LeashIndex Get the report

Index / storage

APICK

app-apick-all declares 171 capabilities across 171 tools, with 2 critical issues.

99/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://apick.app/mcp/all, published in the official MCP registry as app.apick/all 4.8.2. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 171 tools

171 of 171 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 3 of 171 tools

3 tools are classified as irreversible and declare no limit.

high · no-expiry · All 171 tools

171 of 171 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 171 tools

171 of 171 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 21 of 171 tools

21 tools can modify data and declare no limit.

low · uncapped-read · 147 of 171 tools

147 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
transfer_1wonwrite inferred
account_realnameread declared
bank_coderead declared
identi_card1read declared
identi_card2read declared
identi_card3read declared
identi_card4read declared
identi_card5read declared
identi_card_image1read declared
identi_card_image2read declared
identi_card_image3read declared
identi_card_image4read declared
identi_card_image5read declared
name_rrn_authread declared
hide_rrnread declared
identity_document_residence_cardread declared
identity_document_passportread declared
identity_document_id_cardread declared
identity_document_driver_licenseread declared
ocrread declared
ocr_identi1read declared
ocr_identi2read declared
ocr_identi3read declared
ocr_identi4read declared
ocr_identi5read declared
biz_detailread declared
venture_biz_inforead declared
land_rt_priceread declared
req_pcccwrite inferred
get_pcccread inferred
get_car_floodingread declared
get_car_scrapread declared
vehicle_model_inforead declared
vehicle_emissionread declared
parcel_trackingread declared
parcel_tracking_autoread declared
check_email_validread declared
check_phone_validread declared
check_spam_numberread declared
holiday_inforead declared
search_jusoread declared
inforead declared
corp_financeread declared
bldrgstread declared
court_auctionread declared
registry_doc_verifyread declared
app_reviewsread declared
geo_standardizeread declared
geo_batch_geocoderead declared
geo_reverseread declared
geo_address_searchread declared
geo_place_searchread declared
geo_admin_coderead declared
geo_compare_addressread declared
geo_measureread declared
geo_geojson_analyzeread declared
geo_address_qualityread declared
geo_address_autocompleteread declared
geo_district_boundaryread declared
geo_neighborhoodread declared
req_cash_receipt_deductionwrite assumed
get_cash_receipt_deductionread inferred
req_tax_return_historyread inferred
get_tax_return_historyread inferred
req_employmentwrite assumed
get_employmentread inferred
req_personal_incomewrite assumed
get_personal_incomeread inferred
req_nps_join_historyread inferred
get_nps_join_historyread inferred
req_nps_deduction_certwrite assumed
get_nps_deduction_certread inferred
req_nps_career_historyread inferred
get_nps_career_historyread inferred
req_driving_licensewrite assumed
get_driving_licenseread inferred
req_health_checkupwrite assumed
get_health_checkupread inferred
req_income_cert_bundlewrite assumed
get_income_cert_bundleread inferred
req_business_cert_bundlewrite assumed
get_business_cert_bundleread inferred
registry_realestate_searchread declared
registry_corporate_searchread declared
registry_realestate_jobs_createwrite inferred
registry_corporate_jobs_createwrite inferred
registry_jobs_statusread declared
registry_jobs_downloadread declared
nslookupread declared
reverse_ipread declared
locationread declared
ip_historyread declared
whoisread declared
url_htmlread declared
url_screenshotread declared
url_similarityread declared
google_searchread declared
google_image_searchread declared
google_news_searchread declared
google_shopping_searchread declared
google_maps_searchread declared
google_rank_checkread declared
google_lens_searchread declared
crawl_youtuberead declared
youtube_searchread declared
youtube_playlistread declared
youtube_channelread declared
youtube_hashtagread declared
youtube_commentsread declared
youtube_metadataread declared
youtube_thumbnailread declared
youtube_subtitle_listread declared
youtube_subtitleread declared
instagram_profileread declared
instagram_postread declared
tiktok_profileread declared
amazon_productread declared
x_profileread declared
x_postread declared
coupang_productread declared
naver_shopping_productread declared
linkedin_profileread declared
linkedin_companyread declared
linkedin_jobread declared
sttread declared
tts_jobs_createwrite inferred
tts_gemini_createwrite inferred
tts_gemini_voicesread declared
tts_openai_createwrite inferred
tts_openai_voicesread declared
tts_optionsread declared
tts_quoteread declared
tts_jobs_statusread declared
tts_jobs_canceldestructive declared
tts_jobs_resultdestructive declared
tts_jobs_subtitlesdestructive declared
voice_changeread declared
face_blurread declared
pdf_to_docxread declared
pdf_to_imageread declared
pdf_mergeread declared
html_to_pdfread declared
docx_to_pdfread declared
json_to_excelread declared
base64_to_imageread declared
set_watermarkread declared
get_watermarkread declared
draw_watermark_pdfread declared
draw_watermark_imageread declared
nsfw_detectionread declared
image_similarityread declared
video_to_mp3read declared
extract_video_thumbnailread declared
word_cloudread declared
face_detectionread declared
llm_modelsread declared
llm_chatread declared
text_summaryread declared
text_polishread declared
image_generatewrite assumed
image_editwrite inferred
image_batch_createwrite inferred
image_batch_statusread declared
image_batch_resultread declared
seedance_jobs_createwrite inferred
seedance_jobs_statusread declared
veo_jobs_createwrite inferred
veo_jobs_statusread declared
kling_jobs_createwrite inferred
kling_jobs_statusread declared
find_toolsread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1698 tools/list on https://apick.app/mcp/all, published in the official MCP registry as app.apick/all 4.6.1
2026-10-1199 tools/list on https://apick.app/mcp/all, published in the official MCP registry as app.apick/all 4.3.3
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.