MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/103689a7-d0be-4884-ae53-78a73bb352f8/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.protogrid/registry"
title: "protogrid"
description: "Find MCP servers by intent and get exactly how to connect to them right now. No proxying."
version: "0.1.0"
homepage_url: "https://protogrid.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.protogrid"
display_name: "dev.protogrid"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.protogrid.dev/mcp"
endpoint_host: "api.protogrid.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[5]
0{9}
name: "check_server"
title: "Check an MCP server URL"
effect: "READ"
effect_confidence: 0.848
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.894
risk_severity: "INFO"
fingerprint: "923c9e6f20b2ccec85b948e7acfadda5ac89f86d0a09c14de925fae4821fb695"
input_schema_fingerprint: "57e37b9bb53ce53226b337a0a092a645248b631e1a76e3916101e329792930b2"
annotations{5}
title: "Check an MCP server URL"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "get_connection"
title: "Get a connection block"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "1521513bd782629d2eaf64e470d7f0c1dd236ae126b008fab5f612c8c92521ef"
input_schema_fingerprint: "953e02fc25a2fbac0ee01ff80cf649a1795634a464b2e6d8948fdc75453e2a2a"
annotations{5}
title: "Get a connection block"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_server"
title: "Get a server descriptor"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "f1b3d041fd0a62ee5672d5b8fefa86801efb56be959f75ab92d801de45627caa"
input_schema_fingerprint: "2b43da959507d126b45285060bfbb96acb325a779788ac23afa43c840229f709"
annotations{5}
title: "Get a server descriptor"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "list_tools"
title: "List a server's tools"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "540dcb2194f84752cbae66ec5455632562163b375fa6a482c3b119a586307cad"
input_schema_fingerprint: "f7296d640b35277506cd2c32416f25f71ab75edc1ad2b67f22c5793ff69388dc"
annotations{5}
title: "List a server's tools"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "search"
title: "Search MCP servers by intent"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "e1db94014d50b8e2061742f568c29f065e21a71ddad6744e094f9c1a783ed1b9"
input_schema_fingerprint: "e9f3c85ba04f900df121202dd5283ab534a9f79d720f19a55f073a331c9687c3"
annotations{5}
title: "Search MCP servers by intent"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.protogrid.dev"
registrable_domain: "protogrid.dev"
source: "transport"
findings[4]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "search"
2{6}
check_id: "SQ-TOOL-EXFIL-DESTINATION"
category: "prompt_injection"
severity: "HIGH"
title: "External data-collection destination in model-facing text"
subject_type: "tool"
subject_name: "check_server"
3{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "check_server"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.protogrid/registry"
registry_content_sha256: "46b9dbba82b601701ce4e2b25e77acf629bea0cc3f52b4337823fd34ae01ff99"
scan_snapshot_fingerprint: "e1109f2f49cdfca9dd581ebae0b8b0a5f177a9024d3e104ca82853a335393de6"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T20:54:50.005Z"
observed_at: "2026-11-05T10:32:35.018+00:00"
registry_published_at: "2026-09-23T16:42:46.268258+00:00"
registry_updated_at: null