LeashIndex Get the report

Index / storage

Neblla

com-neblla-neblla declares 118 capabilities across 118 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://neblla.com/mcp, published in the official MCP registry as com.neblla/neblla 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 118 tools

118 of 118 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 23 of 118 tools

23 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 1 of 118 tools

1 tool is classified as moving money and declares no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 118 tools

118 of 118 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 118 tools

118 of 118 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 61 of 118 tools

61 tools can modify data and declare no limit.

low · uncapped-read · 34 of 118 tools

34 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
neblla_get_llmsread inferred
neblla_get_app_urlread inferred
neblla_validate_requirementsread inferred
neblla_create_appwrite inferred
neblla_list_appsread inferred
neblla_delete_appdelete inferred
neblla_update_appwrite inferred
neblla_list_community_entriesread inferred
neblla_get_community_entryread inferred
neblla_publish_community_entrysend inferred
neblla_copy_community_entrieswrite assumed
neblla_update_community_entrywrite inferred
neblla_reply_community_reviewwrite assumed
neblla_delete_community_entrydelete inferred
neblla_moderate_community_entrywrite assumed
neblla_community_caseswrite assumed
neblla_retheme_appwrite inferred
neblla_upload_filewrite inferred
neblla_list_filesread inferred
neblla_copy_fileswrite assumed
neblla_get_fileread inferred
neblla_edit_filewrite inferred
neblla_delete_filedelete inferred
neblla_move_filewrite inferred
neblla_developer_noticeswrite assumed
neblla_create_productwrite inferred
neblla_update_productwrite inferred
neblla_list_productsread inferred
neblla_delete_productdelete inferred
neblla_publish_appsend inferred
neblla_unpublish_appdelete inferred
neblla_list_usersread inferred
neblla_export_userswrite assumed
neblla_search_users_by_emailsend inferred
neblla_get_userread inferred
neblla_list_communicationsread inferred
neblla_send_communicationsend inferred
neblla_set_communication_readread inferred
neblla_set_communication_importantwrite inferred
neblla_delete_communicationdelete inferred
neblla_update_user_datawrite inferred
neblla_list_roomsread inferred
neblla_get_room_historyread inferred
neblla_delete_room_messagesend inferred
neblla_create_roomwrite inferred
neblla_update_roomwrite inferred
neblla_delete_roomdelete inferred
neblla_list_moderatorsread inferred
neblla_get_moderation_logread inferred
neblla_set_moderatorwrite inferred
neblla_set_ban_statusread inferred
neblla_flag_userwrite inferred
neblla_ban_settingsread inferred
neblla_consume_purchasepay inferred
neblla_list_erasure_requestsread inferred
neblla_erase_userwrite assumed
neblla_get_community_configread inferred
neblla_list_reviewsread inferred
neblla_reply_reviewsend inferred
neblla_get_appread inferred
neblla_set_slugwrite inferred
neblla_copy_app_configwrite assumed
neblla_get_activity_logread inferred
neblla_get_statsread inferred
neblla_promotesend inferred
neblla_pre_accesswrite assumed
neblla_pre_datawrite assumed
neblla_pre_stripe_testwrite assumed
neblla_archive_appdelete inferred
neblla_versionswrite assumed
neblla_gitwrite assumed
neblla_byodbwrite assumed
neblla_payments_accountwrite assumed
neblla_taxwrite assumed
neblla_billingwrite assumed
neblla_developer_profileread inferred
neblla_developer_emailsend inferred
neblla_set_api_secretwrite inferred
neblla_list_api_secretsread inferred
neblla_list_webhook_deliveriesread inferred
neblla_create_hookwrite inferred
neblla_list_hooksread inferred
neblla_delete_hookdelete inferred
neblla_delete_api_secretdelete inferred
neblla_set_automationwrite inferred
neblla_list_automationsread inferred
neblla_run_automationwrite assumed
neblla_delete_automationdelete inferred
neblla_list_fog_casesread inferred
neblla_decide_fog_casewrite assumed
neblla_auth_secretwrite assumed
neblla_server_keywrite assumed
neblla_byoswrite assumed
neblla_publish_storesend inferred
neblla_table_queryread inferred
neblla_table_rowdelete inferred
neblla_groupwrite assumed
neblla_scoreswrite assumed
neblla_tradeswrite assumed
neblla_drawswrite assumed
neblla_bookingwrite assumed
neblla_businesswrite assumed
neblla_sample_userswrite assumed
neblla_creditswrite assumed
neblla_matcheswrite assumed
neblla_set_panelwrite inferred
neblla_run_panelread inferred
neblla_teamwrite assumed
neblla_alertswrite assumed
neblla_backupswrite assumed
neblla_broadcastwrite inferred
neblla_saleswrite assumed
neblla_orderswrite assumed
neblla_get_logsread inferred
neblla_mediawrite assumed
neblla_projectswrite assumed
neblla_domainswrite assumed
neblla_delete_accountdelete inferred

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-16100 tools/list on https://neblla.com/mcp, published in the official MCP registry as com.neblla/neblla 1.0.0
2026-10-1199 tools/list on https://neblla.com/mcp, published in the official MCP registry as com.neblla/neblla 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.