LeashIndex Get the report

Index / storage

A股数据 API (A-Share Data API)

com-ashareapi-ashare-data-api declares 65 capabilities across 65 tools, with 3 critical issues.

99/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://api.ashareapi.com/mcp, published in the official MCP registry as com.ashareapi/ashare-data-api 2026.10.8. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 65 tools

65 of 65 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 4 of 65 tools

4 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 2 of 65 tools

2 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 65 tools

65 of 65 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 65 tools

65 of 65 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 55 of 65 tools

55 tools can modify data and declare no limit.

low · uncapped-read · 6 of 65 tools

6 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
ashare_quotewrite assumed
ashare_quote_batchwrite assumed
ashare_kline_batchwrite assumed
ashare_snapshot_batchwrite assumed
ashare_profile_batchwrite assumed
ashare_chipwrite assumed
ashare_chip_batchwrite assumed
ashare_shareholder_batchwrite assumed
ashare_finance_batchwrite assumed
ashare_technical_batchwrite assumed
ashare_orderbookwrite assumed
ashare_snapshotwrite assumed
ashare_klinewrite assumed
ashare_minutewrite assumed
ashare_kline_fullwrite assumed
ashare_market_klinewrite assumed
ashare_backtestwrite assumed
ashare_backtest_batchwrite assumed
ashare_strategieswrite assumed
ashare_factorswrite assumed
ashare_playbookswrite assumed
ashare_financewrite assumed
ashare_fundpay inferred
ashare_fund_batchpay inferred
ashare_technicalwrite assumed
ashare_shareholderwrite assumed
ashare_eventswrite assumed
ashare_margin_tradewrite assumed
ashare_block_tradedelete inferred
ashare_bigorder_queuedelete inferred
ashare_evidencewrite assumed
ashare_ask_userwrite assumed
ashare_agent_searchread inferred
ashare_flashwrite assumed
ashare_lhb_seatswrite assumed
ashare_bigorder_flowwrite assumed
ashare_bigorderwrite assumed
ashare_bigorder_historyread inferred
ashare_bigorder_splitwrite assumed
ashare_bigorder_rankwrite assumed
ashare_lhbwrite assumed
ashare_profilewrite assumed
ashare_screenwrite assumed
ashare_industry_chainread inferred
ashare_sectorwrite assumed
ashare_sector_valuationwrite assumed
ashare_market_overviewwrite assumed
ashare_changedistwrite assumed
ashare_hotwrite assumed
ashare_newswrite assumed
ashare_noticewrite assumed
ashare_macrowrite assumed
ashare_bondwrite assumed
ashare_etfwrite assumed
ashare_calendarwrite assumed
ashare_ipowrite assumed
ashare_dividendwrite assumed
ashare_dehydratedread inferred
ashare_searchread inferred
ashare_usagewrite assumed
ashare_wiki_searchread inferred
ashare_abnormalwrite assumed
ashare_reviewwrite assumed
ashare_limit_upwrite assumed
ashare_auctionwrite assumed

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1692 tools/list on https://api.ashareapi.com/mcp, published in the official MCP registry as com.ashareapi/ashare-data-api 2026.10.8
2026-10-1189 tools/list on https://api.ashareapi.com/mcp, published in the official MCP registry as com.ashareapi/ashare-data-api 2026.10.8
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.