LeashIndex Get the report

Index / storage

com.mcparmory/elevenlabs

com-mcparmory-elevenlabs declares 258 capabilities across 258 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the PyPI package mcparmory-elevenlabs==1.0.3 (published to PyPI as mcparmory-elevenlabs, listed in the official MCP registry as com.mcparmory/elevenlabs 1.0.3), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 258 tools

258 of 258 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 44 of 258 tools

44 tools are classified as irreversible and declare no limit.

high · no-expiry · All 258 tools

258 of 258 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 258 tools

258 of 258 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 102 of 258 tools

102 tools can modify data and declare no limit.

low · uncapped-read · 112 of 258 tools

112 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
list_speech_historyread declared
get_speech_history_itemread declared
delete_history_itemdestructive declared
get_speech_history_audioread declared
download_speech_itemswrite assumed
generate_soundwrite assumed
isolate_audiodelete inferred
isolate_audio_streamdelete inferred
delete_voice_sampledestructive declared
retrieve_voice_sample_audioread declared
generate_speechwrite assumed
generate_speech_with_timestampswrite assumed
generate_speech_streamwrite assumed
generate_speech_stream_with_timestampswrite assumed
generate_dialogueread inferred
generate_dialogue_streamread inferred
generate_dialogue_stream_with_timestampswrite assumed
generate_dialogue_with_timestampswrite assumed
convert_voicewrite assumed
convert_speech_to_speech_streamwrite assumed
generate_voice_previewsread inferred
create_voicewrite inferred
design_voiceread inferred
remix_voiceread inferred
stream_voice_previewread declared
get_subscription_inforead declared
get_userread declared
list_voicesread declared
get_default_voice_settingsread declared
get_voice_settingsread declared
get_voiceread declared
delete_voicedestructive declared
configure_voice_settingswrite assumed
create_voice_samplewrite inferred
update_voicewrite inferred
add_shared_voicewrite inferred
generate_podcastwrite assumed
apply_pronunciation_dictionarieswrite assumed
list_projectsread declared
create_studio_projectwrite inferred
get_projectread declared
update_studio_projectwrite inferred
delete_projectdestructive declared
update_project_contentwrite inferred
convert_studio_projectwrite assumed
list_snapshotsread declared
get_snapshotread declared
stream_project_snapshot_audiowrite assumed
download_snapshot_archivedestructive declared
list_chaptersread declared
create_chapterwrite inferred
get_chapterread declared
update_chapterwrite inferred
delete_chapterdestructive declared
convert_chapterwrite assumed
list_chapter_snapshotsread declared
get_chapter_snapshotread declared
get_chapter_snapshot_audioread inferred
list_muted_tracksread declared
get_dubbing_resourceread declared
add_dubbing_languagewrite inferred
create_segmentwrite inferred
update_segment_languagewrite inferred
reassign_segmentswrite assumed
delete_dubbing_segmentdestructive declared
regenerate_segment_transcriptionswrite assumed
translate_dubbing_segmentswrite assumed
regenerate_dubswrite assumed
update_speakerwrite inferred
add_speakerwrite inferred
list_similar_voicesread declared
render_dubbingwrite assumed
list_dubsread declared
dub_mediawrite assumed
get_dubbingread declared
delete_dubbingdestructive declared
download_dubbed_audioread declared
get_transcript_dubbingread declared
list_modelsread declared
create_audio_projectwrite inferred
get_audio_native_settingsread declared
update_audio_native_contentwrite inferred
update_audio_native_content_from_urlwrite inferred
list_voices_sharedread declared
find_similar_voicesread inferred
get_character_usage_metricsread declared
create_pronunciation_dictionarywrite inferred
create_pronunciation_dictionary_from_ruleswrite inferred
get_pronunciation_dictionaryread declared
update_pronunciation_dictionarydestructive declared
replace_pronunciation_ruleswrite inferred
add_pronunciation_ruleswrite inferred
delete_pronunciation_rulesdestructive declared
download_pronunciation_dictionary_versionread declared
list_pronunciation_dictionariesread declared
list_service_account_api_keysread declared
create_service_account_api_keywrite inferred
revoke_service_account_api_keydestructive declared
list_auth_connectionsread declared
delete_auth_connectiondestructive declared
list_service_accountsread declared
list_groupsread declared
find_groupread declared
remove_group_memberdestructive declared
add_group_memberwrite inferred
send_workspace_invitesend inferred
send_workspace_invitationssend inferred
revoke_workspace_invitationdestructive declared
get_resourceread declared
grant_resource_accesswrite inferred
revoke_resource_accessdestructive declared
list_workspace_webhooksread declared
transcribe_audiowrite assumed
get_transcriptread declared
delete_transcriptdestructive declared
list_evaluation_criteriaread declared
get_evaluation_criterionread declared
update_eval_criterionwrite inferred
delete_evaluation_criteriondestructive declared
list_evaluationsread declared
create_evaluationwrite inferred
get_evaluationread declared
list_human_agentsread declared
get_human_agentread declared
delete_human_agentdestructive declared
list_evaluation_analyticsread declared
get_criterion_analyticsread declared
get_agent_analyticsread declared
align_audio_to_textwrite assumed
get_agent_conversation_signed_linkread declared
initiate_outbound_callwrite assumed
initiate_twilio_calldestructive declared
initiate_whatsapp_calldestructive declared
send_whatsapp_messagesend inferred
create_agent_routewrite inferred
list_agent_summariesread declared
get_agentread declared
update_agent_settingswrite inferred
delete_agentdestructive declared
get_agent_widget_configread declared
get_agent_share_linkread declared
upload_agent_avatarwrite inferred
list_agentsread declared
get_knowledge_base_sizeread declared
estimate_agent_llm_costread inferred
duplicate_agentwrite inferred
simulate_agent_conversationwrite assumed
simulate_conversation_streamwrite assumed
create_agent_testwrite inferred
get_agent_testread declared
update_agent_testwrite inferred
delete_agent_testdestructive declared
fetch_agent_response_test_summariesread inferred
list_agent_testsread declared
list_test_invocationsread declared
run_agent_testswrite assumed
get_test_invocationread declared
resubmit_testswrite inferred
list_conversationsread declared
list_conversation_usersread declared
get_conversationread declared
delete_conversationdestructive declared
get_conversation_audioread declared
submit_conversation_feedbackwrite assumed
search_conversation_messagesread declared
search_conversation_messages_semanticread declared
list_phone_numbersread declared
import_phone_numberwrite assumed
get_phone_numberread declared
update_phone_numberwrite inferred
delete_phone_numberdestructive declared
calculate_llm_expected_costread inferred
list_llmsread declared
upload_filewrite inferred
delete_conversation_filedestructive declared
get_conversation_live_countread declared
get_knowledge_base_summariesread declared
list_knowledge_basesread declared
create_knowledge_base_document_from_urlwrite inferred
upload_knowledge_base_documentwrite inferred
add_text_documentwrite inferred
create_folderwrite inferred
retrieve_knowledge_base_documentread declared
rename_documentwrite inferred
delete_knowledge_base_documentdestructive declared
get_rag_index_overviewread declared
batch_compute_rag_indexesread inferred
refresh_knowledge_base_documentread inferred
list_rag_indexesread declared
index_knowledge_base_documentread inferred
delete_rag_indexdestructive declared
list_dependent_agentsread declared
retrieve_knowledge_base_document_contentread declared
get_knowledge_base_source_file_urlread declared
retrieve_knowledge_base_chunkread declared
move_knowledge_base_documentwrite inferred
move_knowledge_base_entitieswrite inferred
list_toolsread declared
create_toolwrite inferred
get_toolread declared
update_toolwrite inferred
delete_tooldestructive declared
list_dependent_agents_toolread declared
create_workspace_secretwrite inferred
update_secretwrite inferred
delete_secretdestructive declared
submit_batch_callswrite inferred
list_batch_callsread declared
get_batch_callread declared
delete_batch_calldestructive declared
cancel_batch_calldestructive declared
retry_batch_callwrite assumed
initiate_outbound_sip_calldestructive declared
list_mcp_serversread declared
register_mcp_serverwrite assumed
get_mcp_serverread declared
configure_mcp_serverwrite inferred
delete_mcp_serverdestructive declared
list_mcp_server_toolsread declared
approve_mcp_server_toolwrite inferred
revoke_mcp_server_tool_approvaldestructive declared
create_tool_config_overridewrite inferred
get_tool_config_overrideread declared
override_mcp_tool_configwrite assumed
get_whatsapp_accountread declared
update_whatsapp_accountwrite inferred
delete_whatsapp_accountdestructive declared
list_whatsapp_accountsread declared
list_agent_branchesread declared
create_agent_branchwrite inferred
get_agent_branchread declared
update_branchdestructive declared
merge_branchdestructive declared
deploy_agentwrite inferred
create_agent_draftwrite inferred
delete_agent_draftdestructive declared
list_environment_variablesread declared
create_environment_variablewrite inferred
get_environment_variableread declared
update_environment_variablewrite inferred
generate_composition_planwrite assumed
compose_songwrite assumed
compose_song_detailedwrite assumed
compose_musicwrite assumed
upload_songwrite inferred
separate_song_stemswrite assumed
create_voice_pvcwrite inferred
update_voice_pvcwrite inferred
add_voice_sampleswrite inferred
update_voice_samplewrite inferred
remove_voice_sampledestructive declared
get_voice_sample_audioread declared
get_voice_sample_waveformread declared
get_speaker_separation_statusread declared
separate_speakerswrite assumed
get_speaker_audioread declared
train_voicewrite assumed
submit_voice_verificationwrite assumed
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.