LeashIndex Get the report

Index / messaging

Geode

com-geodeapps-mcp-geode declares 138 capabilities across 138 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://mcp.geodeapps.com/mcp, published in the official MCP registry as com.geodeapps.mcp/geode 0.1.5. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 138 tools

138 of 138 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 36 of 138 tools

36 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 10 of 138 tools

10 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 138 tools

138 of 138 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 138 tools

138 of 138 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 43 of 138 tools

43 tools can modify data and declare no limit.

low · uncapped-read · 59 of 138 tools

59 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
geode_dns_registerwrite assumed
geode_dns_set_addresswrite inferred
geode_dns_transferdestructive declared
geode_dns_get_addressread declared
geode_dns_get_ownerread declared
geode_exchange_new_listingread inferred
geode_exchange_edit_listingread inferred
geode_exchange_browse_all_listingsread declared
geode_exchange_view_my_listingsread declared
geode_lifeandwork_make_claim_expertisewrite inferred
geode_lifeandwork_make_claim_workhistorywrite inferred
geode_lifeandwork_make_claim_educationwrite inferred
geode_lifeandwork_make_claim_gooddeedwrite inferred
geode_lifeandwork_make_claim_intellectualpropertywrite inferred
geode_lifeandwork_endorse_claimwrite assumed
geode_lifeandwork_show_or_hide_claimread inferred
geode_lifeandwork_get_resumeread declared
geode_lifeandwork_get_full_detailsread declared
geode_lifeandwork_get_endorsersread declared
geode_lifeandwork_get_matching_claimsread declared
geode_market_add_item_to_cartwrite inferred
geode_market_bookmark_a_storewrite assumed
geode_market_remove_store_bookmarkdelete inferred
geode_market_remove_item_from_cartdelete inferred
geode_market_update_cart_item_quantitywrite inferred
geode_market_checkout_cartpay inferred
geode_market_rate_a_product_or_servicewrite assumed
geode_market_report_problem_damagedwrite assumed
geode_market_report_problem_wrong_itemwrite assumed
geode_market_report_problem_not_receivedwrite assumed
geode_market_message_the_sellersend inferred
geode_market_update_buyer_account_settingswrite inferred
geode_market_update_seller_account_settingswrite inferred
geode_market_update_order_tracking_informationwrite inferred
geode_market_refuse_an_orderdestructive declared
geode_market_issue_refundpay inferred
geode_market_issue_replacementwrite assumed
geode_market_deny_resolution_requestdestructive declared
geode_market_message_the_buyersend inferred
geode_market_rate_a_buyerwrite assumed
geode_market_add_a_productwrite inferred
geode_market_update_product_detailsread inferred
geode_market_add_a_servicewrite inferred
geode_market_update_service_detailsread inferred
geode_market_delete_a_productdestructive declared
geode_market_delete_a_servicedestructive declared
geode_market_search_products_by_keywordread declared
geode_market_search_services_by_keywordread declared
geode_market_search_stores_by_keywordread declared
geode_market_view_my_ordersread declared
geode_market_view_my_buyer_accountread declared
geode_market_view_my_cartread declared
geode_market_go_to_storeread declared
geode_market_view_my_seller_profileread declared
geode_market_view_my_seller_orders_awaitingread declared
geode_market_view_my_seller_orders_shippedread declared
geode_market_view_my_seller_orders_deliveredread declared
geode_market_view_my_seller_orders_resolvedread declared
geode_market_view_my_seller_orders_problemread declared
geode_market_view_my_seller_orders_refusedread declared
geode_messaging_update_settingswrite inferred
geode_messaging_send_private_messagesend inferred
geode_messaging_send_message_to_groupsend inferred
geode_messaging_allow_accountsend inferred
geode_messaging_disallow_accountsend inferred
geode_messaging_block_accountwrite assumed
geode_messaging_unblock_accountwrite assumed
geode_messaging_delete_single_message_to_accountdestructive declared
geode_messaging_delete_all_messages_to_accountdestructive declared
geode_messaging_make_a_new_groupsend inferred
geode_messaging_join_a_groupwrite assumed
geode_messaging_delete_single_message_to_groupdestructive declared
geode_messaging_delete_all_messages_to_groupdestructive declared
geode_messaging_leave_a_groupwrite assumed
geode_messaging_update_group_settingswrite inferred
geode_messaging_send_message_to_listsend inferred
geode_messaging_make_a_new_listread inferred
geode_messaging_delete_single_message_to_listdestructive declared
geode_messaging_delete_an_open_listdestructive declared
geode_messaging_join_an_open_listread inferred
geode_messaging_unsubscribe_from_open_listread inferred
geode_messaging_send_paid_messagepay inferred
geode_messaging_get_my_inboxread declared
geode_messaging_get_my_paid_inboxpay inferred
geode_messaging_get_my_allowed_and_blocked_accountsread declared
geode_messaging_get_my_groupsread declared
geode_messaging_find_groups_by_keywordread declared
geode_messaging_get_my_open_listsread declared
geode_messaging_get_my_subscribed_listsread declared
geode_messaging_find_lists_by_keywordread declared
geode_messaging_get_account_settings_dataread declared
geode_messaging_get_my_inbox_listsread declared
geode_messaging_get_my_inbox_groupsread declared
geode_messaging_clear_my_paid_inboxpay inferred
geode_profile_new_profilewrite inferred
geode_profile_update_your_profilewrite inferred
geode_profile_get_account_profileread declared
geode_social_send_message_publicsend inferred
geode_social_send_paid_message_publicpay inferred
geode_social_elevate_messagesend inferred
geode_social_elevate_paid_messagepay inferred
geode_social_follow_accountwrite assumed
geode_social_unfollow_accountwrite assumed
geode_social_block_accountwrite assumed
geode_social_unblock_accountwrite assumed
geode_social_update_settingswrite inferred
geode_social_get_public_feedread declared
geode_social_get_paid_feedpay inferred
geode_social_get_account_profileread declared
geode_social_send_reply_publicsend inferred
geode_social_get_account_paid_messagespay inferred
geode_social_get_account_followingread declared
geode_social_get_details_for_paid_messagepay inferred
geode_social_get_details_for_messageread declared
geode_social_get_replies_for_messageread declared
geode_surveys_make_a_new_survey_5write inferred
geode_surveys_make_a_new_survey_3write inferred
geode_surveys_make_a_new_survey_1write inferred
geode_surveys_close_my_surveydestructive declared
geode_surveys_take_a_survey_5write assumed
geode_surveys_take_a_survey_3write assumed
geode_surveys_take_a_survey_1write assumed
geode_surveys_get_survey_responses_5read declared
geode_surveys_get_survey_responses_3read declared
geode_surveys_get_survey_responses_1read declared
geode_surveys_get_available_surveysread declared
geode_surveys_get_my_surveysread declared
geode_surveys_get_survey_by_idread declared
geode_balances_transferdestructive declared
geode_account_inforead declared
geode_submit_intentwrite inferred
geode_get_intentread declared
geode_accept_termswrite assumed
geode_agent_statusread declared
geode_upgrade_packsread declared
geode_upgrade_prepareread declared
geode_upgrade_buildread declared
geode_upgrade_statusread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.