MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/3049733f-65ba-46a7-b122-965014cd3f25/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.quantrisk/mcp-server"
title: "QuantRisk"
description: "Portfolio risk analytics — VaR, Monte Carlo, optimization, options Greeks, stress testing."
version: "1.0.2"
homepage_url: "https://quantrisk.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.quantrisk"
display_name: "dev.quantrisk"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/78degrees/mcp-server"
provider: "github"
owner: "78degrees"
name: "mcp-server"
verified: false
packages[1]
0{4}
registry_type: "npm"
identifier: "@quantrisk/mcp-server"
version: "1.0.2"
transport: "stdio"
transports[2]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://quantrisk-mcp.quantrisk.workers.dev/mcp"
endpoint_host: "quantrisk-mcp.quantrisk.workers.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[10]
0{9}
name: "analyze_risk"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[0]
risk_severity: "INFO"
fingerprint: "e0f0a6a8f49a16efee8fc832dd8692269bb6e873f86bb9164f7c069800509af4"
input_schema_fingerprint: "9ccb42a52cfe56ac3834a8d27aeff9cf854005cf9f1873cb95fa18eff1a4ed59"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "calculate_greeks"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[0]
risk_severity: "INFO"
fingerprint: "e41f3a70785686885882d80739c4e469530669ebdeca9670402f8d501fa47a01"
input_schema_fingerprint: "46691f10a12686add5df797188215289bbb841dfa42d601c5335fa739e0b8f61"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "compare_portfolios"
title: null
effect: "READ"
effect_confidence: 0.836
capabilities[0]
risk_severity: "INFO"
fingerprint: "9c367e57aa1ce9d9ffa18b680e5c0d5d821811fb088891b17fcc527f82a962b3"
input_schema_fingerprint: "8e3230f03ccce830bac274dfe9c655aeaf874077e1d8648e2bc77f4a04d0e774"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "correlation_matrix"
title: null
effect: "READ"
effect_confidence: 0.533
capabilities[0]
risk_severity: "INFO"
fingerprint: "22e6c69725052f94da57b7a43047f97f873d43a17ae150f12b681646c942ab7c"
input_schema_fingerprint: "413a1f0b7edbaa4b6848dc64c3d8045d363b11528aeb3ba408a54652a096239d"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
4{9}
name: "monte_carlo_simulation"
title: null
effect: "EXECUTE"
effect_confidence: 0.45
capabilities[0]
risk_severity: "HIGH"
fingerprint: "4371a195ff445892dd38b0618daa40fbfb439f0ebff1857eaab5466fe8d87958"
input_schema_fingerprint: "8421a4a37bea559b01e246ce7aeea89cd0b8a60740fa1c1df0663c6305fe4a68"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
5{9}
name: "optimize_portfolio"
title: null
effect: "READ"
effect_confidence: 0.533
capabilities[0]
risk_severity: "INFO"
fingerprint: "3bf11284ceb25c3b8d7943a25c048f526483ba26df041e55e2f9a005b6c0220d"
input_schema_fingerprint: "b85a9b215a7f5d29b8c21ad6e1fa2abb76c5f208557ac42710d30b4e2d6c8ea6"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
6{9}
name: "performance_attribution"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "40467930bc80d5d4fed78a23c528d9f7cef3e2090dec1ce44a993ef1d15d5ac5"
input_schema_fingerprint: "2c7f5605d696e03f9d24a03a662831f86b0f5e34bd2d9025e560b28ac8994d4a"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
7{9}
name: "price_history"
title: null
effect: "READ"
effect_confidence: 0.45
capabilities[0]
risk_severity: "INFO"
fingerprint: "81b2fe61d4d83313db8f28c9c85b6b6feae99caff6fe49e4febb0188bcdbafce"
input_schema_fingerprint: "593571612dfa8290dc9c959e42578f5398c1c5525d804be90ea44fd19175da59"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
8{9}
name: "sector_exposure"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "77d0a72c9baea8da1c65834e546bc29ba2abcd75184e32e04d181121fed551c3"
input_schema_fingerprint: "79600fd8e68e0bf1da5659fbda02cddd4127bd72bd56ce11ec6dc28dbd12ed56"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
9{9}
name: "stress_test"
title: null
effect: "READ"
effect_confidence: 0.3
capabilities[0]
risk_severity: "INFO"
fingerprint: "6dab9237382873bb22b369d4b51211a5ca18ebd8f9f701855b96cb1c6f84608c"
input_schema_fingerprint: "7df074f1d2eff0f2d1f75aae68872d04f05a756c93caba6b9e6dc7c60de72288"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "quantrisk-mcp.quantrisk.workers.dev"
registrable_domain: "quantrisk.workers.dev"
source: "transport"
findings[5]
0{6}
check_id: "SQ-ENDPOINT-OUTSIDE-NAMESPACE"
category: "provenance"
severity: "LOW"
title: "Endpoint host outside the namespace domain"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "monte_carlo_simulation"
3{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "performance_attribution"
4{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "sector_exposure"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.quantrisk/mcp-server"
registry_content_sha256: "e80480694d8466b02ffc1fe0bcd3b9e9cc5b7bfa405847c0da9784f59732b253"
scan_snapshot_fingerprint: "2c5db33c5b02b2b7849c7cff37a9026cd2550f3c4bb45800c95d41b46f681e0f"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T13:55:52.720Z"
observed_at: "2026-11-05T10:33:01.884+00:00"
registry_published_at: "2026-05-09T21:53:30.280311+00:00"
registry_updated_at: null