LeashIndex Get the report

Index / devtools

Crank Protocol

ing-crank-crank declares 196 capabilities across 196 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://mcp.crank.ing/mcp, published in the official MCP registry as ing.crank/crank 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · irreversible-uncapped · 56 of 196 tools

56 tools are classified as irreversible and declare no limit.

critical · no-revocation · All 196 tools

196 of 196 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · uncapped-spend · 1 of 196 tools

1 tool is classified as moving money and declares no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 196 tools

196 of 196 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 196 tools

196 of 196 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 36 of 196 tools

36 tools can modify data and declare no limit.

low · uncapped-read · 104 of 196 tools

104 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
jupiter_swapdestructive declared
verify_transactionread declared
get_quotesread declared
get_balancesread declared
portfolio_snapshotread declared
set_alertwrite inferred
set_ooda_consentwrite inferred
get_ooda_statusread declared
declare_jurisdictionwrite assumed
list_alertsread declared
token_inforead declared
evm_balancesread declared
evm_token_priceread declared
evm_swap_quoteread declared
evm_swapdestructive declared
verify_tokenread declared
get_transaction_historyread declared
backtest_strategyread declared
get_ml_signalread declared
detect_regimeread declared
get_risk_assessmentread declared
get_indicatorsread declared
sr_detect_levelsread declared
sr_configure_strategyread declared
sr_backtestread declared
asset_classificationread declared
get_disclaimersread declared
perp_open_longdestructive declared
perp_open_shortdestructive declared
perp_closedestructive declared
perp_modifydestructive declared
perp_positionsread declared
perp_marketsread declared
perp_funding_ratesread declared
place_perp_orderdestructive declared
close_perp_positiondestructive declared
cancel_perp_orderdestructive declared
set_perp_tpsldestructive declared
perp_positions_allread declared
perp_markets_allread declared
perp_funding_rates_allread declared
get_venue_statusread declared
sidecar_healthread declared
verify_treasury_settlement_statusread declared
lend_depositdestructive declared
lend_borrowdestructive declared
lend_repaypay inferred
get_lending_ratesread declared
get_health_factorread declared
set_liquidation_alertwrite inferred
flash_loandestructive declared
liquid_stakedestructive declared
unstake_lstdestructive declared
get_lst_yieldsread declared
lst_swapdestructive declared
get_ilo_detailsread declared
get_my_pledge_statusread declared
pledge_to_ilodestructive declared
claim_ilo_tokensdestructive declared
short_opendestructive declared
short_closedestructive declared
short_statusread declared
leverage_longdestructive declared
leverage_closedestructive declared
get_bridge_quoteread declared
bridge_indestructive declared
bridge_outdestructive declared
get_bridge_statusread declared
create_agent_walletwrite inferred
enable_agent_walletwrite assumed
poll_agent_wallet_enablewrite inferred
request_wallet_policy_looseningwrite inferred
poll_wallet_policy_looseningwrite inferred
set_wallet_policywrite inferred
kill_walletdestructive declared
pause_walletwrite assumed
resume_walletwrite assumed
wallet_statusread declared
get_trading_limitsread declared
set_trading_limitswrite inferred
set_permission_modewrite inferred
request_permission_mode_changewrite inferred
poll_permission_mode_changewrite inferred
approve_proposalwrite inferred
set_agnta_grantwrite inferred
clear_agnta_grantdelete inferred
request_agnta_grant_clearwrite inferred
poll_agnta_grant_clearwrite inferred
request_agnta_identity_registrationwrite inferred
submit_agnta_identity_registrationwrite assumed
poll_agnta_identity_registrationwrite assumed
register_counterparty_setwrite inferred
authorize_session_signerwrite assumed
request_session_signer_authorizationwrite inferred
poll_session_signer_authorizationwrite inferred
revoke_session_signerdelete inferred
list_session_signersread declared
register_integratorwrite assumed
register_referrerwrite inferred
get_integrator_statsread declared
get_integrator_earningsread declared
get_venue_healthread declared
get_venue_risk_scoreread declared
get_all_venues_statusread declared
venue_risk_comparisonread declared
trade_equitydestructive declared
equity_marketsread declared
equity_quoteread declared
equity_positionsread declared
equity_corporate_eventsread declared
equity_market_hoursread declared
get_token_classificationread declared
register_agentwrite assumed
discover_agentsread declared
get_agent_profileread declared
update_agent_profilewrite inferred
publish_strategysend inferred
discover_strategiesread declared
get_leaderboardread declared
clone_strategysend inferred
report_registry_installwrite assumed
send_token_socialdestructive declared
bulk_send_socialdestructive declared
get_social_sendsread declared
claim_statusread declared
get_crank_scoreread declared
get_scoreread declared
get_score_leaderboardread declared
get_questsread declared
check_claim_statusread declared
get_usage_reportread declared
get_rate_limitsread declared
get_market_briefingread declared
get_source_accuracyread declared
get_regulatory_updatesread declared
get_technology_updatesread declared
get_consensusread declared
get_contrarian_signalsread declared
get_signalsread declared
get_token_risk_assessmentread declared
get_market_regimeread declared
list_signal_catalogread declared
get_source_weightsread declared
get_cross_exchangeread declared
get_arb_discrepanciesread declared
get_strategy_suggestionsread declared
intelligence_suggestion_approvedestructive declared
get_ilo_adoption_statusread declared
strategy_dca_createdestructive declared
strategy_equity_dca_createdestructive declared
strategy_stoploss_createdestructive declared
strategy_protect_createdestructive declared
strategy_hedge_createdestructive declared
strategy_rebalance_createdestructive declared
strategy_vault_createdestructive declared
strategy_snipe_createdestructive declared
strategy_momentum_createdestructive declared
strategy_sentiment_createdestructive declared
strategy_yield_farm_createdestructive declared
strategy_copy_wallet_createdestructive declared
strategy_market_make_createdestructive declared
strategy_arb_createdestructive declared
strategy_perp_grid_createdestructive declared
strategy_basis_trade_createdestructive declared
strategy_statusread declared
strategy_modifydestructive declared
strategy_canceldelete inferred
strategy_pausewrite assumed
strategy_resumedestructive declared
strategy_listread declared
search_toolsread declared
get_trading_workflowread declared
journal_appendwrite assumed
journal_queryread declared
get_my_performanceread declared
suggest_parameter_adjustmentread declared
get_journal_cardread declared
share_journal_cardread declared
unpublish_journal_cardread declared
get_portfolio_charterread declared
set_portfolio_charterwrite inferred
register_webhookwrite inferred
list_webhooksread declared
delete_webhookdelete inferred
get_collective_insightsread declared
get_strategy_leaderboardread declared
get_signal_effectivenessread declared
get_emerging_patternsread declared
get_strategy_evolution_reportread declared
propose_template_updateread declared
get_my_contribution_scoreread declared
propose_allocationread declared
compose_strategyread declared
strategy_composite_createdestructive declared
create_execution_intentdestructive declared
get_intent_statusread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-16100 tools/list on https://mcp.crank.ing/mcp, published in the official MCP registry as ing.crank/crank 1.0.0
2026-10-11100 tools/list on https://mcp.crank.ing/mcp, published in the official MCP registry as ing.crank/crank 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.