MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/79ce7e23-b98c-4cf9-8e12-766bd009e25d/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.rosti/rosti"
title: "Rösti Threat Intel"
description: "Look up IOCs and search threat-intel reports, YARA rules, MITRE ATT&CK ids and CVEs from rosti.dev"
version: "0.2.1"
homepage_url: "https://rosti.dev/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.rosti"
display_name: "dev.rosti"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.rosti.dev/mcp"
endpoint_host: "mcp.rosti.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[11]
0{9}
name: "describe_taxonomy"
title: "Describe the taxonomy"
effect: "READ"
effect_confidence: 0.933
capabilities[0]
risk_severity: "INFO"
fingerprint: "2c0a63279d86f5a753df34348a88602cea6d0b111901bfff43362126623d97df"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: "Describe the taxonomy"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "find_related_reports"
title: "Find related reports"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "ae31f37896a7507411ce92ed881c6d93246a29eb12ad093d176dfcc12020a4b7"
input_schema_fingerprint: "7907bef64de578303fd5bcbab5432e00aa4848ab854eb7941e65b0789e77249e"
annotations{5}
title: "Find related reports"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_export_link"
title: "Get an export link"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "1477dcae063cd295d615e990d07aeaf8e75e90b04f61339745d490204ab17689"
input_schema_fingerprint: "57c9e1026301d8faf9e88ab036cbd7b90fd778ca330180c5b6b9358278f39ac1"
annotations{5}
title: "Get an export link"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "get_report"
title: "Get a report"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "a0373d87e849841d0ecdba554d85b5d5b60ee1c14ffdb694ee33c77588d79605"
input_schema_fingerprint: "018af466240b92221e54d51f978394229c323ab5a7024a56b6489e696a2d8a9f"
annotations{5}
title: "Get a report"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "get_yara_rules"
title: "Get YARA rules"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "90b1b5950736dbf20d0a77acf74bff64009e6072f4a54d17bae6ab53a09eff42"
input_schema_fingerprint: "018af466240b92221e54d51f978394229c323ab5a7024a56b6489e696a2d8a9f"
annotations{5}
title: "Get YARA rules"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "list_report_iocs"
title: "List a report's IOCs"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "75e37763497abdb6dfc1d43ee6309d4ebc03caa67ad8c3f347c0b3673ff09fd7"
input_schema_fingerprint: "a953ab29a6a2c1099c0bea97dcd23dbd0db767551bbc5068fe5a80422009ae25"
annotations{5}
title: "List a report's IOCs"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "list_sources"
title: "List sources"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "6c264b0ee98ce2c8f119ce209059e54812045069f836ce7963b43f2030fcea46"
input_schema_fingerprint: "edca6624a45e4799d60d23fa31def8f1881281e1a372a55c7c498258e737421d"
annotations{5}
title: "List sources"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "lookup_ioc"
title: "Look up an IOC"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "2b0998f7cb7941a38fb4d16744afcaecf1bdf086de383b5f48eb5beddfbfd721"
input_schema_fingerprint: "82db91d886ced4ce64458b9d5f0fc78a30a8c41e05bd9930fa8d53cf44bffd5b"
annotations{5}
title: "Look up an IOC"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "lookup_iocs"
title: "Look up IOCs"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "f5a9043c076c7e8cf40bca22d42cc392cce0770d418ace8fa589d961befa8f9a"
input_schema_fingerprint: "2c41d1e9debccf652cdcb1fd73570c3d5e1211665c18b50ed700631c3a94c181"
annotations{5}
title: "Look up IOCs"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "search_iocs"
title: "Search IOCs"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "9f08813574690bb636a73fb2ba5a947efead5f9e0bbdf4e87161e392251dcc25"
input_schema_fingerprint: "4bd580fb2192eac1087741c2a0d5421b394eb80e1b1af0454fc0e70cca0e6fac"
annotations{5}
title: "Search IOCs"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "search_reports"
title: "Search reports"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.632
risk_severity: "INFO"
fingerprint: "86de392e71d8a6f2e3c939da5e4c83232fb7713ac5d69ff85812b79234df07c3"
input_schema_fingerprint: "a798abda48937331537594933907979346885058eb2b9abf13a60566eaf3921d"
annotations{5}
title: "Search reports"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/ui"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.rosti.dev"
registrable_domain: "rosti.dev"
source: "transport"
findings[1]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.rosti/rosti"
registry_content_sha256: "2e9073039339bd05ea058ef20ff349cf6bac116a5e65bc194e46e2cc81f9c6d9"
scan_snapshot_fingerprint: "6511f1f461ac49e054d3e3a5a21e2f2f6a7834af1cfd6779661387b79c04be16"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T13:56:55.877Z"
observed_at: "2026-11-05T18:46:01.8+00:00"
registry_published_at: "2026-11-05T14:38:55.930084+00:00"
registry_updated_at: null