LeashIndex Get the report

Index / devtools

io.github.alex-jordan547/renforge

io-github-alex-jordan547-renforge declares 55 capabilities across 55 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-14 from tools/list answered by the PyPI package renforge==0.7.3 (published to PyPI as renforge, listed in the official MCP registry as io.github.alex-jordan547/renforge 0.7.3), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 55 tools

55 of 55 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 26 of 55 tools

26 tools are classified as irreversible and declare no limit.

high · no-expiry · All 55 tools

55 of 55 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 55 tools

55 of 55 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · 29 of 55 tools

29 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
renforge_inforead declared
renforge_contextread declared
renforge_inspect_imageread declared
renforge_inspect_projectread declared
renforge_scan_projectread declared
renforge_find_referencesread declared
renforge_parse_lintread declared
renforge_launchdestructive declared
renforge_launch_statusread declared
renforge_jumpdestructive declared
renforge_new_gamedestructive declared
renforge_stopdestructive declared
renforge_game_stateread declared
renforge_game_state_compactread declared
renforge_inspect_screenread declared
renforge_evaldestructive declared
renforge_set_vardestructive declared
renforge_get_vardestructive declared
renforge_poll_eventsread declared
renforge_get_errorsread declared
renforge_wait_untildestructive declared
renforge_advancedestructive declared
renforge_controldestructive declared
renforge_send_inputdestructive declared
renforge_savesdestructive declared
renforge_list_choicesread declared
renforge_select_choicedestructive declared
renforge_list_ui_elementsread declared
renforge_click_elementdestructive declared
renforge_hover_elementdestructive declared
renforge_get_ui_element_boundsread declared
renforge_editordestructive declared
renforge_click_atdestructive declared
renforge_get_displayable_boundsread declared
renforge_position_elementdestructive declared
renforge_hit_testread declared
renforge_diff_screenshotsread declared
renforge_scene_treedestructive declared
renforge_measureread declared
renforge_screenshotread declared
renforge_capture_screenshotdestructive declared
renforge_estimate_translationread declared
renforge_find_image_on_screenread declared
renforge_run_scenariodestructive declared
renforge_autopilotdestructive declared
renforge_assetsread declared
renforge_languagesread declared
renforge_translation_statsread inferred
renforge_generate_translationsdestructive declared
renforge_export_dialoguedestructive declared
renforge_web_builddestructive declared
renforge_distributedestructive declared
renforge_search_docsread inferred
renforge_get_docread inferred
renforge_list_docsread inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.