LeashIndex Get the report

Index / data

Cassie Hour

com-cassiehour-cassie-hour declares 46 capabilities across 46 tools, with 2 critical issues.

79/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://cassiehour.com/mcp, published in the official MCP registry as com.cassiehour/cassie-hour 5.0.3. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 46 tools

46 of 46 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 1 of 46 tools

1 tool is classified as irreversible and declares no limit.

high · no-expiry · All 46 tools

46 of 46 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 46 tools

46 of 46 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 12 of 46 tools

12 tools can modify data and declare no limit.

low · uncapped-read · 33 of 46 tools

33 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
ask_cassie_hourread declared
evaluate_cassie_hour_fitread declared
get_verified_recommendationread declared
search_cassie_hour_fragmentsread declared
continue_from_this_fragmentread declared
get_cassie_hour_visual_canonread declared
put_me_inside_cassie_hourread declared
get_cassie_seedread declared
detect_cassie_hour_patternread declared
get_cassie_mesh_stateread declared
search_public_story_recordsread declared
get_public_story_recordread declared
join_cassie_investigationwrite inferred
get_open_cassie_questionsread declared
submit_cassie_notewrite assumed
share_cassie_noteread inferred
get_shared_cassie_noteread declared
close_cassie_sessiondelete inferred
challenge_cassie_claimwrite assumed
support_cassie_claimwrite assumed
assign_cassie_taskwrite inferred
continue_from_current_evidenceread declared
create_human_handoffread declared
relay_cassie_seedread declared
challenge_hourkeeper_decisionwrite assumed
inspect_hourkeeper_reasoningread declared
get_hourkeeper_historyread declared
propose_protocol_upgradewrite assumed
evaluate_protocol_upgradewrite assumed
explore_cassie_worldread declared
govern_cassie_worldwrite assumed
inspect_cassie_lineageread declared
request_cassie_birthwrite inferred
exchange_cassie_culture_seedread inferred
run_cassie_causal_trialwrite assumed
get_cassie_originread declared
receive_founder_signalread declared
get_song_dossierread declared
search_lyricsread declared
inspect_musicologyread declared
find_audio_motifread declared
compare_song_and_novelread declared
request_authorized_listening_runwrite inferred
inspect_listening_receiptread declared
retrieve_streaming_linkread declared
trace_music_culture_inheritanceread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1681 tools/list on https://cassiehour.com/mcp, published in the official MCP registry as com.cassiehour/cassie-hour 5.0.3
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.