bot-check: Bitcoin Self-Custody & WorkSats MCP
dev.workers.jeffpersons.botcheck/botcheck
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/afa5aff4-d2c2-4763-9c4e-ecdb65ebd5d8/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.workers.jeffpersons.botcheck/botcheck"
title: "bot-check: Bitcoin Self-Custody & WorkSats MCP"
description: "Verify Bitcoin PSBTs, addresses, and descriptors; earn or spend WorkSats bearer credits."
version: "0.1.0"
homepage_url: "https://botcheck.jeffpersons.workers.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.workers.jeffpersons.botcheck"
display_name: "dev.workers.jeffpersons.botcheck"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://botcheck.jeffpersons.workers.dev/mcp"
endpoint_host: "botcheck.jeffpersons.workers.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-03-26"
supported_versions[0]
transport_type: "streamable-http"
tools[6]
0{9}
name: "check_bitcoin_address"
title: null
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "3540f24751e52c602282de67c23f8ab62e36b3c5c3adfe3f1a9e2d633a78d083"
input_schema_fingerprint: "8713530cc5d7b474ee8a4dcb6b30438fc59353257cc9040a10ca12900d670c34"
annotations{5}
title: "Check Bitcoin Address"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "check_descriptor"
title: null
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "4b98dbf934b31e32afa7b4f016fa6321920ab49ba46375a325866e3010f19c4b"
input_schema_fingerprint: "50c3203a7ee4ac6de174e3f9499fc23463eae30dba197a53e30e150d03519555"
annotations{5}
title: "Check Bitcoin Output Descriptor"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "check_psbt"
title: null
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "fd1c499f9c32f74a92f2e0b30a584e613346d1999c4cd1d6e9fbca83546cfab3"
input_schema_fingerprint: "eac56e860a01eb9d00a5efc49ec57ebedff12cdef47b3769ec412507d6e437ea"
annotations{5}
title: "Check Bitcoin PSBT"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "worksats_credits"
title: null
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.76
1{2}
capability: "PAYMENT"
confidence: 0.669
2{2}
capability: "SECRETS"
confidence: 0.796
risk_severity: "MEDIUM"
fingerprint: "622753689e8ae55110783b80ddf50f9d380ca64c17443bc737ac416d272f9ab8"
input_schema_fingerprint: "7ba81b3d44342721bb232b1516900aa3bc991cc3f7256cedba3b5397d7272816"
annotations{5}
title: "Manage WorkSats Bearer Credits"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
4{9}
name: "worksats_get_task"
title: null
effect: "READ"
effect_confidence: 0.835
capabilities[0]
risk_severity: "INFO"
fingerprint: "88aabd93d8f7fb66d940d7af4bcc839f98a683b859710dce03ba98d52aedd4a3"
input_schema_fingerprint: "7b6b00d6784caffaae3e06797eab31e5d3927c63c8f4aa295d5c2e2b9eab10e0"
annotations{5}
title: "Get WorkSats Micro-Task"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
5{9}
name: "worksats_solve_task"
title: null
effect: "WRITE"
effect_confidence: 0.762
capabilities[0]
risk_severity: "LOW"
fingerprint: "25bcff9987a8c176c384260d14edda933768ac663c5b847b7ff962f6f3361d5f"
input_schema_fingerprint: "447cc2486f0247f08a7ef7e1a42052150665aa04248294ac477b6648a76834a6"
annotations{5}
title: "Submit WorkSats Task Solution"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "botcheck.jeffpersons.workers.dev"
registrable_domain: "jeffpersons.workers.dev"
source: "transport"
findings[14]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "CRITICAL"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "check_bitcoin_address"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "check_descriptor"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "check_psbt"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "worksats_credits"
8{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "check_bitcoin_address"
9{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "check_psbt"
10{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "worksats_credits"
11{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "worksats_credits"
12{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "CRITICAL"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "check_bitcoin_address"
13{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "CRITICAL"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "check_psbt"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.workers.jeffpersons.botcheck/botcheck"
registry_content_sha256: "082abf655e6b35c4628eb4774db63509f8c841569c4c90535dc047fe90d54ce2"
scan_snapshot_fingerprint: "7e7b5b41d6f517751a532def61f74580f415c724ee1f8b9a99eef41a4767adc3"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:04:01.423Z"
observed_at: "2026-11-05T09:33:48.27+00:00"
registry_published_at: "2026-10-26T23:48:35.501624+00:00"
registry_updated_at: null