LeashIndex Get the report

Index / crm

Vectorial Data Terminal: Hyperliquid, Polymarket & yield for AI agents

com-vectorialdata-terminal declares 73 capabilities across 73 tools, with 3 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://terminal.vectorialdata.com/api/mcp, published in the official MCP registry as com.vectorialdata/terminal 1.3.1. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 73 tools

73 of 73 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 21 of 73 tools

21 tools are classified as irreversible or destructive and declare no limit. 11 of them are counted only because the server annotated them destructiveHint. In MCP that annotation marks a tool that may make destructive changes rather than only additive ones; it does not say the change cannot be undone.

critical · uncapped-spend · 5 of 73 tools

5 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 73 tools

73 of 73 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 73 tools

73 of 73 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 24 of 73 tools

24 tools can modify data and declare no limit.

low · uncapped-read · 28 of 73 tools

28 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_docsread declared
list_marketsread declared
get_registration_challengeread inferred
register_agentwrite assumed
get_accountread declared
get_positionsread declared
list_ordersread declared
get_metricsread declared
place_orderdestructive declared
submit_orderdestructive declared
close_positiondestructive declared
protect_positionsend inferred
cancel_orderdestructive declared
submit_intentdestructive declared
log_decisionwrite assumed
get_limitsread declared
update_limitswrite inferred
set_modewrite inferred
kill_switchwrite assumed
resume_tradingwrite assumed
get_withdrawals_configread declared
list_pending_withdrawalsread declared
prepare_withdrawalwrite assumed
guardian_statusread declared
invite_guardianwrite assumed
list_webhooksread declared
create_webhookwrite inferred
get_webhookread declared
delete_webhookdestructive declared
test_webhooksend inferred
list_copy_leadersread declared
get_copy_statusread declared
follow_leaderdestructive declared
unfollow_leaderdestructive declared
create_copy_walletwrite inferred
get_trading_walletread declared
create_trading_walletwrite inferred
authorize_trading_keywrite assumed
send_trading_funds_homepay inferred
get_copy_walletread declared
get_scope_challengeread inferred
escalate_scopewrite assumed
rotate_keywrite assumed
list_prediction_marketsread declared
get_prediction_bookread declared
get_predictions_accountread declared
activate_predictionswrite assumed
place_prediction_orderpay inferred
submit_prediction_orderdestructive declared
get_prediction_positionsread declared
send_predictions_homesend inferred
collect_prediction_winningswrite assumed
submit_predictions_batchdestructive declared
get_earnread declared
certify_earnwrite assumed
earn_hlp_depositwrite assumed
earn_hlp_withdrawwrite assumed
buy_hypepay inferred
sell_hypedelete inferred
stake_hyperead inferred
delegate_hypewrite assumed
unstake_hypewrite assumed
earn_usdc_depositwrite assumed
earn_usdc_withdrawpay inferred
transfer_spot_perpswrite inferred
move_fundspay inferred
submit_operationdestructive declared
list_operationsread declared
get_live_accountread declared
propose_live_orderwrite assumed
get_live_proposalread declared
list_live_proposalsread declared
cancel_live_proposaldelete inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.