LeashIndex Get the report

Index / data

MIDAS CIVIL NX tools (MIDAS IT Europe)

com-midasiteurope-civil-nx declares 101 capabilities across 101 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://midasiteurope.com/mcp, published in the official MCP registry as com.midasiteurope/civil-nx 0.7.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 101 tools

101 of 101 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · destructive-uncapped · 35 of 101 tools

35 tools are annotated by the server as destructive (destructiveHint) and declare no limit. In MCP that annotation marks a tool that may make destructive changes rather than only additive ones; it does not say the change cannot be undone.

high · no-expiry · All 101 tools

101 of 101 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 101 tools

101 of 101 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 8 of 101 tools

8 tools can modify data and declare no limit.

low · uncapped-read · 58 of 101 tools

58 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
auto_structure_groupswrite inferred
auto_structure_groups_undodestructive declared
b2p_surveyread declared
b2p_convertdestructive declared
b2p_undodestructive declared
bridge_reshape_readread declared
bridge_reshapedestructive declared
bridge_reshape_undodestructive declared
bridge_thermal_calcread declared
bridge_thermal_readread declared
bridge_thermal_applyread inferred
bridge_thermal_undodestructive declared
bridge_thermal_removedestructive declared
concurrent_forces_setupread declared
concurrent_forcesread declared
concurrent_forces_proberead declared
cs454_lane_layoutread declared
cs454_moving_loads_readread declared
cs454_moving_loadswrite assumed
cs454_moving_loads_undodestructive declared
cs454_combinations_readread declared
cs454_combinations_applydestructive declared
cs454_combinations_undodestructive declared
cs455_describe_sectionread declared
cs455_assessread declared
cs455_export_calc_sheetread declared
cs_stage_summaryread declared
cs_stage_resultsread declared
cs_stage_reportread declared
culvert_previewread declared
culvert_builddestructive declared
culvert_build_undodestructive declared
culvert_analyse_and_checkread inferred
culvert_reportread declared
midas_docs_searchread declared
midas_docs_readread declared
dxf_inspectread declared
dxf_importdestructive declared
dxf_import_undodestructive declared
ec_combinations_readread declared
ec_combinations_applydestructive declared
ec_combinations_undodestructive declared
ec_lane_layoutread declared
ec_moving_loads_readread declared
ec_moving_loadswrite assumed
ec_moving_loads_undodestructive declared
ec_wind_bridgeread declared
ec_wind_read_deckread declared
ec_wind_applyread inferred
ec_wind_removedestructive declared
skew_grillagedestructive declared
skew_grillage_undodestructive declared
combination_treeread declared
combination_contributionsread declared
midas_libraryread declared
civil_statusread declared
civil_read_tableread declared
job_statusread declared
model_qc_checkread declared
model_report_imagesread declared
model_report_exportread declared
model_bridge_summaryread declared
model_to_ifcread declared
model_to_dxfread declared
create_nodesdestructive declared
create_nodes_undodestructive declared
pd6694_route_aread declared
pd6694_route_a_writewrite inferred
pd6694_route_a_removedestructive declared
pd6694_ssi_planread declared
pd6694_ssi_runwrite assumed
pd6694_ssi_removedestructive declared
point_to_patch_dispersalread declared
point_to_patch_readread declared
point_to_patch_applydestructive declared
point_to_patch_undodestructive declared
civil_loads_supportsdestructive declared
civil_combinations_quickdestructive declared
civil_remove_loadsdestructive declared
slab_capacities_from_barsread declared
slab_surveyread declared
slab_assessread declared
slab_explain_locationread declared
result_table_catalogread declared
preview_result_tableread declared
export_result_tablesread declared
section_previewread declared
section_propertiesread declared
section_writedestructive declared
section_write_undodestructive declared
section_readread declared
stage_groupswrite inferred
construction_stagesdestructive declared
stages_undodestructive declared
stress_element_loadsread declared
stress_profileread declared
sls_stress_checkread declared
civil_write_tablesdestructive declared
civil_write_tables_undodestructive declared
civil_run_analysiswrite assumed
civil_save_modelwrite assumed

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-28100 tools/list on https://midasiteurope.com/mcp, published in the official MCP registry as com.midasiteurope/civil-nx 0.7.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.