LeashIndex Get the report

Index / data

io.github.avansaber/seo-monster

io-github-avansaber-seo-monster declares 70 capabilities across 70 tools, with 2 critical issues.

93/100 exposureHigh exposure

Manifest recorded 2026-10-15 from tools/list answered by the PyPI package seo-monster==0.9.3 (published to PyPI as seo-monster, listed in the official MCP registry as io.github.avansaber/seo-monster 0.9.3), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 70 tools

70 of 70 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 7 of 70 tools

7 tools are classified as irreversible and declare no limit.

high · no-expiry · All 70 tools

70 of 70 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 70 tools

70 of 70 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 3 of 70 tools

3 tools can modify data and declare no limit.

low · uncapped-read · 60 of 70 tools

60 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
system_statusread declared
gsc_list_propertiesread declared
gsc_search_analyticsread declared
gsc_top_queriesread declared
gsc_top_pagesread declared
gsc_compare_periodsread declared
gsc_inspect_urlread declared
gsc_batch_inspect_urlsread declared
gsc_list_sitemapsread declared
gsc_submit_sitemapread inferred
gsc_request_indexingwrite inferred
gsc_query_opportunitiesread declared
gsc_query_gapsread declared
gsc_new_queriesread declared
gsc_top_pages_by_queryread declared
gsc_portfolio_summaryread declared
gsc_trending_pagesread declared
gsc_decaying_pagesread declared
gsc_coverage_auditread declared
ga4_run_reportread declared
ga4_top_landing_pagesread declared
ga4_traffic_by_channelread declared
ga4_organic_search_overviewread declared
ga4_setup_auditread declared
ga4_site_searchread declared
ga4_landing_page_conversionsread declared
psi_analyzeread declared
psi_opportunitiesread declared
cf_list_zonesread declared
cf_zone_inforead declared
cf_list_dnsread declared
cf_web_analyticsread declared
cf_purge_cachedestructive declared
cf_purge_cache_alldestructive declared
cf_settings_auditread declared
cf_list_redirectsread declared
cf_create_redirectdestructive declared
cf_delete_redirectdestructive declared
cf_bulk_redirect_upsertdestructive declared
cf_settings_updatedestructive declared
cf_managed_robotsdestructive declared
indexnow_submitwrite assumed
indexnow_bulk_submitwrite inferred
inspect_metaread declared
check_canonicalread declared
mixed_content_checkread declared
redirect_chain_auditread declared
robots_txt_validateread declared
robots_ai_postureread declared
sitemap_validateread declared
sitemap_healthread declared
crux_historyread declared
crux_snapshotread declared
inspect_schemaread declared
validate_schemaread declared
hreflang_consistency_checkread declared
internal_link_graphread declared
lighthouse_budgetread declared
content_opportunitiesread declared
ai_citation_readinessread declared
ai_referral_overviewread declared
gsc_keyword_expandread declared
internal_link_recommendread declared
rank_change_attributionread declared
topic_cluster_mapread declared
content_brief_dataread declared
serp_adjacency_expandread declared
keyword_universeread declared
onpage_serp_gapread declared
ai_citation_trackread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.