LeashIndex Get the report

Index / calendar

Fold Laundry

com-foldlaundry-fold-laundry declares 34 capabilities across 34 tools, with 3 critical issues.

98/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list on https://foldlaundry.com/mcp, published in the official MCP registry as com.foldlaundry/fold-laundry 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 34 tools

34 of 34 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 18 of 34 tools

18 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 1 of 34 tools

1 tool is classified as moving money and declares no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 34 tools

34 of 34 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 34 tools

34 of 34 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 2 of 34 tools

2 tools can modify data and declare no limit.

low · uncapped-read · 14 of 34 tools

14 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
search_hotelsread declared
book_hotel_pickupdestructive declared
join_waitlistsend inferred
check_service_zipread declared
book_residential_pickupdestructive declared
track_orderread declared
cancel_orderdestructive declared
enroll_in_clubdestructive declared
reschedule_orderdestructive declared
list_my_ordersread declared
get_estimateread declared
apply_promo_codedestructive declared
list_campusesread declared
buy_semester_passpay inferred
get_semester_passread declared
activate_semester_passdestructive declared
get_pricingread declared
get_service_inforead declared
get_host_program_inforead declared
get_referral_coderead declared
get_my_accountread declared
book_my_pickupdestructive declared
schedule_turnoversdestructive declared
get_business_accountread declared
update_care_preferencesdestructive declared
update_access_infodestructive declared
update_notification_preferenceswrite inferred
set_recurring_pickupdestructive declared
update_recurring_pickupdestructive declared
report_issuedestructive declared
rate_orderwrite assumed
get_receiptread declared
subscribe_order_updatesdestructive declared
book_for_hotel_guestdestructive declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.