LeashIndex Get the report

Index / calendar

vibeMK

io-github-chexma-vibemk declares 154 capabilities across 154 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-15 from tools/list answered by the PyPI package vibemk==0.6.4 (published to PyPI as vibemk, listed in the official MCP registry as io.github.chexma/vibemk 0.6.4), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 154 tools

154 of 154 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 22 of 154 tools

22 tools are classified as irreversible and declare no limit.

high · no-expiry · All 154 tools

154 of 154 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 154 tools

154 of 154 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 68 of 154 tools

68 tools can modify data and declare no limit.

low · uncapped-read · 64 of 154 tools

64 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
vibemk_debug_checkmk_connectionread declared
vibemk_debug_url_detectionread declared
vibemk_test_direct_urlread declared
vibemk_test_all_endpointsread declared
vibemk_get_checkmk_versionread declared
vibemk_get_checkmk_hostsread declared
vibemk_get_host_statusread declared
vibemk_get_host_detailsread declared
vibemk_get_host_configread declared
vibemk_create_hostwrite inferred
vibemk_bulk_create_hostswrite inferred
vibemk_update_hostwrite inferred
vibemk_delete_hostdestructive declared
vibemk_move_hostwrite inferred
vibemk_rename_hostwrite inferred
vibemk_bulk_update_hostswrite inferred
vibemk_create_cluster_hostwrite inferred
vibemk_validate_host_configread declared
vibemk_compare_host_statesread declared
vibemk_get_host_effective_attributesread declared
vibemk_get_checkmk_servicesread declared
vibemk_get_service_statusread declared
vibemk_get_current_problemsread declared
vibemk_acknowledge_problemwrite assumed
vibemk_schedule_downtimewrite assumed
vibemk_activate_changeswrite inferred
vibemk_get_pending_changesread declared
vibemk_get_foldersread declared
vibemk_create_folderwrite inferred
vibemk_delete_folderdestructive declared
vibemk_update_folderwrite inferred
vibemk_move_folderwrite inferred
vibemk_get_folder_hostsread declared
vibemk_get_usersread declared
vibemk_create_userwrite inferred
vibemk_update_userwrite inferred
vibemk_delete_userdestructive declared
vibemk_get_contact_groupsread declared
vibemk_create_contact_groupwrite inferred
vibemk_add_user_to_groupwrite inferred
vibemk_remove_user_from_groupdestructive declared
vibemk_update_contact_groupwrite inferred
vibemk_delete_contact_groupdestructive declared
vibemk_list_user_rolesread declared
vibemk_show_user_roleread declared
vibemk_create_user_rolewrite inferred
vibemk_update_user_rolewrite inferred
vibemk_delete_user_roledestructive declared
vibemk_get_host_groupsread declared
vibemk_create_host_groupwrite inferred
vibemk_update_host_groupwrite inferred
vibemk_delete_host_groupdestructive declared
vibemk_get_service_groupsread declared
vibemk_get_commentsread declared
vibemk_add_commentwrite inferred
vibemk_delete_commentdestructive declared
vibemk_get_downtimesread declared
vibemk_get_rulesetsread declared
vibemk_get_rulesetread declared
vibemk_create_rulewrite inferred
vibemk_update_rulewrite inferred
vibemk_delete_ruledestructive declared
vibemk_move_rulewrite inferred
vibemk_get_host_tagsread declared
vibemk_create_host_tagwrite inferred
vibemk_update_host_tagwrite inferred
vibemk_delete_host_tagdestructive declared
vibemk_get_timeperiodsread declared
vibemk_create_timeperiodwrite inferred
vibemk_update_timeperiodwrite inferred
vibemk_delete_timeperioddestructive declared
vibemk_get_passwordsread declared
vibemk_create_passwordwrite inferred
vibemk_update_passwordwrite inferred
vibemk_delete_passworddestructive declared
vibemk_get_notification_rulesread declared
vibemk_get_notification_ruleread declared
vibemk_create_notification_rulewrite inferred
vibemk_update_notification_rulewrite inferred
vibemk_delete_notification_ruledestructive declared
vibemk_get_host_metricsread declared
vibemk_get_service_metricsread declared
vibemk_get_custom_graphread declared
vibemk_search_metricsread declared
vibemk_list_available_metricsread declared
vibemk_debug_api_endpointsread declared
vibemk_debug_permissionsread declared
vibemk_find_host_grouping_rulesetsread declared
vibemk_create_host_contactgroup_rulewrite inferred
vibemk_create_host_hostgroup_rulewrite inferred
vibemk_get_example_rule_structuresread declared
vibemk_schedule_host_downtimewrite assumed
vibemk_schedule_service_downtimewrite assumed
vibemk_list_downtimesread declared
vibemk_get_active_downtimesread declared
vibemk_delete_downtimedestructive declared
vibemk_check_host_downtime_statusread declared
vibemk_modify_downtimewrite inferred
vibemk_start_service_discoverydestructive declared
vibemk_start_bulk_discoverywrite assumed
vibemk_get_discovery_statusread declared
vibemk_get_bulk_discovery_statusread declared
vibemk_wait_for_discoveryread declared
vibemk_get_discovery_background_jobread declared
vibemk_create_service_groupwrite inferred
vibemk_list_service_groupsread declared
vibemk_get_service_groupread declared
vibemk_update_service_groupwrite inferred
vibemk_delete_service_groupdestructive declared
vibemk_bulk_create_service_groupswrite inferred
vibemk_bulk_update_service_groupswrite inferred
vibemk_bulk_delete_service_groupsdestructive declared
vibemk_search_rulesetsread declared
vibemk_show_rulesetread declared
vibemk_list_rulesetsread declared
vibemk_acknowledge_host_problemwrite assumed
vibemk_acknowledge_service_problemwrite assumed
vibemk_list_acknowledgementsread declared
vibemk_remove_acknowledgementdestructive declared
vibemk_clone_hostwrite assumed
vibemk_create_http_checkwrite inferred
vibemk_create_tcp_checkwrite inferred
vibemk_create_icmp_checkwrite inferred
vibemk_create_custom_checkwrite inferred
vibemk_create_dns_checkwrite inferred
vibemk_create_smtp_checkwrite inferred
vibemk_create_ftp_checkwrite inferred
vibemk_create_ldap_checkwrite inferred
vibemk_create_smb_checkwrite inferred
vibemk_create_mkevents_checkwrite inferred
vibemk_create_inventory_checkwrite inferred
vibemk_list_active_checksread declared
vibemk_delete_active_checkdestructive declared
vibemk_get_eventsread declared
vibemk_acknowledge_eventwrite assumed
vibemk_change_event_statewrite assumed
vibemk_delete_eventsdestructive declared
vibemk_get_aux_tagsread declared
vibemk_create_aux_tagwrite inferred
vibemk_update_aux_tagwrite inferred
vibemk_delete_aux_tagdestructive declared
vibemk_get_audit_logread declared
vibemk_get_sitesread declared
vibemk_login_sitewrite assumed
vibemk_logout_sitewrite assumed
vibemk_set_process_thresholdswrite inferred
vibemk_set_interface_paramswrite inferred
vibemk_set_memory_thresholdswrite inferred
vibemk_list_process_rulesread declared
vibemk_delete_service_param_ruledestructive declared
vibemk_bake_agentswrite assumed
vibemk_baking_statusread declared
vibemk_download_agent_by_hostread declared
vibemk_checkmk_rules_guideread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.