LeashIndex Get the report

Index / storage

io.github.alisaitteke/photoshop-mcp

io-github-alisaitteke-photoshop-mcp declares 128 capabilities across 128 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-15 from tools/list answered by the npm package @alisaitteke/photoshop-mcp@1.7.37 (published to npm as @alisaitteke/photoshop-mcp, listed in the official MCP registry as io.github.alisaitteke/photoshop-mcp 1.7.37), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 128 tools

128 of 128 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 46 of 128 tools

46 tools are classified as irreversible and declare no limit.

high · no-expiry · All 128 tools

128 of 128 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 128 tools

128 of 128 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 67 of 128 tools

67 tools can modify data and declare no limit.

low · uncapped-read · 15 of 128 tools

15 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
photoshop_pingread inferred
photoshop_submit_feedbackwrite assumed
photoshop_get_versionread declared
photoshop_create_documentwrite inferred
photoshop_get_document_inforead declared
photoshop_list_documentsread inferred
photoshop_set_active_documentwrite inferred
photoshop_save_documentdestructive declared
photoshop_close_documentdestructive declared
photoshop_create_layerwrite inferred
photoshop_delete_layerdestructive declared
photoshop_create_text_layerwrite inferred
photoshop_fill_layerdestructive declared
photoshop_fill_gradientdestructive declared
photoshop_get_layersread declared
photoshop_select_layer_by_namewrite assumed
photoshop_resize_imagedestructive declared
photoshop_crop_documentdestructive declared
photoshop_place_imagewrite assumed
photoshop_open_imagewrite assumed
photoshop_convert_to_smart_objectwrite assumed
photoshop_replace_smart_object_contentsdestructive declared
photoshop_edit_smart_object_contentswrite inferred
photoshop_create_smart_object_via_copywrite inferred
photoshop_fit_layer_to_documentdestructive declared
photoshop_scale_layerdestructive declared
photoshop_move_layerwrite inferred
photoshop_rotate_layerdestructive declared
photoshop_rasterize_layerdestructive declared
photoshop_set_layer_opacitywrite inferred
photoshop_set_layer_blend_modewrite inferred
photoshop_set_layer_visibilitywrite inferred
photoshop_set_layer_lockedwrite inferred
photoshop_rename_layerwrite inferred
photoshop_duplicate_layerwrite assumed
photoshop_merge_visible_layersdestructive declared
photoshop_flatten_imagedestructive declared
photoshop_apply_gaussian_blurdestructive declared
photoshop_apply_sharpendestructive declared
photoshop_apply_noisedestructive declared
photoshop_apply_motion_blurdestructive declared
photoshop_apply_high_passdestructive declared
photoshop_apply_smart_blurdestructive declared
photoshop_adjust_brightness_contrastdestructive declared
photoshop_adjust_hue_saturationdestructive declared
photoshop_auto_levelsdestructive declared
photoshop_auto_contrastdestructive declared
photoshop_adjust_curveswrite inferred
photoshop_desaturatedestructive declared
photoshop_invertdestructive declared
photoshop_list_fontsread declared
photoshop_install_fontread inferred
photoshop_set_text_fontwrite inferred
photoshop_set_text_colorwrite inferred
photoshop_set_text_alignmentwrite inferred
photoshop_update_text_contentwrite inferred
photoshop_set_text_stylewrite inferred
photoshop_set_text_rangeswrite inferred
photoshop_get_selection_boundsread declared
photoshop_select_ellipsewrite inferred
photoshop_expand_selectionwrite assumed
photoshop_contract_selectionwrite assumed
photoshop_feather_selectionwrite assumed
photoshop_save_selectionwrite assumed
photoshop_select_rectanglewrite inferred
photoshop_select_allwrite assumed
photoshop_deselectwrite assumed
photoshop_invert_selectionwrite assumed
photoshop_create_layer_maskwrite inferred
photoshop_delete_layer_maskdestructive declared
photoshop_apply_layer_maskdestructive declared
photoshop_select_subjectwrite inferred
photoshop_content_aware_filldestructive declared
photoshop_apply_gradient_maskdestructive declared
photoshop_create_clipping_maskwrite inferred
photoshop_release_clipping_maskdelete inferred
photoshop_play_actiondestructive declared
photoshop_execute_scriptdestructive declared
photoshop_undodestructive declared
photoshop_redodestructive declared
photoshop_get_historyread declared
photoshop_move_layer_to_positionwrite inferred
photoshop_move_layer_to_topwrite inferred
photoshop_move_layer_to_bottomwrite inferred
photoshop_move_layer_upwrite inferred
photoshop_move_layer_downwrite inferred
photoshop_get_stateread declared
photoshop_get_previewread inferred
photoshop_get_capabilitiesread declared
photoshop_generative_filldestructive declared
photoshop_generative_removedestructive declared
photoshop_generative_expanddestructive declared
photoshop_generative_upscaledestructive declared
photoshop_sky_replacementdestructive declared
photoshop_generate_imagewrite assumed
photoshop_neural_filterdestructive declared
photoshop_apply_layer_styledelete inferred
photoshop_apply_lutread inferred
photoshop_adjust_vibrancewrite inferred
photoshop_adjust_exposurewrite inferred
photoshop_apply_photo_filterwrite inferred
photoshop_apply_gradient_mapwrite inferred
photoshop_list_datasetsread declared
photoshop_import_datasetswrite inferred
photoshop_generate_from_datasetswrite inferred
photoshop_image_stackwrite assumed
photoshop_export_aswrite assumed
photoshop_list_artboardsread declared
photoshop_create_artboardwrite inferred
photoshop_set_active_artboardwrite inferred
photoshop_export_artboardswrite assumed
photoshop_recipe_remove_backgrounddelete inferred
photoshop_recipe_enhance_portraitwrite inferred
photoshop_recipe_prepare_for_webwrite assumed
photoshop_recipe_export_social_variantswrite inferred
photoshop_recipe_apply_color_gradewrite assumed
photoshop_recipe_frequency_separationwrite assumed
photoshop_recipe_batch_mockup_replacedestructive declared
photoshop_recipe_organize_layerswrite assumed
photoshop_recipe_gradient_fadedestructive declared
photoshop_recipe_sky_blendwrite assumed
photoshop_recipe_dodge_burnwrite assumed
photoshop_recipe_remove_distractiondestructive declared
photoshop_recipe_split_carouselwrite assumed
photoshop_recipe_batch_watermarkwrite assumed
photoshop_recipe_passport_photowrite assumed
photoshop_recipe_csv_to_cardswrite assumed
photoshop_recipe_sticker_outlinewrite assumed

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-14100 tools/list answered by the npm package @alisaitteke/photoshop-mcp@1.7.34 (published to npm as @alisaitteke/photoshop-mcp, listed in the official MCP registry as io.github.alisaitteke/photoshop-mcp 1.7.34), run in an isolated container with no network access and no credentials
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.