LeashIndex Get the report

MCP permission history — data licence

Every MCP manifest the index has recorded, dated, with each tool classified, and every permission change between consecutive records of a server — as files you can load into your own systems and build on.

As exported on 2026-10-21: 26,836 dated manifest records across 21,831 servers, 2,110 permission changes between consecutive records, and 13,891 unanswered-ledger rows, in 22 gzipped JSON Lines files (141 MB).

The history, in bulk, with the right to use it in a product

  • Every recorded tools/list response, as it was returned, with the date and where it came from
  • Each tool's classification — read, write, send, delete, pay — and whether the server declared it or its name did
  • Every change between consecutive records: tools added, removed and reclassified, with exposure before and after
  • First-listed dates, and the unanswered ledger with what each endpoint returned and since when
  • Refreshed after each weekly crawl; download as often as you like for 365 days
  • A licence to use the data inside your own products and services — see the terms below
$5,000 One payment · 365 days of access and updates
No account · no automatic renewal
Buy the licence → $5,000 is the whole amount: any tax is already in it. Checkout is run by Link, by Stripe, so that is the name on your statement.

What stays free

The current snapshot of every listing (index.json), the permission changelog feed, the new-server feed and the unanswered ledger are public and stay public, for your own use. The licence is for the dated history in bulk and for building it into something you offer to others.

What the licence allows

The full terms are in the Terms. The licence is sold on those terms only: there is no signed or negotiated version. A receipt or an invoice in your company's name comes from the receipt Link emails you when you pay.

Good to know

How do I download after buying?

This page lists each file with a download button once your purchase is confirmed. Your browser sends the signed proof of purchase with each request; nothing else about you is sent or stored.

What format is it?

Gzipped JSON Lines. Each line is one object with a type of record, change or unanswered. manifest.json lists every file with its line count, size and SHA-256.

How deep is the history?

The index began recording in September 2026 and has covered the whole registry since 11 October 2026. A server has one record for each time its manifest changed, plus its current one. The figures at the top of this page are the export's own counts.

Does buying change any listing?

No. Buying anything here never changes a listing, a score or a ranking — see Independence.

Can I get a refund?

Yes. If the files do not download or are not what this page describes, ask within 14 days from the receipt Link sent you when you paid. Terms.