LeashIndex Get the report

Index / messaging

REAPER MCP

com-twelvetake-reaper-mcp declares 180 capabilities across 180 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list answered by the PyPI package twelvetake-reaper-mcp==1.9.3 (published to PyPI as twelvetake-reaper-mcp, listed in the official MCP registry as com.twelvetake/reaper-mcp 1.9.3), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 180 tools

180 of 180 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 36 of 180 tools

36 tools are classified as irreversible and declare no limit.

high · no-expiry · All 180 tools

180 of 180 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 180 tools

180 of 180 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 80 of 180 tools

80 tools can modify data and declare no limit.

low · uncapped-read · 64 of 180 tools

64 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_track_countread declared
get_trackread declared
get_all_tracksread declared
get_master_trackread declared
insert_trackwrite inferred
create_click_trackwrite inferred
delete_trackdestructive declared
set_track_namewrite inferred
set_track_volumewrite inferred
set_track_panwrite inferred
set_track_mutewrite inferred
set_track_solowrite inferred
track_fx_get_countread declared
track_fx_get_listread declared
track_fx_add_by_nameread inferred
track_fx_moveread inferred
track_fx_deletedestructive declared
track_fx_get_nameread declared
track_fx_get_enabledread declared
track_fx_set_enabledread inferred
track_fx_get_num_paramsread declared
track_fx_get_param_nameread declared
track_fx_get_paramread declared
track_fx_set_paramread inferred
take_fx_get_countread declared
take_fx_get_listread declared
take_fx_add_by_namewrite inferred
take_fx_deletedestructive declared
take_fx_get_nameread declared
take_fx_get_enabledread declared
take_fx_set_enabledwrite inferred
take_fx_get_num_paramsread declared
take_fx_get_param_nameread declared
take_fx_get_paramread declared
take_fx_set_paramwrite inferred
get_takesread declared
get_active_takeread declared
set_active_takewrite inferred
explode_takesdestructive declared
crop_to_active_takedestructive declared
delete_takedestructive declared
select_comp_lanewrite assumed
create_sendsend inferred
delete_senddestructive declared
set_send_volumesend inferred
get_track_num_sendsread declared
set_send_dest_channelssend inferred
set_send_source_channelssend inferred
setup_sidechain_sendsend inferred
configure_reacomp_sidechainwrite assumed
setup_sidechain_compressionwrite assumed
playwrite assumed
stopwrite assumed
get_play_stateread declared
get_cursor_positionread declared
set_cursor_positionwrite inferred
save_projectdestructive declared
get_project_pathread declared
get_project_nameread declared
get_temporead declared
get_time_signatureread declared
add_mastering_chainwrite inferred
add_parallel_compressionwrite inferred
create_buswrite inferred
add_eqwrite inferred
add_compressorwrite inferred
add_limiterwrite inferred
create_midi_itemwrite inferred
get_midi_itemread declared
add_midi_notewrite inferred
add_midi_notes_batchwrite inferred
get_midi_notesread declared
delete_midi_notedestructive declared
clear_midi_itemdestructive declared
set_midi_note_velocitywrite inferred
transpose_midi_noteswrite assumed
nudge_midi_noteswrite assumed
get_selected_midi_notesread declared
select_midi_noteswrite assumed
set_midi_notewrite inferred
ramp_midi_note_velocitieswrite assumed
scale_midi_note_velocitieswrite assumed
strum_midi_noteswrite assumed
snap_midi_notes_to_scalewrite assumed
quantize_midi_noteswrite assumed
stretch_midi_noteswrite assumed
legato_midi_notesdelete inferred
humanize_midi_noteswrite assumed
remove_overlapping_midi_notesdestructive declared
insert_audio_filewrite inferred
get_track_itemsread declared
get_item_inforead declared
set_item_positionwrite inferred
set_item_lengthwrite inferred
delete_itemdestructive declared
duplicate_itemwrite assumed
split_itemwrite assumed
set_item_mutewrite inferred
set_item_volumewrite inferred
set_item_fade_inwrite inferred
set_item_fade_outwrite inferred
set_tempowrite inferred
set_time_signaturewrite inferred
create_projectdestructive declared
open_projectdestructive declared
render_projectdestructive declared
measure_loudnessread declared
measure_spectrumread declared
render_regiondestructive declared
add_markerwrite inferred
add_regionwrite inferred
get_markersread declared
get_regionsread declared
delete_markerdestructive declared
delete_regiondestructive declared
go_to_markerwrite inferred
go_to_regionwrite inferred
get_track_enveloperead declared
get_envelope_point_countread declared
add_envelope_pointwrite inferred
get_envelope_pointsread declared
delete_envelope_pointdestructive declared
clear_envelopedestructive declared
set_track_automation_modewrite inferred
arm_track_envelopewrite assumed
get_fx_enveloperead inferred
add_fx_envelope_pointwrite inferred
get_fx_envelope_pointsread declared
delete_fx_envelope_pointdestructive declared
clear_fx_envelopedestructive declared
undodestructive declared
redodestructive declared
get_undo_stateread declared
select_trackwrite assumed
select_all_trackswrite assumed
unselect_all_trackswrite assumed
get_selected_tracksread declared
select_all_itemswrite assumed
unselect_all_itemswrite assumed
get_selected_itemsread declared
copy_selected_itemswrite assumed
cut_selected_itemsdestructive declared
paste_itemswrite inferred
delete_selected_itemsdestructive declared
set_time_selectionwrite inferred
get_time_selectionread declared
clear_time_selectionwrite assumed
set_track_phasewrite inferred
set_track_widthwrite inferred
set_track_as_folderwrite inferred
arm_trackwrite assumed
set_track_inputwrite inferred
set_track_monitorwrite inferred
set_track_colorwrite inferred
get_track_peakread declared
get_track_peak_holdread declared
clear_all_peak_indicatorswrite assumed
get_track_master_sendread declared
set_track_master_sendsend inferred
run_actiondestructive declared
run_action_by_namedestructive declared
get_fx_presetsread declared
get_fx_presetread declared
set_fx_presetwrite inferred
save_fx_presetdestructive declared
get_eq_bandsread declared
set_eq_bandwrite inferred
get_eq_band_enabledread declared
set_eq_band_enabledwrite inferred
find_eqread inferred
get_track_fx_chunkread declared
get_project_lengthread declared
get_project_summaryread declared
get_play_positionread declared
recordwrite assumed
pausewrite assumed
toggle_repeatwrite assumed
get_repeat_stateread declared
zoom_to_selectionread inferred
zoom_to_projectread inferred

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-11100 tools/list answered by the PyPI package twelvetake-reaper-mcp==1.8.0 (published to PyPI as twelvetake-reaper-mcp, listed in the official MCP registry as com.twelvetake/reaper-mcp 1.8.0), run in an isolated container with no network access and no credentials
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.