NativeKeel
io-github-alicanakyol-nativekeel declares 9 capabilities across 9 tools, with 1 critical issue.
Issues
9 of 9 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.
9 of 9 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.
9 of 9 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.
9 tools can read data and declare no limit.
Declared capabilities
| Tool | Read as | Basis |
|---|---|---|
scan_project | read |
declared |
security_audit | read |
declared |
improve_app | read |
declared |
measure_bundle | read |
declared |
upgrade_plan | read |
declared |
upgrade_readiness | read |
declared |
check_library | read |
declared |
explain_error | read |
declared |
verify_upgrade | read |
declared |
Record history
| Recorded | Exposure | Source |
|---|---|---|
| 2026-10-15 | 31 | tools/list answered by the npm package nativekeel@0.1.87 (published to npm as nativekeel, listed in the official MCP registry as io.github.AlicanAkyol/nativekeel 0.1.87), run in an isolated container with no network access and placeholder credentials |
| 2026-10-12 | 26 | tools/list answered by the npm package nativekeel@0.1.70 (published to npm as nativekeel, listed in the official MCP registry as io.github.AlicanAkyol/nativekeel 0.1.70), run in an isolated container with no network access and placeholder credentials |
tools/list response and it will be re-scored and dated.
Corrections are published alongside the original, not in place of it.