Skip to content
Squatch MCP

MCP Bill of Materials

A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/411cac72-f29d-4afc-b876-8350830f30d0/mcbom.

MCP Bill of Materials

root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.workers.bhazarstudio.datoka-hooks-test/datoka-hooks"
title: "Datoka Hooks"
description: "Public webhook relay with signed observations, retries and verified receivers. Self-service."
version: "0.7.6"
homepage_url: "https://datoka-hooks.bhazarstudio.workers.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.workers.bhazarstudio.datoka-hooks-test"
display_name: "dev.workers.bhazarstudio.datoka-hooks-test"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://datoka-hooks.bhazarstudio.workers.dev/mcp"
endpoint_host: "datoka-hooks.bhazarstudio.workers.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[9]
0{9}
name: "accept_hook_event"
title: "Accept Hook Event"
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "13eb47ec137da65f4871fcb379df3d6faccf7989da0901375b8873c2a49d69a9"
input_schema_fingerprint: "8ec99f15ff0ea7bc83a65c55f4ed00af2c0a7a757775c2e372fd81d21b18f6d6"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "get_destination_status"
title: "Get Destination Status"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "2e944a7077022cbe042112d96665d16e6b6df64c53b999bd0f1c574a541fe829"
input_schema_fingerprint: "40c31869dc243b2f4db431622ed9d5b9160c2fc3197df1cf898628b0cd27bd3a"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_hook_credits"
title: "Get Hook Credits"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "5a03923c80828602513f1a1a5ce3fb14aba9262d91d5059ebef5b98fe3a27a17"
input_schema_fingerprint: "40c31869dc243b2f4db431622ed9d5b9160c2fc3197df1cf898628b0cd27bd3a"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "get_hook_delivery"
title: "Get Hook Delivery"
effect: "READ"
effect_confidence: 0.933
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "54cc5dcdf92fe090ea224396a36cb778d42a4527d54042413bd0fc66fc84f55a"
input_schema_fingerprint: "8fede5099a3a3e0ce2db409586841ca77913319411f60bdef12c743a32b193c1"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "purchase_hook_credits"
title: "Purchase Hook Credits"
effect: "WRITE"
effect_confidence: 0.885
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.8
1{2}
capability: "PAYMENT"
confidence: 0.632
risk_severity: "HIGH"
fingerprint: "7d558facf48277ef553bb0c8e20439791f000c20d8c42bc1c25d2e9cf8fa7794"
input_schema_fingerprint: "fb6b033c41b8e02a3486c186c5d9bfb1720697e6f25610ed1c973661a366379d"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
5{9}
name: "register_destination"
title: "Register Destination"
effect: "WRITE"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.718
risk_severity: "MEDIUM"
fingerprint: "89bbf3c811824a07dc9f8d21e5f0158971ce5a54cf76b98d690e953ee4855164"
input_schema_fingerprint: "23350cd5eccc9e8b7778c3ffa0d08d6e9845154aca4c68f81197ce19c75245c6"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
6{9}
name: "revoke_destination"
title: "Revoke Destination"
effect: "ADMIN"
effect_confidence: 0.885
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.5
risk_severity: "HIGH"
fingerprint: "d344e420e9823bf32acbd674de5c8f319a1d7c866043c506b451eddd91eabe37"
input_schema_fingerprint: "40c31869dc243b2f4db431622ed9d5b9160c2fc3197df1cf898628b0cd27bd3a"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
7{9}
name: "verify_destination"
title: "Verify Destination"
effect: "READ"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "AUTHENTICATION"
confidence: 0.513
risk_severity: "MEDIUM"
fingerprint: "af6b5b1077f4a44c9b78cea73c2d4bc124ecf3824a2579782c7f8da34068861b"
input_schema_fingerprint: "40c31869dc243b2f4db431622ed9d5b9160c2fc3197df1cf898628b0cd27bd3a"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
8{9}
name: "verify_hook_receipt"
title: "Verify Hook Receipt"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "AUTHENTICATION"
confidence: 0.586
risk_severity: "MEDIUM"
fingerprint: "6810793d6ff03ed80c2e8a2e47731bcababe9c4c7042c6363a8563af80f23a22"
input_schema_fingerprint: "9b4a19bd4f34bd4ef51e1135f7c62795a830b43f587ef9955257af98d56f8240"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "datoka-hooks.bhazarstudio.workers.dev"
registrable_domain: "bhazarstudio.workers.dev"
source: "transport"
findings[10]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "accept_hook_event"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_destination_status"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_hook_credits"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_hook_delivery"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "purchase_hook_credits"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "revoke_destination"
8{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "verify_destination"
9{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "verify_hook_receipt"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.workers.bhazarstudio.datoka-hooks-test/datoka-hooks"
registry_content_sha256: "8b6fcc54a9ba0ed14066618b21b861d1ebe8d300b3f72d790b197b014a0ea5e4"
scan_snapshot_fingerprint: "730884cd4d69d033bb892c7ca1bc12e946a6c5a1d0bb78ff028329d9de732671"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:53:16.964Z"
observed_at: "2026-11-05T11:26:17.71+00:00"
registry_published_at: "2026-10-04T18:46:39.654602+00:00"
registry_updated_at: null