Skip to content
Squatch MCP

MCP Bill of Materials

A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/655626b1-8944-42aa-9919-cc7bb91ea161/mcbom.

MCP Bill of Materials

root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.skillmd/skillmd"
title: null
description: "Search, fetch, lint, and install Agent Skills (SKILL.md) from the SkillMD registry."
version: "1.3.11"
homepage_url: "https://skillmd.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.skillmd"
display_name: "com.skillmd"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/skillmds/SkillMD"
provider: "github"
owner: "skillmds"
name: "SkillMD"
verified: false
packages[1]
0{4}
registry_type: "npm"
identifier: "get-skill"
version: "1.3.11"
transport: "stdio"
transports[2]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.skillmd.com/mcp"
endpoint_host: "api.skillmd.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[5]
0{9}
name: "skillmd_download"
title: "Download skill files"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "FILE_ACCESS"
confidence: 0.813
risk_severity: "INFO"
fingerprint: "85ec8dd6d19d583e42ac9c38cda26f9953f6f1bf69c2c2a0e369a57c0946e64b"
input_schema_fingerprint: "ad6ba51898e9ca584555f9bd3a99b3a46113e17e8a2460cecbe56c3b0e5cc6df"
annotations{5}
title: "Download skill files"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "skillmd_get"
title: "Get skill details"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "FILE_ACCESS"
confidence: 0.52
1{2}
capability: "SOURCE_CODE"
confidence: 0.755
risk_severity: "INFO"
fingerprint: "348729de697db2e7d0c26a0415e07692e4f0ac10e4df9028b063c08acfc30e76"
input_schema_fingerprint: "ad6ba51898e9ca584555f9bd3a99b3a46113e17e8a2460cecbe56c3b0e5cc6df"
annotations{5}
title: "Get skill details"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "skillmd_recommend"
title: "Recommend skills"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "562b67c1780c14560bd7353147df7490138e7542ef7298381f9a1433d6eafdc2"
input_schema_fingerprint: "822adcea03072663c317ccacb900e3335ea58a1d88df971383bb07f5df34d2f4"
annotations{5}
title: "Recommend skills"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "skillmd_search"
title: "Search skills"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "5923487b66dc4a9edfcd2f3e4588156f1504c2ab099237ea399adbd4053ef8f5"
input_schema_fingerprint: "b06a8f6cdceafa1c83adea78630b6fa42315a31a4ebd6dacb125cf25ad42159e"
annotations{5}
title: "Search skills"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "skillmd_trending"
title: "Trending skills"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "ee97c6be9d1cabb83beb39a7f2ea80fd55447f92db93647dee8ace84dd696b07"
input_schema_fingerprint: "9e7eb69fa954097257f6719936083c3ff5a04f952dd3b7b9abce65b611899674"
annotations{5}
title: "Trending skills"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.skillmd.com"
registrable_domain: "skillmd.com"
source: "transport"
findings[0]
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.skillmd/skillmd"
registry_content_sha256: "d971cf3dfb5b772b3b8eadb9686798a7887cb4244511f12a239bd85efc116ba1"
scan_snapshot_fingerprint: "12859b8711f1f89797845e9f5e954e1e7cbf31456ed24dedd93914019780bb59"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:03:42.658Z"
observed_at: "2026-11-10T11:38:46.063+00:00"
registry_published_at: "2026-11-10T10:25:07.645013+00:00"
registry_updated_at: null