LeashIndex Get the report

Index / storage

SpellBook Finance

com-spellbook-finance-mcp declares 138 capabilities across 138 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://api.spellbook-finance.com/mcp, published in the official MCP registry as com.spellbook-finance/mcp 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 138 tools

138 of 138 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 28 of 138 tools

28 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 2 of 138 tools

2 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 138 tools

138 of 138 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 138 tools

138 of 138 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 27 of 138 tools

27 tools can modify data and declare no limit.

low · uncapped-read · 83 of 138 tools

83 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
spellbook_guidesread declared
spellbook_skillread declared
spellbook_pull_workread declared
spellbook_buy_targetspay inferred
spellbook_buy_outcome_reportpay inferred
spellbook_printings_searchread declared
spellbook_moversread declared
spellbook_screenerread declared
spellbook_box_ev_rankingsread declared
spellbook_card_pricesread declared
spellbook_card_buylistread declared
spellbook_card_buylist_historyread declared
spellbook_pokemon_market_analyticsread declared
spellbook_pokemon_athread declared
spellbook_pokemon_arbitrage_spreadsread declared
spellbook_deck_contentsread declared
spellbook_deck_import_limitlesswrite assumed
spellbook_pokemon_metagame_overviewread declared
spellbook_pokemon_metagame_archetyperead declared
spellbook_pokemon_metagame_cardread declared
spellbook_inventory_bin_ensurewrite assumed
spellbook_inventory_import_csvwrite assumed
spellbook_inventory_precon_importwrite inferred
spellbook_purchase_incoming_recordread inferred
spellbook_inventory_incomingread declared
spellbook_inventory_incoming_receivewrite assumed
spellbook_ebay_publishdestructive declared
spellbook_ebay_lot_publishdestructive declared
spellbook_ebay_repricedestructive declared
spellbook_ebay_unpublishdestructive declared
spellbook_ebay_job_statusread declared
spellbook_manapool_sync_previewread declared
spellbook_manapool_sync_applydestructive declared
spellbook_sealed_listing_previewread declared
spellbook_sealed_listing_submitdestructive declared
spellbook_sealed_listing_pausedestructive declared
spellbook_tcg_listing_previewread declared
spellbook_pokemon_tcg_staged_previewread declared
spellbook_tcg_listing_exportdestructive declared
spellbook_manapool_connection_statusread declared
spellbook_manapool_connect_linkread declared
spellbook_item_photo_upload_linkread declared
spellbook_ebay_connection_statusread declared
spellbook_ebay_shipping_policy_getread declared
spellbook_ebay_shipping_mode_getread declared
spellbook_ebay_shipping_mode_setwrite inferred
spellbook_ebay_shipping_policy_setwrite inferred
spellbook_ebay_combined_shipping_getread declared
spellbook_ebay_combined_shipping_setwrite inferred
spellbook_ebay_order_discount_getread declared
spellbook_ebay_order_discount_setdestructive declared
spellbook_ebay_order_discount_disabledestructive declared
spellbook_ebay_connect_linkread declared
spellbook_tcg_extension_pairingread declared
spellbook_channel_pricing_profilesread declared
spellbook_channel_pricing_profile_setwrite inferred
spellbook_agent_pricing_protectionread declared
spellbook_ebay_price_limits_getread declared
spellbook_ebay_price_limit_enrollment_preparewrite assumed
spellbook_ebay_price_limit_enrollment_getread declared
spellbook_ebay_price_limit_enrollment_pagesread declared
spellbook_ebay_price_limit_enrollment_continuewrite assumed
spellbook_ebay_pricing_restoration_preparewrite assumed
spellbook_ebay_pricing_approval_preparewrite assumed
spellbook_ebay_pricing_approval_getread declared
spellbook_ebay_pricing_approval_executedestructive declared
spellbook_sku_price_controlsread declared
spellbook_sku_minimum_floor_setwrite inferred
spellbook_sku_minimum_floor_cleardestructive declared
spellbook_sku_exact_price_lock_setwrite inferred
spellbook_sku_exact_price_lock_cleardestructive declared
spellbook_pricing_profiles_listread declared
spellbook_pricing_profile_getread declared
spellbook_pricing_profile_createwrite inferred
spellbook_pricing_profile_updatedestructive declared
spellbook_pricing_profile_activatewrite assumed
spellbook_pricing_amendments_listread declared
spellbook_pricing_amendment_getread declared
spellbook_pricing_amendment_createwrite inferred
spellbook_pricing_amendment_updatedestructive declared
spellbook_pricing_amendment_deletedestructive declared
spellbook_pricing_amendment_previewread inferred
spellbook_pricing_amendment_preview_statusread declared
spellbook_workspaces_listread declared
spellbook_workspace_createwrite inferred
spellbook_store_setup_statusread declared
spellbook_marketplace_onboardingread declared
spellbook_ebay_automation_setdestructive declared
spellbook_manapool_automation_setdestructive declared
spellbook_channel_lane_setdestructive declared
spellbook_return_addressread declared
spellbook_return_address_savedestructive declared
spellbook_workspace_plan_statusread declared
spellbook_free_seller_workspace_claimdestructive declared
spellbook_seller_plan_checkout_linkread inferred
spellbook_entitlementsread declared
spellbook_singles_buylist_spreadsread declared
spellbook_japanese_sourcingread declared
spellbook_japan_source_scanread declared
spellbook_riftbound_japanese_comparablesread declared
spellbook_pricing_decision_explainread declared
spellbook_credit_conversion_candidatesread declared
spellbook_credit_resale_assessmentread declared
spellbook_sealed_deal_boardread declared
spellbook_sealed_product_searchread declared
spellbook_sealed_product_offersread declared
spellbook_support_reportwrite assumed
spellbook_agent_gap_reportwrite assumed
spellbook_customer_evidence_recordread inferred
spellbook_customer_evidence_getread declared
spellbook_customer_evidence_listread declared
spellbook_collection_buying_recordread inferred
spellbook_collection_buying_getread declared
spellbook_collection_buying_listread declared
spellbook_inventory_items_queryread declared
spellbook_inventory_holdingsread declared
spellbook_sealed_portfolioread declared
spellbook_sealed_portfolio_recordread inferred
spellbook_sealed_portfolio_hold_setwrite inferred
spellbook_sealed_portfolio_open_intent_cleardestructive declared
spellbook_sealed_portfolio_receivewrite assumed
spellbook_sealed_portfolio_opendestructive declared
spellbook_sealed_recovered_component_recordread inferred
spellbook_sealed_intent_defaultsread declared
spellbook_sealed_intent_default_setwrite inferred
spellbook_sale_recorddestructive declared
spellbook_alerts_listread declared
spellbook_alert_createwrite inferred
spellbook_alert_deletedestructive declared
spellbook_buylist_compareread declared
spellbook_collection_receiptread declared
spellbook_order_proof_photosread declared
spellbook_repeat_buyersread declared
spellbook_returned_package_lookupread declared
spellbook_returned_package_recordread inferred
spellbook_returned_package_reship_preparewrite assumed
spellbook_returned_package_reship_trackingwrite assumed
spellbook_inventory_location_confirmdestructive declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-16100 tools/list on https://api.spellbook-finance.com/mcp, published in the official MCP registry as com.spellbook-finance/mcp 1.0.0
2026-10-11100 tools/list on https://api.spellbook-finance.com/mcp, published in the official MCP registry as com.spellbook-finance/mcp 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.