io.github.cyanheads/crossref-mcp-server
io.github.cyanheads/crossref-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/177023e5-34e9-4a3f-93e4-03d0d0e8c38c/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/crossref-mcp-server"
title: null
description: "Resolve DOIs, search ~188M scholarly works, and fetch references via the Crossref REST API."
version: "0.5.3"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/crossref-mcp-server"
provider: "github"
owner: "cyanheads"
name: "crossref-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/crossref-mcp-server"
version: "0.5.3"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/crossref-mcp-server"
version: "0.5.3"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://crossref.caseyjhand.com/mcp"
endpoint_host: "crossref.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[7]
0{9}
name: "crossref_get_member"
title: "Get Member by ID"
effect: "READ"
effect_confidence: 0.888
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.648
1{2}
capability: "PERSONAL_DATA"
confidence: 0.908
risk_severity: "LOW"
fingerprint: "6acfc5ada8cb8518f5763aa059c87f17fc70e7bbb0d7eb205779f111915fb1d6"
input_schema_fingerprint: "01f84e8759d12336158b324beff9cacc081ffe95f8b8d8e877b5c83382dc0bd4"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
1{9}
name: "crossref_get_prefix"
title: "Get Prefix Owner"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "e45475deb37ef45a6edfe06bb4caa982d44dfc133cf79b2521d78b764f7f1bd0"
input_schema_fingerprint: "856c9cceeb5aeab517f7e92eaa0d1af49e9119ddbc1fd8d1ab6435a5c2a2be1e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
2{9}
name: "crossref_get_references"
title: "Get Reference List"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "4fb05a111c9e704dfbc0cbc9b2a4de611b0a2bc9f0ae289f993a75a0790f064e"
input_schema_fingerprint: "3cf8a054ff80deaed763117d950376a959abfccb392d35b2779c06bdf88c43d0"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
3{9}
name: "crossref_get_work"
title: "Get Work by DOI"
effect: "WRITE"
effect_confidence: 0.603
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.704
risk_severity: "MEDIUM"
fingerprint: "f8b8f7b703540fb9fe8dad665d25881fd025320776e9c15242f40dd9d8a88e34"
input_schema_fingerprint: "49ce57b0d72ac1bf035f3ca4ef7fa544e5b523072a0ba59e09c3387287b68961"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
4{9}
name: "crossref_search_funders"
title: "Search Funders"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "f084961f58ebf19a427ad0a8e9092f111cda5754bd4d467e2c4fe8494c07a0e1"
input_schema_fingerprint: "9c26b690fc442dd0f54ee193f04b7cd23d6b878d6805523a90fd476bf70403b9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
5{9}
name: "crossref_search_journals"
title: "Search Journals"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "e8e8c2653c697d9f6226e82be378f224b49ca2e93431b7f4621fc8130df0d30c"
input_schema_fingerprint: "19ec02e217b9350dba990438ca61c8a6f7a355076c207bbc372a374e14821e3b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
6{9}
name: "crossref_search_works"
title: "Search Works"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.774
risk_severity: "INFO"
fingerprint: "271007acb9181909e3a61d3462635f43f8927f26f7f0191eb421c9a9263b2cee"
input_schema_fingerprint: "fa0b5b36de6d3a1976d3363b2d4361764938f31251e8496ebfeca0a7fc2aeb35"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
resources[2]
0{4}
key: "skill://crossref-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "d903a94bcb62f5c578a7e2832adeb67ddcd89b7e93647dcf52fc3465cca4f884"
1{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "crossref.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[7]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "crossref_get_work"
2{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "crossref_get_references"
3{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "crossref_get_work"
4{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "crossref_search_funders"
5{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "crossref_search_journals"
6{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "crossref_search_journals"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/crossref-mcp-server"
registry_content_sha256: "0580897b5279bb04a6cdda5b6b657d61dee8c15b064dc495b7e572829fe546bb"
scan_snapshot_fingerprint: "678290e6484bed42fe5b78acf09a7d6602437b419d50c34be39c7cd31f6c0efa"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:11:36.586Z"
observed_at: "2026-11-15T00:28:30.085+00:00"
registry_published_at: "2026-11-14T20:30:20.906137+00:00"
registry_updated_at: null