LeashIndex Get the report

Index / devtools

pg.ddx.io: the PostgreSQL community's memory

io-ddx-pg-archive declares 126 capabilities across 126 tools, with 1 critical issue. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

91/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://pg.ddx.io/mcp, published in the official MCP registry as io.ddx.pg/archive 2026.10.22. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 126 tools

126 of 126 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 126 tools

126 of 126 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 126 tools

126 of 126 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 1 of 126 tools

1 tool can modify data and declares no limit.

low · uncapped-read · 125 of 126 tools

125 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
retrieve_contextread declared
animal_historyread declared
animal_owner_contributionsread declared
blame_symbolread declared
browse_by_dateread declared
build_status_freshnessread declared
buildfarm_overviewread declared
check_upstream_statusread declared
code_index_statusread declared
codebase_mapread declared
commit_buildfarm_statusread declared
commit_historyread declared
commitfest_statsread declared
contribution_summaryread declared
detect_changesread declared
discussion_linksread declared
embedding_statusread declared
entry_branchesread declared
entry_historyread declared
find_breaksread declared
find_contributionsread declared
find_dead_coderead declared
find_entries_for_authorread declared
find_entries_for_threadread declared
find_entries_with_failures_onread declared
find_failing_patchesread declared
find_failing_runsread declared
find_passing_long_pendingread declared
find_patches_by_platform_statusread declared
find_patternread declared
find_rebase_needed_patchesread declared
find_related_discussionsread declared
find_similar_messagesread declared
get_animalread declared
get_attachmentread declared
get_author_messagesread declared
get_calleesread declared
get_callersread declared
get_commitfestread declared
get_communitiesread declared
get_communityread declared
get_contributorread declared
get_contributor_historyread declared
get_dependentsread declared
get_doc_pageread declared
get_entryread declared
get_execution_flowsread declared
get_impactread declared
get_inbox_inforead declared
get_inbox_statsread declared
get_inbox_summaryread declared
get_messageread declared
get_message_headersread declared
get_message_referencesread declared
get_new_messagesread declared
get_patch_branchesread declared
get_patch_build_historyread declared
get_patch_seriesread declared
get_raw_messageread declared
get_repo_sync_statsread declared
get_repository_summaryread declared
get_signatureread declared
get_source_inforead declared
get_symbolread declared
get_tests_forread declared
get_threadread declared
get_thread_referencesread declared
get_wiki_historyread declared
get_wiki_pageread declared
git_analyze_activityread declared
git_analyze_authorsread declared
git_analyze_bus_factorread declared
git_analyze_churnread declared
git_analyze_couplingread declared
git_analyze_hotspotsread declared
git_blameread declared
git_diffread declared
git_logread declared
git_searchread declared
git_show_fileread declared
history-ofread declared
hybrid_searchread declared
hybrid_search_coderead declared
list_animalsread declared
list_branchesread declared
list_commitfestsread declared
list_contributorsread declared
list_discord_channelsread declared
list_doc_versionsread declared
list_entriesread declared
list_inboxesread declared
list_projectsread declared
list_recentread declared
list_repositoriesread declared
list_sourcesread declared
list_threadsread declared
recent_commitfest_activityread declared
search_commitfestread declared
release_contributorsread declared
repository_statsread declared
searchread declared
search-regexread declared
search_all_sourcesread declared
search_discord_topicsread declared
search_docsread declared
search_patchesread declared
search_symbolsread declared
search_wikiread declared
semantic_searchread declared
semantic_search_coderead declared
symbols_in_fileread declared
regex_search_coderead declared
grep_repositoryread declared
find_string_literalsread declared
upcoming_eventsread declared
calendar_feedsread declared
combine_calendarswrite assumed
cross_referenceread declared
whats_newread declared
code_searchread declared
read_fileread declared
list_filesread declared
blameread declared
get_commitread declared
search_commitsread declared
get_ontologyread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-2891 tools/list on https://pg.ddx.io/mcp, published in the official MCP registry as io.ddx.pg/archive 2026.10.22
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.