io.github.cyanheads/bls-labor-mcp-server
io.github.cyanheads/bls-labor-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/395ced3b-f467-437e-b144-f23b60a17948/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/bls-labor-mcp-server"
title: null
description: "Fetch US Bureau of Labor Statistics data — CPI, unemployment, wages, JOLTS, and more via MCP."
version: "0.7.1"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/bls-labor-mcp-server"
provider: "github"
owner: "cyanheads"
name: "bls-labor-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/bls-labor-mcp-server"
version: "0.7.1"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/bls-labor-mcp-server"
version: "0.7.1"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://bls-labor.caseyjhand.com/mcp"
endpoint_host: "bls-labor.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[6]
0{9}
name: "bls_dataframe_describe"
title: "Describe BLS Dataframes"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.556
risk_severity: "INFO"
fingerprint: "3195c0e6d46663fc45e9c900ff013fde29aa29eb25d2e0821859b9c82d70a671"
input_schema_fingerprint: "daf00ca90fb7bd287cd9697d89c055a2f8526f00ae36856bce32ece9b8d26797"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
1{9}
name: "bls_dataframe_query"
title: "Query BLS Dataframes"
effect: "EXECUTE"
effect_confidence: 0.846
capabilities[1]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.746
risk_severity: "CRITICAL"
fingerprint: "872872abffc65958ba8cba93b9009a3afb0ff16fd760a0b8aee55bb2a2cab182"
input_schema_fingerprint: "3fba81341fc3cd37761b65285ed7e40844782ad74b2377c62b06275ed4548276"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
2{9}
name: "bls_get_latest"
title: "Get Latest BLS Observation"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "2207f987e12bb976b0b55f7f79d6d497889630b22ddd9851b50e8ec72096aec6"
input_schema_fingerprint: "3e82d0f176f8c95ad5b1871891b11ca681a34fcaf75a54c8a706fbb3fc192b70"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
3{9}
name: "bls_get_series"
title: "Get BLS Time-Series Data"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "5a679daa6635f8a5d990163d296a243463f36608bb07f66ef23ef1fe5cd25bee"
input_schema_fingerprint: "f053da17eab13b0f98133f388329e19459ebd580adeb7026092d7b43af69df11"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
4{9}
name: "bls_list_surveys"
title: "List BLS Surveys"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "bd535e4e0749ace3c4340209fc45d939a90de55d7f302608dafe0ff9d7c18ca9"
input_schema_fingerprint: "a105ffa790f0244cd8f9296b5c2d6cbb4849277e0a401eb0ab788456ecfcd6c6"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
5{9}
name: "bls_search_series"
title: "Search BLS Series"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "7d5e1235260ae0fa5300fffe94a7b0bed91a7b742d180e605d9db71e12632575"
input_schema_fingerprint: "674fb0ba223833926c4b3980270232691730883443209b95187c92613b0209a7"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: false
resources[2]
0{4}
key: "skill://bls-labor-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "e0ce5fbd33bf486bcdc4cbbf87b7f394b075ca8b74bbfc9fb9311f10664a15bc"
1{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "bls-labor.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[8]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "HIGH"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "bls_dataframe_query"
3{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "bls_search_series"
4{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "bls_get_latest"
5{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "bls_get_series"
6{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "bls_list_surveys"
7{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "bls_dataframe_query"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/bls-labor-mcp-server"
registry_content_sha256: "2adc2b68b0c203adcff61a2f32aafebe568d9d433cb46719ded75a5c3bcaa72f"
scan_snapshot_fingerprint: "1ad60115809a0e3162e8a90dfc64a2b1b1ac8b51da213e0892dc4205707fecbc"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:14:55.956Z"
observed_at: "2026-11-09T13:13:41.098+00:00"
registry_published_at: "2026-11-01T13:06:10.142766+00:00"
registry_updated_at: null