LeashIndex Get the report

Index / devtools

HeritageDeed Title Search and Property Data

com-heritagedeed-title-search declares 53 capabilities across 53 tools, with 1 critical issue.

82/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://heritagedeed.com/mcp/public, published in the official MCP registry as com.heritagedeed/title-search 1.1.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 53 tools

53 of 53 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 53 tools

53 of 53 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 53 tools

53 of 53 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 16 of 53 tools

16 tools can modify data and declare no limit.

low · uncapped-read · 37 of 53 tools

37 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
list_coverageread declared
check_coverageread declared
check_addressread declared
order_title_searchread inferred
get_order_statusread declared
get_reportread declared
get_sample_reportread declared
get_termsread declared
rest_api_inforead inferred
building_records_lookupread declared
title_insurance_premiumread declared
transfer_taxread declared
seller_net_sheetread declared
llc_owner_lookupread inferred
nyc_landlord_lookupread inferred
hoa_lookupread inferred
ucc_lien_searchread inferred
superfund_sites_near_addressread declared
superfund_sites_by_stateread declared
superfund_states_summaryread declared
flood_zone_lookupread declared
fair_market_rent_by_countywrite assumed
fair_market_rent_by_zipwrite assumed
radon_lookupread inferred
radon_by_countywrite assumed
radon_state_summaryread inferred
fault_lines_near_addresswrite assumed
power_lines_near_addresswrite assumed
tax_appeal_deadlineswrite assumed
check_tax_appeal_propertyread inferred
order_tax_appeal_evidencewrite assumed
get_tax_appeal_evidenceread inferred
zoning_lookupread inferred
recent_saleswrite assumed
start_tax_sale_due_diligencewrite assumed
get_tax_sale_due_diligenceread inferred
usda_eligibility_lookupread inferred
census_tract_lookupread inferred
opportunity_zone_lookupread inferred
county_loan_limitswrite assumed
national_loan_limitswrite assumed
property_history_lookupread declared
surplus_funds_searchread declared
surplus_funds_summaryread declared
tax_sale_searchread declared
tax_sale_summaryread declared
property_tax_rate_by_countywrite assumed
property_tax_rates_by_statewrite assumed
property_tax_rate_by_zipwrite assumed
property_watch_coveragewrite assumed
create_property_watchwrite inferred
list_property_watch_eventsread inferred
list_productsread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1114 tools/list on https://heritagedeed.com/mcp/public, published in the official MCP registry as com.heritagedeed/title-search 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.