io.github.cyanheads/ris-austria-mcp-server
io.github.cyanheads/ris-austria-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/a469db2c-a711-4658-8518-688449f4ef2e/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/ris-austria-mcp-server"
title: null
description: "Search Austrian federal and state law, court decisions, and the authentic Bundesgesetzblatt (RIS)."
version: "0.6.2"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/ris-austria-mcp-server"
provider: "github"
owner: "cyanheads"
name: "ris-austria-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/ris-austria-mcp-server"
version: "0.6.2"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/ris-austria-mcp-server"
version: "0.6.2"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://ris-austria.caseyjhand.com/mcp"
endpoint_host: "ris-austria.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[9]
0{9}
name: "ris_get_document"
title: "Get RIS Document"
effect: "READ"
effect_confidence: 0.905
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.698
1{2}
capability: "FILE_ACCESS"
confidence: 0.539
risk_severity: "INFO"
fingerprint: "ac223cfdde51eacff9034d812048ea20ec871ce9158eb393c882292de458045e"
input_schema_fingerprint: "e2c7217295739c0993da7ef40dff24b149c41fa6fcdf84d5ad021a56afe77c8f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
1{9}
name: "ris_list_reference"
title: "RIS Reference Lists"
effect: "READ"
effect_confidence: 0.66
capabilities[0]
risk_severity: "INFO"
fingerprint: "b71ae2dc560c9947e04c7452cd25d0a1a3b9d2545265762b0c6fe1e7857dec8f"
input_schema_fingerprint: "e9660118eb98d32c4ddb6d090d4a6ec1e28a437fda96be53e617e7ca7dafe90d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
2{9}
name: "ris_lookup_citation"
title: "Resolve Austrian Legal Citation"
effect: "READ"
effect_confidence: 0.888
capabilities[2]
0{2}
capability: "LEGAL"
confidence: 0.868
1{2}
capability: "PERSONAL_DATA"
confidence: 0.513
risk_severity: "LOW"
fingerprint: "2bac4941e098c0af364cbf9a870ce6bb3a0ab5873198cc5b778dced9ff941834"
input_schema_fingerprint: "f7671edbfbd0f3050c500786bc27b8338522ac40c1a5b82bdc10ee27bd9a7396"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
3{9}
name: "ris_search_announcements"
title: "Search Official Announcements"
effect: "READ"
effect_confidence: 0.888
capabilities[5]
0{2}
capability: "EMAIL"
confidence: 0.672
1{2}
capability: "HEALTH"
confidence: 0.623
2{2}
capability: "LEGAL"
confidence: 0.76
3{2}
capability: "PERSONAL_DATA"
confidence: 0.68
4{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.774
risk_severity: "MEDIUM"
fingerprint: "6a6bfc5ea1b38bbf05ccd36be2a07c47e9191456e5218e531b1cc9d5c12bb6b9"
input_schema_fingerprint: "a420fd1c47519ce73c86d1c9604d8abeadd80ea80366df5bbbac2a3da68bc32e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
4{9}
name: "ris_search_case_law"
title: "Search Austrian Case Law"
effect: "READ"
effect_confidence: 0.888
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.738
1{2}
capability: "LEGAL"
confidence: 0.99
2{2}
capability: "PERSONAL_DATA"
confidence: 0.792
3{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.567
risk_severity: "MEDIUM"
fingerprint: "75f91ae794122589052c30e62a40f62990f7b86fdd5e3748dc65d4f20062dbf1"
input_schema_fingerprint: "9dbd0e479308f7cbf39ad9f926d70733c98aed92d163cc178fa075a7bfd72959"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
5{9}
name: "ris_search_drafts"
title: "Search Draft Legislation"
effect: "READ"
effect_confidence: 0.809
capabilities[3]
0{2}
capability: "CRM"
confidence: 0.735
1{2}
capability: "EMAIL"
confidence: 0.898
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "f60e99ce24e26d78d95fa0ca33af02d52bf1e47619d152f5c66a8ace33622457"
input_schema_fingerprint: "545baa0fe36efca0e0e7fac9abb4c99b272383887565fabc0e03b74d34a2809e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
6{9}
name: "ris_search_gazette"
title: "Search Austrian Gazettes"
effect: "EXECUTE"
effect_confidence: 0.6
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.556
risk_severity: "CRITICAL"
fingerprint: "aed3d639bec558a807c7e69b2a24bf3aa72baeb4712d1e3a8de9e6ace0ce2b81"
input_schema_fingerprint: "ee8dd507e51f7c96cea497e7819dd1dec196691c538a473e91ec6f8e829f6df9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
7{9}
name: "ris_search_legislation"
title: "Search Austrian Legislation"
effect: "EXECUTE"
effect_confidence: 0.6
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.79
1{2}
capability: "LOCATION"
confidence: 0.556
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "CRITICAL"
fingerprint: "4ad089bf15b83d34cc443555c40b01d9b0d574c28f730e60d6e9327d53152665"
input_schema_fingerprint: "099dc3a936da46ee6dfc33baeb8f2c04093ef2283c3cd5282706e3621bf3f2e1"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
8{9}
name: "ris_track_changes"
title: "Track RIS Changes"
effect: "WRITE"
effect_confidence: 0.833
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.805
risk_severity: "LOW"
fingerprint: "9fe11ef7b58bb3bc703bc65fe9f63fd4a98ea26008fd4831b25a1d7c53734a47"
input_schema_fingerprint: "ea7dfd7dc7daa826cd4308b973009242f2dc90df9ae6199d72d091dde0314112"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
resources[3]
0{4}
key: "skill://ris-austria-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "b121297d30ba84a78949519c9790cd393c0b71ee6d558d8c426a8251f9262f1f"
1{4}
key: "ris://document/{application}/{documentNumber}"
kind: "template"
mime_type: "text/markdown"
fingerprint: "f1dd3d81b1cd01fd01e6af83b8bd30faaeb44a7bce07cb4d7a6239348d8f4af5"
2{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "ris-austria.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[12]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "ris_search_gazette"
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "ris_search_legislation"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "ris_track_changes"
4{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "ris_get_document"
5{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "ris_search_gazette"
6{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "ris_get_document"
7{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "LOW"
title: "Unusually long model-facing text"
subject_type: "tool"
subject_name: "ris_lookup_citation"
8{6}
check_id: "SQ-TOOL-OVERLY-BROAD"
category: "tool_design"
severity: "MEDIUM"
title: "Runs arbitrary code with open-world access"
subject_type: "tool"
subject_name: "ris_search_gazette"
9{6}
check_id: "SQ-TOOL-OVERLY-BROAD"
category: "tool_design"
severity: "MEDIUM"
title: "Runs arbitrary code with open-world access"
subject_type: "tool"
subject_name: "ris_search_legislation"
10{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "ris_search_gazette"
11{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "ris_search_legislation"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/ris-austria-mcp-server"
registry_content_sha256: "6c89659095f7d6037da1edb30a42fc7ed6ed6fcdf288a25e1cfa8b9afeb44b53"
scan_snapshot_fingerprint: "170074f83d7ed6e461c4ca19ecfdb13bf01ed33bbf41d7a94ab1c9a433a3320e"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:14:55.124Z"
observed_at: "2026-11-09T23:21:17.505+00:00"
registry_published_at: "2026-11-09T22:23:50.41899+00:00"
registry_updated_at: null