Skip to content
Squatch MCP

MCP Bill of Materials

A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/9a1bde53-c938-435b-a4fb-34d0eb361d7b/mcbom.

MCP Bill of Materials

root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.workers.revenue-agent-jw.agent-utils-x402-production/agent-utils"
title: "Agent Utils (x402)"
description: "Public records, OSV, PII redact, web reader, stablecoin freeze check for agents. x402 USDC"
version: "1.13.0"
homepage_url: "https://agent-utils-x402-production.revenue-agent-jw.workers.dev/"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.workers.revenue-agent-jw.agent-utils-x402-production"
display_name: "dev.workers.revenue-agent-jw.agent-utils-x402-production"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://agent-utils-x402-production.revenue-agent-jw.workers.dev/mcp"
endpoint_host: "agent-utils-x402-production.revenue-agent-jw.workers.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-06-18"
supported_versions[0]
transport_type: "streamable-http"
tools[26]
0{9}
name: "caller_avoidance_score"
title: null
effect: "READ"
effect_confidence: 0.524
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.539
1{2}
capability: "PERSONAL_DATA"
confidence: 0.61
risk_severity: "LOW"
fingerprint: "910793bd7d13e57c5996925375e69eaf68244a05ded3ef7c1336e1bd6c35d1f9"
input_schema_fingerprint: "6acbee8bf604296e181cc165928e53b15caa55f539fde38f4400e3241608b5be"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
1{9}
name: "climate_day"
title: "NWS climate-day high/low + official CLI"
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.666
risk_severity: "INFO"
fingerprint: "c5c3c9afc283d059cac6a6f2ffe94107b1721f66b8f7c66d8421a605f63b0835"
input_schema_fingerprint: "dd32bcb9f0a59ff5aa756469cbfa61d23a4261fa4ea772343e437166d6344c75"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
2{9}
name: "clinical_trial_study"
title: "ClinicalTrials.gov study by NCT ID"
effect: "READ"
effect_confidence: 0.422
capabilities[2]
0{2}
capability: "HEALTH"
confidence: 0.834
1{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.834
risk_severity: "MEDIUM"
fingerprint: "29bec261e3bb82abaad63aefc515cd513f57e494adada7ced8b5adc8962aac4b"
input_schema_fingerprint: "0f9d346766a0a8c3f9ee035a4d52da84b60e465badd3b7c193648626fcb62f3e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
3{9}
name: "clinical_trials_search"
title: "ClinicalTrials.gov study search"
effect: "READ"
effect_confidence: 0.66
capabilities[2]
0{2}
capability: "HEALTH"
confidence: 0.859
1{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.859
risk_severity: "MEDIUM"
fingerprint: "f8535c894a1e080662fa0bf1b9fe44707c4992b660766b0f3634237b21ecd61c"
input_schema_fingerprint: "1324db3bb6477f68c9b65d51ff584fdf13351534830de3651036512d6e79b48b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
4{9}
name: "email_auth_audit"
title: "Email auth DNS audit (SPF, DMARC, DKIM, MTA-STS)"
effect: "WRITE"
effect_confidence: 0.885
capabilities[5]
0{2}
capability: "AUTHENTICATION"
confidence: 0.724
1{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.718
2{2}
capability: "EMAIL"
confidence: 0.915
3{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.76
4{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "HIGH"
fingerprint: "a65af6cbbbc2145736e1cbea89294c9e0aad80fe51f17284fef7f0fd715634c5"
input_schema_fingerprint: "3f5df48d35bb54748b7c23fe0fb767d3abad9adf3a9a42af2676cd0c92117c7b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
5{9}
name: "fda_adverse_events"
title: "FDA adverse event counts (FAERS)"
effect: "READ"
effect_confidence: 0.422
capabilities[0]
risk_severity: "INFO"
fingerprint: "7e1d7aa500f115b4227efcf131a5c6add22bf50d0a5faaab058adb3bf5e3d74f"
input_schema_fingerprint: "b0c6858f93765c76df3061612cd866cf06252760c3d4d4443001eabe20652dd8"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
6{9}
name: "fda_drug_label"
title: "FDA drug label (openFDA)"
effect: "WRITE"
effect_confidence: 0.405
capabilities[0]
risk_severity: "LOW"
fingerprint: "c2ef67e43c8e09423ec5a0ecb838cc6efe845a281c7e0d97f9e7f1d6c4104f4f"
input_schema_fingerprint: "5d8f82ac4fdae35a36370404d16ee6004c40ac3a888fd3a2bd6e33b3f141c0c0"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
7{9}
name: "fda_ndc_lookup"
title: "FDA NDC directory lookup"
effect: "READ"
effect_confidence: 0.66
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.567
risk_severity: "LOW"
fingerprint: "b628ee0240589b41f183acb3fde1f62b41fbe18dc059dc2f010e32c1d0a32b63"
input_schema_fingerprint: "5a8aeb208edf69623f44493efc265c8db1e2592e7b3429adcb82ca20b02353a0"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
8{9}
name: "federal_register_search"
title: "Federal Register document search"
effect: "READ"
effect_confidence: 0.66
capabilities[0]
risk_severity: "INFO"
fingerprint: "90ca22d38280674067a6b07cf7e1f01669358e350dd1dd8d55f977dd7c0bdaee"
input_schema_fingerprint: "93b51f8cd05755d6efb85c3d214a87dda8c85f8e5dc78278cc37ca840421eb35"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
9{9}
name: "fixture_settle"
title: "Known-answer x402 payment fixture (signed receipt)"
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.669
risk_severity: "LOW"
fingerprint: "f54491f04a04594cd229ba1c6cb1b7c4a76ddef342faaf1dca61a6b7184ebc31"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
10{9}
name: "gas_estimate"
title: "Multi-chain EVM gas fees + USD transfer cost"
effect: "READ"
effect_confidence: 0.66
capabilities[0]
risk_severity: "INFO"
fingerprint: "fb2baf3df6acf9767658b9ca15c2b7a5699c67a231bdc89e2432155debb1bb73"
input_schema_fingerprint: "30d90d5e8d7371b026aee03daf973321c1cfebef1805f9fd54f5a66de5ba4779"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
11{9}
name: "injection_scan"
title: "Prompt-injection pre-filter"
effect: "READ"
effect_confidence: 0.524
capabilities[0]
risk_severity: "INFO"
fingerprint: "a8e4c6d721ced7cff355341d8238908c815f790ea4caf466c07820f6d9db1651"
input_schema_fingerprint: "4a12c9625d8a5e5c237f33e663dad75c06e08e2286782cf970ffdb8057e6db05"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
12{9}
name: "osv_package_vulns"
title: "Package vulnerability check (OSV.dev)"
effect: "READ"
effect_confidence: 0.682
capabilities[2]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.669
1{2}
capability: "SOURCE_CODE"
confidence: 0.641
risk_severity: "INFO"
fingerprint: "51ca1bec992517f6749e88a8e32344f1933aa4932faa777b467c7ad3f756fb5f"
input_schema_fingerprint: "0a8e8615b0f8360a1c906ead626849b8867232806d5869415c310279ea015829"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
13{9}
name: "recall_check"
title: "US recall check (NHTSA, CPSC, FDA)"
effect: "READ"
effect_confidence: 0.879
capabilities[0]
risk_severity: "INFO"
fingerprint: "644bd38617fa97ec65301ff0fdfeab70f995bfe4f33c59e5663a7e74e9078b1c"
input_schema_fingerprint: "83c047c26e2db6ac2bd498fa7861ef51393f56a597de4a66174c173ae4b3ba55"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
14{9}
name: "sanctions_address_check"
title: "OFAC sanctions check for crypto addresses"
effect: "READ"
effect_confidence: 0.524
capabilities[0]
risk_severity: "INFO"
fingerprint: "f04384bc4ba26aaa04d7b1ee801e3e523ab36fe748e01c30790f76e3495a1409"
input_schema_fingerprint: "cfa9dd76e839eb639b7dc2a5b2ef19aa0dca6eaad9cbcd87f66f1990ea8d8887"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
15{9}
name: "sec_13f_holdings"
title: "SEC 13F institutional holdings"
effect: "READ"
effect_confidence: 0.422
capabilities[0]
risk_severity: "INFO"
fingerprint: "d0383a30e0b96e984777430edac71a06b69cf777723ab12f47a66ecc97c4ee60"
input_schema_fingerprint: "d1cd1d804c024f39b4ba5579ab3ef131acc4e34ed2bfbb6438b7f4a32ec9a1a4"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
16{9}
name: "sec_8k_filings"
title: "SEC 8-K current reports"
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "LEGAL"
confidence: 0.55
risk_severity: "INFO"
fingerprint: "b5a96af672f4237e2589a6aaab1e00184bee530e8dda806a3e0bed52d307bdec"
input_schema_fingerprint: "0e865b79bfd24c29898eb512e7081d9ca8aee7f7c6857e35007788278ba7572b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
17{9}
name: "sec_filings"
title: "SEC EDGAR filings + XBRL facts"
effect: "READ"
effect_confidence: 0.422
capabilities[0]
risk_severity: "INFO"
fingerprint: "fb8a6faa1603a83437b6d27ba374d37365d464405807e244d21f831a90d92c5e"
input_schema_fingerprint: "764d19cc9898df95d54376f80898655402f04159af03ccdbe51dccc20208e114"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
18{9}
name: "solana_pre_promo"
title: "Solana pre-promo covered-shelf aggregates vs matched null"
effect: "READ"
effect_confidence: 0.422
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.834
risk_severity: "MEDIUM"
fingerprint: "aff2866b7b935db98acbcf81185ca8b9dc97cc7a8f4a4c7aeffc6218fd99beca"
input_schema_fingerprint: "e7c9d2ac9f489ad94eca6e32c3f93f28825ab755fc9877a1f90e892c35712686"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
19{9}
name: "stablecoin_blacklist_check"
title: "Stablecoin freeze check (Circle USDC/EURC, Tether USDT incl. Tron) + OFAC"
effect: "READ"
effect_confidence: 0.524
capabilities[0]
risk_severity: "INFO"
fingerprint: "37d4d052ac6921f9d26e1a35872c11455e11003227ec11b1699e57159c5006a4"
input_schema_fingerprint: "beacbab7b8622037d217d08fa779627cbaaff8bc0f2022520b2878b4ac211f95"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
20{9}
name: "text_pii_redact"
title: "Deterministic PII redact (email/phone/SSN/card/IP/IBAN/routing/secrets)"
effect: "WRITE"
effect_confidence: 0.703
capabilities[6]
0{2}
capability: "EMAIL"
confidence: 0.53
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.632
2{2}
capability: "LOCATION"
confidence: 0.53
3{2}
capability: "PERSONAL_DATA"
confidence: 0.922
4{2}
capability: "SECRETS"
confidence: 0.53
5{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.601
risk_severity: "HIGH"
fingerprint: "b90dfb62b87f3b87ab9daf7a33631a7d76665317b00b889c44db4e60bba1c314"
input_schema_fingerprint: "4adc6233cd45950154e89dec292efb048236b983e5ebd09674a77cd0e34512f8"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
21{9}
name: "us_business_days"
title: "US federal business days"
effect: "READ"
effect_confidence: 0.422
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.577
risk_severity: "MEDIUM"
fingerprint: "390693b3bc7eb7e6037f833106e6892188e86f8c3952f94f9c7e46a73118a5e2"
input_schema_fingerprint: "8f688a9308c7d38cab1a0e5658b4e1c9fc535412236ab391f276b5e457bff914"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
22{9}
name: "us_federal_holidays"
title: "US federal holidays (free)"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "7d550a846489d0f47934c59f8449aa95cf2fac9198e589400a164d44999a9f3d"
input_schema_fingerprint: "43b99be528835fc0602d4db5f6d845db402fac73770f76ec6daa6a4bc0e62b77"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
23{9}
name: "us_weather"
title: "US weather (NWS)"
effect: "READ"
effect_confidence: 0.422
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.918
risk_severity: "LOW"
fingerprint: "e6482fffdf41ebeda8056c63e831f209578af4cb3fc2f6162556d18ba0b9170e"
input_schema_fingerprint: "08078c86e8829d0fd0c5f065b8394c71f00f1b39832fe59fb759a1b9334c8182"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
24{9}
name: "web_read"
title: "Web page reader (clean Markdown + metadata)"
effect: "READ"
effect_confidence: 0.711
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.89
risk_severity: "INFO"
fingerprint: "f25b6f052ee48bb6f07890b0d78694264def8797000da9725e27d8c06fa86da1"
input_schema_fingerprint: "e3c362c52d629ecec818c08b19d542c770048578728421ce066c4eb6378b7029"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
25{9}
name: "x402_check"
title: "x402 endpoint readiness check"
effect: "READ"
effect_confidence: 0.524
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.868
risk_severity: "INFO"
fingerprint: "7e38015484d302b14c370ab9b4037f3048f2c66698a58797c24789e879c42d78"
input_schema_fingerprint: "67f960d7048458441c96f6cb311c7bab58034f8092ea7d183f615012b9a48f19"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "agent-utils-x402-production.revenue-agent-jw.workers.dev"
registrable_domain: "revenue-agent-jw.workers.dev"
source: "transport"
findings[5]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "email_auth_audit"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "text_pii_redact"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "solana_pre_promo"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.workers.revenue-agent-jw.agent-utils-x402-production/agent-utils"
registry_content_sha256: "dd4fdefbc745049650f4d4d75d2b8897a9043bc05f4b067a3b85fb5ce0744874"
scan_snapshot_fingerprint: "0d426dc597221ee40e99cdde035059aaf3f2929425d12d5a731ebf5d7173f256"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T07:17:40.322Z"
observed_at: "2026-11-14T01:59:34.933+00:00"
registry_published_at: "2026-11-13T16:11:35.347522+00:00"
registry_updated_at: null