LeashIndex Get the report

Index / storage

io.github.coe0718/deskbrid

io-github-coe0718-deskbrid declares 123 capabilities across 123 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the container image ghcr.io/coe0718/deskbrid version 1.2.0 (published as the image ghcr.io/coe0718/deskbrid:1.2.0, listed in the official MCP registry as io.github.coe0718/deskbrid 1.2.0), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 123 tools

123 of 123 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 36 of 123 tools

36 tools are classified as irreversible and declare no limit.

high · no-expiry · All 123 tools

123 of 123 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 123 tools

123 of 123 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 34 of 123 tools

34 tools can modify data and declare no limit.

low · uncapped-read · 53 of 123 tools

53 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
activate_or_launchwrite assumed
backlight_getread declared
backlight_listread declared
backlight_setwrite inferred
battery_statusread declared
bluetooth_listread declared
bluetooth_scanread declared
broadcastsend inferred
browser_clickdestructive declared
browser_evaluateread declared
browser_navigatewrite assumed
browser_screenshotread declared
capabilitiesread declared
check_mailboxread declared
check_updateread declared
click_coordinatedestructive declared
click_elementdestructive declared
clipboard_readread declared
clipboard_writedestructive declared
close_notificationdestructive declared
close_windowdestructive declared
confirm_actiondestructive declared
dbus_calldestructive declared
deny_actiondestructive declared
disable_monitordestructive declared
doctorread declared
dragdestructive declared
enable_monitorwrite assumed
file_copydestructive declared
file_listread declared
file_readread declared
file_searchread declared
file_watchwrite assumed
file_writedestructive declared
focus_windowwrite assumed
focused_windowread declared
get_accessibility_treeread declared
get_audio_volumeread declared
get_element_textread declared
get_settingread declared
idle_secondsread declared
journal_queryread declared
layout_deletedestructive declared
layout_listread declared
layout_restoredestructive declared
layout_savewrite assumed
list_appsread declared
list_audio_sinksread declared
list_audio_sourcesread declared
list_browser_tabsread declared
list_confirmationsread declared
list_media_playersread declared
list_monitorsread declared
list_processesread declared
list_schemasread declared
list_windowsread declared
list_workspacesread declared
maximize_windowwrite assumed
media_player_controlwrite assumed
media_player_inforead declared
minimize_windowwrite assumed
mouse_clickdestructive declared
mouse_movewrite inferred
mouse_scrollwrite assumed
move_resize_windowwrite inferred
move_window_to_workspacewrite inferred
mute_audiowrite assumed
network_statusread declared
perform_actiondestructive declared
portal_screencast_startwrite assumed
portal_screencast_stopwrite assumed
portal_screenshotread declared
press_keydestructive declared
press_keysdestructive declared
pressureread declared
print_defaultread inferred
print_filedestructive declared
print_job_canceldestructive declared
print_job_pausedestructive declared
print_job_resumewrite assumed
print_jobsread declared
print_listread declared
process_existsread declared
register_hotkeywrite assumed
screencast_startwrite assumed
screencast_stopwrite assumed
screenshotread declared
screenshot_diffread declared
screenshot_regionread declared
search_index_statusread declared
secrets_get_secretread inferred
secrets_list_collectionsread declared
secrets_store_secretdestructive declared
self_updatedestructive declared
send_messagesend inferred
send_notificationsend inferred
service_startdestructive declared
service_statusread declared
service_stopdestructive declared
set_audio_node_volumewrite inferred
set_audio_volumewrite inferred
set_default_audiowrite inferred
set_element_valuedestructive declared
set_monitor_resolutionwrite inferred
set_monitor_rotationwrite inferred
set_monitor_scalewrite inferred
set_primary_monitorwrite inferred
set_settingwrite inferred
setup_accessibilitywrite assumed
signal_processdestructive declared
start_processdestructive declared
stop_processdestructive declared
switch_workspacewrite assumed
system_inforead declared
terminal_createwrite inferred
terminal_readread declared
terminal_resizewrite assumed
terminal_writedestructive declared
tile_windowwrite assumed
type_textdestructive declared
unified_searchread declared
unregister_hotkeydestructive declared
wait_for_processread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.