io.github.cyanheads/usaspending-mcp-server
io.github.cyanheads/usaspending-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/418e4003-1dcf-4d0f-a238-a502fdfbdba9/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/usaspending-mcp-server"
title: null
description: "Access US federal award, recipient, agency, and spending analytics data from USAspending.gov."
version: "0.7.3"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/usaspending-mcp-server"
provider: "github"
owner: "cyanheads"
name: "usaspending-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/usaspending-mcp-server"
version: "0.7.3"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/usaspending-mcp-server"
version: "0.7.3"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://usaspending.caseyjhand.com/mcp"
endpoint_host: "usaspending.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[18]
0{9}
name: "usaspending_autocomplete_filters"
title: "Autocomplete Codes and Names"
effect: "READ"
effect_confidence: 0.866
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.509
risk_severity: "LOW"
fingerprint: "cb8f987dbf0bfc5e971f26e9585b2739a83ea6b46d0bdd2c6f351001e7e2c74f"
input_schema_fingerprint: "e4b1e89ae330be0ff38221b6b9544ea44cd940c65c8fa3f0ff7fc1af81d2265d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
1{9}
name: "usaspending_disaster_spending"
title: "Disaster and Emergency Spending"
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.749
risk_severity: "LOW"
fingerprint: "c42fcbc1339ee00b810605d5f83dc91628357f5e86eeaaf76f5b93b0b14b6f80"
input_schema_fingerprint: "cae8c613757d76ee8efcb5dfa59b601d4701beb267e41dc81ee8fa11493e2aea"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
2{9}
name: "usaspending_get_agency"
title: "Get Agency Overview"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "f60f6501602c7394739c25af02193250c7b00c895fabb261c223ecb4e3e34367"
input_schema_fingerprint: "cb3289c9c037def087612ba152c8afe306f8ebb54ab405871d0f8731173d487e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
3{9}
name: "usaspending_get_award"
title: "Get Award Details"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "9f7378269a62649dbd84d0edcf6dbc989c3f79bbdde76c4d9f3080b0ef273bb1"
input_schema_fingerprint: "043a8d7bd817d3448021b833cb0c0a3d1ecefd4f0637237defdc99f209c373df"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
4{9}
name: "usaspending_get_award_federal_accounts"
title: "Get Award Federal Accounts"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "95a3da470a0ca6bca19cea1d33115ee78fbb7552f3ebcc2797f95aa8fc83dbd3"
input_schema_fingerprint: "1cf8d9c67c0a34ec44d170bf1585daa1dc11bebe26425ac159f32f4429942aab"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
5{9}
name: "usaspending_get_award_subawards"
title: "Get Award Subawards"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "1b575a5f50790308788093dbfbb43f5955c8a1ffc2946b30ea6b62d0898b9be0"
input_schema_fingerprint: "6abb1edec9981cbb707d7b9eee6958d1320972b673ac9fbabd4063da7d7bcf73"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
6{9}
name: "usaspending_get_award_transactions"
title: "Get Award Transactions"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "7c16becc1ec2afe3e28d8f5133703170b95568d7083a9f6cf608ca5b18fd6613"
input_schema_fingerprint: "9b6be50f1219874dc23d35979fc4c30819847f4a80bed4795e5548e92935087e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
7{9}
name: "usaspending_get_federal_account"
title: "Get Federal Account"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "a2cfcaeedcef8dab3525ba7a2fa77d5d7a89279ade7cb11ce2afb5b8b4748222"
input_schema_fingerprint: "76180d052c383b9f5be176525ed746a59294a63c373109eaf5686264e49a68d9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
8{9}
name: "usaspending_get_federal_account_breakdown"
title: "Get Federal Account Breakdown"
effect: "READ"
effect_confidence: 0.888
capabilities[2]
0{2}
capability: "HR"
confidence: 0.52
1{2}
capability: "PERSONAL_DATA"
confidence: 0.52
risk_severity: "MEDIUM"
fingerprint: "7720404f7556957981e863714876545f26152d03131a92d2c02389b5e87dddfc"
input_schema_fingerprint: "3d12f8a760a94ca17183657c818162bc657ccfd9bc674210a37fa278f705451b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
9{9}
name: "usaspending_get_idv_awards"
title: "Get IDV Child Awards"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "IDENTITY"
confidence: 0.88
risk_severity: "INFO"
fingerprint: "67ad701353fd6df0a6369ac58fd5140a626d070ae5a07142e94f0f4888a28b96"
input_schema_fingerprint: "092fcbc118507b33a903824b94bfa5800243ed1ccceb5c768432fdf7f6c05298"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
10{9}
name: "usaspending_get_recipient"
title: "Get Recipient Profile"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.968
risk_severity: "LOW"
fingerprint: "826aaac36c40414ee68eed04e62e4bd2976ed9c69c4ca3daf24c7b212d5a2285"
input_schema_fingerprint: "ad93e0b9a0cec23a80a48ee1ea4435ff6deabc228a5614a1f38275882b42bc96"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
11{9}
name: "usaspending_list_agencies"
title: "List Federal Agencies"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "079a90a37a1968a27664a79bf88612be9e217aa02f91687fe3fd7de727ebb8ed"
input_schema_fingerprint: "f5f78ea5a7edc7e1d0efab2ffa15ef75a1b06e8b14832300054e8e713f3c660b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
12{9}
name: "usaspending_search_awards"
title: "Search Federal Awards"
effect: "READ"
effect_confidence: 0.905
capabilities[4]
0{2}
capability: "LOCATION"
confidence: 0.929
1{2}
capability: "PAYMENT"
confidence: 0.556
2{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.679
3{2}
capability: "PERSONAL_DATA"
confidence: 0.99
risk_severity: "LOW"
fingerprint: "53cd66f09a4fe5612b0bfb5515b1e33a6f723448fe4522b393f824fd4142b9dc"
input_schema_fingerprint: "51ca8119d36bc2fd335b31fb0aefa1e824008df6016a4698472fd8d235f2f336"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
13{9}
name: "usaspending_search_federal_accounts"
title: "Search Federal Accounts"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "a50983c1a944d2ed9fdae5116fdc41812460fbe9952c241fdae67e8c1d7a5999"
input_schema_fingerprint: "d64bb57e0e107834876aa85f0c72b6e82711fd5b5fb294be553ca10d31d9a0db"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
14{9}
name: "usaspending_search_recipients"
title: "Search Award Recipients"
effect: "READ"
effect_confidence: 0.905
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.765
risk_severity: "LOW"
fingerprint: "3213b98e8ff08d5eebdbe230eabf681c5a657704b205def89242f0f097033c0e"
input_schema_fingerprint: "544648d789c325fd42dd5252f039bc14125798fa6759976e641d03d50060a399"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
15{9}
name: "usaspending_spending_by_category"
title: "Spending by Category"
effect: "READ"
effect_confidence: 0.32
capabilities[2]
0{2}
capability: "LOCATION"
confidence: 0.607
1{2}
capability: "PERSONAL_DATA"
confidence: 0.976
risk_severity: "LOW"
fingerprint: "70434b758680d0a7a19e916408c80facc14d41baf5909483bd38f8d1ee347f76"
input_schema_fingerprint: "5a1e8713435ddcb2c95048d4cacfc21ad97ea86293a96c45cb520ab1d3fe8fc9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
16{9}
name: "usaspending_spending_by_geography"
title: "Spending by Geography"
effect: "READ"
effect_confidence: 0.32
capabilities[3]
0{2}
capability: "LOCATION"
confidence: 0.773
1{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.681
2{2}
capability: "PERSONAL_DATA"
confidence: 0.969
risk_severity: "LOW"
fingerprint: "869119599e2d323f4ebca7b32a84e849293ee7a6955a601be29b9e52cde60798"
input_schema_fingerprint: "e3dfa2a152f9e76b8c8a449da7be732dbf084ea0501d8c1a1250ec67a24aa33b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
17{9}
name: "usaspending_spending_over_time"
title: "Spending Over Time"
effect: "READ"
effect_confidence: 0.626
capabilities[2]
0{2}
capability: "LOCATION"
confidence: 0.607
1{2}
capability: "PERSONAL_DATA"
confidence: 0.954
risk_severity: "LOW"
fingerprint: "3f5afde5a731a66cba7c2de0a505f85c9e887fc96d0773aa5340d9cc033a390d"
input_schema_fingerprint: "6456ed13818c88dec4f2d66499e50bfd1d57edc7c6ca5243831a27fd641a2a36"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
resources[2]
0{4}
key: "skill://usaspending-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "86329042ae07d59163db630543b9cc2aaa0fee6e025baf4d96a9912cfd764c2a"
1{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "usaspending.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[10]
0{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "usaspending_search_awards"
1{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "usaspending_search_awards"
2{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "usaspending_search_awards"
3{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "usaspending_search_awards"
4{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "usaspending_spending_by_category"
5{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "usaspending_spending_by_category"
6{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "usaspending_spending_by_geography"
7{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "usaspending_spending_by_geography"
8{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "usaspending_spending_over_time"
9{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "usaspending_spending_over_time"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/usaspending-mcp-server"
registry_content_sha256: "50589aff8328fe0e4468b490ee29a1a9786e705bc8950ec571f79dc3bf7d7ae4"
scan_snapshot_fingerprint: "8de3167101a4857a7020efdbaf56202158d87fa6ad7b89cb3862409808db9553"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:14:25.722Z"
observed_at: "2026-11-14T07:43:23.91+00:00"
registry_published_at: "2026-11-14T06:34:51.146187+00:00"
registry_updated_at: null