MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/44d73897-56d2-4fcc-95a4-d5c419c4f6af/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.tokensafe/tokensafe"
title: "TokenSafe"
description: "Reduce your AI bills by up to 99% locally: focused code, warm prompt caches & zero secret leaks."
version: "3.1.5"
homepage_url: "https://tokensafe.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.tokensafe"
display_name: "dev.tokensafe"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/tokensafe-dev/tokensafe"
provider: "github"
owner: "tokensafe-dev"
name: "tokensafe"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "tokensafe"
version: "3.1.5"
transport: "stdio"
1{4}
registry_type: "pypi"
identifier: "tokensafe"
version: "3.1.5"
transport: "stdio"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.tokensafe.dev/mcp"
endpoint_host: "api.tokensafe.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-06-18"
supported_versions[0]
transport_type: "streamable-http"
tools[13]
0{9}
name: "check_latest_version"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[0]
risk_severity: "INFO"
fingerprint: "dcaf6fa08c7b9c499ce43360c5ef1bd08b514b3b07a0c867038e361f49d87e47"
input_schema_fingerprint: "51114a14bfe02ce3b0c9448bc8eb8b9d04735825a4ccef3fb39dbc59e93ecd86"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "distill_prompt"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "6791cbcade88d99389bdb7681c832ec3765f0e78036227d5969659ff9ae8b719"
input_schema_fingerprint: "7b0d65c8964a56b4637ba0bc61bdd988d46c3ae901827bd8169e6e7d99474534"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "generate_team_seat"
title: null
effect: "READ"
effect_confidence: 0.65
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.915
1{2}
capability: "MESSAGING"
confidence: 0.7
2{2}
capability: "PERSONAL_DATA"
confidence: 0.592
risk_severity: "MEDIUM"
fingerprint: "5d91572ac9a1e83ee032ce17efd72a4d3d957af0ac7386ef23ddb55e7152923f"
input_schema_fingerprint: "ad09dadc52c4d21aeda932209fc9c0d1e9acf5a20c03df67758baf975ce7ca1a"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "get_license_status"
title: null
effect: "READ"
effect_confidence: 0.836
capabilities[0]
risk_severity: "INFO"
fingerprint: "ebc4b4695c03c6f45df4793c9a124cc8e6f436d95d25044239f94dc65567b16d"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
4{9}
name: "get_public_stats"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[0]
risk_severity: "INFO"
fingerprint: "a6b991d016de4f993eeabc558cb3b50844cce11f4884a43f035dc2f3332f3e95"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
5{9}
name: "get_setup_instructions"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[0]
risk_severity: "INFO"
fingerprint: "82f275ac85fcfdcb14604f187d29bea3000b5584647d8d0ec9db555ec9e5698b"
input_schema_fingerprint: "e931e25f58c21285695c75f803f7f2e2ad3cc45a8d6faa207fd15e3a6be2f17e"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
6{9}
name: "get_team_metrics"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.618
1{2}
capability: "MESSAGING"
confidence: 0.7
risk_severity: "MEDIUM"
fingerprint: "81126cad2dff9ab9c8f7c77240e56010011c1aca26bf9d60899f1fcd74490de3"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
7{9}
name: "list_invoices"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.865
risk_severity: "LOW"
fingerprint: "a6a5f1f0731774e418b2ed463fb2f23fb2b1e9300b8299e650dd5ff50cac14df"
input_schema_fingerprint: "9817a39227d31415117973c456bab1c3f79c75cb68d81184aae131d2697dfd26"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
8{9}
name: "preview_weekly_digest"
title: null
effect: "READ"
effect_confidence: 0.745
capabilities[0]
risk_severity: "INFO"
fingerprint: "93483529dace241e81dcaa0e11a2aee0b05cc1f85828be67f31467d9eb2dd531"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
9{9}
name: "revoke_team_seat"
title: null
effect: "ADMIN"
effect_confidence: 0.65
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.837
1{2}
capability: "MESSAGING"
confidence: 0.7
risk_severity: "HIGH"
fingerprint: "8d2240e8d96b16a52bb4e5674b66ab70ebf60717f54aa8de224cf34192d764f1"
input_schema_fingerprint: "5f68acf5d9a037135d9afed9a42c429fb654aee8ab430f18f034d9ea00c95956"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
10{9}
name: "search_docs"
title: null
effect: "READ"
effect_confidence: 0.808
capabilities[0]
risk_severity: "INFO"
fingerprint: "21004f08190809502d6959eb484a0011d21a8bd458f9fc2c2fec7d496c12ad62"
input_schema_fingerprint: "304cc8c58a69b8d95c64e6cd048a4c8261996006ae54274570602dad62a467e6"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
11{9}
name: "team_cache_lookup"
title: null
effect: "READ"
effect_confidence: 0.725
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.745
risk_severity: "MEDIUM"
fingerprint: "3b93162d36254b4e9a34dbf45f7146472922c4b2c963d7fabcb8f62e912b3f12"
input_schema_fingerprint: "3ab520ecde461b54c379e1b09e279e973814b0c5154f24e5c865a26ae82a689b"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
12{9}
name: "team_cache_store"
title: null
effect: "WRITE"
effect_confidence: 0.725
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.745
risk_severity: "MEDIUM"
fingerprint: "6072bba1648c9c8114de101b50483ec5fbeb4c20b40d76b9100f83148af17230"
input_schema_fingerprint: "06199bdb53ce35d819004c7bb03c4bc18ae78b6bc04daf8d2cbf4fb56728b7e8"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.tokensafe.dev"
registrable_domain: "tokensafe.dev"
source: "transport"
findings[6]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-DESTRUCTIVE-NO-ANNOTATION"
category: "annotations"
severity: "LOW"
title: "Destructive tool without annotations"
subject_type: "tool"
subject_name: "revoke_team_seat"
3{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "LOW"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "distill_prompt"
4{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "HIGH"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "distill_prompt"
5{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "distill_prompt"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.tokensafe/tokensafe"
registry_content_sha256: "6d50573717c49348bfa0681cbbb4d9610903acfbd05e554ed7e247770f4030f2"
scan_snapshot_fingerprint: "065b9b7fc4ab48120219389f0f76bb80c1fe51d52d714d6c87ac2d76a960e5dd"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:51:40.262Z"
observed_at: "2026-11-15T00:05:12.502+00:00"
registry_published_at: "2026-11-14T17:20:16.640246+00:00"
registry_updated_at: null