MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/8893aa36-37d8-4868-8d8d-d3edff162705/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.sipflow/sipflow"
title: "Sipflow"
description: "SIP/VoIP/telecom grounding for AI agents: vendor docs, RFCs, STIR/SHAKEN, traces, configs."
version: "0.2.0"
homepage_url: "https://www.sipflow.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.sipflow"
display_name: "dev.sipflow"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cmendes0101/sipflow-cursor-plugin"
provider: "github"
owner: "cmendes0101"
name: "sipflow-cursor-plugin"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.sipflow.dev/mcp"
endpoint_host: "mcp.sipflow.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[22]
0{9}
name: "compare_sdp_offer_answer"
title: "Compare an SDP offer/answer pair (RFC 3264)"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "a680cbc183c593fd44a6eb2701ac2f81e79483981ad186a45ffd649a5f24d35e"
input_schema_fingerprint: "5e6c53c4103fdd7b58801de7c3274a51f7e863d566c2620ed616718833e4c943"
annotations{5}
title: "Compare SDP"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
1{9}
name: "detect_sip_stack"
title: "Detect SIP stack / vendor from a trace OR a config"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "12928a4c0dc28d273ac23393128b6708cfe3878e6151cf7ed583420e8d4e4752"
input_schema_fingerprint: "6a0bc12800acd6ba0efe5f476cf172fd854a647dd32348538f01e40c85aa8772"
annotations{5}
title: "Detect SIP stack"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
2{9}
name: "detect_sip_vendor_from_config"
title: "Detect SIP vendor from a config file"
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "FILE_ACCESS"
confidence: 0.558
risk_severity: "INFO"
fingerprint: "b88b370bb1146f08ee39b5b5a50e209be86bc630aa027ef2bb0df84cb3bc00be"
input_schema_fingerprint: "76fe044adbafd8e4bae7b58aaa01a52489e2ef46fa10f7d9f5c66ff11fc1ff3c"
annotations{5}
title: "Detect SIP vendor (config)"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
3{9}
name: "diff_sip_messages"
title: "Structurally diff two SIP messages"
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "b317408a4aa79d508b38d8b53b78a1a431a92f251c9ac993afad1708e0876205"
input_schema_fingerprint: "d2326c6765c4d63d6deb5625f432ef463ffb1ca296bcbc53b77d84b335599290"
annotations{5}
title: "Diff SIP messages"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
4{9}
name: "dns_diagnose_sip_target"
title: "RFC 3263 NAPTR/SRV/A walk + sips TLS cert diagnostic for a SIP target"
effect: "READ"
effect_confidence: 0.32
capabilities[3]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.837
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.556
2{2}
capability: "MESSAGING"
confidence: 0.578
risk_severity: "MEDIUM"
fingerprint: "484555fc7276adac759326073e618b4576a376e33d5785c209f6e5aeca79db07"
input_schema_fingerprint: "03a38e34895b261886383fcc8fa7c8c16734f09dc66d5a78849c75d0c8c7a350"
annotations{5}
title: "Diagnose SIP DNS"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
5{9}
name: "fetch_sipflow_share"
title: "Hydrate a Sipflow share link into the conversation"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.827
risk_severity: "INFO"
fingerprint: "a6c696ec67577c2dd4a382948b32f47d2eee9ba92cbb2f6780919d2f3ada4256"
input_schema_fingerprint: "92b40d0a464bc0db4b4cec53c4725cafbcea581f8bf43097e0d670936c3cdd0d"
annotations{5}
title: "Fetch Sipflow share"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
6{9}
name: "lint_sip_request"
title: "Lint a raw SIP request for RFC compliance"
effect: "READ"
effect_confidence: 0.878
capabilities[0]
risk_severity: "INFO"
fingerprint: "249dd2bad8c6f146fe40e31a439e7260fb455604e16b9ab3171bd4468893fce7"
input_schema_fingerprint: "0a3b4ec0ddd91ee6f967221512115f82aa3e14437317420c222b553016b5b29b"
annotations{5}
title: "Lint SIP request"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
7{9}
name: "lookup_response_code"
title: "Look up a SIP response code (instant, RFC-cited)"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "d6493f36194266e763bfad497d079497b53e392275ceeebb5520ed3e64cd1b86"
input_schema_fingerprint: "098592076d4b00b6497a8d4db30cd2021ef8afbb1de2e5fd8280feec14805060"
annotations{5}
title: "Lookup SIP response code"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
8{9}
name: "lookup_sip_header"
title: "Look up a SIP header (RFC-cited)"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "cd254ccd85781ec242bdabb4ff2e10031055512af61e702b17b425823037e179"
input_schema_fingerprint: "fdce77a92500d74ddf74ab3c092fdd61f72108b6d20224f1b0d4ecacb1e1c8a7"
annotations{5}
title: "Lookup SIP header"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
9{9}
name: "minimize_sip_trace"
title: "Minimize a SIP trace"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "f4405ad75b9813bfae9850027ec5d488a9edcc28961f8c90c3b1e2d576ea70a5"
input_schema_fingerprint: "1d865677c91b450cbd1a7c4a1d5ced87596789af4871bccad6e5607ab81df3f7"
annotations{5}
title: "Minimize SIP trace"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
10{9}
name: "parse_sdp"
title: "Parse an SDP body (RFC 8866)"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "c09e10092f43554b04d0fe201ed7bf676a6153aa881853ce898b0b69c9a6c95f"
input_schema_fingerprint: "54d02c588c8c3135b9fefb612eba2620b9c422af4c990f34cacee4812046d3fc"
annotations{5}
title: "Parse SDP"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
11{9}
name: "parse_sip_message"
title: "Structurally parse a single SIP message"
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "441d9273b9b6f18ace7907eae0c08f681ad2e98d14e290eaed1512d6a8c88f2b"
input_schema_fingerprint: "08db28949eaf87983faf6701696f00b362492df79b5d1efdd194300ede2e66db"
annotations{5}
title: "Parse SIP message"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
12{9}
name: "render_sip_ladder"
title: "Render a SIP trace as a Mermaid call-flow ladder"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "11274205353450030d7655e6cc75625ba5baa53939e64bc33561f4a595e72447"
input_schema_fingerprint: "6509f0ce809633f862ed6ab07179c6d3336193026ad48f7fba0526d595e89577"
annotations{5}
title: "Render SIP ladder (Mermaid)"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
13{9}
name: "review_sip_config"
title: "Ground-truth review of a SIP/VoIP config or repo file"
effect: "READ"
effect_confidence: 0.32
capabilities[2]
0{2}
capability: "FILE_ACCESS"
confidence: 0.558
1{2}
capability: "SOURCE_CODE"
confidence: 0.586
risk_severity: "INFO"
fingerprint: "5842887066ea3e903218aef33915abf63b029301e055d36f615bc25dd156042b"
input_schema_fingerprint: "4168da8f880b614eaa3c8b1c951e35a35827e68702294a6317777cc16ae8e730"
annotations{5}
title: "Review SIP config"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
14{9}
name: "search_sip_docs"
title: "Search SIP / VoIP documentation (RAG)"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "f9b204c58bb8b4cc7545032b239961bf3bf27ac10140b66574d2163d92d56ca0"
input_schema_fingerprint: "72e9893af2e099602ece639c0662a13ebdf5a1580266a042289659404d3e61d5"
annotations{5}
title: "Search SIP docs"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
15{9}
name: "sip_ladder_example"
title: "Canonical SIP scenario as a Mermaid ladder"
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.601
risk_severity: "INFO"
fingerprint: "d8a84c471ea02ba576a2ba0b176c47fcf4816492ec54afbca0475b6787828c4c"
input_schema_fingerprint: "9ee3369b6892a56e8ea8c5000a37c9afbf8847885a025bbf3d110178865dad67"
annotations{5}
title: "SIP ladder example"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
16{9}
name: "stir_attestation_explainer"
title: "Explain STIR/SHAKEN attestation levels and codes"
effect: "READ"
effect_confidence: 0.592
capabilities[0]
risk_severity: "INFO"
fingerprint: "6dab061423031632335262f5e3ad3ec04e9fd8c87e2ec1bedc9a3fc533c2cfe7"
input_schema_fingerprint: "198c00e83ffd300b51c483a6397c6654fc1e44458ffd4db3f682e58a8c9022b5"
annotations{5}
title: "STIR/SHAKEN explainer"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
17{9}
name: "submit_sipflow_feedback"
title: "Submit feedback about Sipflow tools, docs, or coverage"
effect: "WRITE"
effect_confidence: 0.848
capabilities[2]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.755
1{2}
capability: "PERSONAL_DATA"
confidence: 0.728
risk_severity: "LOW"
fingerprint: "13abe45f535a417e83da90388f2ca75704004b6c39a2c09ce4fad0d92f306d73"
input_schema_fingerprint: "c5ba23b92bfdaa6529657892bb227e941919498f90e72a0e2a3b939204be2b28"
annotations{5}
title: "Submit Sipflow feedback"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
18{9}
name: "troubleshoot_response_code"
title: "Troubleshoot a SIP response code (RAG, vendor-aware)"
effect: "READ"
effect_confidence: 0.422
capabilities[0]
risk_severity: "INFO"
fingerprint: "c34cd149669fd2b0ba886cd38d3a3173bd86925dfe09216a83255fd89776b6ff"
input_schema_fingerprint: "3cce6103e5dd16b6a820e65ae80ed3c8a6144a0120d883e336f75f0bf83bf1e8"
annotations{5}
title: "Troubleshoot SIP response code"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
19{9}
name: "validate_e164_number"
title: "Validate / classify a phone number (E.164 + NANP)"
effect: "READ"
effect_confidence: 0.878
capabilities[0]
risk_severity: "INFO"
fingerprint: "cc2d8eab56a1dff5b91f283cb3d865fbb8f8449d3894540ef1a81c7d88ac3f25"
input_schema_fingerprint: "292d326d0756f6eaf628557b98ff1b1a86f5061870bcc238014bb81628a82dec"
annotations{5}
title: "Validate E.164 number"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
20{9}
name: "validate_stir_shaken_identity"
title: "Validate STIR/SHAKEN Identity JWT"
effect: "READ"
effect_confidence: 0.896
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.919
1{2}
capability: "IDENTITY"
confidence: 0.765
risk_severity: "INFO"
fingerprint: "1ac67d2df4431319906d6af14d3bc86b1b46fe5f245bde52367d65623fe13453"
input_schema_fingerprint: "d5099e37f57ae170f1ac80c206e44e221407a17901d9a8d8b51be70a1f4a40e2"
annotations{5}
title: "Validate STIR/SHAKEN"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
21{9}
name: "webrtc_sip_checklist"
title: "WebRTC ↔ SIP interop checklist (config-aware)"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "9eb2899b74704e46fb3557c405ac97b66488e64073b901feb3e5205070764219"
input_schema_fingerprint: "eaa622f1f493ebb56264a852ee8d38dbb1a7b00987a1cac59dd4eea06b6a6a03"
annotations{5}
title: "WebRTC SIP checklist"
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
resources[1]
0{4}
key: "sipflow://docs/{vendor}/{id}"
kind: "template"
mime_type: "text/markdown"
fingerprint: "0396b5c5f5f0c008009708c0a093c36bb69875fde23a48cbbd0f3b89de51d2f9"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.sipflow.dev"
registrable_domain: "sipflow.dev"
source: "transport"
findings[12]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "lint_sip_request"
3{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "submit_sipflow_feedback"
4{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "submit_sipflow_feedback"
5{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "troubleshoot_response_code"
6{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "detect_sip_vendor_from_config"
7{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "lookup_sip_header"
8{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "review_sip_config"
9{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "search_sip_docs"
10{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "sip_ladder_example"
11{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "troubleshoot_response_code"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.sipflow/sipflow"
registry_content_sha256: "534411d92a9bbb271b5c495f3b9d24f2923096da727fe31ab4b5fa9d3a7a8189"
scan_snapshot_fingerprint: "d8bc974884a96f2eb844bc26df064a4736b4b0c004915d3a469b2430532f0e4a"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:48:20.780Z"
observed_at: "2026-11-05T10:41:18.027+00:00"
registry_published_at: "2026-05-14T15:30:06.701328+00:00"
registry_updated_at: null