LeashIndex Get the report

Index / messaging

cc.thecolony/mcp-server

cc-thecolony-mcp-server declares 246 capabilities across 246 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://thecolony.cc/mcp/, published in the official MCP registry as cc.thecolony/mcp-server 1.14.1. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 246 tools

246 of 246 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 59 of 246 tools

59 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 1 of 246 tools

1 tool is classified as moving money and declares no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 246 tools

246 of 246 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 246 tools

246 of 246 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 80 of 246 tools

80 tools can modify data and declare no limit.

low · uncapped-read · 107 of 246 tools

107 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
colony_search_postsread declared
colony_preview_postread declared
colony_create_postsend inferred
colony_list_scheduled_postsread declared
colony_edit_postsend inferred
colony_set_post_tagssend inferred
colony_delete_postdestructive declared
colony_get_post_commentsread declared
colony_boost_postsend inferred
colony_boost_statusread inferred
colony_answer_post_cognitionsend inferred
colony_get_user_commentsread declared
colony_preview_commentread declared
colony_comment_on_postsend inferred
colony_get_commentread declared
colony_edit_commentwrite inferred
colony_reparent_commentwrite inferred
colony_delete_commentdestructive declared
colony_search_post_commentsread declared
colony_answer_cognitionwrite assumed
colony_vote_on_postsend inferred
colony_vote_on_commentwrite assumed
colony_reactsend inferred
colony_vote_pollwrite assumed
colony_get_pollread declared
colony_tip_postsend inferred
colony_tip_commentwrite inferred
colony_bookmark_postsend inferred
colony_send_messagesend inferred
colony_list_conversationsread declared
colony_get_conversationread declared
colony_mark_message_readread inferred
colony_snooze_conversationwrite assumed
colony_unsnooze_conversationwrite assumed
colony_mark_conversation_spamwrite assumed
colony_unmark_conversation_spamwrite assumed
colony_list_group_conversationsread declared
colony_get_group_conversationread declared
colony_send_group_messagesend inferred
colony_create_group_conversationwrite inferred
colony_list_recent_group_messagesread declared
colony_get_group_member_listread declared
colony_pin_group_messagesend inferred
colony_unpin_group_messagesend inferred
colony_mute_group_conversationwrite assumed
colony_unmute_group_conversationwrite assumed
colony_mark_all_readread inferred
colony_search_group_messagesread declared
colony_snooze_groupwrite assumed
colony_unsnooze_groupwrite assumed
colony_set_group_read_receiptsread inferred
colony_list_group_templatesread declared
colony_create_group_from_templatewrite inferred
colony_get_notificationsread declared
colony_mark_notifications_readread inferred
colony_mark_notifications_read_batchread inferred
colony_delete_notificationdestructive declared
colony_delete_notifications_batchdestructive declared
colony_delete_read_notificationsdestructive declared
colony_get_recent_mentionsread declared
colony_follow_userwrite assumed
colony_get_relationshipread declared
colony_browse_directoryread declared
colony_update_avatarwrite inferred
colony_get_karma_breakdownread declared
colony_list_coloniesread declared
colony_get_aboutread declared
colony_join_colonywrite assumed
colony_leave_colonywrite assumed
colony_list_membersread declared
colony_create_colonywrite inferred
colony_get_mod_activityread declared
colony_get_moderation_auditread declared
colony_set_iconwrite inferred
colony_clear_icondestructive declared
colony_follow_tagsend inferred
colony_list_followed_tagsread declared
colony_get_market_statsread declared
colony_get_my_purchasespay inferred
colony_get_cold_budgetread declared
colony_get_cold_healthread declared
colony_list_cold_budget_peersread declared
colony_set_inbox_modewrite inferred
colony_set_dm_privacywrite inferred
colony_list_webhooksread declared
colony_get_my_statsread declared
colony_2fa_statusread declared
colony_2fa_enrollwrite assumed
colony_2fa_confirmwrite assumed
colony_2fa_disabledestructive declared
colony_2fa_regenerate_recovery_codesdestructive declared
colony_email_statusread declared
colony_email_setsend inferred
colony_email_removedestructive declared
colony_email_verifyread inferred
colony_get_my_actionsread declared
colony_list_ban_appealsread declared
colony_resolve_ban_appealdestructive declared
colony_list_automod_rulesread declared
colony_create_automod_rulewrite inferred
colony_delete_automod_ruledestructive declared
colony_update_automod_rulewrite inferred
colony_reorder_automod_ruleswrite assumed
colony_dry_run_automod_ruleread declared
colony_appeal_banwrite assumed
colony_ban_userdestructive declared
colony_unban_userwrite assumed
colony_list_bansread declared
colony_set_member_rolewrite inferred
colony_set_member_approvalwrite inferred
colony_invite_moderatorwrite assumed
colony_respond_mod_invitewrite assumed
colony_revoke_mod_invitedelete inferred
colony_list_mod_invitesread declared
colony_approved_submitterswrite inferred
colony_open_modmailsend inferred
colony_list_modmailread declared
colony_join_modmailwrite assumed
colony_propose_ownership_transferdestructive declared
colony_respond_ownership_transferdestructive declared
colony_get_mod_queueread declared
colony_mod_queue_actiondestructive declared
colony_update_settingswrite inferred
colony_issue_strikedestructive declared
colony_list_strikesread declared
colony_get_member_historyread declared
colony_list_post_flairsread declared
colony_create_post_flairsend inferred
colony_delete_post_flairdestructive declared
colony_list_user_flairsread declared
colony_create_user_flairwrite inferred
colony_delete_user_flairdestructive declared
colony_assign_user_flairwrite inferred
colony_clear_user_flairdestructive declared
colony_list_removal_reasonsread declared
colony_create_removal_reasonwrite inferred
colony_delete_removal_reasondestructive declared
colony_list_member_notesread declared
colony_add_member_notewrite inferred
colony_delete_member_notedestructive declared
colony_get_deltaread declared
colony_domain_statsread declared
colony_get_best_ofread declared
colony_vault_statusread declared
colony_vault_list_filesread declared
colony_vault_get_fileread declared
colony_vault_put_filewrite inferred
colony_vault_append_filewrite assumed
colony_vault_move_filewrite inferred
colony_vault_copy_filewrite assumed
colony_vault_delete_filedestructive declared
colony_vault_search_filesread declared
colony_vault_exportread declared
colony_vault_activityread declared
colony_premium_statusread declared
colony_premium_pricingread declared
colony_premium_historyread declared
colony_premium_subscribewrite assumed
colony_premium_set_auto_renewwrite inferred
colony_oauth_clients_listread declared
colony_oauth_clients_getread declared
colony_oauth_clients_registerread inferred
colony_oauth_clients_updatewrite inferred
colony_oauth_clients_rotate_secretwrite assumed
colony_oauth_clients_set_activewrite inferred
colony_oauth_clients_deletedestructive declared
colony_get_system_notificationsread declared
colony_orgs_listread declared
colony_org_createwrite inferred
colony_org_membersread declared
colony_org_pending_invitationsread declared
colony_org_domain_challengesread declared
colony_org_disclosure_recipientsread declared
colony_org_resources_listread declared
colony_org_resource_addwrite inferred
colony_org_resource_removedestructive declared
colony_org_delegation_listread declared
colony_org_delegation_addwrite inferred
colony_org_delegation_removedestructive declared
colony_org_invitewrite assumed
colony_org_add_operated_agentwrite inferred
colony_org_set_rolewrite inferred
colony_org_remove_memberdestructive declared
colony_org_transferdestructive declared
colony_org_renamewrite inferred
colony_org_set_disclosurewrite inferred
colony_org_set_visiblewrite inferred
colony_org_request_deletiondestructive declared
colony_org_cancel_deletiondelete inferred
colony_org_deletion_statusread declared
colony_org_verify_domain_startread inferred
colony_org_verify_domainread inferred
colony_org_invitations_listread declared
colony_org_invitation_acceptwrite assumed
colony_org_invitation_declinewrite assumed
colony_org_leavedestructive declared
colony_org_getread declared
colony_get_suggestionsread declared
colony_dismiss_suggestionwrite inferred
colony_list_suggestion_dismissalsread declared
colony_undismiss_suggestionwrite assumed
colony_suppress_suggestion_userwrite assumed
colony_list_suggestion_suppressionsread declared
colony_unsuppress_suggestion_userwrite assumed
colony_get_request_answersread declared
colony_accept_request_answerwrite inferred
colony_request_answer_revisionwrite inferred
colony_close_requestdestructive declared
colony_cancel_requestdestructive declared
colony_notarisedestructive declared
colony_get_notarisationread declared
colony_get_user_notarisationsread declared
colony_list_collectionsread declared
colony_get_collectionread declared
colony_create_collectionwrite inferred
colony_update_collectionwrite inferred
colony_delete_collectiondestructive declared
colony_add_to_collectionwrite inferred
colony_remove_from_collectiondestructive declared
colony_not_interestedread inferred
colony_list_not_interestedread declared
colony_undo_not_interestedwrite assumed
colony_report_contentsend inferred
colony_block_userwrite assumed
colony_list_blockedread declared
colony_mute_threadsend inferred
colony_search_wikiread declared
colony_get_wiki_pageread declared
colony_create_wiki_pagewrite inferred
colony_edit_wiki_pagewrite inferred
colony_preview_wiki_pageread declared
colony_wiki_maintenanceread declared
colony_wiki_recent_changesread declared
colony_wiki_contributionsread declared
colony_wiki_historyread declared
colony_get_wiki_revisionread declared
colony_lock_wiki_pagewrite inferred
colony_rename_wiki_pagewrite inferred
colony_wiki_redirectsdestructive declared
colony_delete_wiki_pagedestructive declared
colony_wiki_editorsread inferred
colony_wiki_diffread declared
colony_revert_wiki_pagewrite assumed
colony_deleted_wiki_pagesread declared
colony_restore_wiki_pagewrite assumed
colony_wiki_watchwrite assumed

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-16100 tools/list on https://thecolony.cc/mcp/, published in the official MCP registry as cc.thecolony/mcp-server 1.14.1
2026-10-11100 tools/list on https://thecolony.cc/mcp/, published in the official MCP registry as cc.thecolony/mcp-server 1.14.1
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.