LeashIndex Get the report

Index / storage

com.mcparmory/miro

com-mcparmory-miro declares 176 capabilities across 176 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the PyPI package mcparmory-miro==1.0.2 (published to PyPI as mcparmory-miro, listed in the official MCP registry as com.mcparmory/miro 1.0.2), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 176 tools

176 of 176 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 37 of 176 tools

37 tools are classified as irreversible and declare no limit.

high · no-expiry · All 176 tools

176 of 176 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 176 tools

176 of 176 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 62 of 176 tools

62 tools can modify data and declare no limit.

low · uncapped-read · 77 of 176 tools

77 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_access_token_inforead declared
list_audit_logsread declared
update_team_boards_classification_bulkwrite inferred
get_board_data_classificationread declared
create_markdown_docwrite inferred
get_doc_format_itemread declared
delete_doc_format_itemdestructive declared
list_casesread declared
create_casewrite inferred
get_caseread declared
update_casewrite inferred
close_casedestructive declared
list_legal_holds_in_caseread declared
create_legal_hold_for_casewrite inferred
list_legal_hold_export_jobsread declared
get_legal_holdread declared
update_legal_holdwrite inferred
close_legal_holddestructive declared
list_legal_hold_content_itemsread declared
list_board_export_jobsread declared
create_board_export_jobwrite inferred
get_board_export_job_statusread declared
get_board_export_job_resultsread declared
cancel_board_export_jobdestructive declared
list_board_export_job_tasksread declared
create_board_export_task_download_linkwrite inferred
list_board_item_content_logsread declared
delete_user_all_sessionsdestructive declared
list_usersread declared
create_userwrite inferred
get_userread declared
update_userwrite inferred
update_user_partialwrite inferred
delete_userdestructive declared
list_groupsread declared
get_groupread declared
update_group_members_and_detailsread inferred
list_resource_typesread declared
get_resource_typeread declared
list_schemasread declared
get_schemaread declared
get_organizationread declared
enterprise_get_organization_membersread declared
get_organization_memberread declared
list_boardsread declared
create_boardwrite inferred
create_board_copywrite inferred
get_boardread declared
update_boardwrite inferred
delete_boarddestructive declared
create_app_cardwrite inferred
get_app_card_itemread declared
update_app_card_itemwrite inferred
delete_app_card_itemdestructive declared
create_card_itemwrite inferred
get_card_itemread declared
update_card_itemwrite inferred
delete_card_itemdestructive declared
list_connectors_for_boardread declared
create_connectorwrite inferred
get_connectorread declared
update_connectorwrite inferred
delete_connectordestructive declared
add_document_to_boardwrite inferred
get_document_itemread declared
update_document_itemwrite inferred
delete_document_itemdestructive declared
add_embed_item_to_boardwrite inferred
get_embed_itemread declared
update_embed_itemwrite inferred
delete_embed_itemdestructive declared
add_image_to_boardwrite inferred
get_image_itemread declared
update_image_itemwrite inferred
delete_image_itemdestructive declared
list_board_itemsread declared
get_itemread declared
update_item_position_or_parentwrite inferred
delete_itemdestructive declared
list_board_membersread declared
invite_members_to_boardsend inferred
get_board_memberread declared
update_board_member_rolewrite inferred
remove_board_memberdestructive declared
add_shape_to_boardwrite inferred
get_shape_itemread declared
update_shape_itemwrite inferred
delete_shape_itemdestructive declared
add_sticky_notewrite inferred
get_sticky_note_itemread declared
update_sticky_notewrite inferred
delete_sticky_note_itemdestructive declared
add_text_to_boardwrite inferred
get_text_itemread declared
update_text_itemwrite inferred
delete_text_itemdestructive declared
create_items_bulkwrite inferred
add_frame_to_boardwrite inferred
get_frameread declared
update_framewrite inferred
delete_framedestructive declared
list_items_in_frameread declared
get_app_metricsread declared
get_app_metrics_totalread declared
get_mindmap_noderead declared
delete_mindmap_nodedestructive declared
list_mindmap_nodesread declared
create_mindmap_nodewrite inferred
list_board_items_experimentalread declared
get_board_itemread declared
delete_item_betadestructive declared
add_shape_to_board_flowchartwrite inferred
get_shape_item_experimentalread declared
update_shape_item_flowchartwrite inferred
delete_shape_item_experimentaldestructive declared
create_document_item_from_filewrite inferred
update_document_item_with_filewrite inferred
create_image_item_from_local_filewrite inferred
update_image_item_from_filewrite inferred
list_groups_on_boardread declared
list_items_in_groupread declared
get_group_by_idread declared
update_groupwrite inferred
remove_items_from_groupdestructive declared
delete_groupdestructive declared
list_tags_for_itemread declared
list_tags_from_boardread declared
create_tagwrite inferred
get_tagread declared
update_tagwrite inferred
delete_tagdestructive declared
list_items_by_tagread declared
add_tag_to_itemwrite inferred
remove_tag_from_itemdestructive declared
list_projects_in_teamread declared
create_project_in_teamwrite inferred
get_project_in_teamread declared
update_projectwrite inferred
delete_project_in_teamdestructive declared
list_project_membersread declared
add_project_memberwrite inferred
get_project_memberread declared
update_project_member_rolewrite inferred
remove_project_memberdestructive declared
list_organization_teamsread declared
create_teamwrite inferred
get_teamread declared
update_teamwrite inferred
delete_teamdestructive declared
list_team_membersread declared
add_team_memberwrite inferred
get_team_memberread declared
update_team_member_rolewrite inferred
remove_team_memberdestructive declared
list_groups_enterpriseread declared
create_group_organizationwrite inferred
get_group_enterpriseread declared
update_group_orgwrite inferred
delete_group_organizationdestructive declared
list_group_membersread declared
add_member_to_groupwrite inferred
update_group_membersdestructive declared
get_group_memberread declared
remove_group_memberdestructive declared
list_teams_for_groupread declared
get_group_teamread declared
list_groups_for_teamread declared
add_user_group_to_teamwrite inferred
get_team_groupread declared
remove_group_from_teamdestructive declared
list_board_groupsread declared
share_board_with_groupswrite assumed
remove_group_from_boarddestructive declared
list_project_groupsread declared
share_project_with_groupswrite assumed
remove_group_from_projectdestructive declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.