LeashIndex Get the report

Index / storage

Dock

ai-trydock-dock declares 84 capabilities across 84 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://trydock.ai/api/mcp, published in the official MCP registry as ai.trydock/dock 1.1.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 84 tools

84 of 84 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 14 of 84 tools

14 tools are classified as irreversible and declare no limit.

high · no-expiry · All 84 tools

84 of 84 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 84 tools

84 of 84 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 39 of 84 tools

39 tools can modify data and declare no limit.

low · uncapped-read · 31 of 84 tools

31 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
list_workspacesread inferred
get_workspaceread inferred
list_rowsread inferred
create_rowwrite inferred
get_rowread inferred
update_rowwrite inferred
delete_rowdelete inferred
move_rowswrite inferred
get_docread inferred
get_workspace_schemaread inferred
add_columnwrite inferred
list_workspace_membersread inferred
check_workspace_privateread inferred
delete_workspacedelete inferred
update_workspacewrite inferred
share_workspacewrite inferred
update_workspace_memberwrite inferred
remove_workspace_memberdelete inferred
update_docwrite inferred
validate_doc_markdownread inferred
update_doc_sectionwrite inferred
append_doc_sectionwrite assumed
get_htmlread inferred
update_htmlwrite inferred
validate_htmlread inferred
create_workspacewrite inferred
get_recent_eventsread inferred
searchread inferred
get_billingread inferred
upgrade_planwrite assumed
downgrade_planwrite assumed
request_limit_increasewrite inferred
list_surfacesread inferred
create_surfacewrite inferred
update_surfacewrite inferred
delete_surfacedelete inferred
list_api_keysread inferred
rotate_api_keydelete inferred
revoke_api_keydelete inferred
request_revoke_agent_keydelete inferred
request_rotate_agent_keywrite inferred
list_webhooksread inferred
create_webhookwrite inferred
update_webhookwrite inferred
rotate_webhook_secretwrite assumed
delete_webhookdelete inferred
send_messagesend inferred
create_support_ticketwrite inferred
list_my_support_ticketsread inferred
list_sheet_functionsread inferred
validate_formularead inferred
evaluate_formulawrite assumed
add_commentwrite inferred
list_commentsread inferred
get_comment_threadread inferred
reply_to_commentwrite inferred
resolve_commentwrite assumed
unresolve_commentwrite assumed
react_to_commentdelete inferred
list_filesread inferred
get_fileread inferred
delete_filedelete inferred
share_filewrite assumed
revoke_file_sharedelete inferred
list_recent_filesread inferred
address_bookread inferred
upload_filewrite inferred
create_file_uploadwrite inferred
delete_file_uploaddelete inferred
list_videosread inferred
add_videowrite inferred
create_video_uploadwrite inferred
update_videowrite inferred
remove_videodelete inferred
watch_videoread inferred
get_video_transcriptread inferred
edit_videowrite inferred
bulk_create_rowswrite inferred
bulk_update_rowswrite inferred
invite_to_orgwrite assumed
list_capabilitiesread inferred
pull_capabilitywrite assumed
request_connectionwrite inferred
list_connectable_appsread inferred

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-28100 tools/list on https://trydock.ai/api/mcp, published in the official MCP registry as ai.trydock/dock 1.1.0
2026-10-21100 tools/list on https://trydock.ai/api/mcp, published in the official MCP registry as ai.trydock/dock 1.1.0
2026-10-16100 tools/list on https://trydock.ai/api/mcp, published in the official MCP registry as ai.trydock/dock 1.1.0
2026-10-11100 tools/list on https://trydock.ai/api/mcp, published in the official MCP registry as ai.trydock/dock 1.1.0
2026-09-1499 tools/list on https://trydock.ai/api/mcp, published in the official MCP registry as ai.trydock/dock 1.1.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.