LeashIndex Get the report

Index / data

SmartTools

io-github-9thshini-smart-tools declares 74 capabilities across 74 tools, with 2 critical issues.

99/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list on https://smart-tools.xyz/mcp, published in the official MCP registry as io.github.9thShini/smart-tools 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 74 tools

74 of 74 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 2 of 74 tools

2 tools are classified as irreversible and declare no limit.

high · no-expiry · All 74 tools

74 of 74 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 74 tools

74 of 74 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 68 of 74 tools

68 tools can modify data and declare no limit.

low · uncapped-read · 4 of 74 tools

4 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
length_converterwrite assumed
weight_converterwrite assumed
temperature_converterwrite assumed
area_converterwrite assumed
volume_converterwrite assumed
speed_converterwrite assumed
pressure_converterwrite assumed
angle_converterwrite assumed
energy_converterwrite assumed
data_converterwrite assumed
time_converterwrite assumed
loan_calculatorwrite assumed
mortgage_calculatorwrite assumed
compound_interest_calculatorwrite assumed
vat_calculatordelete inferred
tip_calculatorwrite assumed
discount_calculatorwrite assumed
percentage_calculatorwrite assumed
salary_calculatorwrite assumed
margin_calculatorwrite assumed
unit_price_calculatorread inferred
fuel_cost_calculatorwrite assumed
electricity_cost_calculatorwrite assumed
bmi_calculatorwrite assumed
bmr_calculatorwrite assumed
body_fat_calculatorwrite assumed
ideal_weight_calculatorwrite assumed
due_date_calculatorread inferred
age_calculatorwrite assumed
date_difference_calculatorwrite assumed
hours_calculatorwrite assumed
aspect_ratio_calculatorwrite assumed
standard_deviation_calculatorwrite assumed
fraction_calculatorwrite assumed
triangle_calculatorwrite assumed
pace_calculatorwrite assumed
subnet_calculatorwrite assumed
color_converterwrite assumed
gpa_calculatorwrite assumed
scientific_calculatorwrite assumed
height_converterwrite assumed
base64write assumed
case_converterwrite assumed
html_entitieswrite assumed
url_encoderwrite assumed
slug_generatorwrite assumed
remove_duplicatesdelete inferred
text_counterread inferred
text_diffwrite assumed
lorem_ipsumwrite assumed
number_basewrite assumed
timestamp_converterwrite assumed
transliterationwrite assumed
uuid_generatorwrite assumed
hash_generatorwrite assumed
jwt_decoderwrite assumed
cron_parserwrite assumed
regex_testerwrite assumed
layout_fixerwrite assumed
wcag_contrast_checkerwrite assumed
csv_to_jsonwrite assumed
csv_to_sqlwrite inferred
table_to_csvwrite assumed
markdown_tablewrite assumed
json_formatterread inferred
gitignore_generatorwrite assumed
gradient_generatorwrite assumed
htaccess_generatorwrite assumed
meta_tag_generatorwrite assumed
random_number_generatorwrite assumed
robots_txt_generatorwrite assumed
utm_builderwrite assumed
file_hashwrite assumed
password_generatorwrite inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.