LeashIndex Get the report

Index / messaging

QuailOS

com-quailos-quailos declares 93 capabilities across 93 tools, with 3 critical issues.

99/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://www.quailos.com/api/mcp/message, published in the official MCP registry as com.quailos/quailos 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 93 tools

93 of 93 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 9 of 93 tools

9 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 1 of 93 tools

1 tool is classified as moving money and declares no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 93 tools

93 of 93 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 93 tools

93 of 93 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 26 of 93 tools

26 tools can modify data and declare no limit.

low · uncapped-read · 58 of 93 tools

58 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
plan_flockread declared
start_signupwrite assumed
update_order_noteswrite inferred
list_vehiclesread declared
get_support_ticketsread declared
create_support_ticketwrite inferred
reply_to_ticketsend inferred
get_feature_requestsread declared
create_feature_requestwrite inferred
get_ticket_threadread declared
get_hatchesread declared
log_hatch_setwrite inferred
log_candlingwrite assumed
log_hatch_resultread inferred
log_hive_inspectionwrite assumed
log_varroa_treatmentwrite assumed
log_honey_harvestwrite inferred
update_queen_statusread inferred
create_hivewrite inferred
pingread declared
get_npip_stock_codesread declared
get_public_farmsread declared
get_public_wiki_pagesread declared
list_quail_varietiesread declared
predict_quail_crossread declared
find_quail_pairingsread declared
get_tasksread declared
get_calendar_eventsread declared
get_ordersread declared
get_order_feedbackread declared
get_customer_detailsread declared
get_meat_inventoryread declared
get_beekeeping_apiaryread declared
get_financial_pnlread declared
get_feed_inventoryread declared
get_vendors_and_posread declared
get_egg_collectionsread declared
get_mileage_logsread declared
get_bird_batchesread declared
get_time_logsread declared
get_transactionsread declared
create_taskwrite inferred
complete_taskdestructive declared
update_taskwrite inferred
log_timewrite assumed
log_eggsread inferred
create_customerwrite inferred
create_calendar_eventwrite inferred
log_mileagewrite assumed
log_feed_purchasepay inferred
log_manual_transactionwrite assumed
log_bird_batchwrite assumed
get_production_ordersread declared
create_production_orderwrite inferred
delete_taskdestructive declared
delete_calendar_eventdestructive declared
log_meatwrite assumed
list_emailsread declared
get_emailread declared
draft_email_replysend inferred
move_emailwrite inferred
send_emaildestructive declared
list_supplier_opportunitiesread declared
get_make_money_with_quail_guideread declared
express_supplier_interestread inferred
create_supplier_shipmentwrite inferred
update_supplier_shipment_trackingwrite inferred
list_my_supplier_shipmentsread declared
list_rentahatch_vendorsread declared
get_rentahatch_vendorread declared
list_rentahatch_waitlistread declared
update_rentahatch_waitlist_statusdestructive declared
list_rentahatch_bookingsread declared
list_rentahatch_payoutsread declared
set_rentahatch_listing_activeread inferred
update_rentahatch_payout_statusread inferred
activate_rentahatch_bookingwrite assumed
list_farm_notesread declared
get_farm_noteread declared
create_farm_notewrite inferred
update_farm_notewrite inferred
delete_farm_notedestructive declared
list_farm_times_headlinesread declared
list_farm_times_articlesread declared
get_farm_times_articleread declared
list_quailos_tvread declared
get_quailos_tvread declared
list_academy_coursesread declared
get_academy_courseread declared
list_my_academy_enrollmentsread declared
enroll_academy_courseread inferred
list_library_itemsread declared
get_library_itemread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1699 tools/list on https://www.quailos.com/api/mcp/message, published in the official MCP registry as com.quailos/quailos 1.0.0
2026-10-1192 tools/list on https://www.quailos.com/api/mcp/message, published in the official MCP registry as com.quailos/quailos 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.