LeashIndex Get the report

Index / devtools

Uwear

ai-uwear-uwear declares 93 capabilities across 93 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://api.uwear.ai/mcp, published in the official MCP registry as ai.uwear/uwear 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 93 tools

93 of 93 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 21 of 93 tools

21 tools are classified as irreversible or destructive and declare no limit. 19 of them are counted only because the server annotated them destructiveHint. In MCP that annotation marks a tool that may make destructive changes rather than only additive ones; it does not say the change cannot be undone.

high · no-expiry · All 93 tools

93 of 93 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 93 tools

93 of 93 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 28 of 93 tools

28 tools can modify data and declare no limit.

low · uncapped-read · 44 of 93 tools

44 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
request_user_contextwrite inferred
read_shoot_boardread declared
search_uwear_libraryread declared
modify_shoot_boarddestructive declared
show_in_shoot_boardread inferred
add_chat_photos_to_boardwrite inferred
set_garment_sidewrite inferred
save_art_directionwrite inferred
plan_shoot_imagewrite inferred
plan_shoot_editwrite inferred
plan_shoot_camera_changeread inferred
plan_shoot_upscalewrite assumed
plan_shoot_background_removalwrite assumed
plan_shoot_videowrite assumed
remove_shoot_imagedelete inferred
remove_shoot_stepdelete inferred
get_automationread declared
save_automationwrite assumed
update_automationdestructive declared
propose_briefread inferred
update_briefwrite inferred
get_briefread inferred
confirm_briefdestructive declared
list_briefsread declared
list_automationsread declared
mcp_brief_runsread declared
get_generation_statusread declared
get_generation_resultsread declared
list_garmentsread declared
upload_garment_from_public_urlwrite inferred
list_avatarsread declared
upload_avatar_from_chat_filewrite inferred
list_outfitsread declared
list_locationsread declared
create_locationwrite inferred
create_tagwrite inferred
queue_generation_result_qadestructive declared
read_generation_result_qaread declared
set_generation_result_favoritedestructive declared
propose_montagewrite assumed
update_montage_proposalwrite inferred
get_user_creditsread declared
list_tagsread declared
save_reference_file_from_chat_filewrite assumed
list_art_directionsread declared
get_art_directionread declared
list_templatesread declared
mcp_get_contextread declared
mcp_replace_contextdestructive declared
mcp_add_contextwrite inferred
mcp_clear_contextdestructive declared
mcp_list_filesread declared
mcp_save_retouchwrite inferred
mcp_export_montagedestructive declared
mcp_generate_clipdestructive declared
mcp_intake_filesread declared
mcp_commit_intakewrite inferred
mcp_reclassify_board_itemdestructive declared
mcp_add_garment_viewdestructive declared
mcp_upload_intake_photowrite inferred
mcp_edit_briefwrite inferred
mcp_recipe_historyread declared
mcp_brief_listread declared
mcp_recipe_listread declared
mcp_recipe_openwrite assumed
mcp_recipe_preflightread declared
mcp_recipe_save_draftdestructive declared
mcp_recipe_copywrite assumed
mcp_workflow_assetsread declared
mcp_workflow_galleryread declared
mcp_workflow_tagsread declared
mcp_workflow_garment_categoriesread declared
mcp_workflow_camerasread declared
mcp_workflow_contractread declared
mcp_read_generation_resultread declared
mcp_read_generationread declared
mcp_review_generation_resultsdestructive declared
mcp_extract_video_framewrite assumed
mcp_set_generation_result_tagsdestructive declared
mcp_update_tagdestructive declared
mcp_delete_generation_resultsdestructive declared
mcp_list_model_catalogread declared
uwear_settings_readread declared
uwear_settings_updatedestructive declared
read_video_guideread declared
list_montagesread declared
read_montageread declared
create_montagewrite inferred
edit_montagedestructive declared
quote_montageread declared
generate_montage_clipsdestructive declared
get_montage_runread declared
export_montagewrite assumed

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-28100 tools/list on https://api.uwear.ai/mcp, published in the official MCP registry as ai.uwear/uwear 1.0.0
2026-10-1699 tools/list on https://api.uwear.ai/mcp, published in the official MCP registry as ai.uwear/uwear 1.0.0
2026-10-1199 tools/list on https://api.uwear.ai/mcp, published in the official MCP registry as ai.uwear/uwear 1.0.0
2026-09-1499 tools/list on https://api.uwear.ai/mcp, published in the official MCP registry as ai.uwear/uwear 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.