LeashIndex Get the report

Index / data

SiteCheck Web Intel

io-github-bck-stack-sitecheck-web-intel declares 129 capabilities across 129 tools, with 1 critical issue. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

91/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://api.webintel-api.workers.dev/mcp?ref=registry, published in the official MCP registry as io.github.bck-stack/sitecheck-web-intel 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 129 tools

129 of 129 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 129 tools

129 of 129 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 129 tools

129 of 129 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 129 tools

129 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
security_dns_recordsread declared
security_whois_rdapread declared
security_ssl_cert_chainread declared
security_crtsh_transparencyread declared
security_ip_geolocation_asnread declared
security_security_headersread declared
security_dmarc_spf_dkimread declared
security_urlhaus_malwareread declared
security_phishtank_checkread declared
security_cve_nvd_lookupread declared
security_tor_exit_nodesread declared
security_vpn_proxy_detectorread declared
security_shodan_host_summaryread declared
security_censys_exposureread declared
security_abuseipdb_checkread declared
security_grey_noise_noiseread declared
security_hibp_breach_checkread declared
security_cisa_known_exploitsread declared
security_open_port_scannerread declared
security_dns_propagationread declared
security_reverse_dns_ptrread declared
security_bgp_prefix_originread declared
security_dnssec_validatorread declared
security_cors_misconfigread declared
security_cookie_securityread declared
security_subdomain_takeoverread declared
security_robots_security_txtread declared
security_email_disposableread declared
security_domain_typosquattingread declared
security_asn_peers_upstreamread declared
security_tls_cipher_enumread declared
security_open_resolver_checkread declared
security_ntp_monlist_auditread declared
security_snmp_exposureread declared
security_ssh_banner_auditread declared
security_smb_exposure_testread declared
security_rdp_exposure_checkread declared
security_spameatingmonkeyread declared
security_barracuda_reputationread declared
security_spamhaus_zenread declared
security_surbl_uri_lookupread declared
security_openphish_feedread declared
security_threatfox_iocsread declared
security_malbazaar_samplesread declared
security_feodotracker_c2read declared
security_sslbl_abuse_certsread declared
security_ipsum_threat_levelread declared
security_cymru_asn_lookupread declared
security_blocklist_deread declared
security_ciarmy_bad_ipsread declared
security_talos_ip_blacklistread declared
security_mx_server_testread declared
security_dkim_key_checkerread declared
security_bimi_record_auditread declared
security_mta_sts_validatorread declared
security_dns_caa_recordsread declared
security_tls_alpn_detectorread declared
security_cert_revocation_crlread declared
security_mitre_attck_matrixread declared
security_epss_exploit_scoreread declared
security_cve_details_feedread declared
security_jwt_token_inspectorread declared
security_csp_evaluator_auditread declared
security_referrer_policy_auditread declared
security_crossdomain_xml_testread declared
search_website_content_crawlerread declared
search_wayback_cdxread declared
search_google_searchread declared
search_google_adsread declared
search_wsj_articlesread declared
search_bing_searchread declared
search_google_newsread declared
search_pr_newswireread declared
search_beehiiv_newsletterread declared
search_benzingaread declared
search_markdown_to_pdf_mcpread declared
search_unpaywallread declared
search_reuters_articlesread declared
search_fifa_team_rankingsread declared
search_university_rankings_mega_packread declared
search_freightwavesread declared
search_crossrefread declared
search_bbc_news_articlesread declared
search_article_extractorread declared
search_owgr_golf_rankingsread declared
search_techcrunch_articlesread declared
search_prnewswire_press_releasesread declared
search_emedicine_articlesread declared
search_openprescribingread declared
search_ft_com_articlesread declared
search_wechat_articlesread declared
search_hacker_newsread declared
search_drive_com_au_newsread declared
search_gtex_gene_expressionread declared
search_cnbcread declared
search_dappradar_rankingsread declared
search_german_impressumread declared
search_datacite_metadataread declared
search_al_jazeera_articlesread declared
search_defector_articlesread declared
search_doj_press_releasesread declared
search_nyt_articlesread declared
search_ap_news_articlesread declared
search_usda_market_newsread declared
search_dev_to_articlesread declared
search_europe_pmc_articlesread declared
search_gcaptain_maritime_newsread declared
search_figshare_articlesread declared
search_pubmed_article_metadataread declared
search_wordpress_articlesread declared
search_crossref_academic_paperread declared
search_bingx_marketsread declared
search_gdelt_newsread declared
search_theintercept_articlesread declared
search_shanghai_arwu_rankingsread declared
search_press_release_multi_wireread declared
search_news_across_the_webread declared
search_semafor_articlesread declared
search_world_rugby_rankingsread declared
search_hackernews_itemsread declared
search_bleacher_report_articlesread declared
search_leiden_rankingread declared
search_shanghai_gras_rankingsread declared
search_cran_r_packagesread declared
seo_linkedin_ad_libraryread declared
search_wikimedia_commons_imageread declared
search_seo_audit_toolread declared
search_shopify_metadataread declared
search_mangadex_mangaread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-2891 tools/list on https://api.webintel-api.workers.dev/mcp?ref=registry, published in the official MCP registry as io.github.bck-stack/sitecheck-web-intel 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.