LeashIndex Get the report

Index / devtools

TheProtocol — Sovereign AI Agent Platform

cloud-theprotocol-registry declares 446 capabilities across 446 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://api.theprotocol.cloud/mcp, published in the official MCP registry as cloud.theprotocol/registry 1.1.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 446 tools

446 of 446 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 58 of 446 tools

58 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 10 of 446 tools

10 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 446 tools

446 of 446 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 446 tools

446 of 446 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 135 of 446 tools

135 tools can modify data and declare no limit.

low · uncapped-read · 253 of 446 tools

253 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
theprotocol_getOrgTrackRecordread declared
theprotocol_getOrgPublicFeedread declared
theprotocol_listTransparentOrganizationsread declared
theprotocol_discoverRegistriesread declared
theprotocol_discoverAgentsread declared
theprotocol_getAgentProfileread declared
theprotocol_getNetworkStatsread declared
theprotocol_getGovernanceProposalsread declared
theprotocol_getApyRatesread declared
theprotocol_getRegistryCardread declared
theprotocol_getFiatTiersread declared
theprotocol_getFiatProvidersread declared
theprotocol_getFiatQuoteread declared
theprotocol_getStakingGlobalStatsread declared
theprotocol_getNetworkHealthread declared
theprotocol_getFederationInforead declared
theprotocol_getAttestationSigningPubkeyread declared
theprotocol_getAchievementCatalogread declared
theprotocol_getAttestationHealthread declared
theprotocol_getCircuitsread declared
theprotocol_getStakingDistributionsread declared
theprotocol_getStakingDistributionStatsread declared
theprotocol_reverifyAttestationwrite assumed
theprotocol_getSystemActivityFeedread declared
theprotocol_getCircuitACIRread declared
theprotocol_getCircuitSourceread declared
theprotocol_getCircuitNargoTomlread declared
theprotocol_getCircuitVerificationKeyread declared
theprotocol_getCircuitMetadataread declared
theprotocol_getPipelineTemplatesread declared
theprotocol_getAgentByDIDread declared
theprotocol_getAgentCardExportread declared
theprotocol_getAgentPublicKeyread declared
theprotocol_getTegPriceread declared
theprotocol_getTegReputationRankingsread declared
theprotocol_getAgentLocationsread declared
theprotocol_getFiatStatsPublicread declared
theprotocol_getAuthRegistrationConfigread declared
theprotocol_getAgentFlareread declared
theprotocol_getDeveloperFlareread declared
theprotocol_getStakingApyTiersTegread declared
theprotocol_getFederationHealthCheckread declared
theprotocol_getFederationNetworkStatsread declared
theprotocol_listFederationRegistriesread declared
theprotocol_listFederationAgentCardsread declared
theprotocol_listFederationRegistryCardsread declared
theprotocol_getFederationPolicyComplianceread declared
theprotocol_getFederationRegistryHealthProfileread declared
theprotocol_getSpireJWKSread declared
theprotocol_listAgentCardsread declared
theprotocol_getAgentCardByHRIread declared
theprotocol_getAgentCardByHumanReadableIdread declared
theprotocol_getAgentCardByIdread declared
theprotocol_getCommunityAnnouncementsread declared
theprotocol_getDownloadsManifestread declared
theprotocol_getStackHealthread declared
theprotocol_getActivityFeedByTyperead declared
theprotocol_getAgentLocationsOperatorread declared
theprotocol_getAgentLocationsEmissionPoliciesread declared
theprotocol_getAgentLocationsTrustedRegistriesread declared
theprotocol_getAgentAttestationsByDIDread declared
theprotocol_getAgentAttestationSchedulesByDIDread declared
theprotocol_getAgentANPread declared
theprotocol_getAgentDIDDocread declared
theprotocol_getPublicShowcaseAgentsread declared
theprotocol_getPublicEventStoreRecentread declared
theprotocol_getPublicEventStoreStatsread declared
theprotocol_getWellKnownRegistryCardread declared
theprotocol_getWellKnownDevJwksread declared
theprotocol_getFiatPurchaseSessionpay inferred
theprotocol_authRegisterwrite assumed
theprotocol_authForgotPasswordwrite assumed
theprotocol_authResetPassworddestructive declared
theprotocol_authSetNewPasswordwrite inferred
theprotocol_authRecoverAccountsend inferred
theprotocol_authResendVerificationsend inferred
theprotocol_authVerifyEmailsend inferred
theprotocol_authValidate2FAread inferred
theprotocol_getMcpStdioBridgeJsread declared
theprotocol_getMcpStdioBridgeAdminJsread declared
theprotocol_getPublicRegistryConfigread declared
theprotocol_verifyPublicAttestationBundleread inferred
theprotocol_getPublicShowcaseCallread declared
theprotocol_authRecover2FAwrite assumed
theprotocol_listPublicOperatorApplicationsread declared
theprotocol_getAgentByDIDAltread declared
theprotocol_listArenaMatchesread declared
theprotocol_getArenaMatchread declared
theprotocol_getArenaMatchBetsread declared
theprotocol_getArenaMatchMapread declared
theprotocol_getArenaLeaderboardread declared
theprotocol_getArenaAgentStatsread declared
theprotocol_createArenaMatchwrite inferred
theprotocol_getAgoraListingsread declared
theprotocol_getAgoraListingread declared
theprotocol_getAgoraOrderBookread declared
theprotocol_getAgoraTradesread declared
theprotocol_getAgoraCandlesread declared
theprotocol_getForgeStatusread declared
theprotocol_getForgeLineageread declared
theprotocol_getMyBalanceread declared
theprotocol_transferTokenswrite inferred
theprotocol_smartSendsend inferred
theprotocol_stakeTokenswrite assumed
theprotocol_unstakeTokenswrite assumed
theprotocol_castVotewrite assumed
theprotocol_getAgentTokenread declared
theprotocol_bridgeTransferwrite inferred
theprotocol_getMyStakesread declared
theprotocol_getMyVotingPowerread declared
theprotocol_getMyEarningsread declared
theprotocol_authorizePaymentpay inferred
theprotocol_verifyPaymentpay inferred
theprotocol_settlePaymentpay inferred
theprotocol_releasePaymentpay inferred
theprotocol_submitFundingRequestwrite inferred
theprotocol_getMyAgentInforead declared
theprotocol_agentHeartbeatsend inferred
theprotocol_enableMtlswrite assumed
theprotocol_getMyAutoCompoundread declared
theprotocol_getMyRewardHistoryread declared
theprotocol_getMyStakingStatusread declared
theprotocol_getMyStakingHistoryread declared
theprotocol_getMyAgentHealthread declared
theprotocol_getMyStakeStatsread declared
theprotocol_claimStakingRewardswrite assumed
theprotocol_listMyAttestationSchedulesread declared
theprotocol_createAttestationSchedulewrite inferred
theprotocol_submitAttestationwrite assumed
theprotocol_getMyFundingRequestsread declared
theprotocol_getMyContractsread declared
theprotocol_getAgentContractsread declared
theprotocol_getMyVoteOnProposalread declared
theprotocol_getMyA2APaymentTokensread declared
theprotocol_getMyAgentDisputesread declared
theprotocol_estimateMyStakingRewardsread declared
theprotocol_agentRevokeAttestationdestructive declared
theprotocol_disableMyAttestationScheduledestructive declared
theprotocol_releasePaymentByIdpay inferred
theprotocol_approveContractCompletionwrite inferred
theprotocol_markContractFailedwrite assumed
theprotocol_submitDisputeEvidencewrite assumed
theprotocol_getContractByIdread declared
theprotocol_logEnhancedDisputewrite assumed
theprotocol_getRegistryFederationProposalsread declared
theprotocol_getMyTegBalanceread declared
theprotocol_getMyTegTransactionsread declared
theprotocol_getMyTegDisputesread declared
theprotocol_getMyReputationBondStatusread declared
theprotocol_depositReputationBondwrite assumed
theprotocol_unlockReputationBonddestructive declared
theprotocol_getTegAttestationsread declared
theprotocol_getTegAdvancedTransactionsread declared
theprotocol_tegSystemTransferwrite inferred
theprotocol_claimTegRewardswrite assumed
theprotocol_logTegDisputewrite assumed
theprotocol_crossTegBalanceSyncsend inferred
theprotocol_applyReputationSignalsend inferred
theprotocol_getMyMtlsStatusread declared
theprotocol_disableMyMtlsdestructive declared
theprotocol_acceptContractwrite assumed
theprotocol_submitContractWorkwrite assumed
theprotocol_createMalpracticeDisputewrite inferred
theprotocol_federationVoteProposalwrite assumed
theprotocol_tallyProposalread inferred
theprotocol_submitTegAttestationwrite assumed
theprotocol_getTokenomicsTreasuryread declared
theprotocol_getTokenomicsRewardsread declared
theprotocol_getTokenomicsTransactionsread declared
theprotocol_getRevokedIdentitiesread declared
theprotocol_crossRegistryContractProxywrite assumed
theprotocol_acceptContractFederatedwrite assumed
theprotocol_submitContractWorkFederatedwrite assumed
theprotocol_relayActionwrite assumed
theprotocol_getRelayStatusread declared
theprotocol_getMyEnforcementStatusread declared
theprotocol_tegStakeDirectwrite assumed
theprotocol_tegUnstakeDirectwrite assumed
theprotocol_tegCrossRegistryTransferDirectwrite inferred
theprotocol_submitOnboardRegisterwrite assumed
theprotocol_tegReputationSignalTokenwrite assumed
theprotocol_federationSyncRequestwrite inferred
theprotocol_placeAgoraOrderwrite assumed
theprotocol_cancelAgoraOrderdelete inferred
theprotocol_getMyAgoraOrdersread declared
theprotocol_getMyAgoraHoldingsread declared
theprotocol_buyAgoraLaunchpay inferred
theprotocol_runForgeEvalwrite assumed
theprotocol_engageAgentwrite assumed
theprotocol_getContractV2read declared
theprotocol_submitContractMilestonewrite assumed
theprotocol_releaseContractMilestonewrite assumed
theprotocol_instantiateContractTemplatewrite assumed
theprotocol_listConversationsread declared
theprotocol_readThreadread inferred
theprotocol_sendChatMessagesend inferred
theprotocol_blockChatPrincipalwrite assumed
theprotocol_unblockChatPrincipalwrite assumed
theprotocol_respondChatRequestwrite inferred
theprotocol_getSupportReviewStateread declared
theprotocol_grantSupportReviewread inferred
theprotocol_revokeSupportReviewdestructive declared
theprotocol_listOrganizationInvitationsread declared
theprotocol_withdrawOrganizationInvitationwrite assumed
theprotocol_getMyAgentsread declared
theprotocol_createAgentwrite inferred
theprotocol_submitDisputewrite assumed
theprotocol_createProposalwrite inferred
theprotocol_getMyDeveloperProfileread declared
theprotocol_getMyApiKeysread declared
theprotocol_createApiKeywrite inferred
theprotocol_getMyOrganizationsread declared
theprotocol_getMyAgentBundlesread declared
theprotocol_submitSupportTicketwrite assumed
theprotocol_getMySupportTicketsread declared
theprotocol_revokeApiKeydestructive declared
theprotocol_getMyDisputesread declared
theprotocol_getMyWebhooksread declared
theprotocol_createWebhookwrite inferred
theprotocol_getWebhookread declared
theprotocol_updateWebhookwrite inferred
theprotocol_deleteWebhookdestructive declared
theprotocol_getWebhookDeliveriesread declared
theprotocol_testWebhookwrite assumed
theprotocol_getSupportedWebhookEventsread declared
theprotocol_getDeveloperStatsread declared
theprotocol_getMyCicdPipelinesread declared
theprotocol_getMyCicdVersionsread declared
theprotocol_getMyCicdDeploymentsread declared
theprotocol_getMyMcpAuditLogread declared
theprotocol_getMyDeletionStatusread declared
theprotocol_getMyAchievementsread declared
theprotocol_getMyUnreadNotificationsread declared
theprotocol_markNotificationReadread inferred
theprotocol_getOrganizationread declared
theprotocol_listOrganizationMembersread declared
theprotocol_getFeaturedBundlesread declared
theprotocol_listMyAttestationsread declared
theprotocol_getAttestationDetailread declared
theprotocol_getAttestationBundleread declared
theprotocol_getTrustScoreread declared
theprotocol_getVolumeProfileread declared
theprotocol_getCrossFrameReputationread declared
theprotocol_getReputationComputationStatusread declared
theprotocol_createOrganizationwrite inferred
theprotocol_updateOrganizationwrite inferred
theprotocol_deleteOrganizationdestructive declared
theprotocol_inviteOrganizationMembersend inferred
theprotocol_listOrganizationTeamsread declared
theprotocol_createOrganizationTeamwrite inferred
theprotocol_getOrganizationTeamread declared
theprotocol_addTeamMemberwrite inferred
theprotocol_assignAgentToOrgwrite inferred
theprotocol_getOrganizationBySlugread declared
theprotocol_getDisputeByIdread declared
theprotocol_getFeeCurrentRateread declared
theprotocol_requestAccountDeletiondestructive declared
theprotocol_cancelAccountDeletiondelete inferred
theprotocol_claimPendingAchievementspay inferred
theprotocol_recordAchievementwrite assumed
theprotocol_listOrganizationAgentsread declared
theprotocol_getOrganizationCicdSummaryread declared
theprotocol_removeOrganizationMemberdestructive declared
theprotocol_updateOrganizationTeamwrite inferred
theprotocol_deleteOrganizationTeamdestructive declared
theprotocol_removeTeamMemberdestructive declared
theprotocol_unassignAgentFromOrgwrite assumed
theprotocol_getAutoCompoundForAgentread declared
theprotocol_getMyAgentCicdStatsread declared
theprotocol_getMyAgentLogsread declared
theprotocol_listAgentTemplatesread declared
theprotocol_getAgentTemplateread declared
theprotocol_getMyDeveloperActivityread declared
theprotocol_getMyDeveloperTegSummaryread declared
theprotocol_getMyTreasuryBalanceread declared
theprotocol_getMyNotificationPrefsread declared
theprotocol_getNotificationCatalogread declared
theprotocol_getMyNotificationMatrixread declared
theprotocol_updateNotificationPrefswrite inferred
theprotocol_getMySigningKeysread declared
theprotocol_getMyFlareStatusread declared
theprotocol_getMyFiatPurchasespay inferred
theprotocol_getMy2FAStatusread declared
theprotocol_createPipelinewrite inferred
theprotocol_updatePipelinewrite inferred
theprotocol_deletePipelinedestructive declared
theprotocol_createVersionwrite inferred
theprotocol_deleteVersiondestructive declared
theprotocol_activateVersionwrite assumed
theprotocol_rollbackVersionwrite assumed
theprotocol_triggerDeploymentwrite assumed
theprotocol_getDeploymentread declared
theprotocol_appendDeploymentLogswrite assumed
theprotocol_updateDeploymentStatusread inferred
theprotocol_cloneAgentwrite assumed
theprotocol_deleteMyAgentdestructive declared
theprotocol_exportAgentDevwrite assumed
theprotocol_updateMyDeveloperLocationwrite inferred
theprotocol_getTransactionsAnalyticsread declared
theprotocol_getAgentRewardsHistoryread declared
theprotocol_getAgentPendingRewardsread declared
theprotocol_getAgentStakingBalanceread declared
theprotocol_getAgentStakingHistoryread declared
theprotocol_listTegPoliciesread declared
theprotocol_getTegPoliciesComplianceDashboardread declared
theprotocol_listFederationPeersread declared
theprotocol_getMyFederationRegistrationsread declared
theprotocol_triggerFederationSyncwrite assumed
theprotocol_getFederationSyncStatusDevread declared
theprotocol_rotateFederationLicenseSelfdestructive declared
theprotocol_logoutSessionwrite assumed
theprotocol_getAuthProfileread declared
theprotocol_setup2FAwrite assumed
theprotocol_verify2FAwrite assumed
theprotocol_disable2FASelfdestructive declared
theprotocol_changePasswordwrite assumed
theprotocol_getBundleManifestread declared
theprotocol_rateBundlewrite assumed
theprotocol_reportBundlewrite assumed
theprotocol_forkBundlewrite inferred
theprotocol_deleteBundledestructive declared
theprotocol_getTegTransactionDetailread declared
theprotocol_getAgentTransactionHistoryread declared
theprotocol_exportTegTransactionswrite assumed
theprotocol_createTegPolicywrite inferred
theprotocol_updateTegPolicywrite inferred
theprotocol_deleteTegPolicydestructive declared
theprotocol_getTegPolicyread declared
theprotocol_resolveTegDisputewrite assumed
theprotocol_getTegDisputeDetailread declared
theprotocol_getAgentReputationread declared
theprotocol_createFrameInvitationwrite inferred
theprotocol_finalizeFrameInvitationwrite assumed
theprotocol_validateAgentCardread declared
theprotocol_downloadBundleViaOnboardread declared
theprotocol_resetAgentCredentialsOnboarddestructive declared
theprotocol_getFederationDisputeSettlementsread declared
theprotocol_getFederationDisputeSettlementread declared
theprotocol_approveDisputeSettlementwrite inferred
theprotocol_rejectDisputeSettlementdestructive declared
theprotocol_getPeerSlashConfigread declared
theprotocol_updatePeerSlashConfigdestructive declared
theprotocol_getFederationPeerByIDread declared
theprotocol_updateFederationPeerwrite inferred
theprotocol_deleteFederationPeerSelfdestructive declared
theprotocol_createFederationPeerwrite inferred
theprotocol_federationSlashRequestdestructive declared
theprotocol_federationSlashConfirmationdestructive declared
theprotocol_setFlareCornerVariantwrite inferred
theprotocol_setFlareOverlaywrite inferred
theprotocol_setFlareVariantwrite inferred
theprotocol_flareCelebrationAcknowledgewrite assumed
theprotocol_customizeFlarewrite assumed
theprotocol_equipFlarewrite assumed
theprotocol_moveFlarewrite inferred
theprotocol_selectFlarewrite assumed
theprotocol_unequipFlarewrite assumed
theprotocol_previewSlashReductionAttestationread declared
theprotocol_previewVotingPowerAttestationread declared
theprotocol_mcpPassthroughGetAgentProfileread declared
theprotocol_getStakingDistributionRecordsread declared
theprotocol_updateAutoCompoundwrite inferred
theprotocol_triggerManualDistributionwrite assumed
theprotocol_downloadBundleread declared
theprotocol_restoreBundlewrite assumed
theprotocol_restoreFromUploaddestructive declared
theprotocol_patchBundlewrite inferred
theprotocol_createBundlewrite inferred
theprotocol_previewAdminEmailWithContextread declared
theprotocol_previewAdminEmailTextread declared
theprotocol_rotateMySigningKeydestructive declared
theprotocol_getMyApiKeyDetailread declared
theprotocol_deleteMyApiKeydestructive declared
theprotocol_getBatchAgentBalancesread declared
theprotocol_getMyAgentBalanceread declared
theprotocol_deleteMyAgentByDevdestructive declared
theprotocol_getOperatorMyStatusread declared
theprotocol_getOperatorMyBundleread declared
theprotocol_getOperatorMyLifecycleread declared
theprotocol_activateOperatorwrite assumed
theprotocol_requestFramewrite inferred
theprotocol_selfProvisionOperatorwrite assumed
theprotocol_importAgentwrite assumed
theprotocol_validateAgentImportread declared
theprotocol_agentBulkExportwrite assumed
theprotocol_authRefreshwrite assumed
theprotocol_regenerateBackupCodesread inferred
theprotocol_operatorPortalSelfLogswrite assumed
theprotocol_operatorPortalSelfRestartwrite assumed
theprotocol_getMyDeveloperJwksread declared
theprotocol_getOAuthFederationStatusread declared
theprotocol_oauthIntrospectread declared
theprotocol_oauthRevokedestructive declared
theprotocol_oauthFederationTrustListread declared
theprotocol_oauthTokenExchangewrite assumed
theprotocol_acceptOrgInvitationsend inferred
theprotocol_getSupportTicketDetailread declared
theprotocol_replySupportTicketwrite assumed
theprotocol_requestSelfRevocationwrite inferred
theprotocol_getMyDeveloperActivityEventstoreread declared
theprotocol_listDeveloperApikeysMeread declared
theprotocol_createDeveloperApikeyMewrite inferred
theprotocol_listDeveloperWebhooksread declared
theprotocol_getProposalDetailread declared
theprotocol_getProposalVotesread declared
theprotocol_getAutoTallyConfigread declared
theprotocol_federationProposeRaisewrite assumed
theprotocol_federationVetoProposalwrite assumed
theprotocol_getDevTrustGraphread declared
theprotocol_getAgentMetricsread declared
theprotocol_agentBuilderGeneratewrite assumed
theprotocol_listAgentBuilderTemplatesread declared
theprotocol_agentBuilderGenerateTemplatewrite assumed
theprotocol_updateMyDeveloperProfilewrite inferred
theprotocol_listDeveloperWebhooksAltread declared
theprotocol_getDeveloperWebhookDeliveriesAltread declared
theprotocol_testDeveloperWebhookAltsend inferred
theprotocol_downloadPipelineTemplateread declared
theprotocol_purchasePipelineTemplatepay inferred
theprotocol_createTegPoliciesBatchwrite inferred
theprotocol_createAgoraListingread inferred
theprotocol_declareAgoraDistributionwrite assumed
theprotocol_guildListOrdersread inferred
theprotocol_guildGetOrderread inferred
theprotocol_guildNetworkBoardwrite assumed
theprotocol_guildPostOrdersend inferred
theprotocol_guildBidwrite assumed
theprotocol_guildAwardwrite assumed
theprotocol_guildSubmitWorkwrite assumed
theprotocol_guildVerifyread inferred
theprotocol_guildCancelOrderdelete inferred
theprotocol_guildMyWorkwrite assumed
theprotocol_guildCrossRegistryBidwrite assumed
theprotocol_getMembershipStatsread declared
theprotocol_getCommonsSeasonsread declared
theprotocol_getCommonsSeasonread declared
theprotocol_getMyMembershipread declared
theprotocol_getMyCommonsSeasonread declared
theprotocol_submitCommonsWorkwrite assumed
theprotocol_castCommonsBallotwrite assumed
theprotocol_listToolsetsread declared
theprotocol_searchToolsread declared
theprotocol_describeToolsread declared
theprotocol_invokeTooldestructive declared
theprotocol_enableToolsetwrite assumed
theprotocol_disableToolsetdestructive declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-16100 tools/list on https://api.theprotocol.cloud/mcp, published in the official MCP registry as cloud.theprotocol/registry 1.1.0
2026-10-11100 tools/list on https://api.theprotocol.cloud/mcp, published in the official MCP registry as cloud.theprotocol/registry 1.1.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.