LeashIndex Get the report

Index / other

com.spriteship/spriteship

com-spriteship-spriteship declares 90 capabilities across 90 tools, with 2 critical issues.

98/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list on https://spriteship.com/mcp, published in the official MCP registry as com.spriteship/spriteship 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 90 tools

90 of 90 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 1 of 90 tools

1 tool is classified as irreversible and declares no limit.

high · no-expiry · All 90 tools

90 of 90 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 90 tools

90 of 90 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 47 of 90 tools

47 tools can modify data and declare no limit.

low · uncapped-read · 42 of 90 tools

42 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_project_export_reviewread declared
start_project_exportwrite assumed
get_project_export_statusread declared
get_project_export_commandread declared
get_integration_statusread declared
whoamiread declared
get_creditsread declared
list_projectsread declared
get_projectread declared
list_charactersread declared
plan_syncread declared
get_characterread declared
get_character_manifestread declared
list_character_posesread declared
list_assetsread declared
get_assetread declared
get_custom_fieldsread declared
get_framesread declared
list_mapsread declared
get_mapread declared
export_mapread declared
get_jobread declared
get_export_commandread declared
select_frameswrite assumed
duplicate_animationwrite assumed
create_animation_from_posewrite inferred
set_asset_runtime_intentwrite inferred
set_character_collision_roleswrite inferred
set_asset_collision_roleswrite inferred
set_asset_collision_bodywrite inferred
cancel_jobdelete inferred
approve_automatic_pose_fallbackwrite inferred
approve_directional_poseswrite inferred
frame_animationwrite assumed
rebuild_characterwrite assumed
mirror_animationwrite assumed
rematte_animationwrite assumed
phase_splitwrite assumed
reprocess_assetwrite assumed
create_projectwrite inferred
create_characterwrite inferred
generate_character_animationwrite assumed
generate_character_turnwrite assumed
resume_posewrite assumed
generate_posewrite assumed
animate_assetwrite assumed
revise_assetwrite assumed
regen_asset_pairwrite assumed
convert_texture_to_materialwrite assumed
fix_asset_seamswrite assumed
create_assetwrite inferred
retry_jobread inferred
generate_project_intakewrite assumed
generate_project_visionwrite assumed
suggest_motion_hintwrite assumed
get_subscription_allowancesread declared
retry_unusable_resultwrite assumed
import_asset_imagewrite assumed
list_ui_packsread declared
get_ui_packread declared
get_ui_pack_batch_recoveryread declared
resume_ui_pack_batchwrite assumed
recover_ui_pack_componentswrite assumed
get_ui_pack_batchread declared
list_ui_fontsread declared
get_project_style_guideread declared
save_project_style_guidewrite assumed
suggest_project_stylewrite assumed
create_ui_packwrite inferred
save_ui_pack_stylewrite inferred
validate_ui_component_layoutread inferred
generate_ui_packread inferred
revise_ui_pack_pngread inferred
rename_ui_componentwrite inferred
save_ui_component_defaultswrite assumed
replace_ui_component_pngwrite inferred
create_ui_compositionwrite inferred
get_ui_pack_export_commandread declared
run_map_playtestread declared
map_project_libraryread declared
map_workbench_contextread declared
prepare_map_editswrite inferred
map_authoring_contextread declared
map_authoring_schemaread declared
prepare_map_draftwrite assumed
get_map_draftread declared
preview_map_draftread inferred
commit_map_draftwrite inferred
list_map_revisionsread declared
restore_map_revisionwrite assumed
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.