X3 Compliance
io.github.x3allamerican/x3-compliance-mcp
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/7c7d46a5-ab46-4c14-866e-625439561c20/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.x3allamerican/x3-compliance-mcp"
title: "X3 Compliance"
description: "FMCSA, OSHA, PHMSA, 811, eCFR and Coast Guard compliance tools. Every answer cites the rule."
version: "1.1.2"
homepage_url: "https://x3allamerican.github.io/x3-compliance-mcp/"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.x3allamerican"
display_name: "io.github.x3allamerican"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/x3allamerican/x3-compliance-mcp"
provider: "github"
owner: "x3allamerican"
name: "x3-compliance-mcp"
verified: false
packages[2]
0{4}
registry_type: "mcpb"
identifier: "https://github.com/x3allamerican/x3-compliance-mcp/releases/download/v1.1.0/x3-compliance.mcpb"
version: null
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "x3-compliance-mcp"
version: "1.1.2"
transport: "stdio"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.x3api.com/mcp"
endpoint_host: "mcp.x3api.com"
auth_type: "unknown"
auth{3}
type: "unknown"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-06-18"
supported_versions[0]
transport_type: "streamable-http"
tools[20]
0{9}
name: "cfr_changes"
title: "What changed in a federal regulation?"
effect: "READ"
effect_confidence: 0.626
capabilities[0]
risk_severity: "INFO"
fingerprint: "dca00ee013c1f525e796df71d5eaf08afb18a31ae048a5b5e2e658ef81d00ab8"
input_schema_fingerprint: "2355fb6f307f80dbd3718c888e0846cf42bdb7fb46bcfb5d665c3fa506a40392"
annotations{5}
title: "What changed in a federal regulation?"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "cfr_lookup"
title: "Read a federal regulation (eCFR)"
effect: "READ"
effect_confidence: 0.868
capabilities[0]
risk_severity: "INFO"
fingerprint: "3de84366377026860f46b7a2a66b41fbf87d6c5909f65edc0f1579289f8157cb"
input_schema_fingerprint: "024686b54aa2d9d1e348badabcc14cad3261c07c3ffb48966353c14931cbadc8"
annotations{5}
title: "Read a federal regulation (eCFR)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
2{9}
name: "cfr_search"
title: "Search federal regulations (eCFR)"
effect: "READ"
effect_confidence: 0.76
capabilities[0]
risk_severity: "INFO"
fingerprint: "d20353a23da31612e6f3ba0ebe514c1c9f2f33ddcabb42b5981422ba9c742a67"
input_schema_fingerprint: "9302dd30ebfc932ede32ec5d9fdd3dd49722342ccfdfd1b8a96b59946b9eb259"
annotations{5}
title: "Search federal regulations (eCFR)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
3{9}
name: "csa_explain"
title: "Explain CSA BASIC measures from roadside inspections"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "3dc81b487d9d3d7190f5625d4a991dec706b56b6bf2f6e62a6efab10b3679db5"
input_schema_fingerprint: "81f53c642f26bbc3edceb81964bc60b718a251287e9ca49cb66a9b1316a3c4bc"
annotations{5}
title: "Explain CSA BASIC measures from roadside inspections"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "dig_clock_811"
title: "811 call-before-you-dig clock"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "b6796b10f40dd9f3907e88c20809d8c6da6a9ce1b0e2ef37827ca15e28ef2315"
input_schema_fingerprint: "49fd4372dbbd36ef7cbb03b21465b1d2d0cb50d3db386e8380f745d34817a478"
annotations{5}
title: "811 call-before-you-dig clock"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "dot_random_testing"
title: "DOT random drug and alcohol testing: how many, and a fair draw"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "faa7e106b86eb038b0643127674bd46ed74499b97fd1d3f8859c62c4453be3a4"
input_schema_fingerprint: "9d44ce0ef7a1535251732b4469fd538e90d38e49d1329936cabfdc81f570a017"
annotations{5}
title: "DOT random drug and alcohol testing: how many, and a fair draw"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "dq_file_check"
title: "Check a driver qualification file (49 CFR 391.51)"
effect: "READ"
effect_confidence: 0.815
capabilities[1]
0{2}
capability: "FILE_ACCESS"
confidence: 0.873
risk_severity: "INFO"
fingerprint: "f032851d501119b57d405b314e8793ebff4768e73e02d22aa632f7f573de3aa6"
input_schema_fingerprint: "42e9f74fe19a1ab81637fe3593b86dafe9b3f632b92461715c1f2f57699523fe"
annotations{5}
title: "Check a driver qualification file (49 CFR 391.51)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "hos_check"
title: "Check a driver log against FMCSA hours of service"
effect: "READ"
effect_confidence: 0.815
capabilities[0]
risk_severity: "INFO"
fingerprint: "ffc2a49115f8cdf3c88f2cf9cf0952c7f2e85bd7131d20558dcb0c7626ebf5ec"
input_schema_fingerprint: "ee9f4811b1b29270c9cdc79650f97584bba0a8845a5e331f61bcd24e1df4af41"
annotations{5}
title: "Check a driver log against FMCSA hours of service"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "mariner_rest_check"
title: "Check mariner hours of rest (STCW, 46 CFR 15.1111)"
effect: "READ"
effect_confidence: 0.815
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.577
risk_severity: "MEDIUM"
fingerprint: "fc2f51d3e4931394f17c6c64a2b6d8b95d47eab5b8a8e2e2d43a3afebdaf272f"
input_schema_fingerprint: "77e6e6059bc074cc5d5afb7073c4fe153c6f4d5991438655b602368e6c09751c"
annotations{5}
title: "Check mariner hours of rest (STCW, 46 CFR 15.1111)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "osha_coverage"
title: "Must an employer keep OSHA records and file them electronically?"
effect: "READ"
effect_confidence: 0.56
capabilities[0]
risk_severity: "INFO"
fingerprint: "729459fc44036cd42bb1562292252be63c43b32b25e3ca1d6eca6d1c64bc240c"
input_schema_fingerprint: "63d89820c36a5ab58a666d77b0266f0af8ead18754bad13e9a029bbe907f3491"
annotations{5}
title: "Must an employer keep OSHA records and file them electronically?"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "osha_hearing_shift"
title: "Is a hearing loss OSHA recordable (Standard Threshold Shift)?"
effect: "READ"
effect_confidence: 0.56
capabilities[0]
risk_severity: "INFO"
fingerprint: "57ed9947c0e0f1e0e1e8ad04b3aef4914655d135949d286d91cdd3e1719a9533"
input_schema_fingerprint: "87f1047587f4b5c3f570086bc75e5fa42dac6ac4d28a2bab3f08daf610393d37"
annotations{5}
title: "Is a hearing loss OSHA recordable (Standard Threshold Shift)?"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "osha_is_recordable"
title: "Is this injury or illness OSHA recordable?"
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[2]
0{2}
capability: "HEALTH"
confidence: 0.623
1{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.792
risk_severity: "LOW"
fingerprint: "2fc0cf81ef61ad874b22e06df76ed2f071351907d8ace01ddf2810c25404625d"
input_schema_fingerprint: "3702f2f4910ca1606e582c0cf10dc0d6cf8a8cae81d8f5e404aac00c7405ef8f"
annotations{5}
title: "Is this injury or illness OSHA recordable?"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
12{9}
name: "osha_rates"
title: "TRIR and DART rates"
effect: "READ"
effect_confidence: 0.56
capabilities[0]
risk_severity: "INFO"
fingerprint: "16fa18cd32c32d8b629fbcd999d1b958d4db8be5a6677977c8917ed54720c5ec"
input_schema_fingerprint: "299b4f4b3f4de856d18d7176c48bf1f17dd45ad4446e4ad5816cf5c5ca2d3bbe"
annotations{5}
title: "TRIR and DART rates"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
13{9}
name: "osha_state_jurisdiction"
title: "Who enforces workplace safety in a state (OSHA State Plans)"
effect: "UNKNOWN"
effect_confidence: 0.2
capabilities[0]
risk_severity: "LOW"
fingerprint: "b3e0187ab374d13b3478a58b64daceb3c098c9e59e1621123b7b7595c93e0eee"
input_schema_fingerprint: "708362c98291a211ef76f76d9a7f5a431aa72113638330993da41f267a125eb5"
annotations{5}
title: "Who enforces workplace safety in a state (OSHA State Plans)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
14{9}
name: "parse_811_ticket"
title: "Read an 811 ticket email"
effect: "READ"
effect_confidence: 0.908
capabilities[0]
risk_severity: "INFO"
fingerprint: "ddabafee6ebe4d9f544da4ad2909246fec0e2e6cefc8c449ce7efc9bf2cebd40"
input_schema_fingerprint: "ac5ccc88d0e3e080ce5a2efc3b3dbf5028530439b716a7d6d2908e76b744e2cb"
annotations{5}
title: "Read an 811 ticket email"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
15{9}
name: "pipeline_design_and_maop"
title: "Gas pipeline design pressure, MAOP and impact radius (49 CFR 192)"
effect: "UNKNOWN"
effect_confidence: 0.2
capabilities[0]
risk_severity: "LOW"
fingerprint: "7f8b409d440d1276a5bcce8af792e7f6731c09d53591ebdd04b8eae377983069"
input_schema_fingerprint: "cadf9fbdc2bbcb45cebee8a8c97a179c94c746ee5cf5faa651242b438c33a392"
annotations{5}
title: "Gas pipeline design pressure, MAOP and impact radius (49 CFR 192)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
16{9}
name: "sds_check"
title: "Read and check a safety data sheet (OSHA HazCom)"
effect: "READ"
effect_confidence: 0.815
capabilities[0]
risk_severity: "INFO"
fingerprint: "85c86496f1381b1007d37016ac27d358f3d4227eb7783614e5534c2d3bdfd3ac"
input_schema_fingerprint: "1a25ee27be17c82bb5844c0d4460631c80aa9e25626a5a967a59b835039a2c32"
annotations{5}
title: "Read and check a safety data sheet (OSHA HazCom)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
17{9}
name: "us_federal_holidays"
title: "U.S. federal holidays"
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "a0e9146243e105af3139c46998d35ea7987d838f702a5a7ff0c784d46f92704f"
input_schema_fingerprint: "c24e6bf661283bd4da1cc9d1dd546fa084af869647b16a6643aff60723b65079"
annotations{5}
title: "U.S. federal holidays"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
18{9}
name: "uscg_vessel_profile"
title: "Coast Guard compliance snapshot for a vessel"
effect: "EXECUTE"
effect_confidence: 0.3
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.5
risk_severity: "HIGH"
fingerprint: "850548dca9c765e2aa02ed0d4581378e2387b359f03c3506b2cd28f9b77043cc"
input_schema_fingerprint: "f5c70111ac8f55c46a054e4c455864e072f212c890878d115afc55a22ef75c2e"
annotations{5}
title: "Coast Guard compliance snapshot for a vessel"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
19{9}
name: "uscg_vessel_search"
title: "Find a vessel in Coast Guard records (PSIX)"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "95861f069e62c7198ce4e1bcb3c95499d1cd525623f46b77f2fd6d4556e567bb"
input_schema_fingerprint: "3fbfe94590768062747b8cfb5d062b1408a4788789689d14fca76bd2d503db44"
annotations{5}
title: "Find a vessel in Coast Guard records (PSIX)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.x3api.com"
registrable_domain: "x3api.com"
source: "transport"
findings[6]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "dot_random_testing"
2{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "LOW"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "osha_state_jurisdiction"
3{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "osha_is_recordable"
4{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "osha_state_jurisdiction"
5{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "pipeline_design_and_maop"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.x3allamerican/x3-compliance-mcp"
registry_content_sha256: "3ed67aabad0b93d1c853af63076b28f565204c17a92411691d1d223c9daaf427"
scan_snapshot_fingerprint: "7c022738b264829215bac8cef96824043b95336357a296973c092b8a44e56e56"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T01:51:43.768Z"
observed_at: "2026-11-15T00:42:30.465+00:00"
registry_published_at: "2026-11-14T23:49:46.844162+00:00"
registry_updated_at: null