io.github.cyanheads/federal-regulations-mcp-server
io.github.cyanheads/federal-regulations-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/1aff6489-5737-4590-98d8-ef10b3239683/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/federal-regulations-mcp-server"
title: null
description: "Search and trace US federal rules across the Federal Register, eCFR, and Regulations.gov."
version: "0.6.2"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/federal-regulations-mcp-server"
provider: "github"
owner: "cyanheads"
name: "federal-regulations-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/federal-regulations-mcp-server"
version: "0.6.2"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/federal-regulations-mcp-server"
version: "0.6.2"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://federal-regulations.caseyjhand.com/mcp"
endpoint_host: "federal-regulations.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[7]
0{9}
name: "regulations_browse_cfr"
title: "regulations_browse_cfr"
effect: "READ"
effect_confidence: 0.813
capabilities[0]
risk_severity: "INFO"
fingerprint: "735304ee4ae35fedc42aad3ba1ac5e74910ca6777a173c75619e6b5be49d61ed"
input_schema_fingerprint: "8d6051f0e591531d31c4b047df45fc0561eb8495918a825682ad378d8babf267"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
1{9}
name: "regulations_find_comments"
title: "regulations_find_comments"
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "LEGAL"
confidence: 0.687
risk_severity: "INFO"
fingerprint: "a4946421c4f52c83e8b747adfc0529dc2ac2e95d674adb38182e1d6c34ad9a32"
input_schema_fingerprint: "274929df4ac57a8f39a90bbb6ed44f64523850dd176fb69e379cef12738c9e7c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
2{9}
name: "regulations_get_cfr_section"
title: "regulations_get_cfr_section"
effect: "READ"
effect_confidence: 0.813
capabilities[0]
risk_severity: "INFO"
fingerprint: "431c6a8d926cebf4a111cff7525ba28fdb83e6de0f08848bb4b0324cc1cbcb4d"
input_schema_fingerprint: "ea1a1faa59cfef50423e976b8e260a3dc1115bf1100a90a9d99a692557a62eb5"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
3{9}
name: "regulations_get_docket"
title: "regulations_get_docket"
effect: "READ"
effect_confidence: 0.813
capabilities[1]
0{2}
capability: "LEGAL"
confidence: 0.926
risk_severity: "INFO"
fingerprint: "4d06d9f5b70d9ff27062fb34e1237adb14ec10da427d6fab48ca6b04ff45ebd4"
input_schema_fingerprint: "687d69a6faaf1ca065697a5a212bf64c3ef866f1feb8db7f984cb0d0cd522a0e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
4{9}
name: "regulations_get_document"
title: "regulations_get_document"
effect: "READ"
effect_confidence: 0.813
capabilities[0]
risk_severity: "INFO"
fingerprint: "92dc462c2103bf50f3169a73816f5a71bf8c61d85be077ab84902ac8868d5238"
input_schema_fingerprint: "cd746c486a8342ca797994ca0b622dae019f7dafc6641f17a94be053dff5a926"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
5{9}
name: "regulations_list_open_comments"
title: "regulations_list_open_comments"
effect: "READ"
effect_confidence: 0.682
capabilities[0]
risk_severity: "INFO"
fingerprint: "5464e92aac37be14b736f1b8a886834ded0086fba7dd6f8d3680916964f733bd"
input_schema_fingerprint: "e18189b41eca4610948977f0717e647537af2bbdbb3599821b200519bbd81407"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
6{9}
name: "regulations_search_rules"
title: "regulations_search_rules"
effect: "READ"
effect_confidence: 0.841
capabilities[1]
0{2}
capability: "LEGAL"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "376fe97f36dbf97a5af6327f4459a42b8ba3aaff913b65e87ff15b39613f1908"
input_schema_fingerprint: "23b4dd8e2b63342e1d82467e6f5277ef4b2e9b4c6acf38e9a309e8ad7b240268"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
resources[6]
0{4}
key: "regulations://cfr/40/50/50.1"
kind: "resource"
mime_type: "application/json"
fingerprint: "df8b61a1eb3ef64a0d96ab616218ac9239f4c2d334c351efb33f5cc043350209"
1{4}
key: "regulations://document/2025-14555"
kind: "resource"
mime_type: "application/json"
fingerprint: "f7565f641d256b9c959f68216d5a966ccc593c5ea37c6b68e1ec86354fe575a0"
2{4}
key: "skill://federal-regulations-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "5c8f6ca7d8618944304d1e8d37441cf1adef58bcfca62e2017920eae27047fe7"
3{4}
key: "regulations://cfr/{title}/{part}/{section}"
kind: "template"
mime_type: "application/json"
fingerprint: "79833865cf90b0baf3d0c61bd7cee2e9315b2704545873a9dd11c86259031dca"
4{4}
key: "regulations://document/{documentNumber}"
kind: "template"
mime_type: "application/json"
fingerprint: "d2583c44c793f17b7e044f14d1e7d75afbd20dfd0d5ec26411b1230c9ce0145e"
5{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "federal-regulations.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[8]
0{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "regulations_get_cfr_section"
2{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "regulations_get_cfr_section"
3{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "regulations_get_document"
4{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "regulations_find_comments"
5{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "regulations_get_docket"
6{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "regulations_list_open_comments"
7{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "regulations_search_rules"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/federal-regulations-mcp-server"
registry_content_sha256: "578888ecf820eeb5f68217058ca23182c81fc66a39342c61d1ee9ac4b97116c8"
scan_snapshot_fingerprint: "41f3f59df18a65d9eaac794a0c87d10a618b2eaee1bbd1a9b7831220880813e3"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T01:51:41.209Z"
observed_at: "2026-11-14T02:18:50.541+00:00"
registry_published_at: "2026-11-13T16:44:52.122584+00:00"
registry_updated_at: null