LeashIndex Get the report

Index / storage

MorphaReels

ai-morphareels-morpha declares 103 capabilities across 103 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://morphareels.ai/mcp, published in the official MCP registry as ai.morphareels/morpha 1.0.418. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 103 tools

103 of 103 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 65 of 103 tools

65 tools are classified as irreversible or destructive and declare no limit. 64 of them are counted only because the server annotated them destructiveHint. In MCP that annotation marks a tool that may make destructive changes rather than only additive ones; it does not say the change cannot be undone.

high · no-expiry · All 103 tools

103 of 103 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 103 tools

103 of 103 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 23 of 103 tools

23 tools can modify data and declare no limit.

low · uncapped-read · 15 of 103 tools

15 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
list_projectsread declared
list_workspacesread declared
create_workspacewrite inferred
rename_workspacewrite inferred
open_projectread declared
show_projectread declared
create_projectwrite inferred
move_project_to_workspacedestructive declared
list_collectionread declared
add_from_collectionwrite inferred
duplicate_projectwrite assumed
rename_projectwrite inferred
reid_projectdestructive declared
delete_projectdestructive declared
list_trashread declared
restore_projectdelete inferred
save_versiondestructive declared
list_versionsread declared
restore_versiondestructive declared
rename_versionwrite inferred
delete_versiondestructive declared
upload_imagedestructive declared
upload_audiodestructive declared
detect_text_regionsread declared
safe_zonesread declared
transcribe_clipread declared
clip_processing_statusread declared
render_videodestructive declared
render_statusread declared
report_issuewrite assumed
describe_videoread declared
inspect_layersread declared
move_layerdestructive declared
move_layersdestructive declared
set_pivotdestructive declared
add_keyframedestructive declared
set_keyframes_batchdestructive declared
add_keyframesdestructive declared
remove_keyframedestructive declared
shift_trackdestructive declared
set_track_loopdestructive declared
add_image_layerwrite inferred
add_video_layerwrite inferred
add_shapewrite inferred
add_curvewrite inferred
duplicate_layerwrite assumed
remove_layerdestructive declared
remove_layersdestructive declared
reorder_layerdestructive declared
set_styledestructive declared
set_layer_filldestructive declared
set_text_backgrounddestructive declared
set_group_boxdestructive declared
add_color_keyframedestructive declared
remove_color_keyframedestructive declared
fade_layerdestructive declared
set_layer_visibledestructive declared
apply_presetdestructive declared
apply_preset_staggerdestructive declared
group_layersdestructive declared
ungroup_layersdestructive declared
set_group_parentdestructive declared
rename_groupwrite inferred
add_to_collectionwrite inferred
remove_from_collectiondestructive declared
embed_projectwrite assumed
add_audio_overlaywrite inferred
remove_audio_overlaydestructive declared
update_audio_overlaydestructive declared
set_video_layer_trimdestructive declared
set_layer_blockdestructive declared
set_layer_transitiondestructive declared
set_embed_startdestructive declared
shift_groupdestructive declared
set_group_windowdestructive declared
set_durationdestructive declared
fit_duration_to_contentdestructive declared
cut_rangedestructive declared
set_embed_originsdestructive declared
add_embed_originwrite inferred
remove_embed_origindestructive declared
set_custom_fontdestructive declared
list_fontsread declared
set_layer_textdestructive declared
add_text_layerwrite inferred
add_caption_trackwrite inferred
split_caption_linedestructive declared
merge_caption_linesdestructive declared
rename_layerwrite inferred
set_loopdestructive declared
set_canvas_sizedestructive declared
set_image_filenamedestructive declared
set_video_clipdestructive declared
set_matte_sourcedestructive declared
freeze_framedestructive declared
set_clip_speeddestructive declared
add_speed_keyframedestructive declared
remove_speed_keyframedestructive declared
set_video_layer_muteddestructive declared
add_pagewrite inferred
delete_pagedestructive declared
reorder_pagesdestructive declared
select_pagewrite assumed

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-16100 tools/list on https://morphareels.ai/mcp, published in the official MCP registry as ai.morphareels/morpha 1.0.395
2026-10-11100 tools/list on https://morphareels.ai/mcp, published in the official MCP registry as ai.morphareels/morpha 1.0.377
2026-10-11100 tools/list on https://morphareels.ai/mcp, published in the official MCP registry as ai.morphareels/morpha 1.0.375
2026-09-28100 tools/list on https://morphareels.ai/mcp, published in the official MCP registry as ai.morphareels/morpha 1.0.373
2026-09-14100 tools/list on https://morphareels.ai/mcp, published in the official MCP registry as ai.morphareels/morpha 1.0.331
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.