LeashIndex Get the report

Index / storage

Captapi

io-github-cdcstream-captapi declares 178 capabilities across 178 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://api.captapi.com/mcp, published in the official MCP registry as io.github.CDCStream/captapi 0.5.1. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · irreversible-uncapped · 27 of 178 tools

27 tools are classified as irreversible and declare no limit.

critical · no-revocation · All 178 tools

178 of 178 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 178 tools

178 of 178 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 178 tools

178 of 178 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 82 of 178 tools

82 tools can modify data and declare no limit.

low · uncapped-read · 69 of 178 tools

69 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
youtube_transcriptsend inferred
youtube_audio_transcriptwrite assumed
youtube_summarizesend inferred
youtube_video_detailsread inferred
youtube_commentsread inferred
youtube_channel_detailsread inferred
youtube_searchread inferred
youtube_channel_videoswrite inferred
youtube_playlist_videoswrite assumed
youtube_playlistwrite assumed
youtube_shorts_transcriptwrite assumed
youtube_shorts_summarizewrite assumed
youtube_shorts_detailsread inferred
youtube_shorts_commentswrite assumed
youtube_channel_shortswrite assumed
youtube_trending_shortswrite assumed
youtube_channel_streamswrite assumed
youtube_hashtag_searchread inferred
youtube_comment_replieswrite assumed
youtube_channel_playlistswrite assumed
youtube_community_postssend inferred
youtube_community_post_detailsread inferred
youtube_video_sponsorswrite assumed
tiktok_transcriptwrite assumed
tiktok_summarizewrite assumed
tiktok_video_detailsread inferred
tiktok_commentswrite assumed
tiktok_channel_detailsread inferred
tiktok_profile_regionread inferred
tiktok_audience_demographicswrite assumed
tiktok_search_suggestionsread inferred
tiktok_channel_postssend inferred
tiktok_comment_replieswrite assumed
tiktok_user_followersread inferred
tiktok_user_followingsread inferred
tiktok_music_postssend inferred
tiktok_top_searchread inferred
tiktok_search_by_hashtagread inferred
tiktok_search_usersread inferred
tiktok_song_detailsread inferred
tiktok_trending_feedwrite assumed
tiktok_popular_hashtagswrite assumed
tiktok_liveread inferred
tiktok_live_inforead inferred
tiktok_popular_creatorswrite inferred
instagram_transcriptwrite assumed
instagram_summarizeread inferred
instagram_detailsread inferred
instagram_commentswrite assumed
instagram_channel_detailsread inferred
instagram_channel_postssend inferred
instagram_channel_reelswrite assumed
instagram_reels_searchread inferred
instagram_trending_reelswrite assumed
instagram_tagged_postssend inferred
instagram_reels_by_audio_idwrite assumed
instagram_hashtag_searchread inferred
instagram_profile_searchread inferred
instagram_embedwrite assumed
instagram_highlightswrite assumed
instagram_highlights_detailsread inferred
instagram_basic_profilewrite assumed
facebook_detailsread inferred
facebook_summarizewrite assumed
facebook_commentssend inferred
facebook_page_detailsread inferred
facebook_profile_postssend inferred
facebook_profile_reelswrite assumed
facebook_group_postssend inferred
facebook_comment_replieswrite assumed
facebook_profile_photoswrite assumed
twitter_tweet_detailsread inferred
twitter_transcriptwrite assumed
twitter_profilewrite assumed
twitter_user_tweetswrite assumed
twitter_communitywrite assumed
twitter_community_tweetssend inferred
reddit_subreddit_postssend inferred
reddit_post_detailsread inferred
reddit_post_commentssend inferred
reddit_post_transcriptsend inferred
reddit_searchread inferred
reddit_subreddit_detailsread inferred
reddit_subreddit_searchread inferred
threads_profilewrite assumed
threads_user_postssend inferred
threads_post_detailsread inferred
threads_searchread inferred
threads_search_usersread inferred
bluesky_profilewrite assumed
bluesky_user_postssend inferred
bluesky_post_detailsread inferred
pinterest_pin_detailsread inferred
pinterest_user_pinswrite assumed
pinterest_searchread inferred
pinterest_boardwrite assumed
pinterest_user_boardswrite assumed
linkedin_profilewrite assumed
linkedin_companywrite assumed
linkedin_post_detailsread inferred
linkedin_post_transcriptsend inferred
linkedin_company_postssend inferred
linkedin_search_postssend inferred
rumble_video_detailsread inferred
rumble_video_transcriptsend inferred
rumble_channel_videoswrite inferred
rumble_searchread inferred
rumble_commentswrite assumed
tiktok_shop_searchread inferred
tiktok_shop_productswrite assumed
tiktok_shop_product_detailsread inferred
tiktok_shop_product_reviewswrite assumed
tiktok_shop_user_showcasewrite assumed
facebook_marketplace_searchread inferred
facebook_marketplace_location_searchread inferred
facebook_marketplace_itemread inferred
facebook_event_searchread inferred
facebook_event_detailsread inferred
facebook_profile_eventsread inferred
facebook_ad_library_searchread inferred
facebook_ad_library_company_adswrite assumed
facebook_ad_library_search_companiesread inferred
facebook_ad_library_ad_detailsread inferred
facebook_ad_library_ad_transcriptwrite assumed
tiktok_ad_library_searchread inferred
tiktok_ad_library_top_adswrite assumed
tiktok_ad_library_ad_detailsread inferred
google_ad_library_company_adssend inferred
google_ad_library_ad_detailsread inferred
google_ad_library_advertiser_searchread inferred
linkedin_ad_library_search_adsread inferred
linkedin_ad_library_ad_detailsread inferred
amazon_shop_pagewrite assumed
github_userwrite assumed
github_repositoriesread inferred
github_pull_requestswrite inferred
github_activitywrite inferred
github_followerswrite assumed
github_followingwrite assumed
github_contributionswrite assumed
github_repositorywrite assumed
github_trending_repositorieswrite assumed
github_trending_developerswrite assumed
twitch_profilewrite assumed
twitch_user_videoswrite assumed
twitch_user_schedulewrite assumed
twitch_clipwrite assumed
spotify_artistwrite assumed
spotify_trackwrite assumed
spotify_albumwrite assumed
spotify_searchread inferred
spotify_podcastread inferred
spotify_podcast_episodesdelete inferred
soundcloud_artistwrite assumed
soundcloud_artist_tracksread inferred
soundcloud_trackwrite assumed
linktree_pagewrite assumed
snapchat_user_profilewrite assumed
truth_social_profilewrite assumed
truth_social_user_postssend inferred
truth_social_postsend inferred
kick_clipread inferred
account_balancewrite assumed
account_request_historyread inferred
account_daily_usagewrite assumed
account_most_used_routesread inferred
analytics_postsend inferred
analytics_compareread inferred
video_transcriptwrite inferred
video_summarizewrite inferred
kwai_profileread inferred
kwai_user_postssend inferred
kwai_postsend inferred
komi_pagewrite assumed
pillar_pagewrite assumed
linkbio_pagewrite assumed
linkme_profilewrite assumed
google_maps_business_searchread inferred

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-16100 tools/list on https://api.captapi.com/mcp, published in the official MCP registry as io.github.CDCStream/captapi 0.3.0
2026-10-11100 tools/list on https://api.captapi.com/mcp, published in the official MCP registry as io.github.CDCStream/captapi 0.3.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.