LeashIndex Get the report

Index / calendar

DJfindr

com-djfindr-djfindr declares 141 capabilities across 141 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://mcp.djfindr.com/mcp, published in the official MCP registry as com.djfindr/djfindr 1.7.1. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 141 tools

141 of 141 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 47 of 141 tools

47 tools are classified as irreversible or destructive and declare no limit. 39 of them are counted only because the server annotated them destructiveHint. In MCP that annotation marks a tool that may make destructive changes rather than only additive ones; it does not say the change cannot be undone.

high · no-expiry · All 141 tools

141 of 141 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 141 tools

141 of 141 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 23 of 141 tools

23 tools can modify data and declare no limit.

low · uncapped-read · 71 of 141 tools

71 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
search_djsread declared
get_djread declared
get_dj_contentread declared
list_referenceread declared
get_referenceread declared
list_locationsread declared
get_locationread declared
book_djread declared
get_meread declared
get_accountread declared
get_account_billingread declared
list_booking_eventsread declared
get_booking_eventread declared
list_booking_proposalsread declared
get_booking_proposalread declared
get_booking_invitationread declared
list_pending_reviewsread declared
request_bookingwrite inferred
preview_booking_requestread declared
reject_offerdestructive declared
withdraw_bookingdestructive declared
request_extensionwrite inferred
cancel_extensiondestructive declared
review_bookingwrite assumed
claim_invitationwrite assumed
get_booking_overviewread declared
list_booking_clientsread declared
get_booking_clientread declared
list_booking_reviewsread declared
get_review_summaryread declared
get_offer_defaultsread declared
list_document_templatesread declared
get_travel_estimateread declared
accept_requestwrite inferred
decline_requestdestructive declared
edit_offerdestructive declared
send_offersend inferred
set_offer_defaultsdestructive declared
add_documentwrite inferred
edit_documentdestructive declared
remove_documentdestructive declared
convert_documentwrite inferred
accept_extensionwrite assumed
decline_extensiondestructive declared
create_sourced_bookingwrite inferred
list_paymentsread declared
get_paymentread declared
list_received_paymentsread declared
get_received_paymentread declared
get_payout_summaryread declared
get_payout_setupread declared
list_transfersread declared
list_paylinksread declared
get_transferread declared
get_paylinkread declared
create_paylinkwrite inferred
send_paylinksend inferred
cancel_paylinkdestructive declared
list_calendar_blocksread declared
list_calendar_eventsread declared
get_availabilityread declared
get_calendar_daysread declared
get_calendar_feedread declared
export_calendarread declared
get_calendar_blockread declared
create_busy_blockwrite inferred
update_busy_blockdestructive declared
delete_busy_blockdestructive declared
restore_busy_blockwrite assumed
skip_busy_occurrencedestructive declared
create_calendar_feedwrite inferred
rotate_calendar_feeddestructive declared
get_profileread declared
check_handleread declared
check_dj_linkread declared
update_profiledestructive declared
set_service_areasdestructive declared
set_vocabularydestructive declared
set_profile_tagsdestructive declared
set_avatardestructive declared
set_coverdestructive declared
change_handledestructive declared
claim_dj_linkwrite inferred
release_dj_linkdestructive declared
list_mixesread declared
get_mixread declared
list_soundcloud_tracksread declared
list_postsread declared
get_postread declared
list_live_eventsread declared
get_live_eventread declared
list_widget_domainsread declared
create_mixwrite inferred
update_mixdestructive declared
delete_mixdestructive declared
reorder_mixesdestructive declared
import_soundcloudwrite assumed
create_postsend inferred
update_postdestructive declared
delete_postdestructive declared
pin_postsend inferred
restore_postsend inferred
create_live_eventwrite inferred
update_live_eventdestructive declared
delete_live_eventdestructive declared
publish_live_eventsend inferred
unpublish_live_eventdestructive declared
cancel_live_eventdestructive declared
archive_live_eventdestructive declared
preview_live_eventread inferred
add_widget_domainwrite inferred
remove_widget_domaindestructive declared
list_conversationsread declared
get_conversationread declared
list_messagesread declared
start_conversationwrite assumed
send_messagesend inferred
mark_conversation_readread inferred
start_multipart_uploadwrite inferred
complete_multipart_uploadwrite inferred
import_filewrite assumed
abort_multipart_uploaddestructive declared
delete_filedestructive declared
get_fileread declared
list_integrationsread declared
list_integration_calendarsread declared
choose_integration_calendardestructive declared
set_import_busydestructive declared
sync_integrationwrite assumed
disconnect_integrationdestructive declared
get_analyticsread declared
searchread declared
whats_nextread declared
get_checkout_linkread inferred
get_cancel_linkdelete inferred
get_pay_linkread inferred
get_refund_linkread inferred
get_upload_linkread inferred
get_file_view_linkread inferred
get_linkread declared
revoke_linkdestructive declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.