LeashIndex Get the report

Index / devtools

com.mcparmory/ahrefs

com-mcparmory-ahrefs declares 118 capabilities across 118 tools, with 2 critical issues.

96/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the PyPI package mcparmory-ahrefs==1.0.3 (published to PyPI as mcparmory-ahrefs, listed in the official MCP registry as com.mcparmory/ahrefs 1.0.3), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 118 tools

118 of 118 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 4 of 118 tools

4 tools are classified as irreversible and declare no limit.

high · no-expiry · All 118 tools

118 of 118 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 118 tools

118 of 118 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 7 of 118 tools

7 tools can modify data and declare no limit.

low · uncapped-read · 107 of 118 tools

107 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_domain_ratingread declared
get_backlinks_statsread declared
list_outlinks_statsread declared
get_domain_metricsread declared
get_refdomains_historyread declared
get_domain_rating_historyread declared
get_url_rating_historyread declared
list_page_historyread declared
get_domain_metrics_historyread declared
list_keyword_historyread declared
list_country_metricsread declared
list_pages_by_trafficread declared
get_search_volume_historyread declared
list_backlinksread declared
list_broken_backlinksread declared
list_refdomainsread declared
list_anchor_textread declared
list_organic_keywordsread declared
list_organic_competitorsread declared
list_top_pagesread declared
list_paid_pagesread declared
list_pages_by_backlinksread declared
list_pages_by_internal_linksread declared
list_linked_domainsread declared
list_external_anchorsread declared
list_internal_anchorsread declared
get_keyword_metricsread declared
get_keyword_volume_historyread declared
get_keyword_volume_by_countryread declared
search_matching_keywordsread declared
list_related_keywordsread declared
search_keyword_suggestionsread declared
list_audit_projectsread declared
list_audit_issuesread declared
get_page_contentread declared
list_audit_pagesread declared
get_rank_tracker_overviewread declared
get_serp_overviewread declared
list_competitor_rankingsread declared
list_competitor_pagesread declared
list_competitor_statsread declared
get_serp_overview_keywordread declared
analyze_targets_batchread inferred
get_subscription_limits_and_usageread declared
list_projectsread declared
create_projectwrite inferred
update_project_accesswrite inferred
list_project_keywordsread declared
add_keywordswrite inferred
delete_keywordsdestructive declared
list_project_competitorsread declared
add_competitorswrite inferred
delete_competitorsdestructive declared
list_locationsread declared
list_keyword_list_keywordsread declared
add_keywords_to_listread inferred
delete_keyword_list_keywordsdestructive declared
list_brand_radar_promptsread declared
create_brand_radar_promptwrite inferred
delete_brand_radar_promptsdestructive declared
list_brand_radar_reportsread declared
create_brand_radar_reportwrite inferred
update_brand_radar_reportwrite inferred
list_ai_responsesread declared
list_cited_pagesread declared
list_cited_domainsread declared
list_brand_radar_impression_overviewsread declared
list_brand_mentions_overviewread declared
get_share_of_voice_overviewread declared
list_brand_mention_impressions_historyread declared
list_brand_mention_historyread declared
list_brand_sov_historyread declared
list_web_analytics_statsread declared
get_web_analytics_chartread declared
list_source_channelsread declared
get_source_channels_chartread declared
list_traffic_sourcesread declared
get_traffic_sources_chartread declared
list_referrersread declared
get_referrers_chartread declared
list_utm_parametersread declared
get_utm_params_chartread declared
list_entry_pagesread declared
get_entry_pages_chartread declared
list_exit_pagesread declared
get_exit_pages_chartread declared
list_top_pages_by_pageviewsread declared
get_top_pages_chartread declared
list_web_analytics_by_cityread declared
get_web_analytics_cities_chartread declared
list_continent_analyticsread declared
get_continents_chartread declared
list_web_analytics_by_countryread declared
get_countries_chartread declared
list_language_analyticsread declared
get_language_analytics_chartread declared
list_browser_analyticsread declared
get_browser_chartread declared
list_browser_versionsread declared
get_browser_versions_chartread declared
list_device_analyticsread declared
get_devices_chartread declared
list_operating_systems_analyticsread declared
get_operating_systems_chartread declared
list_operating_system_versionsread declared
get_operating_system_versions_chartread declared
get_search_performance_historyread declared
list_keyword_position_historyread declared
list_page_history_gscread declared
list_device_performanceread declared
list_gsc_metrics_by_countryread declared
list_ctr_by_positionread declared
list_search_performance_by_positionread declared
list_keyword_history_gscread declared
list_gsc_keywordsread declared
get_page_historyread declared
list_gsc_pagesread declared
list_anonymous_queriesread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.