LeashIndex Get the report

Index / storage

com.mcparmory/box

com-mcparmory-box declares 246 capabilities across 246 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the PyPI package mcparmory-box==1.0.5 (published to PyPI as mcparmory-box, listed in the official MCP registry as com.mcparmory/box 1.0.5), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 246 tools

246 of 246 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 50 of 246 tools

50 tools are classified as irreversible and declare no limit.

high · no-expiry · All 246 tools

246 of 246 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 246 tools

246 of 246 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 75 of 246 tools

75 tools can modify data and declare no limit.

low · uncapped-read · 121 of 246 tools

121 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_fileread declared
restore_filewrite assumed
update_filewrite inferred
delete_filedestructive declared
list_file_app_item_associationsread declared
download_fileread declared
upload_file_versionwrite inferred
upload_filewrite inferred
create_upload_sessionwrite inferred
create_file_upload_sessionwrite inferred
get_upload_sessionread declared
upload_file_partwrite inferred
abort_upload_sessiondestructive declared
list_upload_session_partsread declared
commit_upload_sessionwrite inferred
copy_filewrite inferred
get_file_thumbnailread declared
list_file_collaborationsread declared
list_file_commentsread declared
list_file_tasksread declared
get_trashed_fileread declared
permanently_delete_trashed_filedestructive declared
list_file_versionsread declared
get_file_versionread declared
restore_file_versiondelete inferred
delete_file_versiondestructive declared
promote_file_versionwrite assumed
list_file_metadataread declared
get_file_classificationread declared
add_file_classificationwrite inferred
update_file_classificationwrite inferred
remove_file_classificationdestructive declared
get_file_metadata_instanceread declared
create_file_metadatawrite inferred
update_file_metadatawrite inferred
delete_file_metadatadestructive declared
list_file_skills_cardsread declared
create_skill_cardswrite inferred
update_skill_cardswrite inferred
remove_file_skills_cardsdestructive declared
get_file_watermarkread declared
apply_file_watermarkwrite inferred
remove_file_watermarkdestructive declared
get_file_requestread declared
update_file_requestwrite inferred
delete_file_requestdestructive declared
copy_file_requestwrite inferred
get_folderread declared
restore_folderwrite assumed
update_folderwrite inferred
delete_folderdestructive declared
list_folder_app_item_associationsread declared
list_folder_itemsread declared
create_folderwrite inferred
copy_folderwrite inferred
list_folder_collaborationsread declared
get_trashed_folderread declared
permanently_delete_trashed_folderdestructive declared
list_folder_metadataread declared
get_folder_classificationread declared
add_folder_classificationwrite inferred
update_folder_classificationwrite inferred
remove_folder_classificationdestructive declared
get_folder_metadata_instanceread declared
create_folder_metadatawrite inferred
update_folder_metadatawrite inferred
delete_folder_metadatadestructive declared
list_trash_itemsread declared
get_folder_watermarkread declared
apply_folder_watermarkwrite inferred
remove_folder_watermarkdestructive declared
list_folder_locksread declared
lock_folderdelete inferred
delete_folder_lockdestructive declared
find_metadata_template_by_instanceread declared
list_classificationsread declared
get_metadata_templateread declared
update_metadata_templatewrite inferred
delete_metadata_templatedestructive declared
get_metadata_template_by_idread declared
list_global_metadata_templatesread declared
list_enterprise_metadata_templatesread declared
create_metadata_templatewrite inferred
initialize_classificationswrite inferred
list_metadata_cascade_policiesread declared
create_metadata_cascade_policywrite inferred
get_metadata_cascade_policyread declared
apply_metadata_cascade_policywrite assumed
query_items_by_metadataread inferred
get_commentread declared
update_commentwrite inferred
delete_commentdestructive declared
create_commentwrite inferred
get_collaborationread declared
update_collaborationwrite inferred
delete_collaborationdestructive declared
list_pending_collaborationsread declared
create_collaborationwrite inferred
search_contentread declared
create_taskwrite inferred
get_taskread declared
update_taskwrite inferred
delete_taskdestructive declared
list_task_assignmentsread declared
assign_taskwrite inferred
get_task_assignmentread declared
update_task_assignmentwrite inferred
delete_task_assignmentdestructive declared
get_shared_link_fileread declared
get_file_shared_linkread declared
add_file_shared_linkwrite inferred
update_file_shared_linkwrite inferred
remove_file_shared_linkdestructive declared
get_folder_from_shared_linkread declared
get_folder_shared_linkread declared
add_folder_shared_linkwrite inferred
update_folder_shared_linkwrite inferred
remove_folder_shared_linkdestructive declared
create_web_linkwrite inferred
get_web_linkread declared
restore_web_linkwrite assumed
update_web_linkwrite inferred
delete_web_linkdestructive declared
get_trashed_web_linkread declared
permanently_delete_web_linkdestructive declared
get_web_link_from_shared_linkread declared
get_web_link_shared_linkread declared
add_web_link_shared_linkwrite inferred
update_web_link_shared_linkwrite inferred
remove_web_link_shared_linkdestructive declared
get_app_item_from_shared_linkread declared
list_usersread declared
create_userwrite inferred
get_current_userread declared
terminate_user_sessionsdestructive declared
get_userread declared
update_userwrite inferred
delete_userdestructive declared
get_user_avatarread declared
upload_user_avatarwrite inferred
delete_user_avatardestructive declared
transfer_user_folderswrite inferred
list_user_email_aliasesread declared
create_email_aliassend inferred
remove_user_email_aliasdestructive declared
list_user_membershipsread declared
invite_enterprise_usersend inferred
get_inviteread declared
list_groupsread declared
create_groupwrite inferred
terminate_group_sessionsdestructive declared
get_groupread declared
update_groupwrite inferred
delete_groupdestructive declared
list_group_membersread declared
list_group_collaborationsread declared
add_user_to_groupwrite inferred
get_group_membershipread declared
update_group_membershipwrite inferred
remove_group_memberdestructive declared
list_webhooksread declared
get_webhookread declared
delete_webhookdestructive declared
update_skill_cards_on_filewrite inferred
list_eventsread declared
list_collectionsread declared
list_collection_itemsread declared
get_collectionread declared
list_recent_itemsread declared
list_retention_policiesread declared
get_retention_policyread declared
update_retention_policywrite inferred
delete_retention_policydestructive declared
list_retention_policy_assignmentsread declared
assign_retention_policywrite inferred
get_retention_policy_assignmentread declared
delete_retention_policy_assignmentdestructive declared
list_files_under_retentionread declared
list_file_versions_under_retentionread declared
list_legal_hold_policiesread declared
get_legal_hold_policyread declared
update_legal_hold_policywrite inferred
delete_legal_hold_policydestructive declared
list_legal_hold_policy_assignmentsread declared
assign_legal_hold_policywrite inferred
get_legal_hold_policy_assignmentread declared
remove_legal_hold_policy_assignmentdestructive declared
list_legal_hold_assignment_filesread declared
list_legal_hold_assignment_file_versionsread declared
get_file_version_legal_holdread declared
list_file_version_legal_holdsread declared
get_information_barrierread declared
update_shield_barrier_statusdestructive declared
list_shield_information_barriersread declared
create_shield_information_barrierwrite inferred
list_barrier_reportsread declared
create_barrier_reportwrite inferred
get_barrier_reportread declared
get_barrier_segmentread declared
update_barrier_segmentwrite inferred
delete_barrier_segmentdestructive declared
list_barrier_segmentsread declared
create_barrier_segmentwrite inferred
get_barrier_segment_memberread declared
delete_barrier_segment_memberdestructive declared
list_barrier_segment_membersread declared
add_barrier_segment_memberwrite inferred
get_barrier_segment_restrictionread declared
list_barrier_segment_restrictionsread declared
get_device_pinread declared
delete_device_pindestructive declared
list_enterprise_device_pinsread declared
list_terms_of_service_user_statusesread declared
create_terms_of_service_user_statusread inferred
update_terms_of_service_user_statusread inferred
get_collaboration_whitelist_entryread declared
list_storage_policy_assignmentsread declared
assign_storage_policywrite inferred
get_storage_policy_assignmentread declared
delete_storage_policy_assignmentdestructive declared
create_zip_downloadwrite inferred
download_zip_archiveread declared
get_zip_download_statusread declared
cancel_sign_requestdestructive declared
resend_sign_requestwrite inferred
get_sign_requestread declared
list_sign_requestsread declared
create_sign_requestwrite inferred
list_workflowsread declared
start_workflowwrite assumed
list_sign_templatesread declared
get_sign_templateread declared
list_slack_integration_mappingsread declared
list_teams_integration_mappingsread declared
create_teams_integration_mappingwrite inferred
extract_metadata_freeformsend inferred
extract_structured_metadatasend inferred
list_ai_agentsread declared
create_ai_agentwrite inferred
get_ai_agentread declared
list_metadata_taxonomiesread declared
get_metadata_taxonomyread declared
list_taxonomy_nodesread declared
get_taxonomy_noderead declared
delete_taxonomy_nodedestructive declared
list_taxonomy_field_optionsread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.