LeashIndex Get the report

Index / other

mcp-turkiye

io-github-berkantacun-mcp-turkiye declares 44 capabilities across 44 tools, with 1 critical issue.

56/100 exposureElevated

Manifest recorded 2026-10-12 from tools/list answered by the npm package mcp-turkiye@0.8.0 (published to npm as mcp-turkiye, listed in the official MCP registry as io.github.BerkantACUN/mcp-turkiye 0.8.0), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 44 tools

44 of 44 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 44 tools

44 of 44 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 44 tools

44 of 44 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 44 tools

44 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
tcmb_kurlarread declared
tcmb_kurread declared
evds_kategorilerread declared
evds_veri_gruplariread declared
evds_serilerread declared
evds_seriread declared
evds_gostergeread declared
bist_hisseread declared
btcturk_kriptoread declared
afad_depremlerread declared
kandilli_depremlerread declared
mgm_hava_durumuread declared
mgm_uyarilarread declared
opet_akaryakitread declared
ibb_trafik_indeksiread declared
ibb_nobetci_eczaneread declared
ibb_otoparkread declared
ibb_otopark_detayread declared
ibb_hava_kalitesiread declared
ibb_metroread declared
ibb_metro_duyurularread declared
izmir_nobetci_eczaneread declared
izmir_hal_fiyatlariread declared
izmir_otobusread declared
acikveri_araread declared
acikveri_verisetiread declared
acikveri_kayitlarread declared
resmi_gazete_fihristread declared
resmi_gazete_metinread declared
mevzuat_araread declared
mevzuat_metinread declared
mevzuat_madderead declared
resmi_tatillerread declared
tatil_miread declared
osym_sinav_takvimiread declared
resmi_parametrelerread declared
il_bilgisiread declared
ilce_araread declared
iller_listesiread declared
dogrula_tcknread declared
dogrula_vknread declared
dogrula_ibanread declared
plaka_ilread declared
haber_basliklariread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.