LeashIndex Get the report

Index / other

Avalanche AVAX MCP

io-github-airpote-avalanche-docs declares 48 capabilities across 48 tools, with 1 critical issue.

64/100 exposureElevated

Manifest recorded 2026-10-11 from tools/list on https://build.avax.network/api/mcp, published in the official MCP registry as io.github.Airpote/avalanche-docs 1.0.1. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 48 tools

48 of 48 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 48 tools

48 of 48 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 48 tools

48 of 48 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 3 of 48 tools

3 tools can modify data and declare no limit.

low · uncapped-read · 45 of 48 tools

45 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
docs_searchread inferred
docs_fetchread inferred
docs_list_sectionsread inferred
cli_lookup_commandread inferred
rpc_lookup_methodread inferred
acp_lookupread inferred
acp_listread inferred
avalanche_docs_searchread inferred
avalanche_docs_fetchread inferred
avalanche_docs_list_sectionsread inferred
blockchain_lookup_transactionread inferred
blockchain_lookup_subnetread inferred
blockchain_lookup_chainread inferred
blockchain_lookup_validatorread inferred
platform_get_heightread inferred
platform_get_blockread inferred
platform_get_block_by_heightread inferred
platform_get_blockchainsread inferred
platform_get_subnetsread inferred
platform_get_current_validatorsread inferred
platform_get_pending_validatorsread inferred
platform_get_staking_asset_idread inferred
platform_get_min_stakeread inferred
platform_get_total_stakeread inferred
platform_get_balanceread inferred
platform_get_utxosread inferred
platform_get_txread inferred
platform_get_tx_statusread inferred
platform_get_current_supplyread inferred
platform_get_validators_atread inferred
info_get_node_versionread inferred
info_get_network_idread inferred
info_get_network_nameread inferred
info_get_blockchain_idread inferred
info_is_bootstrappedread inferred
info_get_tx_feeread inferred
info_peersread inferred
info_acpsread inferred
blockchain_get_native_balanceread inferred
blockchain_get_contract_inforead inferred
blockchain_lookup_addressread inferred
onchain_lookupread inferred
onchain_activitywrite assumed
chain_statsread inferred
onchain_queryread inferred
build_planwrite assumed
console_linkread inferred
console_flowwrite assumed
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.