LeashIndex Get the report

Index / calendar

ClusterHack

dev-clusterhack-clusterhack declares 60 capabilities across 60 tools, with 1 critical issue.

68/100 exposureElevated

Manifest recorded 2026-10-11 from tools/list on https://clusterhack.dev/mcp/, published in the official MCP registry as dev.clusterhack/clusterhack 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 60 tools

60 of 60 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 60 tools

60 of 60 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 60 tools

60 of 60 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 60 tools

60 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
event_rolesread declared
list_api_endpointsread declared
list_capabilitiesread declared
searchread declared
server_inforead declared
whoamiread declared
event_background_imagesread declared
event_citiesread declared
event_faqread declared
event_getread declared
event_info_blocksread declared
event_listread declared
event_nominationsread declared
event_presetsread declared
event_scheduleread declared
event_share_linksread declared
event_team_stagesread declared
event_typesread declared
event_brandingread declared
event_free_agentsread declared
event_my_membershipread declared
event_my_registration_answersread declared
event_registration_formread declared
invite_previewread declared
team_getread declared
team_listread declared
team_locationsread declared
team_matchmaking_teamsread declared
team_membersread declared
team_open_rolesread declared
team_postsread declared
team_readinessread declared
team_rolesread declared
team_seeking_membersread declared
submission_getread declared
submission_listread declared
submission_list_mediaread declared
submission_pageread declared
event_leaderboardread declared
showcase_browseread declared
company_about_usread declared
company_employeesread declared
company_employment_requestsread declared
company_ex_employeesread declared
company_getread declared
company_listread declared
company_rosterread declared
company_vacanciesread declared
event_sponsor_textread declared
event_sponsor_tiersread declared
event_sponsorsread declared
article_getread declared
article_languagesread declared
article_listread declared
article_titlesread declared
legal_inforead declared
tag_listread declared
tech_listread declared
account_ai_accessread declared
account_how_to_sign_inread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.