Get usage"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "open_editor"
title: "Open Shapesoda"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "6391f25fff89848926b834544690047000e9061f06f0fe67d474d9a1adf75e3f"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: "Open Shapesoda"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "revectorize"
title: "Re-vectorize with other settings"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "148e4fd124e77543fb45495ab26f2d5609b3cd2ed41826af7ad831c7c70097ee"
input_schema_fingerprint: "f6fccf072320645b268317f87ed270de54f0e721f782a2638edd3fcff34e5dde"
annotations{5}
title: "Re-vectorize with other settings"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
4{9}
name: "vectorize"
title: "Vectorize image"
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.601
1{2}
capability: "FILE_ACCESS"
confidence: 0.85
risk_severity: "LOW"
fingerprint: "0bd631b6e17d8a5ea9dbcc2ddde7f785e8958567096d670a618715dad188a47b"
input_schema_fingerprint: "e2ab5e3971c913d0dba6d375dc3016c3f31249e7f865dc782a686b5d084640fb"
annotations{5}
title: "Vectorize image"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
resources[1]
0{4}
key: "ui://shapesoda/editor-b4caa59e635d.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "f1b874ea97356820d3f79ee32c1d83a5e15c435b72c5d4952f5529186db99e7f"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "shapesoda.com"
registrable_domain: "shapesoda.com"
source: "transport"
findings[7]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "revectorize"
3{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "vectorize"
4{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "revectorize"
5{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "vectorize"
6{6}
check_id: "SQ-TOOL-MIXED-SCRIPT"
category: "deceptive_metadata"
severity: "MEDIUM"
title: "Look-alike characters from mixed scripts"
subject_type: "tool"
subject_name: "vectorize"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.shapesoda/vectorizer"
registry_content_sha256: "d3bb908258e04c789cfe162a501ff339977bcab2e8940f2ed7f0c63feaac85e6"
scan_snapshot_fingerprint: "c986a92dcb94e7e11c3dd3f16a1619b7f83adf3d1ef25316c677332996f73f7c"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:52:41.059Z"
observed_at: "2026-11-15T02:32:26.965+00:00"
registry_published_at: "2026-10-10T23:27:33.465986+00:00"
registry_updated_at: null