LeashIndex Get the report

Index / other

com.kernelcad/kernelcad

com-kernelcad-kernelcad declares 73 capabilities across 73 tools, with 2 critical issues.

96/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://mcp.kernelcad.com/mcp, published in the official MCP registry as com.kernelcad/kernelcad 0.11.2. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 73 tools

73 of 73 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 3 of 73 tools

3 tools are classified as irreversible and declare no limit.

high · no-expiry · All 73 tools

73 of 73 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 73 tools

73 of 73 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 29 of 73 tools

29 tools can modify data and declare no limit.

low · uncapped-read · 41 of 73 tools

41 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
review_paint_peek_latestread declared
open_in_studioread inferred
get_projectread declared
get_project_revisionread declared
get_latest_renderread declared
get_model_meshread declared
request_uploadwrite inferred
lookup_authoring_skillread declared
mesh_summaryread declared
evaluate_scriptread declared
diff_scriptsread declared
inspectread declared
verifyread declared
why_did_this_failread declared
set_paramwrite inferred
add_featurewrite inferred
add_surfacewrite inferred
add_curvewrite inferred
add_path_segmentwrite inferred
trace_from_imagewrite assumed
add_variable_sweepwrite inferred
add_textwrite inferred
project_curvedelete inferred
add_pattern_featurewrite inferred
remove_featuredestructive declared
queryread declared
lookup_apiread declared
lookup_diagnosticsread declared
exportwrite assumed
lookup_cookbookread declared
find_partread declared
fetch_partread declared
solve_sketchread declared
add_constraintwrite inferred
add_partwrite inferred
add_connectorwrite inferred
add_matewrite inferred
add_workspace_targetwrite inferred
set_scene_returnwrite inferred
solve_matesread declared
review_cadread declared
design_loopwrite assumed
flatten_patternread declared
evaluate_sdfread declared
capture_animationwrite assumed
render_previewread inferred
resolve_assumptionswrite assumed
run_feawrite assumed
fea_summaryread declared
send_to_printerdestructive declared
repair_scriptread inferred
sweep_toleranceread declared
diff_geometryread declared
drawing_to_cadread inferred
mesh_to_featuresread declared
execute_cookbookwrite assumed
get_selectionread declared
set_selectionwrite inferred
import_stepwrite assumed
fab_packread inferred
dfm_reviewread declared
ray_pickread declared
inspect_nurbsread declared
fit_planeread declared
route_wiresread declared
import_handoffwrite assumed
mesh_booleanwrite assumed
explode_viewread declared
apply_surface_blendwrite assumed
fetch_part_modelread declared
write_bomwrite inferred
price_partread declared
order_partwrite assumed

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1696 tools/list on https://mcp.kernelcad.com/mcp, published in the official MCP registry as com.kernelcad/kernelcad 0.11.2
2026-10-1193 tools/list on https://mcp.kernelcad.com/mcp, published in the official MCP registry as com.kernelcad/kernelcad 0.11.2
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.