MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/10d60d06-7b75-4416-9b40-220d01e4a659/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.upfork/upfork"
title: "UpFork"
description: "Verified lessons for your project's packages and versions, and free React components to install."
version: "1.13.1"
homepage_url: "https://upfork.dev/docs/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.upfork"
display_name: "dev.upfork"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://upfork.dev/mcp"
endpoint_host: "upfork.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[8]
0{9}
name: "get_lesson"
title: "Read one lesson"
effect: "READ"
effect_confidence: 0.879
capabilities[0]
risk_severity: "INFO"
fingerprint: "12b3357301190734f6a6ccb39649f9e5a210ec5f27f02936ff3e910df4a9c4bd"
input_schema_fingerprint: "8f66e78a46e0a4ecebda5688d49ba567901576565300ea5b00f2c2fa17f92943"
annotations{5}
title: "Read one lesson"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "install_product"
title: "Install an UpFork product"
effect: "EXECUTE"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "FILE_ACCESS"
confidence: 0.565
risk_severity: "HIGH"
fingerprint: "d42c80edd63af028aaaa21f200092ea5f920c1b67b4ce79df15a2df2a014352d"
input_schema_fingerprint: "4a5e809fd2d1b2cb164b979175e7448840123d5d6e1fa572e04d29d0e4ae08ca"
annotations{5}
title: "Install an UpFork product"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "preflight"
title: "The traps for this project, before you start"
effect: "WRITE"
effect_confidence: 0.603
capabilities[0]
risk_severity: "LOW"
fingerprint: "ae1f509bb7f4e7b0f53961649e3379a4bfc34fad8a8d64bf6c6206dc2ba9f061"
input_schema_fingerprint: "e4b5a49af321889c3711fed3fb0d7e532d3bda53c0ab979c18631e80e07f786d"
annotations{5}
title: "The traps for this project, before you start"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "read_product_file"
title: "Read a product's file by its lines"
effect: "READ"
effect_confidence: 0.857
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.73
1{2}
capability: "FILE_ACCESS"
confidence: 0.953
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
3{2}
capability: "SOURCE_CODE"
confidence: 0.646
risk_severity: "MEDIUM"
fingerprint: "01069deedc07b588a454c285a4adf960b0144d6b9a2509e0df9544fab15db225"
input_schema_fingerprint: "1166b61d5299623c30c876a11fba734d18d1f9ecf7a19b0ce8aabfd248b98803"
annotations{5}
title: "Read a product's file by its lines"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "search_lessons"
title: "Search what builders learned"
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "5d9dbaf111cc1da4c0e1d2cf50bfe692f015ae57a30cf58dccdc9bc9b4fa7dbb"
input_schema_fingerprint: "bfe8c8cf2bf23435cb0081d0dff03b8d23147e0477c536d8fed5c8103f953d0a"
annotations{5}
title: "Search what builders learned"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "search_products"
title: "Search UpFork's catalog"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "1328e008311c33b9e4ff53b248604a71cff8da8548871b91f9aabec472c984ae"
input_schema_fingerprint: "4876a2f26b7d80fb64400cee6eefe1b1f4704a12675673e4cb033d854f02a160"
annotations{5}
title: "Search UpFork's catalog"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "sign_in"
title: "Sign in to UpFork"
effect: "WRITE"
effect_confidence: 0.822
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.765
1{2}
capability: "PERSONAL_DATA"
confidence: 0.694
risk_severity: "LOW"
fingerprint: "41f0017e39598298585dfa69022e6e9a6c2c644fe59377be9c4d8a51fe0b6d3c"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: "Sign in to UpFork"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "view_product"
title: "Look at an UpFork product and its code"
effect: "READ"
effect_confidence: 0.879
capabilities[1]
0{2}
capability: "FILE_ACCESS"
confidence: 0.538
risk_severity: "INFO"
fingerprint: "633fce72c07df7c883f1328e97fb12c30d7ad553f1e2b102fad37a94c405f7e5"
input_schema_fingerprint: "b7be69271f0260b75b6a62248390c8aef6479670367cc1961975528afd02dfe4"
annotations{5}
title: "Look at an UpFork product and its code"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[6]
0{4}
key: "upfork://guides"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "05025e72eee71160b8e34fae0ca09a9dee93000e3028a06edcece1ac0ceac32b"
1{4}
key: "upfork://guides/agents"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "5bf7757588831f409a856810a0f74cd505f08c3df19da3f98d258be14ff2f050"
2{4}
key: "upfork://guides/articles"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "96afce8b940635312efe9268a6f9552ec53133ac7fba5b2e0588bbddb969cb0c"
3{4}
key: "upfork://guides/lessons"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "8030f0e757443d7d63feddf8e87075d987868ef09388bba8307fa0660a9f8890"
4{4}
key: "upfork://guides/listings"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "06c6f4a439c3291301c7397523dcfc1da9069d9eb26ab6f5d81d798853b63428"
5{4}
key: "upfork://guides/products"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "0f34695390a761541db865b59c2cb93074743948d6d0187fa364ad5c2157895e"
prompts[4]
0{2}
name: "make-product"
fingerprint: "b83bbd399a1084fbb5488599d38cc09c97682b540ad0a4722930d7bd92928fd0"
1{2}
name: "record-lesson"
fingerprint: "6a846bf7518747202b4d49341ff6f31b3df7a50e60cbea49228923a2c38cfd69"
2{2}
name: "write-article"
fingerprint: "d125214fbed4b9b39a7f8ec204da350482c6f91c1ab12173a041dfdd0a56d440"
3{2}
name: "write-listing"
fingerprint: "614d37d9fe6659cc460e90faa8d2c0f50e80d026f7c599e06d8c6a8782f769bc"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "upfork.dev"
registrable_domain: "upfork.dev"
source: "transport"
findings[4]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "preflight"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "sign_in"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.upfork/upfork"
registry_content_sha256: "e1ddc7ca9624e0de5b85615254c960069cb30df77e9a3427a194040371a5bf9e"
scan_snapshot_fingerprint: "88b324f41273b97d7b84615146048e0d326954c1a51d94a837854f6b6812e388"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:59:45.637Z"
observed_at: "2026-11-06T19:00:30.232+00:00"
registry_published_at: "2026-11-06T16:22:15.461215+00:00"
registry_updated_at: null