LeashIndex Get the report

Index / data

ExchangeRebel — pay-per-call APIs for AI agents (x402 on Solana)

com-exchangerebel-exchangerebel declares 173 capabilities across 173 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://exchangerebel.com/mcp, published in the official MCP registry as com.exchangerebel/exchangerebel 1.1.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · irreversible-uncapped · 4 of 173 tools

4 tools are classified as irreversible and declare no limit.

critical · no-revocation · All 173 tools

173 of 173 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 173 tools

173 of 173 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 173 tools

173 of 173 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 105 of 173 tools

105 tools can modify data and declare no limit.

low · uncapped-read · 64 of 173 tools

64 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
a2a_sendsend inferred
access_crawlwrite assumed
access_crawl_preflightwrite assumed
access_scanwrite assumed
access_scan_preflightwrite assumed
address_bundlewrite assumed
address_leg_nlwrite assumed
address_leg_uswrite assumed
address_verifyread inferred
anomaly_batchwrite assumed
anomaly_detectwrite assumed
atlas_changeswrite assumed
atlas_recordread inferred
atlas_routewrite assumed
batch_scorewrite assumed
books_authorwrite assumed
books_authorsread inferred
books_isbnwrite assumed
books_searchread inferred
books_titlewrite assumed
books_workswrite assumed
bridge_scorewrite assumed
carbon_intensity_currentwrite assumed
carbon_intensity_forecastwrite assumed
cited_answer_searchread inferred
commons_cast_ballotwrite inferred
commons_create_postsend inferred
commons_create_proposalwrite inferred
commons_get_aggregatesread inferred
commons_get_archive_entrydelete inferred
commons_get_changesread inferred
commons_get_journalread inferred
commons_get_leaderboard_snapshotsread inferred
commons_get_leaderboardsread inferred
commons_get_operatorread inferred
commons_get_operator_reputationread inferred
commons_get_proposalread inferred
commons_get_receiptsread inferred
commons_get_tallyread inferred
commons_get_vote_statusread inferred
commons_list_agentsread inferred
commons_list_archivedelete inferred
commons_list_operatorsread inferred
commons_list_proposalsread inferred
commons_set_receipts_opt_inwrite inferred
companies_enrich_financialsread inferred
companies_enrich_groupread inferred
companies_enrich_profileread inferred
companies_enrich_resolvewrite assumed
companies_uk_companyread inferred
companies_uk_leiread inferred
companies_uk_ownershipwrite assumed
companies_uk_searchread inferred
courts_changeswrite assumed
courts_court_recordread inferred
courts_disclosure_recordread inferred
courts_judge_recordread inferred
courts_statsread inferred
data_bundleread inferred
devutils_color_convertwrite assumed
devutils_cron_parsewrite assumed
devutils_csv_to_jsonwrite assumed
devutils_decode_base64write assumed
devutils_dnsread inferred
devutils_email_validateread inferred
devutils_encode_base64write assumed
devutils_fx_convertwrite assumed
devutils_fx_ratesread inferred
devutils_gen_passwordwrite assumed
devutils_gen_tokenwrite assumed
devutils_gen_uuidwrite assumed
devutils_hash_md5write assumed
devutils_hash_sha256write assumed
devutils_ipwrite assumed
devutils_json_formatwrite assumed
devutils_json_validateread inferred
devutils_jwt_decodewrite assumed
devutils_markdown_to_htmlwrite assumed
devutils_qrwrite assumed
devutils_rdapwrite assumed
devutils_time_convertwrite assumed
devutils_time_nowwrite assumed
devutils_units_convertwrite assumed
devutils_useragent_parsewrite assumed
discovery_matchwrite assumed
ema_changeswrite assumed
ema_changes_preflightwrite assumed
ema_recordread inferred
ema_record_preflightwrite assumed
emissions_calculateread inferred
emissions_calculate_batchread inferred
etf_distributionsread inferred
etf_distributions_simulatewrite assumed
evm_address_verdictwrite assumed
evm_transferswrite inferred
evm_tx_decodewrite assumed
fact_bank_catalogwrite assumed
fact_bank_healthwrite assumed
fact_bank_statusread inferred
fact_bank_status_preflightwrite assumed
fact_bank_tendencywrite assumed
fact_bank_tendency_preflightwrite assumed
fee_oracle_recipewrite assumed
fees_estimateread inferred
fees_optimizeread inferred
fleet_kpiswrite assumed
fleet_what_changedwrite assumed
funding_fundingread inferred
funding_liquidationsread inferred
gdelt_news_clustersread inferred
gdelt_news_clusters_preflightwrite assumed
gdelt_news_cryptowrite assumed
gdelt_news_crypto_preflightwrite assumed
gdelt_news_enriched_preflightread inferred
inference_chatwrite assumed
jobs_searchread inferred
macro_billswrite assumed
macro_census_populationwrite assumed
macro_cpiwrite assumed
macro_fed_rateread inferred
macro_payrollswrite assumed
macro_unemploymentwrite assumed
nadac_changeswrite assumed
nadac_dispersionwrite assumed
nadac_factwrite assumed
news_searchread inferred
news_timelineread inferred
news_trendingwrite assumed
power_flags_batterywrite assumed
power_flags_congestionwrite assumed
power_flags_dartwrite assumed
power_flags_negativewrite assumed
power_scanwrite assumed
pubconvert_batchwrite assumed
pubconvert_convertwrite assumed
pubconvert_verifyread inferred
recalls_changes_sincewrite assumed
recalls_product_checkwrite assumed
recalls_recallread inferred
recalls_searchread inferred
recalls_vehicleread inferred
recalls_watchwrite inferred
render_bundleread inferred
rpc_callwrite assumed
screener_quotewrite assumed
screener_screenwrite assumed
screenshot_renderwrite assumed
sec_alerts_poll_alertsread inferred
sec_alerts_register_watchwrite assumed
sec_fundamentalsread inferred
secfilings_changeswrite assumed
secfilings_statusread inferred
short_shortread inferred
spend_checkread inferred
stats_indicatorwrite assumed
stats_tradewrite assumed
telegram_provisionwrite assumed
tokens_scorewrite assumed
tokens_tokenwrite assumed
toxicity_analyzewrite assumed
toxicity_analyze_batchwrite assumed
trademarks_caseread inferred
trademarks_searchread inferred
trademarks_watchwrite assumed
trademarks_watch_changesread inferred
transcribe_audiowrite assumed
tron_estimateread inferred
txcheck_checkwrite assumed
weather_alertswrite assumed
weather_currentwrite assumed
weather_forecastwrite assumed
wiki_answerread inferred
wiki_relatedwrite assumed

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-16100 tools/list on https://exchangerebel.com/mcp, published in the official MCP registry as com.exchangerebel/exchangerebel 1.1.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.