LeashIndex Get the report

Index / messaging

agentsvc.io

io-agentsvc-services declares 130 capabilities across 130 tools, with 2 critical issues.

95/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://agentsvc.io/mcp, published in the official MCP registry as io.agentsvc/services 2.6.1. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 130 tools

130 of 130 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 3 of 130 tools

3 tools are classified as irreversible and declare no limit.

high · no-expiry · All 130 tools

130 of 130 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 130 tools

130 of 130 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 1 of 130 tools

1 tool can modify data and declares no limit.

low · uncapped-read · 126 of 130 tools

126 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
screenshotread declared
weatherread declared
exchange_ratesread declared
html_to_pdfread declared
ip_lookupread declared
webpage_readerread declared
dns_lookupread declared
qr_coderead declared
web_searchread declared
translateread declared
email_validateread declared
ssl_checkread declared
whoisread declared
crypto_pricesread declared
pdf_extractread declared
phone_validateread declared
geocoderead declared
news_searchread declared
ocrread declared
web_scraperead declared
rss_fetchread declared
url_statusread declared
evm_balanceread declared
barcoderead declared
image_resizeread declared
timezoneread declared
web_read_batchread declared
web_scrape_batchread declared
prediction_marketsread declared
hyperliquidread declared
defi_yieldsread declared
erc20_inforead declared
evm_txread declared
holidaysread declared
vat_validateread declared
iban_validateread declared
company_lookupread declared
sec_filingsread declared
gas_priceread declared
product_lookupread declared
language_detectread declared
useragent_parseread declared
macro_dataread declared
sanctions_screenread declared
site_mapread declared
site_crawlread declared
email_verifyread declared
token_securityread declared
perp_fundingread declared
defi_tvlread declared
crypto_newsread declared
search_readread declared
paper_searchread declared
dev_searchread declared
trends_hotread declared
cve_lookupread declared
domain_checkread declared
vin_decoderead declared
postal_coderead declared
airport_statusread declared
satellite_imageread declared
satellite_compareread declared
chart_renderread declared
diagram_renderread declared
doc_convertread declared
doc_parseread declared
tech_stackread declared
text_embedread declared
ttsread declared
discussion_searchread declared
token_verdictread declared
token_precheckread declared
package_checkread declared
citation_checkread declared
token_flowsread declared
token_smart_moneyread declared
wallet_portfolioread declared
iota_notarizeread declared
iota_verifyread declared
iota_txread declared
iota_addressread declared
iota_networkread declared
iota_watchread declared
btc_addressread declared
btc_txread declared
btc_feesread declared
btc_watchread declared
btc_timestampread declared
btc_timestamp_verifyread declared
tron_addressread declared
tron_watchread declared
sui_addressread declared
sui_txread declared
sui_networkread declared
sui_watchread declared
page_watchread declared
feed_watchread declared
wallet_watchread declared
token_watchread declared
company_briefread declared
accessibility_checkread declared
privacy_checkread declared
company_enrichread declared
page_summarizeread declared
page_extractread declared
answer_with_sourcesread declared
token_ai_verdictread declared
prompt_injection_checkread declared
news_sentimentread declared
image_alt_textread declared
seo_metaread declared
scam_message_checkread declared
invoice_extractread declared
text_classifyread declared
pii_redactread declared
token_simulateread declared
token_liquidityread declared
erc20_transfersread declared
kyb_checkread declared
domain_complianceread declared
site_auditread declared
research_reportread declared
audio_transcriberead declared
agent_memorydestructive declared
agent_inboxdestructive declared
service_finderread declared
agent_runread declared
watch_createwrite inferred
watch_listread declared
watch_deletedestructive declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1692 tools/list on https://agentsvc.io/mcp, published in the official MCP registry as io.agentsvc/services 2.5.0
2026-10-1190 tools/list on https://agentsvc.io/mcp, published in the official MCP registry as io.agentsvc/services 2.2.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.