LeashIndex Get the report

Index / data

AthenaHQ

ai-athenahq-mcp declares 103 capabilities across 103 tools, with 2 critical issues.

99/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://api.athenahq.ai/api/mcp, published in the official MCP registry as ai.athenahq/mcp 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 103 tools

103 of 103 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 14 of 103 tools

14 tools are classified as irreversible and declare no limit.

high · no-expiry · All 103 tools

103 of 103 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 103 tools

103 of 103 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 21 of 103 tools

21 tools can modify data and declare no limit.

low · uncapped-read · 68 of 103 tools

68 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
open_ai_accessread declared
check_public_ai_accessread declared
get_prompt_schedulesread declared
get_ai_search_valueread declared
get_promptsread declared
get_prompt_tagsread declared
get_personasread declared
get_topicsread declared
get_competitorsread declared
get_content_hub_sheetsread declared
get_tracked_contentread declared
list_contentread declared
get_content_detailread declared
get_content_citation_promptsread declared
list_websitesread declared
get_locationsread declared
get_date_rangeread declared
get_responsesread declared
get_response_streaming_statusread declared
get_response_detailread declared
get_saved_viewsread declared
get_group_saved_viewsread declared
get_credits_organizationread declared
get_credits_websiteread declared
get_groupsread declared
get_group_detailread declared
get_share_of_voice_cumulativeread declared
get_share_of_voice_time_seriesread declared
get_citation_rate_cumulativeread declared
get_citation_rate_time_seriesread declared
get_mention_rate_cumulativeread declared
get_mention_rate_time_seriesread declared
get_position_cumulativeread declared
get_position_time_seriesread declared
get_position_distributionread declared
query_metricsread declared
query_rowsread declared
list_pitchesread declared
get_pitchread declared
get_sourcesread declared
get_source_pagesread declared
get_attributesread declared
get_attribute_metricsread declared
get_competitor_attribute_metricsread declared
get_attribute_time_seriesread declared
get_attribute_observationsread declared
get_user_by_emailread declared
get_oracle_findingsread declared
get_oracle_findingread declared
add_brand_factsdestructive declared
add_contentwrite inferred
approve_briefwrite inferred
create_contentwrite inferred
create_locationwrite inferred
create_pillarwrite inferred
create_prompt_tagwrite inferred
create_promptswrite inferred
create_saved_viewread inferred
create_source_tagwrite inferred
create_topicwrite inferred
delete_brand_factsdestructive declared
delete_contentdestructive declared
delete_locationdestructive declared
delete_pillarsdestructive declared
delete_promptdestructive declared
delete_source_tagdestructive declared
delete_topicdestructive declared
edit_contentwrite inferred
get_brand_factsread declared
get_content_draftread declared
get_content_statusread declared
get_content_versionread declared
get_content_versionsread declared
get_credit_usageread declared
get_credit_usage_eventsread declared
get_identifiersread declared
get_pillar_documentread declared
get_pillarsread declared
get_prompt_discovery_runsread declared
get_seo_rankingsread declared
get_shopping_metricsread declared
list_source_tagsread declared
merge_pillarsdestructive declared
move_brand_factswrite inferred
move_contentdestructive declared
publish_contentsend inferred
rename_contentwrite inferred
restore_content_versionwrite assumed
revise_briefwrite assumed
revise_contentwrite assumed
search_brand_factsread declared
set_prompt_tagsdestructive declared
set_prompts_statusread inferred
start_prompt_discoveryread inferred
start_response_streamingwrite assumed
track_content_urlsread inferred
update_brand_factwrite inferred
update_identifiersdestructive declared
update_locationwrite inferred
update_pillarwrite inferred
update_promptwrite inferred
update_source_tagdestructive declared
update_topicwrite inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.