LeashIndex Get the report

Index / storage

Craft Quantities: construction material calculators

com-craftquantities-engine declares 38 capabilities across 38 tools, with 1 critical issue.

51/100 exposureElevated

Manifest recorded 2026-10-21 from tools/list on https://api.craftquantities.com/mcp, published in the official MCP registry as com.craftquantities/engine 1.4.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 38 tools

38 of 38 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 38 tools

38 of 38 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 38 tools

38 of 38 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 38 tools

38 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
searchread declared
fetchread declared
get_calculatorread declared
calculateread declared
convert_unitsread declared
get_sourcesread declared
open_in_site_linkread declared
get_takeoffread declared
run_takeoffread declared
get_exampleread declared
run_exampleread declared
create_project_file_from_calculationsread declared
create_project_file_from_takeoffsread declared
create_project_file_from_houseread declared
create_project_file_from_planread declared
create_project_file_from_drawingread declared
check_quoteread declared
estimate_houseread declared
get_plannerread declared
plan_roomread declared
plan_projectread declared
create_drawingread declared
import_quoteread declared
diagnose_symptomread declared
solve_backwardsread declared
market_documentsread declared
translate_termread declared
create_supplier_quote_requestread declared
get_benchmarkread declared
measure_sketchread declared
export_drawingread declared
layout_reinforcementread declared
calculate_batchread declared
update_projectread declared
classify_itemsread declared
resolve_idread declared
plan_programmeread declared
optimise_cutsread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1641 tools/list on https://api.craftquantities.com/mcp, published in the official MCP registry as com.craftquantities/engine 1.3.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.