MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/bec0fe42-362f-4497-ab08-ca3c0838d161/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.sourcey/sourcey"
title: "Sourcey"
description: "Find startup credits and deals; check eligibility and read Agent Readiness reports with evidence."
version: "1.3.16"
homepage_url: "https://sourcey.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.sourcey"
display_name: "com.sourcey"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/sourcey/mcp-server"
provider: "github"
owner: "sourcey"
name: "mcp-server"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.sourcey.com/mcp"
endpoint_host: "mcp.sourcey.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[9]
0{9}
name: "compare_offers"
title: "Compare offers"
effect: "READ"
effect_confidence: 0.908
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.672
1{2}
capability: "DATABASE_ACCESS"
confidence: 0.866
2{2}
capability: "PAYMENT"
confidence: 0.99
risk_severity: "LOW"
fingerprint: "28cc408e7af0554ae5567a269f49a6734020d8a5fff9ba5923c3755e89149123"
input_schema_fingerprint: "f5b98e6e1e3d789c05cbc5d8646b5246aee749cb10dea1e10a4fb17de806d3e2"
annotations{5}
title: "Compare offers"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "get_changes"
title: "Get changes"
effect: "WRITE"
effect_confidence: 0.533
capabilities[0]
risk_severity: "LOW"
fingerprint: "996654c1ea3deac5b807101943bf98bc1f966aafaa03bff74d1d86450017d87f"
input_schema_fingerprint: "b7c94eeb0f4ae027164e7e92cd9d4053c5ac5496d59bba01634b135eec6afeb9"
annotations{5}
title: "Get changes"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_readiness"
title: "Get an Agent Readiness report card"
effect: "READ"
effect_confidence: 0.933
capabilities[6]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.738
1{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.59
2{2}
capability: "DATABASE_ACCESS"
confidence: 0.59
3{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.59
4{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.866
5{2}
capability: "PERSONAL_DATA"
confidence: 0.558
risk_severity: "LOW"
fingerprint: "7ae0dd968b71a4a96bec7f8e01f9674b3e11f1107f2b9cebc728164fea31d284"
input_schema_fingerprint: "8e4b0c8cc03f89c1b707351d6068f5a6902350a347f46d3675c71013d742fcd6"
annotations{5}
title: "Get an Agent Readiness report card"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "get_report"
title: "Get a Sourcey report"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.819
risk_severity: "INFO"
fingerprint: "458d5290a51af26658af80532cb04487d2fd6061fbeb4caf180fdba845550d0f"
input_schema_fingerprint: "d9dc8318b8679242a6bb787a6b150e9ea2ba4ffea82e93b7a1b31bd4f656e60e"
annotations{5}
title: "Get a Sourcey report"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "get_services"
title: "Get Sourcey paid services"
effect: "READ"
effect_confidence: 0.908
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.632
risk_severity: "INFO"
fingerprint: "e61b5606feffe27e29a1b232405b7f1d9a122b5f4769924b9fd83d4ad0ebfdc9"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: "Get Sourcey paid services"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "inspect_evidence"
title: "Inspect evidence"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "919ae14410701e773b1338388d1207c8cc5b70a9dd60713dbbc1e22f8fe11090"
input_schema_fingerprint: "4f90cd7f58f522f37325ff942dcf319f8e4afa4f61e630c31292cbd248b86785"
annotations{5}
title: "Inspect evidence"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "prepare_declaration"
title: "Prepare an Agent Readiness declaration"
effect: "READ"
effect_confidence: 0.32
capabilities[10]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.672
1{2}
capability: "AUTHENTICATION"
confidence: 0.961
2{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.767
3{2}
capability: "EMAIL"
confidence: 0.99
4{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.99
5{2}
capability: "FILE_ACCESS"
confidence: 0.989
6{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.99
7{2}
capability: "PERSONAL_DATA"
confidence: 0.6
8{2}
capability: "SECRETS"
confidence: 0.925
9{2}
capability: "SOURCE_CODE"
confidence: 0.99
risk_severity: "HIGH"
fingerprint: "80bd8ab8be86f1743ed7a76c480cbc1929b6b40932e181f019d16720dba2b516"
input_schema_fingerprint: "b21098f592ab71a8f8a1060cc78f33b618ccceecc19e44ce105f08e1dee45669"
annotations{5}
title: "Prepare an Agent Readiness declaration"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "search_offers"
title: "Search credits and deals"
effect: "READ"
effect_confidence: 0.908
capabilities[5]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.672
1{2}
capability: "CRM"
confidence: 0.669
2{2}
capability: "DATABASE_ACCESS"
confidence: 0.926
3{2}
capability: "PAYMENT"
confidence: 0.99
4{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.567
risk_severity: "LOW"
fingerprint: "8040a9d09b589e57924605b153d103a44913913708dea9fc6a4068a05ced90d6"
input_schema_fingerprint: "c5ea80dda93f42d098725aba9722860462bec8e2d44a6288537ff80d03f0dbe4"
annotations{5}
title: "Search credits and deals"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "search_readiness"
title: "Search Agent Readiness"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.59
risk_severity: "INFO"
fingerprint: "173d1a5f7e4b392bd7d376d66cbdbcaf36245befd56ea27c2e9edd92b6abc3f6"
input_schema_fingerprint: "f0223599244fe8496e44d368db8cf3037fa4df0c62f253bd279ccf207911049c"
annotations{5}
title: "Search Agent Readiness"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.sourcey.com"
registrable_domain: "sourcey.com"
source: "transport"
findings[9]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "get_changes"
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "prepare_declaration"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "prepare_declaration"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "prepare_declaration"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "prepare_declaration"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "prepare_declaration"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "prepare_declaration"
8{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "prepare_declaration"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.sourcey/sourcey"
registry_content_sha256: "fd29148c8b53be80bb1c9ede4a84e513b54ccf758dc71e8903cb31560464d1d0"
scan_snapshot_fingerprint: "4b0a4f5f91536a91d3b7f2f2762f9dbf8d6c88431e52f82ec347db4f0bc511ad"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:13:43.439Z"
observed_at: "2026-11-13T03:31:55.753+00:00"
registry_published_at: "2026-11-04T02:01:54.504312+00:00"
registry_updated_at: null