MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/143f6eee-af62-4c4c-b37b-62f224f6adae/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.qrdx/qrdx"
title: "QRdx"
description: "QR codes and barcodes that scan: styled designs with a scan check, plus Wi-Fi and payment codes."
version: "1.3.0"
homepage_url: "https://qrdx.dev/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.qrdx"
display_name: "dev.qrdx"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/qrdxinc/qrdx"
provider: "github"
owner: "qrdxinc"
name: "qrdx"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.qrdx.dev/mcp"
endpoint_host: "mcp.qrdx.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[16]
0{9}
name: "design_qr"
title: "Design a QR code"
effect: "READ"
effect_confidence: 0.32
capabilities[11]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.577
1{2}
capability: "AUTHENTICATION"
confidence: 0.695
2{2}
capability: "EMAIL"
confidence: 0.99
3{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.99
4{2}
capability: "FILE_ACCESS"
confidence: 0.582
5{2}
capability: "LOCATION"
confidence: 0.779
6{2}
capability: "MESSAGING"
confidence: 0.862
7{2}
capability: "PAYMENT"
confidence: 0.853
8{2}
capability: "PERSONAL_DATA"
confidence: 0.99
9{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.881
10{2}
capability: "SOURCE_CODE"
confidence: 0.53
risk_severity: "MEDIUM"
fingerprint: "1e79134241cc69805ba7ccd1cec52e357c2963c715f7c5e215d0abce38e13ada"
input_schema_fingerprint: "4d131a68c81496a98bf5ce33519aa68db8237ca9d7999d709acc7683f98d650a"
annotations{5}
title: "Design a QR code"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "generate_ai_art"
title: "Generate AI QR art"
effect: "EXECUTE"
effect_confidence: 0.711
capabilities[0]
risk_severity: "CRITICAL"
fingerprint: "2a9661b997e5edd8d65ab285de87a41bbf015e9ee24d9a36b3314bfb1fa80d5c"
input_schema_fingerprint: "322cff6356837f3295681662cfffc5a7c5d6ec7b3d327d75dca5e2d1c42471fb"
annotations{5}
title: "Generate AI QR art"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
2{9}
name: "generate_barcode"
title: "Generate a barcode"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "7308d10944deaef04caeec40d77d3d077d0d327bc1b83771731321e842f68696"
input_schema_fingerprint: "c86f5573dc23cd5beaa4dadebc0d1d7377b0ccdfae3806697d350bef4752483b"
annotations{5}
title: "Generate a barcode"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "generate_qr_code"
title: "Generate QR code"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "FILE_ACCESS"
confidence: 0.749
1{2}
capability: "SECRETS"
confidence: 0.567
risk_severity: "HIGH"
fingerprint: "00f1f51b23e7058adca5cc73f6da466ea1d7a57c2298abd70474efe4fc5c3b2f"
input_schema_fingerprint: "6bcecef4022d1d4125b80b1a5042caf7a0a7942f9ea68a992af1f34299c14c7a"
annotations{5}
title: "Generate QR code"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "get_community_item"
title: "Get a community item"
effect: "READ"
effect_confidence: 0.832
capabilities[0]
risk_severity: "INFO"
fingerprint: "0e2f61417e316859b9308722bec7c74993c7f6c048284d3ac72a058b50a8a94d"
input_schema_fingerprint: "da26da8c4d55f5420417c7de856afd8cbb7a3f085d6cd8d170a75b8a853dd2dd"
annotations{5}
title: "Get a community item"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "list_options"
title: "List design options"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "147d94bc4f1cb990fa4a0ab005f28b33850067c85ed455d94eaf4dc69e4d5b23"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: "List design options"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "list_qr_styles"
title: "List QR styles"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "aa2e7d2f034e160c21407f32b03350f4f8ec374596415ecc37ed310fbb4bff3f"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: "List QR styles"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "qr_payload_email"
title: "Email QR payload"
effect: "WRITE"
effect_confidence: 0.58
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.99
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.835
2{2}
capability: "MESSAGING"
confidence: 0.767
3{2}
capability: "PERSONAL_DATA"
confidence: 0.66
risk_severity: "MEDIUM"
fingerprint: "aa4a9f287fa00efd5cd57bf47255920fe600f8246177dec03337f2fd0448af40"
input_schema_fingerprint: "1ba9195ef812ec61f3f50fadd000a38f9e57e8821091ca1e87f0253965fade00"
annotations{5}
title: "Email QR payload"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "qr_payload_geo"
title: "Location QR payload"
effect: "EXECUTE"
effect_confidence: 0.45
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.988
risk_severity: "HIGH"
fingerprint: "6790e491846143a3f0c0c76b1d238ecd53275d1391a18a4b33a8c066bdaa2198"
input_schema_fingerprint: "7680a8d86e869732614a8e4f98cd3e9acd59cdb84499e380b696dc546cb9c5ef"
annotations{5}
title: "Location QR payload"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "qr_payload_payment"
title: "Bank payment QR payload"
effect: "EXECUTE"
effect_confidence: 0.45
capabilities[3]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.99
1{2}
capability: "PAYMENT"
confidence: 0.953
2{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.802
risk_severity: "HIGH"
fingerprint: "ea632e996066e677bb1ae47183829ba59916e749b1528598f6895dca9a02d1e6"
input_schema_fingerprint: "1bcfb54e200faae8dad01474784390fb9b75d321141312430c52d559909da408"
annotations{5}
title: "Bank payment QR payload"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "qr_payload_sms"
title: "SMS QR payload"
effect: "EXECUTE"
effect_confidence: 0.45
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.949
risk_severity: "HIGH"
fingerprint: "b2b7fc08338d3d6a312bff68f5e173fd8ad3b8cfd26a6537f63dddc193dcc811"
input_schema_fingerprint: "eafea727e72cea110a698998086f3d226d91e1711c90f7383ac057b30bbee6d1"
annotations{5}
title: "SMS QR payload"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "qr_payload_vcard"
title: "Contact (vCard) QR payload"
effect: "EXECUTE"
effect_confidence: 0.45
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.99
risk_severity: "HIGH"
fingerprint: "11168efdee0819b8dde6d271fd254d343c18ac3041ed48b6fddb836717897774"
input_schema_fingerprint: "2e48a226c2bf6b21e84f94f4c8083a03d3b948fdcdf6cff1ead322c59b687fa7"
annotations{5}
title: "Contact (vCard) QR payload"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
12{9}
name: "qr_payload_wifi"
title: "Wi-Fi QR payload"
effect: "EXECUTE"
effect_confidence: 0.45
capabilities[0]
risk_severity: "HIGH"
fingerprint: "168e45e9fcd6da5dcaca12c4bb60c298a0d29048ad44848b6d41f14f2b18ea55"
input_schema_fingerprint: "623ddf3a154880655e0089026cdf1ff2d52e18785d403cc2274b447ac806a247"
annotations{5}
title: "Wi-Fi QR payload"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
13{9}
name: "save_barcode"
title: "Save a barcode"
effect: "WRITE"
effect_confidence: 0.917
capabilities[1]
0{2}
capability: "FILE_ACCESS"
confidence: 0.53
risk_severity: "MEDIUM"
fingerprint: "b3fd3af40d89f944c826572b3512bfcb8d626eebe13b4e90d18969bb194d5b5e"
input_schema_fingerprint: "610eda8651c1bde397a14d4a1b37b3f83f212f53b043b4d06322b6aa250ea7d8"
annotations{5}
title: "Save a barcode"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
14{9}
name: "save_template"
title: "Save a design as a theme"
effect: "WRITE"
effect_confidence: 0.885
capabilities[0]
risk_severity: "LOW"
fingerprint: "884c0de48133e0b536f59da684d81215bd3cf0f2fa9db0e249392c03fd50519a"
input_schema_fingerprint: "efc556e9457d8ce50b008a69fc98c4f7a73615c3f7071c9a1d7128a9eeef4ffc"
annotations{5}
title: "Save a design as a theme"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
15{9}
name: "search_community"
title: "Search the QRdx community"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "504da322b3a8cdb75347d69d19cb665058cd873bbe795c3c95121ec41cc4aee3"
input_schema_fingerprint: "0b8290e9b073fe5530c56915ae865cef6727dfa99c6d54dea7fcfcb1d070c249"
annotations{5}
title: "Search the QRdx community"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[1]
0{4}
key: "ui://qrdx/qr-card"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "b6d2016ac7f62cc691e78c2871579b7a68cafc1f139cf6fca30c594e247f2f9a"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.qrdx.dev"
registrable_domain: "qrdx.dev"
source: "transport"
findings[9]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "qr_payload_email"
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "design_qr"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "generate_ai_art"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "qr_payload_wifi"
5{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "design_qr"
6{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "LOW"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "generate_ai_art"
7{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "qr_payload_vcard"
8{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "generate_ai_art"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.qrdx/qrdx"
registry_content_sha256: "60384c68c6b51b619cc8ebf4eddf58146f41096cdbd16739ac17fd5d448fafbd"
scan_snapshot_fingerprint: "cbe33e06eeefa60d859ed7528237fe3533a6f48c9065450574fac18b81887224"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T13:56:39.983Z"
observed_at: "2026-11-14T13:20:55.605+00:00"
registry_published_at: "2026-11-14T11:56:55.181636+00:00"
registry_updated_at: null