LeashIndex Get the report

Index / data

io.github.AImplifier/eeg-mcp

io-github-aimplifier-eeg-mcp declares 47 capabilities across 47 tools, with 2 critical issues.

94/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the PyPI package eeg-mcp==0.1.0 (published to PyPI as eeg-mcp, listed in the official MCP registry as io.github.AImplifier/eeg-mcp 0.1.0), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 47 tools

47 of 47 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 8 of 47 tools

8 tools are classified as irreversible and declare no limit.

high · no-expiry · All 47 tools

47 of 47 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 47 tools

47 of 47 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 17 of 47 tools

17 tools can modify data and declare no limit.

low · uncapped-read · 22 of 47 tools

22 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
list_boardsread inferred
start_streamwrite assumed
stop_streamwrite assumed
list_sessionsread inferred
stream_statusread inferred
read_windowread inferred
get_channelsread inferred
inspect_recordingread inferred
start_replaywrite assumed
replay_controlwrite assumed
list_recording_eventsread inferred
set_filterswrite inferred
clear_filtersdelete inferred
get_band_powerread inferred
get_psdread inferred
check_signal_qualityread inferred
log_eventwrite assumed
get_eventsread inferred
get_epoch_around_eventread inferred
clear_eventswrite assumed
list_stim_backendsread inferred
attach_stim_backendwrite assumed
detach_stim_backenddelete inferred
arm_stimwrite assumed
disarm_stimdelete inferred
send_stim_eventsend inferred
send_stim_trainsend inferred
stim_statusread inferred
start_monitorread inferred
stop_monitordelete inferred
list_monitorsread inferred
plot_streamwrite assumed
plot_spectrumwrite assumed
export_reportwrite inferred
start_recordingwrite assumed
stop_recordingwrite assumed
recording_statusread inferred
list_recordingsread inferred
recover_recordingdelete inferred
list_processorsread inferred
attach_processorwrite assumed
detach_processordelete inferred
processor_statusread inferred
get_processor_outputread inferred
run_processorwrite assumed
reset_processorswrite assumed
get_tokensread inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.