MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/c7c315a1-f8af-4ae2-9283-6984138083d8/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.upstar/upstar"
title: "Upstar"
description: "Rising GitHub repos per topic, ranked by star velocity, plus repos spotted early. Free, read-only."
version: "1.0.1"
homepage_url: "https://upstar.dev/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.upstar"
display_name: "dev.upstar"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://upstar.dev/mcp"
endpoint_host: "upstar.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[9]
0{9}
name: "emerging"
title: "Emerging repositories"
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.917
risk_severity: "INFO"
fingerprint: "60445cbd6d978478762583d72e23f6162e1e7d5a9963d1ff5efdbd840706a118"
input_schema_fingerprint: "670f3d54fe2365f43addc2aa3a24d1f807e1792bd1f30054507391f440407d27"
annotations{5}
title: "Emerging repositories"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "get_collection"
title: "A collection's ranking"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.672
1{2}
capability: "SOURCE_CODE"
confidence: 0.666
risk_severity: "INFO"
fingerprint: "9dfd1dfa31c4d907f7d1e7355356ea8942bf23b0ffba8870dfee911f6dd6dbe1"
input_schema_fingerprint: "374930ceb89afc4cb59935ed21ea57e7bd310d845d61164fd2199a96eb24762e"
annotations{5}
title: "A collection's ranking"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_repo"
title: "A repository's facts"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.672
1{2}
capability: "SOURCE_CODE"
confidence: 0.978
risk_severity: "INFO"
fingerprint: "cc0fc74f79cb10e11469c1bc588f14aee3d31ed0ff689da18d7c4a8b41e862f2"
input_schema_fingerprint: "90a43ac80904eda2c7151cb2d82e19d555fc17f282c42be9cf2c75f68a4f59cc"
annotations{5}
title: "A repository's facts"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "list_collections"
title: "List Upstar's collections"
effect: "READ"
effect_confidence: 0.879
capabilities[0]
risk_severity: "INFO"
fingerprint: "4fc93c2089e9830a8dfc57dc7170319959c2053fb7a4b20063b7784ca6a4a05b"
input_schema_fingerprint: "b331d0ae958109a409baf4fc28eb8b732b36828ff476278a60bb3becdb65386e"
annotations{5}
title: "List Upstar's collections"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "list_topics"
title: "List Upstar's topics"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.74
risk_severity: "INFO"
fingerprint: "3fad6117bf40b728c0c7de5a6fe9927c601f29ff920f45e97d948f9b7094bdcc"
input_schema_fingerprint: "4036c36bb4feddcb8ade53294ab9dbd219da733973e9f122e04ef745002c1a9e"
annotations{5}
title: "List Upstar's topics"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "search"
title: "Search Upstar"
effect: "READ"
effect_confidence: 0.832
capabilities[2]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.558
1{2}
capability: "SOURCE_CODE"
confidence: 0.891
risk_severity: "INFO"
fingerprint: "3a3ed5cf4641a37c69a5a76323a1d1286a1d7f8008860d3667dc585552e03758"
input_schema_fingerprint: "50d5a685687eea1c07160a8e0ea3c67df134ebeac1d403915c244defc6922e0c"
annotations{5}
title: "Search Upstar"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "spotted_early"
title: "Spotted early by Upstar"
effect: "READ"
effect_confidence: 0.422
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.705
risk_severity: "INFO"
fingerprint: "31b5fd1bedabf8f067e69ab8439561bc9a41253f9d71fe6fbe1c8f6cee286f59"
input_schema_fingerprint: "0ff2c0edc1a948431b7c4ca4f58a3015d4539f37032150dc9a24a7e5b2cc0a8c"
annotations{5}
title: "Spotted early by Upstar"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "topic_ranking"
title: "A topic's ranking"
effect: "READ"
effect_confidence: 0.813
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.85
risk_severity: "INFO"
fingerprint: "22e607949a50227149e564e37b70e20139df4d70baedb50319a0af0135a20b43"
input_schema_fingerprint: "307697c17865810a08616b216262ed3c084542385733c25b92dafc831c11311a"
annotations{5}
title: "A topic's ranking"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "trending"
title: "Trending on GitHub"
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.929
risk_severity: "INFO"
fingerprint: "b105fad56045b4bdea1d23ae056e5dbdbd340352b60c3916f1f22df356278b78"
input_schema_fingerprint: "f05e51b467f6edb5ddc343788cb4d4300d9aa3106234d00b6871beb2558681a4"
annotations{5}
title: "Trending on GitHub"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "upstar.dev"
registrable_domain: "upstar.dev"
source: "transport"
findings[1]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.upstar/upstar"
registry_content_sha256: "7a66c90a6f62eef65c1a7e904edc28fafda12c5d988a367d66f5d113fb84aa04"
scan_snapshot_fingerprint: "a4fe9e57696ef747008386f5f76980c956af5c0bb049e8fc238eae6d5a4ee72d"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:51:42.840Z"
observed_at: "2026-11-12T23:24:19.629+00:00"
registry_published_at: "2026-11-03T19:50:25.46033+00:00"
registry_updated_at: null