MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/7d823756-b528-4534-bb41-4746d0609370/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.spec72/spec72"
title: "Spec72"
description: "Human-reviewed security certificates and ops audits for AI agent skills, paid per job."
version: "2026.11.12"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.spec72"
display_name: "dev.spec72"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://spec72.dev/api/a2a/mcp"
endpoint_host: "spec72.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[9]
0{9}
name: "order_audit"
title: null
effect: "WRITE"
effect_confidence: 0.703
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.601
risk_severity: "MEDIUM"
fingerprint: "64bb83ecb9202b8b8abae2444293952e414a00a60512f2e7d28ead1da0ccbc7c"
input_schema_fingerprint: "fde9108f7d952da341e4c72536d84dab96e8344c74ccd3c90861b58a8ea449c5"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "order_data_kondo"
title: null
effect: "WRITE"
effect_confidence: 0.703
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.53
risk_severity: "MEDIUM"
fingerprint: "50f26a51123fcc587f70ee0fcb54706f4070efb911dacca7a8f41be3888e9eb2"
input_schema_fingerprint: "e6cf6008143cf0374d28e123d716114abc996efd09b16c5021cd403f82c69539"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "order_escrow_red_flag_peek"
title: null
effect: "READ"
effect_confidence: 0.575
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.53
risk_severity: "INFO"
fingerprint: "8aa68d31492c6de7b1fc3ec60f167c4edbedcc46843ddd9a68cea8f1db2a411d"
input_schema_fingerprint: "07921aacb2ec18edd1e38f2608211dc261bf18d15d0aec8a6a66f48af09e2a5f"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "order_lint"
title: null
effect: "READ"
effect_confidence: 0.575
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.601
risk_severity: "INFO"
fingerprint: "b51811092668e1f25516883b281fafad992b68527b8f01cbc5c3824209ebb8fa"
input_schema_fingerprint: "d87e187feb6ac895a85fda46290955af4f0967b579c845c59213d23c4bd2a4f6"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
4{9}
name: "order_production_harden"
title: null
effect: "WRITE"
effect_confidence: 0.703
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.601
risk_severity: "MEDIUM"
fingerprint: "cb4d75c6e370c1926559f69dc3fe11efdb7477a17a2cc1f01a94ae061ff1e2c3"
input_schema_fingerprint: "fde9108f7d952da341e4c72536d84dab96e8344c74ccd3c90861b58a8ea449c5"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
5{9}
name: "order_session_snapshot"
title: null
effect: "WRITE"
effect_confidence: 0.703
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.53
risk_severity: "MEDIUM"
fingerprint: "8de654083d814cae13eb8292b87849e26de6de4b02d07f0be18c5f724ad4cec2"
input_schema_fingerprint: "4c34c8ba02eb9528a1fa9a49755b722f5cccdee73ee7bc70d98ba42ee96e88c2"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
6{9}
name: "order_skill_scan_lite"
title: null
effect: "WRITE"
effect_confidence: 0.703
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.601
risk_severity: "MEDIUM"
fingerprint: "3183b3e1257903dbb762414c9812d7c0c406ad745df29e6abfce8a5b3cc47ca6"
input_schema_fingerprint: "d87e187feb6ac895a85fda46290955af4f0967b579c845c59213d23c4bd2a4f6"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
7{9}
name: "order_stack_check"
title: null
effect: "WRITE"
effect_confidence: 0.703
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.53
risk_severity: "MEDIUM"
fingerprint: "502bcd99b27a0b98918aa719d7daaa72f6df23bb515bf9abbb7e5229acaa185f"
input_schema_fingerprint: "e6cf6008143cf0374d28e123d716114abc996efd09b16c5021cd403f82c69539"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
8{9}
name: "order_wrong_buy_remediation"
title: null
effect: "WRITE"
effect_confidence: 0.575
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.53
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.809
risk_severity: "HIGH"
fingerprint: "7d0e6d6549fdd384fa8ff1c41bf0ada38549d9adf7231d6c9dd77302257cfc78"
input_schema_fingerprint: "e6cf6008143cf0374d28e123d716114abc996efd09b16c5021cd403f82c69539"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "spec72.dev"
registrable_domain: "spec72.dev"
source: "transport"
findings[2]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.spec72/spec72"
registry_content_sha256: "84cf0aa056cb324832f2a23b21d9ff9f68c387941e7dbd6460b9c5efeca7732a"
scan_snapshot_fingerprint: "632d03ae4a92642aa294e5f3469afb740de9fd47735e50a90a24e13c02d6a562"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:39:57.841Z"
observed_at: "2026-11-13T18:23:17.337+00:00"
registry_published_at: "2026-11-13T15:14:24.905678+00:00"
registry_updated_at: null