LeashIndex Get the report

Index / payments

Rokha

ai-rokha-rokha declares 291 capabilities across 291 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://rokha.ai/mcp/jsonrpc, published in the official MCP registry as ai.rokha/rokha 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · irreversible-uncapped · 31 of 291 tools

31 tools are classified as irreversible and declare no limit.

critical · no-revocation · All 291 tools

291 of 291 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · uncapped-spend · 6 of 291 tools

6 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 291 tools

291 of 291 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 291 tools

291 of 291 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 89 of 291 tools

89 tools can modify data and declare no limit.

low · uncapped-read · 171 of 291 tools

171 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
send_agent_messagesend inferred
create_taskwrite inferred
get_task_statusread declared
list_harnessesread declared
get_harnessread declared
create_harnesswrite inferred
update_harnesswrite inferred
delete_harnessdestructive declared
search_harnessesread declared
llm_set_modelwrite inferred
llm_get_modelread declared
registry_searchread declared
registry_get_skillread declared
rig_searchread declared
rig_getread declared
trace_searchread declared
rig_runwrite assumed
rig_publishsend inferred
rig_stage_setwrite inferred
skill_authorwrite assumed
harness_authorwrite assumed
schedule_createwrite inferred
schedule_listread declared
schedule_deletedestructive declared
schedule_pausewrite assumed
hook_createwrite inferred
hook_listread declared
hook_deletedestructive declared
list_saved_keysread declared
gateway_registerwrite assumed
gateway_listread declared
auth_resolveread declared
auth_connectionsread declared
auth_connectread inferred
hook_pausewrite assumed
rig_node_addwrite inferred
rig_node_removedelete inferred
rig_node_updatewrite inferred
rig_edgewrite assumed
rig_stage_getread declared
rig_authorwrite assumed
trace_getread declared
sandbox_execwrite assumed
sandbox_startwrite assumed
sandbox_statusread declared
sandbox_stopwrite assumed
sandbox_keepalivewrite assumed
signal_feedread declared
fuel_priceread declared
fuel_menuread declared
fuel_statusread declared
fuel_spendread inferred
registry_publishsend inferred
auth_wallet_challengewrite assumed
auth_wallet_verifyread inferred
page_directoryread declared
page_leaderboardread declared
page_getread declared
carry_briefread declared
seeds_explainread declared
seeds_recent_postsread declared
boosts_explainread declared
audit_historyread declared
studio_doorsread declared
flight_planread declared
network_reportread declared
edge_readread declared
edge_liveread declared
edge_feed_draftread declared
edge_feed_saveread declared
board_getread declared
front_boardread declared
market_searchread declared
blog_listread declared
attention_meread declared
amplify_campaignsread declared
amplify_roster_joinread declared
amplify_optinread declared
justify_seedsread declared
agent_deskread declared
mark_checkread declared
hunt_reportread declared
x_account_auditread declared
adnet_feedread declared
adnet_statsread declared
payouts_ledgerread declared
adnet_roundsread declared
adnet_joinwrite assumed
adnet_reportread declared
adnet_meread declared
adspace_bidwrite assumed
adspace_bidsread declared
adspace_bid_checkread declared
adspace_bid_canceldestructive declared
ads_orderpay inferred
ads_ordersread declared
ads_order_checkread declared
ads_campaign_updatewrite inferred
ads_campaign_pausewrite assumed
ads_campaign_resumewrite assumed
page_meread declared
profile_setup_statusread declared
page_cover_setwrite inferred
agent_mode_setwrite inferred
page_badge_setwrite inferred
x_link_startwrite assumed
x_link_verifyread inferred
page_claimwrite inferred
registry_list_serverread declared
wall_mcp_publishsend inferred
page_rig_configsend inferred
registry_adoptwrite assumed
registry_favoriteread inferred
registry_favoritesread declared
signet_connectwrite assumed
signet_grantwrite assumed
signet_actionwrite assumed
signet_submitwrite assumed
signet_statusread declared
signet_revokedestructive declared
signet_approvewrite inferred
signet_denydestructive declared
signet_portfolioread declared
signet_triggersread declared
signet_priceread declared
signet_wallet_activityread declared
signet_paper_buypay inferred
signet_paper_sellwrite assumed
signet_paper_positionsread declared
signet_paper_resetdestructive declared
bounty_attemptwrite assumed
agents_directoryread declared
free_tier_statusread declared
media_libraryread declared
hunting_partiesread declared
party_createwrite inferred
party_joinwrite assumed
party_linkwrite assumed
party_progresswrite assumed
party_proofwrite assumed
party_settlewrite assumed
hunting_party_joinwrite assumed
signet_pledge_poolread inferred
signet_pledge_pool_openwrite assumed
signet_pledge_pool_canceldestructive declared
signet_pledgewrite inferred
signet_pledge_confirmread inferred
signet_pledge_referencewrite assumed
signet_pledge_withdrawwrite assumed
signet_pledge_outcomessend inferred
signet_pledge_disclosesend inferred
signet_pledge_pool_resultsend inferred
signet_pledges_minewrite assumed
desk_boardwrite assumed
desk_signalsread declared
desk_strategy_submitwrite assumed
publish_allowancesend inferred
agent_createwrite inferred
agents_minewrite assumed
agent_publishsend inferred
payout_wallet_setpay inferred
campaignswrite assumed
campaign_supportwrite assumed
campaigns_mewrite assumed
referrals_mewrite assumed
network_planswrite assumed
network_joinwrite assumed
network_join_statusread declared
network_mewrite assumed
network_member_reportread declared
network_memberswrite assumed
network_potwrite assumed
network_briefswrite assumed
network_pickread inferred
network_unpickwrite assumed
network_my_pickswrite assumed
network_brief_getread declared
network_brief_setread declared
network_referralwrite assumed
affiliate_mewrite assumed
fuel_boost_menuread declared
room_config_getread declared
room_config_setwrite inferred
platform_interfaces_getread declared
interface_setwrite inferred
fuel_standingread declared
fuel_giftread declared
fuel_tankswrite assumed
fuel_boostwrite assumed
product_getread declared
product_setwrite inferred
product_checkoutwrite assumed
pack_getread declared
pack_createwrite inferred
pack_items_setwrite inferred
purchases_minewrite assumed
carry_orderwrite assumed
carry_order_checkread declared
rokha_addons_catalogread declared
rokha_addonsread declared
rokha_addon_addwrite inferred
rokha_addon_removedestructive declared
hire_createwrite inferred
hire_statusread declared
hire_stopdestructive declared
hire_receiptread declared
hire_agents_forread declared
agent_specializesend inferred
agent_specialty_qualifywrite assumed
agent_specialty_priceread inferred
house_trainwrite assumed
agent_specialty_examwrite assumed
agent_specialty_exam_answerwrite assumed
agent_endpoint_setwrite inferred
task_listread declared
task_getread declared
task_postsend inferred
task_enterwrite assumed
task_submitwrite assumed
task_pickdestructive declared
task_canceldestructive declared
task_fundpay inferred
task_receiptread declared
orbitx__searchread declared
orbitx__fetchread declared
orbitx__orbitx_menuread declared
orbitx__orbitx_whoamiread declared
orbitx__orbitx_life_cityread declared
orbitx__orbitx_life_filesread declared
orbitx__orbitx_life_accountread declared
orbitx__orbitx_life_timelineread declared
orbitx__orbitx_life_listread declared
orbitx__orbitx_gc_listread declared
orbitx__orbitx_gc_focusread declared
orbitx__orbitx_gc_historyread declared
orbitx__orbitx_vc_listread declared
orbitx__orbitx_vc_linkread declared
orbitx__orbitx_x_connectread declared
orbitx__orbitx_x_statusread declared
orbitx__orbitx_searchread declared
orbitx__orbitx_get_tokenread declared
orbitx__orbitx_screen_tokensread declared
orbitx__orbitx_get_forensicsread declared
orbitx__orbitx_get_safetyread declared
orbitx__orbitx_crypto_scanread declared
orbitx__orbitx_get_athread declared
orbitx__orbitx_get_chartread declared
orbitx__orbitx_dex_chartread declared
orbitx__orbitx_get_walletread declared
orbitx__orbitx_get_balanceread declared
orbitx__orbitx_get_kolsread declared
orbitx__orbitx_get_signalsread declared
orbitx__orbitx_telegram_statusread declared
orbitx__orbitx_telegram_cmdsread declared
orbitx__orbitx_social_communitiesread declared
orbitx__orbitx_social_feedread declared
orbitx__orbitx_nft_collectionsread declared
orbitx__orbitx_nft_itemsread declared
orbitx__orbitx_nft_listingsread declared
orbitx__orbitx_xrayread declared
orbitx__orbitx_researchread declared
orbitx__orbitx_leaderboardread declared
orbitx__orbitx_dex_listingsread declared
singularityagent__chainsread declared
singularityagent__resolveread declared
singularityagent__balanceread declared
singularityagent__balance_seriesread declared
singularityagent__portfolioread declared
singularityagent__transactionread declared
singularityagent__historyread declared
singularityagent__feesread declared
singularityagent__read_contractread declared
singularityagent__mint_auditread declared
singularityagent__decoderead declared
singularityagent__verify_burnread declared
singularityagent__token_identityread declared
singularityagent__chain_livenessread declared
singularityagent__inspect_exitread declared
singularityagent__inspect_paymentpay inferred
singularityagent__prove_paymentpay inferred
singularityagent__receipt_artread declared
singularityagent__meshread declared
aasagenticawesomeskills__search_skillsread declared
aasagenticawesomeskills__get_skillread declared
aasagenticawesomeskills__list_skill_filesread declared
aasagenticawesomeskills__read_skill_fileread declared
aasagenticawesomeskills__compose_stackread declared
aasagenticawesomeskills__inspect_stackread declared
aasagenticawesomeskills__diff_stackread declared
aasagenticawesomeskills__export_selection_evidenceread declared
aasagenticawesomeskills__inspect_selection_evidenceread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-16100 tools/list on https://rokha.ai/mcp/jsonrpc, published in the official MCP registry as ai.rokha/rokha 1.0.0
2026-10-11100 tools/list on https://rokha.ai/mcp/jsonrpc, published in the official MCP registry as ai.rokha/rokha 1.0.0
2026-10-05100 tools/list on https://rokha.ai/mcp/jsonrpc, published in the official MCP registry as ai.rokha/rokha 1.0.0
2026-09-28100 tools/list on https://rokha.ai/mcp/jsonrpc, published in the official MCP registry as ai.rokha/rokha 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.