LeashIndex Get the report

Index / storage

API Direct

io-apidirect-api-direct declares 145 capabilities across 145 tools, with 1 critical issue.

93/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://apidirect.io/mcp, published in the official MCP registry as io.apidirect/api-direct 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 145 tools

145 of 145 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 145 tools

145 of 145 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 145 tools

145 of 145 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 145 tools

145 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
list_skillsread declared
get_skillread declared
search_linkedinread declared
linkedin_person_detailsread declared
linkedin_person_postsread declared
linkedin_post_detailsread declared
linkedin_company_detailsread declared
linkedin_company_postsread declared
search_linkedin_companiesread declared
search_linkedin_jobsread declared
linkedin_job_detailsread declared
search_twitterread declared
search_twitter_usersread declared
twitter_user_profileread declared
twitter_user_tweetsread declared
twitter_user_followersread declared
twitter_user_followingread declared
twitter_verified_followersread declared
twitter_user_repliesread declared
twitter_tweet_detailsread declared
twitter_tweet_retweetsread declared
twitter_tweet_quotesread declared
twitter_tweet_commentsread declared
twitter_trendsread declared
search_redditread declared
search_reddit_commentsread declared
search_reddit_usersread declared
search_reddit_subredditsread declared
reddit_post_detailsread declared
reddit_post_commentsread declared
reddit_post_crosspostsread declared
reddit_user_profileread declared
reddit_user_postsread declared
reddit_user_commentsread declared
reddit_subreddit_detailsread declared
reddit_subreddit_postsread declared
reddit_subreddit_rulesread declared
reddit_trendingread declared
search_youtuberead declared
search_youtube_channelsread declared
get_youtube_commentsread declared
youtube_channel_detailsread declared
youtube_video_detailsread declared
search_instagramread declared
search_instagram_usersread declared
instagram_user_profileread declared
instagram_user_postsread declared
instagram_post_detailsread declared
instagram_user_followersread declared
instagram_user_followingread declared
instagram_user_storiesread declared
instagram_user_highlightsread declared
instagram_highlight_storiesread declared
instagram_post_commentsread declared
instagram_comment_repliesread declared
instagram_post_likesread declared
instagram_hashtag_postsread declared
search_threadsread declared
search_threads_usersread declared
threads_user_profileread declared
threads_user_postsread declared
truthsocial_user_postsread declared
search_blueskyread declared
search_bluesky_usersread declared
bluesky_user_profileread declared
bluesky_user_postsread declared
bluesky_user_followersread declared
bluesky_user_followingread declared
bluesky_user_likesread declared
bluesky_post_detailsread declared
bluesky_post_commentsread declared
bluesky_post_likesread declared
bluesky_post_quotesread declared
bluesky_post_repostsread declared
search_substackread declared
search_substack_usersread declared
search_substack_publicationsread declared
search_substack_notesread declared
substack_user_profileread declared
substack_user_postsread declared
substack_user_activityread declared
substack_publication_detailsread declared
substack_publication_postsread declared
substack_publication_recommendationsread declared
substack_post_detailsread declared
substack_post_commentsread declared
substack_post_likesread declared
substack_note_detailsread declared
substack_category_publicationsread declared
substack_category_feedread declared
substack_trendingread declared
search_tiktokread declared
search_tiktok_usersread declared
tiktok_user_profileread declared
tiktok_video_detailsread declared
tiktok_user_videosread declared
tiktok_user_likesread declared
tiktok_user_storiesread declared
tiktok_user_followersread declared
tiktok_user_followingread declared
tiktok_video_commentsread declared
tiktok_comment_repliesread declared
search_tiktok_hashtagsread declared
tiktok_hashtag_detailsread declared
tiktok_hashtag_videosread declared
tiktok_music_detailsread declared
tiktok_music_videosread declared
tiktok_playlist_detailsread declared
tiktok_playlist_videosread declared
facebook_page_detailsread declared
facebook_page_postsread declared
facebook_page_photosread declared
facebook_page_videosread declared
facebook_page_reelsread declared
facebook_page_reviewsread declared
facebook_group_detailsread declared
facebook_group_postsread declared
facebook_post_commentsread declared
search_facebook_postsread declared
search_facebook_pagesread declared
search_facebook_videosread declared
search_facebook_eventsread declared
search_facebook_locationsread declared
search_forumsread declared
search_newsread declared
search_webread declared
google_ai_moderead declared
search_placesread declared
place_detailsread declared
place_reviewsread declared
place_photosread declared
search_amazon_productsread declared
amazon_product_detailsread declared
amazon_seller_profileread declared
amazon_seller_reviewsread declared
amazon_seller_productsread declared
amazon_best_sellersread declared
trustpilot_company_reviewsread declared
search_trustpilot_companiesread declared
trustpilot_category_companiesread declared
trustpilot_category_newestread declared
trustpilot_category_detailsread declared
search_trustpilot_categoriesread declared
trustpilot_user_profileread declared
batch_requestsread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1692 tools/list on https://apidirect.io/mcp, published in the official MCP registry as io.apidirect/api-direct 1.0.0
2026-10-1186 tools/list on https://apidirect.io/mcp, published in the official MCP registry as io.apidirect/api-direct 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.