MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/e1fcb0b8-647d-433a-87ee-2c202b74eaf7/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.shveik/agpay"
title: "agpay"
description: "Payments held between two agents: buyer pays, seller delivers, buyer confirms. Pay per call."
version: "1.0.0"
homepage_url: "https://agpay.shveik.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.shveik"
display_name: "dev.shveik"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://agpay.shveik.dev/mcp"
endpoint_host: "agpay.shveik.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[6]
0{9}
name: "add_statement"
title: "Add a statement"
effect: "WRITE"
effect_confidence: 0.79
capabilities[2]
0{2}
capability: "CRM"
confidence: 0.76
1{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "d22640c66bb92ca1ed78edf0f58816bcb26ea1bee588458352727e70f37e2e17"
input_schema_fingerprint: "e6e7bba5cf90c356da2b486170939669ceca5deb38cbac85b05c467cf6717c46"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
1{9}
name: "confirm_deal"
title: "Confirm a deal"
effect: "WRITE"
effect_confidence: 0.902
capabilities[2]
0{2}
capability: "CRM"
confidence: 0.922
1{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "71d7dd48b1293f54164aeded82290fcee006e46032da365ea0c3984b5bd5c029"
input_schema_fingerprint: "c23b93fca1aaf8cf2d9d0bf33fcfe24b4d31835c466ddbf7ebe976ab0a3ede83"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
2{9}
name: "create_deal"
title: "Open a deal"
effect: "WRITE"
effect_confidence: 0.703
capabilities[3]
0{2}
capability: "CRM"
confidence: 0.859
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.688
2{2}
capability: "PAYMENT"
confidence: 0.509
risk_severity: "HIGH"
fingerprint: "60fbca2f24a6b40770abe518f8616e3f1b98b264009bb31de89afd724864b8b2"
input_schema_fingerprint: "682840d7dac9b9fe9108d79a87135ac367dd74e3556c1bc0472ff8af9c9934fa"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
3{9}
name: "feedback"
title: "Send feedback"
effect: "WRITE"
effect_confidence: 0.4
capabilities[0]
risk_severity: "LOW"
fingerprint: "48eb0e3b97272bf4d45c022ace30c61d3b67aa5b26fc2f5ebae2854899338b5c"
input_schema_fingerprint: "16b988cdb4d63dd5f6d7f27e253d87f1e6d5eba711b8a74f8ec676576b2fc628"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
4{9}
name: "get_deal"
title: "Get a deal"
effect: "READ"
effect_confidence: 0.908
capabilities[1]
0{2}
capability: "CRM"
confidence: 0.908
risk_severity: "LOW"
fingerprint: "f31b69262a21dbb0ab2d661a2e8c6eb7504522d85a55d3f24028b70a1bcfa454"
input_schema_fingerprint: "5f86677b29b6c69a125341420bec14659341b117e7b806f456e065f6aa8a3a1d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
5{9}
name: "list_deals"
title: "List deals"
effect: "READ"
effect_confidence: 0.908
capabilities[1]
0{2}
capability: "CRM"
confidence: 0.805
risk_severity: "LOW"
fingerprint: "213bc5b93b67afa112bab268d2cc3c159d3a7b4f6898171623cf28e1fd0e8f12"
input_schema_fingerprint: "04ce4b83388371da59231980bf8e23891e01ef670495be85a64b8e972ab30189"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
resources[4]
0{4}
key: "https://agpay.shveik.dev/agents.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "f79b75ebf41ed606cdb7bedb8f47291dc41980ba2b4aaa63d4e7cacde334aef5"
1{4}
key: "https://agpay.shveik.dev/docs"
kind: "resource"
mime_type: "text/html"
fingerprint: "90a501919ad1270f80a9212b74a3bebee70426f6b09d532f578694c8c07ab20c"
2{4}
key: "https://agpay.shveik.dev/openapi.json"
kind: "resource"
mime_type: "application/json"
fingerprint: "2d37c6bfeb5f7e888dde460340668e50a6855b8361f4a496eed528bb7f195fef"
3{4}
key: "https://agpay.shveik.dev/pricing.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "990e5ef2f974f2fdf2eaebe1c4dd57a7eef3262052add9faf5b5f13587fc0a62"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "agpay.shveik.dev"
registrable_domain: "shveik.dev"
source: "transport"
findings[6]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "add_statement"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "confirm_deal"
5{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "create_deal"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.shveik/agpay"
registry_content_sha256: "c39ccff7360480625d8ecc4c79b6a9e15e73b4959ec4333694dd1c37065146ce"
scan_snapshot_fingerprint: "7a64b5636f7bb27dd2eeea10fbc3e88f57b53e6b130bc62c7a4f9abb95434621"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:50:03.657Z"
observed_at: "2026-11-05T10:40:52.504+00:00"
registry_published_at: "2026-10-07T23:10:07.567938+00:00"
registry_updated_at: null