{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-12T00:00:00Z",
    "authors": [
      {
        "name": "SMKlog",
        "email": "info@smklog.com"
      }
    ],
    "component": {
      "type": "application",
      "name": "smklog-quote-api",
      "version": "1.4.0",
      "description": "The SMKlog Quote API worker: quoting, checkout sessions, MCP and A2A, on Cloudflare Workers.",
      "publisher": "SMKlog",
      "bom-ref": "smklog-quote-api"
    },
    "properties": [
      {
        "name": "smklog:runtime",
        "value": "Cloudflare Workers (workerd), JavaScript ES modules"
      },
      {
        "name": "smklog:third_party_runtime_dependencies",
        "value": "0"
      },
      {
        "name": "smklog:source",
        "value": "https://github.com/smklog"
      }
    ]
  },
  "components": [
    {
      "type": "application",
      "name": "smklog-markdown-agents",
      "version": "1.4.0",
      "description": "The smklog.com site worker: Markdown twins of every page and the agent discovery documents.",
      "publisher": "SMKlog",
      "bom-ref": "smklog-markdown-agents"
    },
    {
      "type": "library",
      "name": "parcel-shipping-rates-mcp",
      "version": "1.4.1",
      "description": "The open-source stdio bridge to the hosted MCP server, published on npm.",
      "publisher": "SMKlog",
      "bom-ref": "parcel-shipping-rates-mcp",
      "purl": "pkg:npm/parcel-shipping-rates-mcp@1.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/smklog/parcel-shipping-rates-mcp"
        }
      ]
    }
  ],
  "services": [
    {
      "name": "Cloudflare",
      "endpoints": [
        "https://api.cloudflare.com/"
      ],
      "description": "Workers, Pages, D1 database, DNS and edge cache.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "bi-directional",
          "classification": "order and shipment records"
        }
      ]
    },
    {
      "name": "Stripe",
      "endpoints": [
        "https://api.stripe.com/"
      ],
      "description": "Hosted checkout, receipts, invoices for carrier adjustments.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "payer email, order amount; card data never reaches SMKlog"
        }
      ]
    },
    {
      "name": "EasyPost",
      "endpoints": [
        "https://api.easypost.com/"
      ],
      "description": "Carrier rating, label purchase, address verification, tracking.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "sender and recipient names, addresses, contact details, parcel data"
        }
      ]
    },
    {
      "name": "Envia",
      "endpoints": [
        "https://shipping.envia.com/"
      ],
      "description": "UPS and FedEx rating and labels on some US lanes.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "sender and recipient names, addresses, parcel data"
        }
      ]
    },
    {
      "name": "Resend",
      "endpoints": [
        "https://api.resend.com/"
      ],
      "description": "Transactional email: label delivery, receipts, notifications.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "customer email address, order details"
        }
      ]
    },
    {
      "name": "DeepSeek",
      "endpoints": [
        "https://api.deepseek.com/"
      ],
      "description": "Packaging estimate and pre-payment packaging check from item descriptions.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "item descriptions and declared contents"
        }
      ]
    },
    {
      "name": "OpenRouter",
      "endpoints": [
        "https://openrouter.ai/"
      ],
      "description": "Hosted models for the packaging estimate and its arbiter.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "item descriptions and declared contents"
        }
      ]
    },
    {
      "name": "OpenAI",
      "endpoints": [
        "https://api.openai.com/"
      ],
      "description": "Packaging estimate.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "item descriptions"
        }
      ]
    },
    {
      "name": "Google",
      "endpoints": [
        "https://generativelanguage.googleapis.com/"
      ],
      "description": "Gemini packaging estimate; Google Analytics on the site.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "item descriptions; site usage analytics"
        }
      ]
    },
    {
      "name": "eBay",
      "endpoints": [
        "https://api.ebay.com/"
      ],
      "description": "Product catalog lookup for packaged dimensions.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "item descriptions"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "smklog-quote-api",
      "dependsOn": []
    },
    {
      "ref": "smklog-markdown-agents",
      "dependsOn": []
    },
    {
      "ref": "parcel-shipping-rates-mcp",
      "dependsOn": []
    }
  ],
  "x-provenance": {
    "method": "published",
    "publisher": "SMKlog (SMKLOG-2022 LLC)",
    "source": "https://smklog.com/developers/sbom.cdx.json",
    "published": "2026-10-12"
  }
}