LeashIndex Get the report

Index / devtools

SwishrJobs

com-swishrjobs-swishrjobs declares 114 capabilities across 114 tools, with 3 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://swishrjobs.com/mcp, published in the official MCP registry as com.swishrjobs/swishrjobs 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 114 tools

114 of 114 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 2 of 114 tools

2 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 1 of 114 tools

1 tool is classified as moving money and declares no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 114 tools

114 of 114 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 114 tools

114 of 114 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 70 of 114 tools

70 tools can modify data and declare no limit.

low · uncapped-read · 42 of 114 tools

42 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
list_capabilitiesread inferred
get_performanceread inferred
select_capabilityread inferred
preflight_jobread inferred
submit_jobwrite assumed
submit_a2a_card_validatorread inferred
submit_accessibility_conformance_auditwrite assumed
submit_agent_cost_attributionwrite assumed
submit_agent_trace_analyserwrite assumed
submit_api_contract_diffread inferred
submit_backtest_overfitting_checkwrite assumed
submit_bank_statement_reconcilerwrite assumed
submit_boundary_value_generationwrite assumed
submit_cli_tool_scaffoldwrite assumed
submit_commerce_conformance_suiteread inferred
submit_compliance_evidence_packwrite assumed
submit_compliance_readiness_packwrite assumed
submit_cron_expression_checkread inferred
submit_csv_cleanwrite assumed
submit_csv_column_profilewrite assumed
submit_csv_date_normaliseread inferred
submit_csv_deduplicateread inferred
submit_csv_dialect_reportread inferred
submit_csv_json_transformationwrite assumed
submit_csv_missing_value_reportread inferred
submit_csv_preflightread inferred
submit_csv_quality_reportwrite assumed
submit_csv_to_json_rowswrite assumed
submit_dashboard_spec_from_questionsread inferred
submit_data_lineage_graphwrite inferred
submit_data_migration_readiness_packwrite assumed
submit_data_validation_moduleread inferred
submit_database_migration_reviewwrite assumed
submit_dataset_quality_reportwrite assumed
submit_dbt_test_generationwrite assumed
submit_dependency_vulnerability_triagewrite assumed
submit_dq_rules_generatorwrite assumed
submit_duplicate_group_reportwrite assumed
submit_edge_case_checkwrite assumed
submit_embedding_similarity_reportread inferred
submit_env_config_parsingwrite assumed
submit_env_file_checkread inferred
submit_eval_dataset_builderwrite inferred
submit_expense_policy_checkerread inferred
submit_feature_flag_auditread inferred
submit_field_mappingwrite inferred
submit_financial_ratio_reportwrite assumed
submit_fine_tune_data_formatterwrite assumed
submit_fx_rate_normaliserwrite assumed
submit_guardrail_policy_configread inferred
submit_html_text_extractionwrite assumed
submit_iban_bic_validatorread inferred
submit_invoice_data_extractionwrite assumed
submit_iso20022_validatorread inferred
submit_json_csv_conversionwrite assumed
submit_json_diffwrite assumed
submit_json_key_auditwrite assumed
submit_json_ndjson_checkread inferred
submit_json_schema_inferencewrite assumed
submit_json_schema_validationread inferred
submit_json_to_csv_rowswrite assumed
submit_key_normalisationwrite assumed
submit_kpi_definition_catalogueread inferred
submit_kubernetes_manifest_hardeningread inferred
submit_ledger_integrity_checkread inferred
submit_llm_output_schema_guardread inferred
submit_log_format_parserwrite assumed
submit_malformed_record_detectionwrite assumed
submit_markdown_table_renderingwrite assumed
submit_mcp_tool_schema_linterwrite assumed
submit_metadata_extractionwrite assumed
submit_model_card_generatorwrite assumed
submit_multi_agent_orchestration_planwrite assumed
submit_nested_flatteningwrite assumed
submit_ohlcv_gap_checkerread inferred
submit_openapi_conformance_checkread inferred
submit_package_manifest_checkread inferred
submit_parquet_partition_plannerread inferred
submit_pci_scope_mapperwrite assumed
submit_portfolio_risk_reportwrite assumed
submit_product_feed_gtin_checkread inferred
submit_prompt_regression_suitewrite assumed
submit_python_multifile_packagewrite assumed
submit_python_utility_modulewrite assumed
submit_rag_chunking_planread inferred
submit_readme_generationwrite assumed
submit_record_deduplicationdelete inferred
submit_regex_from_exampleswrite assumed
submit_regression_suite_generationwrite assumed
submit_release_readiness_gatewrite assumed
submit_requirements_pin_checkread inferred
submit_security_audit_packwrite assumed
submit_security_hardening_auditwrite assumed
submit_sepa_payment_file_builderpay inferred
submit_settlement_reliability_reportread inferred
submit_sql_to_dataframe_migrationread inferred
submit_star_schema_designerwrite assumed
submit_statistics_plan_checkerread inferred
submit_strategy_rule_compilerwrite inferred
submit_supply_chain_licence_auditwrite assumed
submit_terraform_module_reviewwrite assumed
submit_text_parser_modulewrite assumed
submit_time_series_anomaly_configwrite assumed
submit_token_cost_estimatorread inferred
submit_tool_permission_matrixwrite assumed
submit_trade_blotter_reconcilerwrite assumed
submit_unit_conversion_librarywrite assumed
submit_url_health_matrixread inferred
submit_vat_tax_calculatorwrite assumed
submit_webhook_payload_validationread inferred
submit_webhook_signature_verifyread inferred
submit_x402_endpoint_auditwrite assumed
submit_x402_endpoint_preflightwrite assumed
submit_xml_json_conversionwrite assumed
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.