LeashIndex Get the report

Index / storage

ai.spideriq/publish

ai-spideriq-publish declares 156 capabilities across 156 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the npm package @spideriq/mcp-publish@1.25.0 (published to npm as @spideriq/mcp-publish, listed in the official MCP registry as ai.spideriq/publish 1.25.0), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 156 tools

156 of 156 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 30 of 156 tools

30 tools are classified as irreversible and declare no limit.

high · no-expiry · All 156 tools

156 of 156 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 156 tools

156 of 156 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 62 of 156 tools

62 tools can modify data and declare no limit.

low · uncapped-read · 64 of 156 tools

64 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
request_accesswrite inferred
check_access_statusread inferred
get_auth_statusread inferred
logoutdelete inferred
list_workspacesread inferred
health_checkread inferred
get_queue_statsread inferred
get_api_inforead inferred
content_list_pagesread inferred
content_create_pagewrite inferred
content_get_pageread inferred
content_export_pagewrite assumed
content_update_pagewrite inferred
content_delete_pagedelete inferred
content_publish_pagesend inferred
content_unpublish_pagesend inferred
content_lock_pagewrite inferred
content_unlock_pagewrite assumed
content_list_page_versionsread inferred
content_get_page_versionread inferred
content_restore_page_versionwrite assumed
content_list_postssend inferred
content_create_postsend inferred
content_publish_postsend inferred
content_docs_treeread inferred
content_create_docwrite inferred
content_list_docsread inferred
content_get_docread inferred
content_update_docwrite inferred
content_publish_docsend inferred
content_unpublish_docsend inferred
changelog_listread inferred
changelog_createwrite inferred
changelog_publishsend inferred
content_delete_docdelete inferred
content_export_docwrite assumed
content_import_markdownwrite assumed
content_import_openapiwrite assumed
content_export_markdownwrite assumed
content_get_navigationread inferred
content_update_navigationwrite inferred
content_get_settingsread inferred
content_update_settingswrite inferred
content_list_domainsread inferred
content_add_domainwrite inferred
content_verify_domainread inferred
content_set_primary_domainwrite inferred
content_delete_domaindelete inferred
content_get_postsend inferred
content_update_postsend inferred
content_delete_postsend inferred
content_unpublish_postsend inferred
content_update_post_statusread inferred
content_search_postssend inferred
content_featured_postssend inferred
content_list_authorsread inferred
content_create_authorwrite inferred
content_get_authorread inferred
content_update_authorwrite inferred
content_delete_authordelete inferred
content_list_tagsread inferred
content_create_tagwrite inferred
content_update_tagwrite inferred
content_delete_tagdelete inferred
content_list_categoriesread inferred
content_create_categorywrite inferred
content_update_categorywrite inferred
content_delete_categorydelete inferred
content_list_componentsread inferred
content_create_componentwrite inferred
content_get_componentread inferred
content_get_component_by_slugread inferred
content_update_componentwrite inferred
content_delete_componentdelete inferred
content_publish_componentsend inferred
content_archive_componentdelete inferred
content_list_component_versionsread inferred
content_list_cdn_allowlistread inferred
content_get_build_statusread inferred
content_rebuild_componentwrite assumed
content_upload_component_previewread inferred
content_upload_bg_videowrite inferred
content_upload_site_template_previewread inferred
content_visual_checkwrite assumed
template_get_helpread inferred
template_inspect_block_fieldsread inferred
content_get_variablesread inferred
template_listread inferred
template_getread inferred
template_upsertwrite inferred
template_deletedelete inferred
template_list_themesread inferred
template_apply_themewrite assumed
template_get_configread inferred
template_update_configwrite inferred
template_previewread inferred
content_deploy_site_previewread inferred
content_deploy_site_productionwrite inferred
content_deploy_sitewrite inferred
content_deploy_statusread inferred
content_deploy_readinesswrite inferred
import_from_urlwrite assumed
list_filesread inferred
delete_filedelete inferred
list_videosread inferred
get_video_statusread inferred
get_media_statsread inferred
video_to_scroll_sequencewrite assumed
content_override_sectionwrite assumed
content_apply_layout_presetwrite assumed
content_get_section_sourceread inferred
component_update_and_propagatewrite inferred
component_rollbackwrite assumed
upload_local_filewrite inferred
upload_local_directorywrite inferred
directory_list_categoriesread inferred
directory_create_categorywrite inferred
directory_get_categoryread inferred
directory_update_categorywrite inferred
directory_delete_categorydelete inferred
directory_list_listingsread inferred
directory_upsert_listingread inferred
directory_bulk_upsert_listingswrite assumed
directory_import_from_idapwrite assumed
directory_delete_listingdelete inferred
content_get_playbookread inferred
content_duplicate_pagewrite assumed
content_duplicate_blockwrite inferred
content_duplicate_postsend inferred
content_duplicate_docwrite assumed
content_list_site_templatesread inferred
content_get_site_templateread inferred
content_apply_site_templatewrite assumed
content_create_site_templatewrite inferred
content_update_site_templatewrite inferred
content_list_page_templatesread inferred
content_get_page_templateread inferred
content_apply_page_templatewrite assumed
content_list_marketplace_componentsread inferred
content_list_marketplace_bg_videosread inferred
content_get_marketplace_bg_videoread inferred
page_insert_sectionwrite inferred
marketplace_searchread inferred
list_data_sourcesread inferred
list_data_source_itemsread inferred
set_component_kindwrite inferred
set_component_agent_metawrite inferred
set_bg_video_agent_metawrite inferred
set_site_template_agent_metawrite inferred
marketplace_suggest_agent_metawrite assumed
marketplace_form_test_submitwrite assumed
content_audit_linkssend inferred
list_projectsread inferred
create_projectwrite inferred
list_recipesread inferred
get_reciperead inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.