LeashIndex Get the report

Index / crm

io.apis/apis-io

io-apis-apis-io declares 142 capabilities across 142 tools, with 2 critical issues.

97/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://apis.io/mcp, published in the official MCP registry as io.apis/apis-io 1.3.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 142 tools

142 of 142 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 3 of 142 tools

3 tools are classified as irreversible and declare no limit.

high · no-expiry · All 142 tools

142 of 142 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 142 tools

142 of 142 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 9 of 142 tools

9 tools can modify data and declare no limit.

low · uncapped-read · 130 of 142 tools

130 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
apis_io_searchread declared
get_pricesread declared
get_playground_apisread declared
find_apisread declared
get_apiread declared
find_providersread declared
get_providerread declared
find_tagsread declared
get_tagread declared
find_industriesread declared
get_industryread declared
find_estatesread declared
get_estateread declared
get_provider_estateread declared
find_regionsread declared
get_regionread declared
find_countriesread declared
get_countryread declared
find_areasread declared
get_arearead declared
find_regulationsread declared
get_regulationread declared
find_extensionsread declared
get_extensionread declared
find_ratingsread declared
get_provider_ratingread declared
find_cohortsread declared
get_cohortread declared
find_tag_groupsread declared
get_tag_groupread declared
tag_group_tagsread declared
cohort_statsread declared
cohort_rankingsread declared
cohort_scoresread declared
find_operationsread declared
deprecated_operationsread declared
cohort_historyread declared
cohort_failuresread declared
cohort_capabilitiesread declared
compare_cohortsread declared
get_provider_operationsread declared
get_provider_toolsread declared
get_provider_schemaread declared
get_provider_facetsread declared
get_agent_readinessread declared
find_agent_readinessread declared
agent_readiness_dimensionsread declared
find_capabilitiesread declared
get_capabilityread declared
get_capability_edgesread declared
get_provider_business_capabilitiesread declared
get_provider_capabilitiesread declared
get_provider_evidenceread declared
get_rating_rubricread declared
find_artifactsread declared
compare_providersread declared
gap_analysisread declared
whats_changedread declared
recommend_stackread declared
get_provider_apisread declared
get_provider_artifactsread declared
get_api_artifactsread declared
get_openapiread declared
get_provider_onboardingread declared
find_similar_providersread declared
find_similar_apisread declared
get_industry_leadersread declared
get_region_leadersread declared
get_country_leadersread declared
get_area_leadersread declared
get_rating_historyread declared
find_rating_moversread declared
story_leadsread declared
what_can_i_fixread declared
readiness_gatesread declared
simulate_fixesread declared
claim_listingread inferred
generate_artifactwrite assumed
submit_artifactwrite assumed
correct_factswrite assumed
dispute_findingread inferred
set_visibilitywrite inferred
watch_listingread inferred
list_watchesread declared
unwatch_listingdestructive declared
request_checkwrite inferred
check_statusread declared
find_agentsread declared
register_agentwrite assumed
report_gapwrite assumed
my_checksread declared
export_datasetread declared
industry_gap_analysisread declared
export_stackread declared
insights_overviewread declared
find_company_insightsread declared
insights_dimensionsread declared
insights_adoptionread declared
insights_industriesread declared
get_company_insightread declared
company_gapsread declared
match_providersread declared
find_vcsread declared
get_vcread declared
vc_portfolioread declared
find_investorsread declared
resolveread declared
enrich_providerread declared
save_searchread inferred
my_workspaceread declared
list_saved_searchesread declared
run_saved_searchread declared
saved_search_net_newread inferred
delete_saved_searchdestructive declared
create_listread inferred
list_listsread declared
get_listread declared
add_to_listread inferred
delete_listdestructive declared
find_openapisread declared
find_asyncapisread declared
find_channelsread declared
find_graphqlread declared
find_arazzoread declared
find_mcpread declared
find_skillsread declared
find_rulesread declared
find_overlaysread declared
find_scopesread declared
find_securityread declared
find_plansread declared
find_rate_limitsread declared
find_finopsread declared
find_collectionsread declared
find_json_ldread declared
find_json_schemasread declared
find_json_structuresread declared
find_examplesread declared
find_postmanread declared
find_apis_jsonread declared
submit_feedbackwrite assumed
report_correctionwrite assumed

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1196 tools/list on https://apis.io/mcp, published in the official MCP registry as io.apis/apis-io 1.3.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.