LeashIndex Get the report

Index / storage

AIMFP

io-github-aryanduntley-aimfp declares 300 capabilities across 300 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-02 from tools/list answered by the PyPI package aimfp==1.70.0 (published to PyPI as aimfp, listed in the official MCP registry as io.github.aryanduntley/aimfp 1.70.0), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 300 tools

300 of 300 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · destructive-uncapped · 36 of 300 tools

36 tools are annotated by the server as destructive (destructiveHint) and declare no limit. In MCP that annotation marks a tool that may make destructive changes rather than only additive ones; it does not say the change cannot be undone.

high · no-expiry · All 300 tools

300 of 300 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 300 tools

300 of 300 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 93 of 300 tools

93 tools can modify data and declare no limit.

low · uncapped-read · 171 of 300 tools

171 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
acknowledge_noticewrite assumed
activate_user_directivewrite inferred
add_completion_pathwrite inferred
add_directive_preferencewrite inferred
add_file_flowswrite inferred
add_file_to_flowwrite inferred
add_file_to_modulewrite inferred
add_files_to_modulewrite inferred
add_flowwrite inferred
add_flow_themeswrite inferred
add_interactionwrite inferred
add_interactionswrite inferred
add_itemwrite inferred
add_itemswrite inferred
add_milestonewrite inferred
add_milestone_flowswrite inferred
add_modulewrite inferred
add_notewrite inferred
add_path_themeswrite inferred
add_project_entrywrite inferred
add_settings_entrywrite inferred
add_sidequestwrite inferred
add_subtaskwrite inferred
add_taskwrite inferred
add_themewrite inferred
add_tracking_notewrite inferred
add_types_functionswrite inferred
add_user_custom_entrywrite inferred
add_user_directive_notewrite inferred
add_user_settingwrite inferred
aimfp_enddestructive declared
aimfp_initwrite assumed
aimfp_runwrite assumed
aimfp_statusread declared
apply_audit_fixesdestructive declared
apply_state_changesetdestructive declared
audit_descriptionsread declared
audit_functionsread declared
audit_interactionsread declared
audit_trackingread declared
backfill_semantic_keyswrite assumed
batch_update_progresswrite inferred
blueprint_has_changedread declared
catalog_fileswrite assumed
catalog_functionswrite assumed
catalog_typeswrite assumed
check_directive_healthread declared
check_scheduled_backup_dueread declared
clear_watchdogdestructive declared
core_allowed_check_constraintsread declared
create_projectwrite inferred
create_project_backupdestructive declared
create_state_databasewrite inferred
create_user_branchwrite inferred
deactivate_user_directivewrite inferred
delete_completion_pathdestructive declared
delete_custom_return_statementdestructive declared
delete_filedestructive declared
delete_flowdestructive declared
delete_functiondestructive declared
delete_interactiondestructive declared
delete_itemdestructive declared
delete_milestonedestructive declared
delete_moduledestructive declared
delete_notedestructive declared
delete_project_entrydestructive declared
delete_reserveddestructive declared
delete_settings_entrydestructive declared
delete_sidequestdestructive declared
delete_subtaskdestructive declared
delete_taskdestructive declared
delete_themedestructive declared
delete_typedestructive declared
delete_type_functiondestructive declared
delete_user_custom_entrydestructive declared
detect_conflicts_before_mergeread declared
detect_external_changesread declared
detect_state_conflictsread declared
execute_mergedestructive declared
export_state_changesetwrite assumed
file_has_changedread declared
finalize_filewrite assumed
finalize_fileswrite assumed
finalize_functionwrite assumed
finalize_functionswrite assumed
finalize_typewrite assumed
finalize_typeswrite assumed
find_directive_by_intentread declared
find_directives_by_intent_keywordread declared
get_active_user_directivesread declared
get_all_completion_pathsread declared
get_all_directive_keywordsread declared
get_all_directive_namesread declared
get_all_directivesread declared
get_all_flowsread declared
get_all_infrastructureread declared
get_all_intent_keywords_with_countsread declared
get_all_modulesread declared
get_all_themesread declared
get_categoriesread declared
get_category_by_nameread declared
get_claude_permissionsread declared
get_completion_loop_targetread declared
get_completion_paths_by_statusread declared
get_core_fieldsread declared
get_core_schemaread declared
get_core_tablesread declared
get_current_branchread declared
get_current_commit_hashread declared
get_current_progressread declared
get_databasesread declared
get_directive_by_nameread declared
get_directive_contentread declared
get_directive_execution_statsread declared
get_directive_flowsread declared
get_directive_keywordsread declared
get_directives_by_categoryread declared
get_directives_by_typeread declared
get_directives_for_helperread declared
get_directives_with_intent_keywordsread declared
get_file_by_nameread declared
get_file_by_pathread declared
get_file_ids_from_flowsread declared
get_files_by_flowread declared
get_files_by_flow_contextread declared
get_flow_by_nameread declared
get_flows_for_fileread declared
get_flows_for_milestoneread declared
get_flows_for_themeread declared
get_flows_from_directiveread declared
get_flows_to_directiveread declared
get_fp_directive_indexread declared
get_from_coreread declared
get_from_core_whereread declared
get_from_projectread declared
get_from_project_whereread declared
get_from_settingsread declared
get_from_settings_whereread declared
get_from_user_customread declared
get_from_user_custom_whereread declared
get_function_by_nameread declared
get_functions_by_fileread declared
get_git_statusread declared
get_helper_by_nameread declared
get_helpers_are_subread declared
get_helpers_are_toolread declared
get_helpers_by_databaseread declared
get_helpers_for_directiveread declared
get_hooksread declared
get_incomplete_completion_pathsread declared
get_incomplete_itemsread declared
get_incomplete_milestonesread declared
get_incomplete_sidequestsread declared
get_incomplete_subtasksread declared
get_incomplete_subtasks_by_taskread declared
get_incomplete_tasksread declared
get_incomplete_tasks_by_milestoneread declared
get_infrastructure_by_typeread declared
get_interactions_by_fileread declared
get_interactions_by_functionread declared
get_items_for_sidequestread declared
get_items_for_subtaskread declared
get_items_for_taskread declared
get_merge_historyread declared
get_milestones_by_pathread declared
get_milestones_by_statusread declared
get_module_by_nameread declared
get_module_by_pathread declared
get_module_dependenciesread declared
get_module_filesread declared
get_module_for_fileread declared
get_module_functionsread declared
get_module_typesread declared
get_next_completion_pathread declared
get_notes_comprehensiveread declared
get_open_workread declared
get_pending_noticesread declared
get_projectread declared
get_project_fieldsread declared
get_project_json_parametersread declared
get_project_rootread declared
get_project_schemaread declared
get_project_tablesread declared
get_recent_directive_errorsread declared
get_settings_fieldsread declared
get_settings_json_parametersread declared
get_settings_schemaread declared
get_settings_tablesread declared
get_sidequest_filesread declared
get_sidequest_flowsread declared
get_sidequests_comprehensiveread declared
get_source_directoryread declared
get_state_operations_templateread declared
get_structure_healthread declared
get_subtasks_by_taskread declared
get_subtasks_comprehensiveread declared
get_supportive_contextread declared
get_system_promptread declared
get_task_contextread declared
get_task_filesread declared
get_task_flowsread declared
get_tasks_by_milestoneread declared
get_tasks_comprehensiveread declared
get_theme_by_nameread declared
get_themes_for_flowread declared
get_themes_for_pathread declared
get_tracking_notesread declared
get_tracking_settingsread declared
get_type_by_nameread declared
get_unassigned_filesread declared
get_user_custom_fieldsread declared
get_user_custom_json_parametersread declared
get_user_custom_schemaread declared
get_user_custom_tablesread declared
get_user_directive_by_nameread declared
get_user_directive_notesread declared
get_user_settingread declared
get_user_settingsread declared
get_wildcard_flowsread declared
init_user_directives_dbwrite assumed
link_files_to_taskwrite assumed
list_active_branchesread declared
list_project_backupsread declared
load_directive_preferencesread declared
merge_worker_branchdestructive declared
merge_worker_branchesdestructive declared
migrate_databaseswrite assumed
move_files_to_flowwrite inferred
move_flows_to_themewrite inferred
plan_disjoint_partitionsread declared
project_allowed_check_constraintsread declared
query_coreread declared
query_projectread declared
query_project_stateread declared
query_settingsread declared
query_user_customread declared
reconcile_pathswrite assumed
remove_file_from_flowdestructive declared
remove_file_from_moduledestructive declared
remove_files_from_moduledestructive declared
remove_flow_themesdestructive declared
remove_milestone_flowsdestructive declared
remove_path_themesdestructive declared
reorder_all_completion_pathswrite assumed
reorder_completion_pathwrite assumed
reserve_filewrite assumed
reserve_fileswrite assumed
reserve_functionwrite assumed
reserve_functionswrite assumed
reserve_typewrite assumed
reserve_typeswrite assumed
restore_project_backupdestructive declared
scan_call_graphread declared
scan_source_treeread declared
search_directivesread declared
search_functionsread declared
search_modulesread declared
search_notesread declared
search_tracking_notesread declared
search_typesread declared
search_user_directive_notesread declared
search_user_directivesread declared
set_custom_return_statementwrite inferred
summarize_state_changesetread declared
swap_completion_paths_orderwrite assumed
sync_git_statewrite inferred
toggle_tracking_featurewrite assumed
unlink_files_from_taskdestructive declared
update_completion_pathwrite inferred
update_directive_preferencewrite inferred
update_filewrite inferred
update_flowwrite inferred
update_functionwrite inferred
update_function_file_locationwrite inferred
update_functions_for_filewrite inferred
update_interactionwrite inferred
update_itemwrite inferred
update_itemswrite inferred
update_milestonewrite inferred
update_modulewrite inferred
update_notewrite inferred
update_projectwrite inferred
update_project_entrywrite inferred
update_project_rootwrite inferred
update_project_statewrite inferred
update_settings_entrywrite inferred
update_sidequestwrite inferred
update_source_directorywrite inferred
update_subtaskwrite inferred
update_taskwrite inferred
update_themewrite inferred
update_typewrite inferred
update_type_function_rolewrite inferred
update_user_custom_entrywrite inferred
update_user_settingwrite inferred
user_directives_allowed_check_constraintsread declared
user_preferences_allowed_check_constraintsread declared
validate_action_configread declared
validate_trigger_configread declared
verify_fanout_readyread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.