MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/1799f49e-b3a5-44bb-a3b3-dd5685983596/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.phpray/phpray"
title: null
description: "Ask an agent why a PHP site is slow: every request with its SQL, HTTP calls, errors and N+1."
version: "0.15.6"
homepage_url: "https://phpray.dev/mcp-server/"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.phpray"
display_name: "dev.phpray"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/stephen1137/phpray"
provider: "github"
owner: "stephen1137"
name: "phpray"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://phpray.dev/mcp"
endpoint_host: "phpray.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-06-18"
supported_versions[0]
transport_type: "streamable-http"
tools[10]
0{9}
name: "phpray_alerts"
title: null
effect: "WRITE"
effect_confidence: 0.808
capabilities[0]
risk_severity: "LOW"
fingerprint: "74ad77066f34e5a9d9c81ec6e87a1cdd99c23d3fffb81651b175e03c3de6dad2"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "phpray_compare"
title: null
effect: "READ"
effect_confidence: 0.65
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.59
1{2}
capability: "PERSONAL_DATA"
confidence: 0.59
risk_severity: "MEDIUM"
fingerprint: "a35f7d170a18f3416ecc65433755918ec1a9c0a19625712fa44e5bac731e1058"
input_schema_fingerprint: "0d55fb56f0b02ec78f106ab6944183ecf5536b0f2082477cbf0b52e4cb128b8e"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "phpray_components"
title: null
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[0]
risk_severity: "LOW"
fingerprint: "b10ff7385785d20c40423dd3c2fe61cac41b7332d556a2acc2cf5eacebba03cd"
input_schema_fingerprint: "413a833a283634a8c4a62795593d8257fd9c85de16734c60de769c76afaf5d9a"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "phpray_errors"
title: null
effect: "WRITE"
effect_confidence: 0.45
capabilities[0]
risk_severity: "LOW"
fingerprint: "5c0b6681c37e12c1d688beace01e4327acaa4d233fbd66dc0fc3f332fe0b928d"
input_schema_fingerprint: "16e3f8a3b8c7dacef019b20dff6ec36f99f794f830da4361f74163b6a3121d0a"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
4{9}
name: "phpray_overview"
title: null
effect: "UNKNOWN"
effect_confidence: 0
capabilities[0]
risk_severity: "LOW"
fingerprint: "82be31bb329ea26357f8bed68f1434958e7db64ead2a43f6f3afba1beba9224c"
input_schema_fingerprint: "5360da37b8f0c0d5efe9323cef924dc239521954195f8f5ed9d41434b78e6e2d"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
5{9}
name: "phpray_sites"
title: null
effect: "READ"
effect_confidence: 0.603
capabilities[0]
risk_severity: "INFO"
fingerprint: "9eb1fcfce22f738a5cebaab60825d2f322aec6e716bb04d94a0a4fb0763e3268"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
6{9}
name: "phpray_slow_pages"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "370528f275bc15ca3f10e7000038afe817257ecd66cf88de966a71fe16af5a44"
input_schema_fingerprint: "ad4e312e73c423e3fa2de29cb7702cc96e3375ee96a527cc8b633df97e830aac"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
7{9}
name: "phpray_slow_queries"
title: null
effect: "READ"
effect_confidence: 0.3
capabilities[1]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.55
risk_severity: "INFO"
fingerprint: "bfad4c8d1cce3fd07a7d05ab002df548b160bc3ca0529320f3fd4ff486c9df69"
input_schema_fingerprint: "30f2e20c5fbc3428d26f0944c2d5543c565f610d1f596fc29d1e56af53fa44f9"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
8{9}
name: "phpray_trace"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.74
risk_severity: "LOW"
fingerprint: "11ec13da0817fea2974d097f6537224b1c4e7dd4d53f281d33adfca2936921d7"
input_schema_fingerprint: "c78cd9517b93559db057d78e803d26dcbc121b767ef115498598c9e4a702e037"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
9{9}
name: "phpray_traces"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "e164826695d76933b36af3ebd7f7760b8b2c937bf440ec39cbadfd7c50418a04"
input_schema_fingerprint: "7b3d430b3c785a19cef8e33ca392940bd700c0f3eba3c749de8a6ce44bc40b25"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[2]
0{4}
key: "phpray://demo"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "e29ec0230ddb730cfb0867d7465ce942b9084ada712621bb371b7377ba8457ef"
1{4}
key: "phpray://install"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "29c16ba089afb8a4bec3f022a6f0e134930aad78cab9d5dbba1ea18200fd1151"
prompts[4]
0{2}
name: "what_got_worse"
fingerprint: "15afbcabaae54ff90cbff83c117c47f688e3434f1f1334cde40186cc70f49e1b"
1{2}
name: "what_is_failing"
fingerprint: "06a114967eb5103310f338bdc71158e385c6e55b8d161914d6cf3a2d8ad5ef6b"
2{2}
name: "what_is_slow"
fingerprint: "00002ebd5f5eb8c7d7af97ef3f54a4f0f581bd6197db08694e4b79bd232040e1"
3{2}
name: "which_plugin_costs_most"
fingerprint: "b98a2393e9aad3e0c6bd4087c25d8b33a21211962c2c6ced6ae0e492d0190c79"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "phpray.dev"
registrable_domain: "phpray.dev"
source: "transport"
findings[7]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "phpray_sites"
2{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "phpray_components"
3{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "phpray_overview"
4{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "phpray_slow_pages"
5{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "phpray_trace"
6{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "phpray_traces"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.phpray/phpray"
registry_content_sha256: "042cbe7ebb47f922a6a673e083d746239f1308229c9ac112c84356912dc9c412"
scan_snapshot_fingerprint: "689893219329168e3fa72a67f8f53774cc596cbf9f6f7f14f8b8147297b7fc72"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T20:54:46.521Z"
observed_at: "2026-11-05T10:30:34.021+00:00"
registry_published_at: "2026-09-22T08:28:43.327985+00:00"
registry_updated_at: null