Knox Anchor
com-bonissystems-knox-anchor declares 9 capabilities across 9 tools, with 1 critical issue.
Issues
9 of 9 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.
9 of 9 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.
9 of 9 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.
4 tools can modify data and declare no limit.
5 tools can read data and declare no limit.
Declared capabilities
| Tool | Read as | Basis |
|---|---|---|
get_descriptor | read |
inferred |
get_chain_health | read |
inferred |
list_event_types | read |
inferred |
verify_anchor | read |
inferred |
anchor_event | write |
assumed |
anchor_mcp_tool_call | write |
assumed |
anchor_file_hash | write |
assumed |
verify_agent_trip | read |
inferred |
return_agent_trip | write |
assumed |
Record history
| Recorded | Exposure | Source |
|---|---|---|
| 2026-10-11 | 23 | tools/list on https://bonissystems.com/api/knox/mcp, published in the official MCP registry as com.bonissystems/knox-anchor 1.0.1 |
tools/list response and it will be re-scored and dated.
Corrections are published alongside the original, not in place of it.