LeashIndex Get the report

Index / data

ZeroWidth Caliper

ai-zerowidth-caliper declares 45 capabilities across 45 tools, with 2 critical issues.

96/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://api.zerowidth.ai/mcp/x/caliper, published in the official MCP registry as ai.zerowidth/caliper 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 45 tools

45 of 45 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 12 of 45 tools

12 tools are classified as irreversible and declare no limit.

high · no-expiry · All 45 tools

45 of 45 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 45 tools

45 of 45 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 10 of 45 tools

10 tools can modify data and declare no limit.

low · uncapped-read · 23 of 45 tools

23 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
search_docsread declared
get_docread declared
list_docsread declared
caliper_datasets_getread declared
caliper_datasets_updatedestructive declared
caliper_datasets_deletedestructive declared
caliper_datasets_update_itemdestructive declared
caliper_datasets_remove_itemdestructive declared
caliper_datasets_generatewrite inferred
caliper_datasets_generate_itemswrite assumed
caliper_rubrics_listread declared
caliper_rubrics_getread declared
caliper_rubrics_updatedestructive declared
caliper_rubrics_deletedestructive declared
caliper_evals_getread declared
caliper_evals_runs_item_executionread declared
caliper_evals_updatedestructive declared
caliper_evals_deletedestructive declared
caliper_evals_runs_canceldestructive declared
caliper_sources_listread declared
caliper_sources_over_timeread declared
caliper_traces_listread declared
caliper_traces_getread declared
caliper_source_feeds_listread declared
caliper_sources_to_datasetwrite assumed
caliper_source_feeds_stopdestructive declared
caliper_starters_listread declared
caliper_starters_installwrite inferred
caliper_datasets_listread declared
caliper_flow_performanceread declared
caliper_evals_runs_listread declared
caliper_evals_runs_getread declared
caliper_evals_listread declared
caliper_evals_runwrite assumed
caliper_datasets_createwrite inferred
caliper_datasets_add_itemswrite inferred
caliper_rubrics_createwrite inferred
caliper_evals_createwrite inferred
comments_listread declared
comments_createwrite inferred
comments_resolvedestructive declared
search_workspaceread declared
entity_tags_getread declared
entity_tags_browseread declared
entity_tags_setdestructive declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1696 tools/list on https://api.zerowidth.ai/mcp/x/caliper, published in the official MCP registry as ai.zerowidth/caliper 1.0.0
2026-10-1196 tools/list on https://api.zerowidth.ai/mcp/x/caliper, published in the official MCP registry as ai.zerowidth/caliper 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.