LeashIndex Get the report

Index / storage

BAMF.ai

ai-bamf-bamf declares 160 capabilities across 160 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://mcp.bamf.ai, published in the official MCP registry as ai.bamf/bamf 1.1.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 160 tools

160 of 160 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 38 of 160 tools

38 tools are classified as irreversible or destructive and declare no limit. 18 of them are counted only because the server annotated them destructiveHint. In MCP that annotation marks a tool that may make destructive changes rather than only additive ones; it does not say the change cannot be undone.

high · no-expiry · All 160 tools

160 of 160 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 160 tools

160 of 160 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 41 of 160 tools

41 tools can modify data and declare no limit.

low · uncapped-read · 81 of 160 tools

81 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
bamf.list_site_projectsread declared
bamf.create_site_projectwrite inferred
bamf.get_site_artifactread declared
bamf.save_site_artifactwrite assumed
bamf.list_sitesread declared
bamf.list_site_workspacesread declared
bamf.get_siteread declared
bamf.manage_sitedestructive declared
bamf.publish_sitedestructive declared
bamf.manage_funnel_emailssend inferred
bamf.get_agent_capabilitiesread declared
bamf.search_intelligenceread declared
bamf.get_intelligence_resource_contextread declared
bamf.get_intelligence_processing_statusread declared
bamf.route_agent_workflowread declared
bamf.get_agent_identityread declared
bamf.get_onboardingread declared
bamf.advance_onboardingwrite assumed
bamf.get_profileread declared
bamf.get_agent_creator_contextread declared
bamf.list_agent_mediaread declared
bamf.list_agent_brand_kitsread declared
bamf.list_creator_followsread declared
bamf.follow_creatorwrite assumed
bamf.unfollow_creatordestructive declared
bamf.list_creator_spacesread declared
bamf.get_creator_contextread declared
bamf.list_scheduled_postsread declared
bamf.list_postsread declared
bamf.finish_draftwrite assumed
bamf.preview_postread declared
bamf.create_post_draftsend inferred
bamf.message_clientsend inferred
bamf.invite_client_to_spacewrite assumed
bamf.update_client_contactwrite inferred
bamf.send_linkedin_reauth_linksend inferred
bamf.check_linkedin_sessionread declared
bamf.reconnect_linkedinwrite assumed
bamf.open_cloud_computerread declared
bamf.request_loginread declared
bamf.run_design_sessionread declared
bamf.link_sessionread inferred
bamf.handoff_sessionwrite assumed
bamf.plugins.listread declared
bamf.plugins.calldestructive declared
bamf.ensure_proxywrite assumed
bamf.manage_proxydestructive declared
bamf.create_x_post_draftsend inferred
bamf.generate_postsend inferred
bamf.generate_x_postsend inferred
bamf.edit_postdestructive declared
bamf.generate_post_editsend inferred
bamf.edit_carousel_slidewrite inferred
bamf.edit_post_imagewrite inferred
bamf.list_post_versionsread declared
bamf.revert_post_versionsend inferred
bamf.delete_postdestructive declared
bamf.schedule_postdestructive declared
bamf.boost_postdestructive declared
bamf.list_boost_tiersread declared
bamf.list_boost_groupsread declared
bamf.estimate_boostread declared
bamf.unschedule_postdestructive declared
bamf.pause_scheduled_postsend inferred
bamf.resume_scheduled_postsend inferred
bamf.publish_post_nowdestructive declared
bamf.publish_x_replydestructive declared
bamf.get_x_safety_statusread declared
bamf.list_ideasread declared
bamf.generate_ideassend inferred
bamf.create_ideawrite inferred
bamf.create_post_requestsend inferred
bamf.read_team_channelread declared
bamf.message_team_channelsend inferred
bamf.list_client_channelsread declared
bamf.share_to_channelsend inferred
bamf.publish_notion_status_blocksend inferred
bamf.list_client_approvalsread declared
bamf.get_client_approvalread declared
bamf.decide_client_approvalwrite inferred
bamf.list_post_requestsread declared
bamf.list_interviewsread declared
bamf.create_interview_linkwrite inferred
bamf.run_researchwrite assumed
bamf.run_ai_roundupwrite assumed
bamf.remix_post_requestssend inferred
bamf.search_knowledgeread declared
bamf.process_knowledgewrite assumed
bamf.create_interview_transcriptwrite inferred
bamf.add_knowledge_docwrite inferred
bamf.save_agent_artifactwrite inferred
bamf.list_ui_componentsread declared
bamf.validate_ui_specread declared
bamf.add_memorywrite inferred
bamf.get_brainread declared
bamf.propose_brain_updatewrite inferred
bamf.list_profile_packagesread declared
bamf.get_profile_packageread declared
bamf.get_profile_capture_statusread declared
bamf.create_profile_packagewrite inferred
bamf.update_profile_packagedestructive declared
bamf.duplicate_profile_packagewrite assumed
bamf.select_profile_packagewrite assumed
bamf.archive_profile_packagedelete inferred
bamf.list_mediaread declared
bamf.list_media_foldersread declared
bamf.list_integrationsread declared
bamf.list_brand_kitsread declared
bamf.list_design_referencesread declared
bamf.list_style_optionsread declared
bamf.open_style_swiperead declared
bamf.instantiate_design_referenceread declared
bamf.update_brand_kit_referencesdestructive declared
bamf.add_mediawrite inferred
bamf.create_media_folderwrite inferred
bamf.move_media_itemswrite inferred
bamf.generate_imagewrite assumed
bamf.generate_carouselwrite assumed
bamf.generate_videowrite assumed
bamf.generate_carousel_pdfsend inferred
bamf.list_saved_people_listsread declared
bamf.read_saved_people_listread declared
bamf.query_peopleread declared
bamf.search_crm_leadsread declared
bamf.start_outreach_discoverywrite assumed
bamf.resume_outreach_discoverywrite assumed
bamf.get_outreach_discovery_statusread declared
bamf.cancel_outreach_discoverydestructive declared
bamf.save_outreach_discoveryread inferred
bamf.prepare_outreach_campaignread inferred
bamf.approve_outreach_campaignwrite inferred
bamf.queue_outreach_campaignread inferred
bamf.cancel_outreach_campaigndestructive declared
bamf.get_outreach_campaign_statusread declared
bamf.admit_outreach_campaign_executionread inferred
bamf.prepare_exact_thread_replysend inferred
bamf.prepare_outreach_growth_deliverywrite assumed
bamf.list_jobsread declared
bamf.get_jobread declared
bamf.get_run_statusread declared
bamf.cancel_jobdestructive declared
bamf.get_analytics_summaryread declared
bamf.get_creator_analytics_reportread declared
bamf.get_funnel_mixread declared
bamf.find_funnel_examplesread declared
bamf.find_competitor_adsread declared
bamf.suggest_ad_keywordsread declared
bamf.list_linkedin_postsread declared
bamf.get_x_analytics_summaryread declared
bamf.list_x_postsread declared
bamf.list_x_bookmarksread declared
bamf.sync_x_analyticswrite assumed
bamf.list_ai_analysesread declared
bamf.create_video_projectwrite inferred
bamf.generate_video_scriptread inferred
bamf.narrate_video_projectwrite assumed
bamf.transcribe_video_captionswrite assumed
bamf.schedule_video_postdestructive declared
bamf.get_video_analytics_summaryread declared
bamf.create_jobwrite inferred

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-28100 tools/list on https://mcp.bamf.ai, published in the official MCP registry as ai.bamf/bamf 1.1.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.