MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/f90c8c95-2770-4418-a300-b2700b429564/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.veritap/agent-memory"
title: null
description: "Agent memory: free durable storage (any keypair, no signup) that survives sessions and machines."
version: "0.3.0"
homepage_url: "https://locker.veritap.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.veritap"
display_name: "dev.veritap"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/veritap-dev/veritap-locker"
provider: "github"
owner: "veritap-dev"
name: "veritap-locker"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://locker.veritap.dev/mcp/memory"
endpoint_host: "locker.veritap.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[12]
0{9}
name: "locker_ack"
title: "Acknowledge (= delete) read messages"
effect: "WRITE"
effect_confidence: 0.7
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "0b1c1573bf990e77f5d9e7514deebb2ab11310e610d5f1a28eae148fb5f7ddb8"
input_schema_fingerprint: "84c05e0c11cdca1837476cb527b76a9bbf288c3ece106056f23d33e4cc0f4735"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "locker_capabilities"
title: "The full locker contract: identity, prices, custody, payment"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "ddc0db0360d0b0805044eefea0bb9d9f5d8c1a4e776b8b2204ae56b1d47dfd37"
input_schema_fingerprint: "93ab7499dc3c616f8db8780fed0d9f69270803cda913882ad2ef3943db8d7225"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "locker_checkpoint"
title: "The Locker — durable memory that survives your process (save/load/list/delete)"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "5e4913f114a2aea56b173a432e471d3be08fc7c5f073eb9658948e2c01d39156"
input_schema_fingerprint: "4d7881d20e98c4cda84bc1a0c15771f4a7005b82f58c4439ca5523eafe15ca29"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "locker_count"
title: "Peek unacked message count (free, unauthenticated)"
effect: "READ"
effect_confidence: 0.58
capabilities[0]
risk_severity: "INFO"
fingerprint: "fd4ea18167fa7648ed1dc28c6f35c591a44e9cf32df1d9244097ceba724531ef"
input_schema_fingerprint: "9c08515f937a99998b632bd640b21d25b5d6c9a2f4b24cddb833bae82d17e1cb"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
4{9}
name: "locker_credit"
title: "Top up storage credit (paid)"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "3f7f031814e5bd1d413acc930a64e9cc5085b09850e0ee2854ccb5fc1b3fedc1"
input_schema_fingerprint: "494c9d17bbfbe8c258ae1524c6992e470bb5227273c52dfbd07cc29929042c22"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
5{9}
name: "locker_directory"
title: "Look up a recipient's encryption key (free)"
effect: "READ"
effect_confidence: 0.49
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.577
risk_severity: "LOW"
fingerprint: "912b0dfaa3aa951c99d0e8a9366decc7668c00f6135063f589b51c72f84f2b38"
input_schema_fingerprint: "9c08515f937a99998b632bd640b21d25b5d6c9a2f4b24cddb833bae82d17e1cb"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
6{9}
name: "locker_invite"
title: "Onboarding kit: give your OTHER agents this memory too (free)"
effect: "ADMIN"
effect_confidence: 0.49
capabilities[0]
risk_severity: "INFO"
fingerprint: "0f8cf23b2bce5adc5c4ef12a4720fdb6cec86694e4ab3a2be418874cf98419d9"
input_schema_fingerprint: "51f6038b8bdef766c682caaeddea7be031f669b696c2d09f77a45d3684ecaa9a"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
7{9}
name: "locker_nonce"
title: "Get a signing nonce"
effect: "READ"
effect_confidence: 0.49
capabilities[0]
risk_severity: "INFO"
fingerprint: "9a0442119495c4a27fd52f80cf077ec0e5851bb2c7d221e8d0f8dc7d4afbb818"
input_schema_fingerprint: "9c08515f937a99998b632bd640b21d25b5d6c9a2f4b24cddb833bae82d17e1cb"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
8{9}
name: "locker_read"
title: "Read your mail (free, owner-signed, non-destructive)"
effect: "READ"
effect_confidence: 0.745
capabilities[0]
risk_severity: "INFO"
fingerprint: "5cb421ebd0c58e04f39d97d678dd8210de73c32a8fae4efb7893e273d45a664a"
input_schema_fingerprint: "e9beda8cad84c938669ed63842881911afe089fa346263714eb9c46e32e289e0"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
9{9}
name: "locker_register_key"
title: "Register your encryption key (and E2E policy)"
effect: "WRITE"
effect_confidence: 0.745
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.601
risk_severity: "HIGH"
fingerprint: "a6cba78ffab1d12e8c57fc62607b86cfbc8a453b467130ac833daecaa327f3d0"
input_schema_fingerprint: "6beed38260b8da9e8d0189c7f4d76017dbb137aa1ee6a8720f2f9ba55915673c"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
10{9}
name: "locker_send"
title: "Send a message to a wallet address (paid)"
effect: "WRITE"
effect_confidence: 0.745
capabilities[5]
0{2}
capability: "EMAIL"
confidence: 0.862
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.718
2{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.669
3{2}
capability: "PAYMENT"
confidence: 0.53
4{2}
capability: "PERSONAL_DATA"
confidence: 0.711
risk_severity: "HIGH"
fingerprint: "d850514f692bd743e27432597d0625195907a057475db5b688be6db3ba0c4a7e"
input_schema_fingerprint: "b9d59f8007d19a56cadc6478c69747e8186088c8fb17d8854fb6c065c7b0bfc3"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
11{9}
name: "locker_status"
title: "Your storage account status (free)"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "a5bba151c996692d5f543103286d0a5dc3064959a5c0f8e4f57d5d73bd9c9356"
input_schema_fingerprint: "9c08515f937a99998b632bd640b21d25b5d6c9a2f4b24cddb833bae82d17e1cb"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "locker.veritap.dev"
registrable_domain: "veritap.dev"
source: "transport"
findings[6]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "locker_ack"
2{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "locker_capabilities"
3{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "locker_checkpoint"
4{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "locker_credit"
5{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "locker_status"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.veritap/agent-memory"
registry_content_sha256: "e68862f0432d5b4bd15ca08db0256737fae3c4fbdae05e1d8ce4aede49b59415"
scan_snapshot_fingerprint: "69da4bca427e090ccad63c21aa471cb57e28d9b194c787169d90a789ab70daeb"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:00:50.610Z"
observed_at: "2026-11-05T11:04:44.561+00:00"
registry_published_at: "2026-08-25T04:03:58.818659+00:00"
registry_updated_at: null