MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/2a932bc3-1380-47e7-9b25-b06cc8cc8f74/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.siroagent/siro"
title: "Siro"
description: "Pay-per-call AI tools for agents over x402: LLMs, image, video, music, market data. USDC/USDG."
version: "1.0.0"
homepage_url: "https://siroagent.com/docs#mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.siroagent"
display_name: "com.siroagent"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://siroagent.com/mcp"
endpoint_host: "siroagent.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-06-18"
supported_versions[0]
transport_type: "streamable-http"
tools[5]
0{9}
name: "siro_call"
title: "Run a paid resource (x402)"
effect: "EXECUTE"
effect_confidence: 0.72
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.706
1{2}
capability: "PAYMENT"
confidence: 0.567
risk_severity: "HIGH"
fingerprint: "1574f3dac02fb1c60b946f6bdee76d73834169edae8cf1065e1b2f981303b158"
input_schema_fingerprint: "d7a9bdae58eba4a272419e481de445551ad1891ab13f892e2807ff893087fc60"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: null
idempotentHint: null
openWorldHint: true
1{9}
name: "siro_discover"
title: "Find third-party x402 services"
effect: "READ"
effect_confidence: 0.905
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.661
risk_severity: "INFO"
fingerprint: "efb7fbc619efe21845eed0988111e03d5ec9bb1ac249780ef5cf568e5d7afb5a"
input_schema_fingerprint: "0f800cfdbb437aad0a9bcc3ef58be4314c08c0994b5810ad700ab27c81eb519b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
2{9}
name: "siro_resource_schema"
title: "Get one resource's input schema"
effect: "READ"
effect_confidence: 0.776
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.64
risk_severity: "INFO"
fingerprint: "e43be611bcd7c430127b0180e085a29b25ce96770d7457ad0fce29585f5294c3"
input_schema_fingerprint: "4e4081d51ca81fecf81ee3cbc5e4f92af69cac01d17c31690316c340a0278cb4"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
3{9}
name: "siro_resources"
title: "Search the Siro catalog"
effect: "READ"
effect_confidence: 0.776
capabilities[0]
risk_severity: "INFO"
fingerprint: "545381ff5fdbbd49369882eb488292159995ab1154451d7581b3175ec01c92e2"
input_schema_fingerprint: "91011b7086f960a348bc8d3d0b51cb3f96ded244f1a2201df64a1c88d1427057"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
4{9}
name: "siro_tokens"
title: "List swappable tokens"
effect: "READ"
effect_confidence: 0.776
capabilities[0]
risk_severity: "INFO"
fingerprint: "d8b9044e18a2bc62ea1cd7e169a2195709a2d385945b57b45fc78639efdf897a"
input_schema_fingerprint: "b96fa62a090cb06403c81a4e816b5fa180ac6b203e1494987d4c2fefb08c5049"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "siroagent.com"
registrable_domain: "siroagent.com"
source: "transport"
findings[2]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.siroagent/siro"
registry_content_sha256: "6c631ce82437fc7cd38ec5c21a3325712e5b2af5d9e732b9f8be722e9d604774"
scan_snapshot_fingerprint: "2d9afdc46d68e76dda9d87346adda594267917179036e2ebd7927f70a0b70d90"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:31:27.574Z"
observed_at: "2026-11-14T14:04:57.915+00:00"
registry_published_at: "2026-11-14T13:10:37.732874+00:00"
registry_updated_at: null