io.github.cyanheads/faostat-mcp-server
io.github.cyanheads/faostat-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/807c459a-eae3-4d9a-be1a-14ffb67bcf4d/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/faostat-mcp-server"
title: null
description: "UN FAOSTAT global food & agriculture statistics over a local SQLite mirror, via MCP."
version: "0.7.0"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/faostat-mcp-server"
provider: "github"
owner: "cyanheads"
name: "faostat-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/faostat-mcp-server"
version: "0.7.0"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/faostat-mcp-server"
version: "0.7.0"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://faostat.caseyjhand.com/mcp"
endpoint_host: "faostat.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[6]
0{9}
name: "faostat_commodity_profile"
title: "faostat-mcp-server: commodity profile"
effect: "EXECUTE"
effect_confidence: 0.3
capabilities[2]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.791
1{2}
capability: "PERSONAL_DATA"
confidence: 0.859
risk_severity: "HIGH"
fingerprint: "5db9f8c886b5a68045cece52b77456d2d794585e7d981cfefd6e105ece363f12"
input_schema_fingerprint: "7102a91bae1d3132c87d94923c56d2c40282c45b6b3a29cb9aa8941d9ed89827"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: false
openWorldHint: false
1{9}
name: "faostat_dataframe_describe"
title: "faostat-mcp-server: dataframe describe"
effect: "READ"
effect_confidence: 0.813
capabilities[1]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.623
risk_severity: "INFO"
fingerprint: "2e792e0305009bb25473420a374df1f28ed51ed0a78a304dd7835af508485519"
input_schema_fingerprint: "321b5b1e6f807a2441fbbf1fa8e1968f637bc49e016933dc122118adc7a986cb"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
2{9}
name: "faostat_dataframe_query"
title: "faostat-mcp-server: dataframe query"
effect: "EXECUTE"
effect_confidence: 0.846
capabilities[2]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.701
1{2}
capability: "PERSONAL_DATA"
confidence: 0.632
risk_severity: "CRITICAL"
fingerprint: "4a29377f0adc5528697a32067c0c884fd7d2fb8d7c1fdd070fad21ba5248f040"
input_schema_fingerprint: "c9148ed9fa4c792ebeafaf399e8da84eb673d134b9b405184097968d359950f0"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
3{9}
name: "faostat_list_domains"
title: "faostat-mcp-server: list domains"
effect: "READ"
effect_confidence: 0.813
capabilities[0]
risk_severity: "INFO"
fingerprint: "bb63653abe35c5e41f5b207ea718a4af230f692a6c3badfbd12f7bcceb2d921b"
input_schema_fingerprint: "b8329203d249c93cfc84a8cf38c7e66db84f161c51cbcd85612a060461c68313"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
4{9}
name: "faostat_query_observations"
title: "faostat-mcp-server: query observations"
effect: "READ"
effect_confidence: 0.682
capabilities[1]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "7f24690e2b53c6bd23c66b6f55696cb2f7bbcad66e2df6de610aafd6d52c4fba"
input_schema_fingerprint: "b77cc93fd9d3474c9d1a308323fc14ef04be7e78e6a48dcbc75bea084b022625"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: false
openWorldHint: false
5{9}
name: "faostat_resolve_codes"
title: "faostat-mcp-server: resolve codes"
effect: "READ"
effect_confidence: 0.813
capabilities[1]
0{2}
capability: "IDENTITY"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "f62120e243a1fffad29a6c1d9706e98836e4622ee0ab62a49b45fe5346489a5f"
input_schema_fingerprint: "13a84ef83fb948b6d672c50795ebf60fc0f6340168e00d8309d97d75547b81a9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
resources[2]
0{4}
key: "skill://faostat-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "26e6d75bbc27362936415cb4d5f3a63c70f7be8b7255470ce0345bbcd347f038"
1{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "faostat.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[5]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "HIGH"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "faostat_dataframe_query"
2{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "faostat_query_observations"
3{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "faostat_resolve_codes"
4{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "faostat_query_observations"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/faostat-mcp-server"
registry_content_sha256: "16ed219e39d408dd74a984518c55f7205d27294cb24beb89d465f42d28154b57"
scan_snapshot_fingerprint: "f1e0ae2373c98c8f0460679e0fa0bb103e1f3b475dd05c1e69884b5182e72138"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:14:13.792Z"
observed_at: "2026-11-14T02:18:06.858+00:00"
registry_published_at: "2026-11-13T19:20:25.982572+00:00"
registry_updated_at: null