dev.usaref/reference-data
dev.usaref/reference-data
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/93a07c3e-f19a-4d39-94b3-e6e2da1518f5/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.usaref/reference-data"
title: null
description: "N American govt data, cited to source: rates, VAT, tax, wages, holidays, FX. 10 countries; USA free."
version: "1.5.0"
homepage_url: "https://usaref.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.usaref"
display_name: "dev.usaref"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://usaref.dev/mcp"
endpoint_host: "usaref.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[33]
0{9}
name: "add_business_days"
title: "Add business days to a date"
effect: "WRITE"
effect_confidence: 0.822
capabilities[0]
risk_severity: "LOW"
fingerprint: "50591102756f2ab9af0479bf88231d34bd1b7a3b0ba85b4b37ba0821a59b57f1"
input_schema_fingerprint: "fdddac07685a22d976580f000c6d4f3059454d16fcdc69c4d372890b9e6b16fe"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "business_days_between"
title: "Count business days between two dates"
effect: "READ"
effect_confidence: 0.592
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.73
1{2}
capability: "PERSONAL_DATA"
confidence: 0.792
risk_severity: "MEDIUM"
fingerprint: "78abb8ef9951af315a88c1127eb1a669cf81d703c2b32e968c9dc8b6edf9001d"
input_schema_fingerprint: "ed065ecfa0180d4a529bf7290ef5256228d3bb1e476e8178d7247a1720779135"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "charge_sale"
title: null
effect: "WRITE"
effect_confidence: 0.822
capabilities[3]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.61
1{2}
capability: "PAYMENT"
confidence: 0.878
2{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "7982c58ae39d0ab363a51f3116cd74bdf10203899a3f169e7bbfafd38e17012d"
input_schema_fingerprint: "2bfb52563ac38fe6ea7a40adc197ecbd0277dcfe6d34b6e48a9e0f2dbbbfc5c2"
annotations{5}
title: "Charge This Sale"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
3{9}
name: "charge_sale_certified"
title: null
effect: "WRITE"
effect_confidence: 0.79
capabilities[3]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.61
1{2}
capability: "PAYMENT"
confidence: 0.878
2{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "5ef192e44fac57abf23ea5f98907db10626e4f7b68d4ff401014f3fe8628ba84"
input_schema_fingerprint: "2bfb52563ac38fe6ea7a40adc197ecbd0277dcfe6d34b6e48a9e0f2dbbbfc5c2"
annotations{5}
title: "Charge This Sale (Certified)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
4{9}
name: "check_minimum_wage"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[3]
0{2}
capability: "HR"
confidence: 0.765
1{2}
capability: "PAYMENT"
confidence: 0.601
2{2}
capability: "PERSONAL_DATA"
confidence: 0.792
risk_severity: "MEDIUM"
fingerprint: "c466fdfad8c1746f8f993f4550d5304e3581e44b320427123408c0f0a6c6d0a4"
input_schema_fingerprint: "17bfba9fe7ebb1d819fc67e6a063589c60b574545a5bb18d3e1804451698a714"
annotations{5}
title: "Check Minimum Wage"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
5{9}
name: "compare_series"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "0c98e5562c1d0cf86bb1668e9264222210261ebd7a2b22fa102ba3a6e61a8cbb"
input_schema_fingerprint: "2ae4d47656d01214667b0e4a10c563f919773c9d9ea0e43ea7c0f4b6892bdc2f"
annotations{5}
title: "Compare Series Across Countries"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
6{9}
name: "compute_employment_cost"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[2]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.558
1{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "adb2048c72315728e44d8ce348c4648a2eaa4d3dce3199840dac094a0eb2f104"
input_schema_fingerprint: "7ba3e0fe092fca8066dd162695d7144ada91450e2a75680a6b52d1238103d32d"
annotations{5}
title: "Compute Employment Cost"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
7{9}
name: "compute_income_tax"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "48de7f22a697acbc49f43ff81ab8551ce517edb54c71be1667cda310c27232ac"
input_schema_fingerprint: "8b2bd6baa36741c82ad97ff9dfbe30df0b8d582fd04babb44ea378976357d971"
annotations{5}
title: "Compute Income Tax"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
8{9}
name: "compute_statutory_interest"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.78
risk_severity: "MEDIUM"
fingerprint: "5bd1d0b8019d39d8d5dd2eb3ee3729a72b6996f2be80513230ee57646635b210"
input_schema_fingerprint: "cbd787b662f30702aea8023e54110345b0123be5f2453f137091458ade03b567"
annotations{5}
title: "Compute Statutory Interest"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
9{9}
name: "compute_vat"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[2]
0{2}
capability: "PAYMENT"
confidence: 0.53
1{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "0a663b10e0f28dd93a84150c717b25f757c4a4112f8c51a9ec65ef7053ec2324"
input_schema_fingerprint: "dac4ae75a02b6c9513ce0e8f942e1e0ee7631b4330a8ff7dea193369e18e3225"
annotations{5}
title: "Compute VAT"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
10{9}
name: "cost_hire"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[3]
0{2}
capability: "HR"
confidence: 0.53
1{2}
capability: "PERSONAL_DATA"
confidence: 0.741
2{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "236d6896480d445874d0a8ad218643e879ded973605f50cfd56196cb2fe89127"
input_schema_fingerprint: "222c7dd5d237f6ac35dcf9c2a85b57156017b2f6d8dd57ca117fb7683f57eec1"
annotations{5}
title: "Cost This Hire"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
11{9}
name: "count_working_days"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.78
2{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "bde53314436fa1273ec99e1ec3ef8bd4b1ff807d32625cba39c172dc344660ba"
input_schema_fingerprint: "4ed1612313c4a3430471b24cd1a9c0ff97b2f87d3ca85c0bb0ae3bde039d7e59"
annotations{5}
title: "Count Working Days"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
12{9}
name: "evidence_pack"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "ea36b90a6bcc82b43f9740c99bfda07ad5792f8062429437f02923b5e3ffe366"
input_schema_fingerprint: "198d5247e0603977956e590e847dd9298d98d9afc3c648357b13c7e00ede82de"
annotations{5}
title: "Country Evidence Pack"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
13{9}
name: "get_calendar"
title: null
effect: "READ"
effect_confidence: 0.832
capabilities[1]
0{2}
capability: "CALENDAR"
confidence: 0.724
risk_severity: "INFO"
fingerprint: "051ddc3b3453a9a7e4e7c1b9612c81ff1c7552b0c7c10d99db9986ae95e14f13"
input_schema_fingerprint: "56032b539627798003182fc1e1b67e2a17dd704396a0ffb1de7ed25e11dfdeee"
annotations{5}
title: "Get Compliance Calendar"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
14{9}
name: "get_changes"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "9a724182b018c8712e7e08dfbbd8357831dca2eefc72af185f93074a45d75467"
input_schema_fingerprint: "9c8b7cf4acac452431343e196fdcffd0c304e3cc4a3be85255f5720aed836a95"
annotations{5}
title: "Get Recent Changes"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
15{9}
name: "get_country_brief"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[2]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.584
1{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "e0b862b05f203e7339069e6c501b0afdbe370e307d7fab7cbb2092d760442998"
input_schema_fingerprint: "12578e232f344fbd5fbc75d23988e0972688b4e1894e1c0450cc75fef2a4c6af"
annotations{5}
title: "Get Country Brief"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
16{9}
name: "get_filing_deadlines"
title: "Statutory filing deadlines"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.73
1{2}
capability: "PERSONAL_DATA"
confidence: 0.792
risk_severity: "MEDIUM"
fingerprint: "09c74447ca4058d30621ddb47ce9bcd0b371085721ea7520380438ee937942fd"
input_schema_fingerprint: "7cc482c36484eab2fdc65e728767b351c302589c77fdbf22d1fa43d7334c7cff"
annotations{5}
title: "Statutory filing deadlines"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
17{9}
name: "get_key_balance"
title: null
effect: "READ"
effect_confidence: 0.832
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.648
risk_severity: "HIGH"
fingerprint: "26817a80967e7c97a287bf7e9a63ea418634a5b232fced797a5afc2020800308"
input_schema_fingerprint: "b0c4e7c5bab9f40923b696e4f43ebb0f7f22659897c9705db65173c364de7374"
annotations{5}
title: "Get Key Balance"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
18{9}
name: "get_public_holidays"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "2cd46df81c8c8444b3f34707166e3a7159b408da4dca4e991346fd91b9ebc87e"
input_schema_fingerprint: "1af213d8a2e92408edf1b1c860210198d64c9447c7554b76b4d126f4f91021b0"
annotations{5}
title: "Get Public Holidays"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
19{9}
name: "get_public_holidays_worldwide"
title: null
effect: "READ"
effect_confidence: 0.832
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.76
risk_severity: "HIGH"
fingerprint: "12cd011d0a21364c3d77efa9b02893c83377f0ec4df83940dcb233fcac516bad"
input_schema_fingerprint: "04e633472012839e876794eba851c7c8a9705df54704fa9de81733dc8a6eae1f"
annotations{5}
title: "Get Public Holidays Worldwide"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
20{9}
name: "get_series"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "91c1434d64c6737a41e65fc3aff6958ed00c4274b506b45028fb19fac402e0f9"
input_schema_fingerprint: "c19ef251d7d64df4007a76506a34777f07e320ae665dc93774f5ac8ee58a8cdb"
annotations{5}
title: "Get Series Value"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
21{9}
name: "get_series_history"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.824
2{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "8403b61281952ff9b8e5533d926d21c04c1ef374218633e16694886c3964fb98"
input_schema_fingerprint: "4728a3ecb6ba366c95a5d1d0678ac1fecda02a275913784c7293e09980c92c32"
annotations{5}
title: "Get Series History"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
22{9}
name: "get_snapshot"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "2d317ec9b62d88789dc64f390b5049f30127c505048634690971172d0cdc8599"
input_schema_fingerprint: "44019088d6ca25736be67b5ec797b0562a3dd756836817c9c877f10ee937935f"
annotations{5}
title: "Get Full Snapshot"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
23{9}
name: "hire_compare"
title: null
effect: "READ"
effect_confidence: 0.66
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "4faf53073a8b5e64c78e92f93ed9ce01fd32c6ebcd4f4f97b6a7b9c3251f5d02"
input_schema_fingerprint: "cfd4326710d8a1f9397353f52321d5e1c7dee225585146760e1ed5a44ef1a40e"
annotations{5}
title: "Hire Compare"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
24{9}
name: "invoice_check"
title: null
effect: "READ"
effect_confidence: 0.524
capabilities[2]
0{2}
capability: "PAYMENT"
confidence: 0.936
1{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "61054cebeeb38000c66dc2ebf9e31bf69fdb48167d7b1f15e616dbc5b658d475"
input_schema_fingerprint: "dd7260405c49360366289d1eaabeefec3f39c284dab6cf306fafb5419094ac14"
annotations{5}
title: "Invoice Check"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
25{9}
name: "invoice_payable"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[2]
0{2}
capability: "PAYMENT"
confidence: 0.83
1{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "8f0ea12a013afac40d71e5104befadb44589d26b3e239eebd3e7640c4d385f92"
input_schema_fingerprint: "4a9189681c2aa0288edaba41a86554d3baf40faff129bff935d23a2921836f86"
annotations{5}
title: "Invoice Due Date and Late Interest"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
26{9}
name: "is_business_day"
title: "Is it a business day?"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "401c0b9279075731d5631e1c66ef44bf95d59f34097be429cdd02e389321d33e"
input_schema_fingerprint: "fb76f4f9d8b431368fc4103239b9cc76965b64921add50a26c1df3fe7a414114"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
27{9}
name: "list_series"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "a2177d294b6d07755b9c3cbab9b68cf348e669c1d98a8284718e8c64831e80a3"
input_schema_fingerprint: "4d4918fdee6c435654f880ab7fa442cd10dec39eda70fd1837f0350cfca5eb4a"
annotations{5}
title: "List Reference Series"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
28{9}
name: "next_filings"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.725
2{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "4cb1882f177b1c1e2c3a75f9325f88cb0ef44d5c66c65ec520593ab748c8c55a"
input_schema_fingerprint: "bde2e02dfacb07f1071b2a83deefa9a40c8d31faae2a6ee0951291309164413d"
annotations{5}
title: "Next Filings"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
29{9}
name: "register_alert"
title: null
effect: "WRITE"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.827
risk_severity: "MEDIUM"
fingerprint: "2787a3d4b21bed31ed2b9092a47ccb8474abbcdcc0538f2c2835d6e4b4c8ea3b"
input_schema_fingerprint: "c5264bc5513be6082b1f204158e4be157b2543c0924e5c2602c2aaf4febf5e2d"
annotations{5}
title: "Register Change Alert"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
30{9}
name: "settlement_date"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "1dc0f8370f3ebb8356b0755099336ab9702d0896d37588a66303c4b8537bb8df"
input_schema_fingerprint: "83400ba5ee14826103f486d205bcdb1afb3582928e6d862040a53a356af4bf69"
annotations{5}
title: "Settlement Date"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
31{9}
name: "validate_tax_id"
title: null
effect: "READ"
effect_confidence: 0.878
capabilities[2]
0{2}
capability: "SECRETS"
confidence: 0.53
1{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.765
risk_severity: "HIGH"
fingerprint: "f77547e532521aab56ce956e3e15a7ac992b020ed0a8222974a7d7a761cf13bc"
input_schema_fingerprint: "d3765f9ea16b5ce570596642ae7d74c5463cde2acc94e4fca3c4e12bb0396555"
annotations{5}
title: "Validate Tax ID / VAT Number"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
32{9}
name: "verify_answer_receipt"
title: null
effect: "READ"
effect_confidence: 0.857
capabilities[0]
risk_severity: "INFO"
fingerprint: "5e9dc1228405988e604a0f67e31ba1ff28cf5de671ab2e858c74eba327c60609"
input_schema_fingerprint: "d4647fd58281eee91db9b946af56607c864f845671b87e17fbdea66b798741ea"
annotations{5}
title: "Verify Answer Receipt"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
resources[3]
0{4}
key: "usaref://catalog/countries"
kind: "resource"
mime_type: "application/json"
fingerprint: "7e1e9c627249ac1222b9966f13370a56485131a68551ab9882805e4654114b18"
1{4}
key: "usaref://catalog/series"
kind: "resource"
mime_type: "application/json"
fingerprint: "fbd9c104e829a178ba6dd256f2b3dad38042be1f50abb09d5a0c28e6b6231547"
2{4}
key: "usaref://guide/pricing"
kind: "resource"
mime_type: "application/json"
fingerprint: "6e72edb139603b38241a02bc40741d6e65832c8ac1b7d4084a02386bea2b6d96"
prompts[3]
0{2}
name: "country_tax_snapshot"
fingerprint: "42afc158de1cc3b30e7023bdd29478637607ba5b55d266b56e524ae1d1867b50"
1{2}
name: "inflation_policy_rate_compare"
fingerprint: "362cc98bc50e651b59c7e30b48a6edf26ef5f8fb9953b2cf002840ff4234388c"
2{2}
name: "payroll_check"
fingerprint: "98e748f07da87d5d95539743b13564c72a703be883d13c46e87159033b674fb8"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "usaref.dev"
registrable_domain: "usaref.dev"
source: "transport"
findings[62]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "add_business_days"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "HIGH"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "charge_sale"
4{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "HIGH"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "charge_sale_certified"
5{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "compare_series"
6{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "get_country_brief"
7{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "get_filing_deadlines"
8{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "get_series"
9{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "get_series_history"
10{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "get_snapshot"
11{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "register_alert"
12{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "validate_tax_id"
13{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "charge_sale"
14{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "charge_sale_certified"
15{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "check_minimum_wage"
16{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "compare_series"
17{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "compute_employment_cost"
18{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "compute_income_tax"
19{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "compute_statutory_interest"
20{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "compute_vat"
21{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "cost_hire"
22{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "count_working_days"
23{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "evidence_pack"
24{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_country_brief"
25{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_filing_deadlines"
26{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_key_balance"
27{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_public_holidays_worldwide"
28{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_series"
29{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_series_history"
30{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_snapshot"
31{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "hire_compare"
32{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "invoice_check"
33{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "invoice_payable"
34{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "next_filings"
35{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "register_alert"
36{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "settlement_date"
37{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "validate_tax_id"
38{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "charge_sale"
39{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "charge_sale_certified"
40{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "check_minimum_wage"
41{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "compare_series"
42{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "compute_employment_cost"
43{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "compute_income_tax"
44{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "compute_statutory_interest"
45{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "compute_vat"
46{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "cost_hire"
47{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "count_working_days"
48{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "evidence_pack"
49{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_country_brief"
50{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_key_balance"
51{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_public_holidays_worldwide"
52{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_series"
53{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_series_history"
54{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_snapshot"
55{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "hire_compare"
56{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "invoice_check"
57{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "invoice_payable"
58{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "next_filings"
59{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "validate_tax_id"
60{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "verify_answer_receipt"
61{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "CRITICAL"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "verify_answer_receipt"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.usaref/reference-data"
registry_content_sha256: "ca12e5656ae7dfab61952be9e6c2c827ea32ca856d8cf0c8b76524cc05eab206"
scan_snapshot_fingerprint: "202ee195fb74ec46b7b5e3a02ba60cd296822e21c3e9288b9b88703ec3bc0ac7"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:36:31.079Z"
observed_at: "2026-11-05T11:04:27.044+00:00"
registry_published_at: "2026-08-02T12:00:02.583919+00:00"
registry_updated_at: null