LeashIndex Get the report

Index / payments

API Tool Calls

io-github-cowerxdev-apitoolcalls declares 94 capabilities across 94 tools, with 3 critical issues.

86/100 exposureHigh exposure

Manifest recorded 2026-10-16 from tools/list on https://apitoolcalls.com/mcp?tools=all, published in the official MCP registry as io.github.cowerxdev/apitoolcalls 0.2.5. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 94 tools

94 of 94 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 1 of 94 tools

1 tool is classified as irreversible and declares no limit.

critical · uncapped-spend · 1 of 94 tools

1 tool is classified as moving money and declares no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 94 tools

94 of 94 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 94 tools

94 of 94 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · 93 of 94 tools

93 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
make_qrread declared
get_transcriptread declared
resume_gapread declared
page_to_markdownread declared
seo_checkread declared
page_checkread declared
find_dataread declared
recall_checkread declared
basement_water_causeread declared
kitchen_remodel_costread declared
flooring_costread declared
driveway_costread declared
pole_barn_costread declared
water_softener_sizeread declared
yard_drainage_causeread declared
funeral_costread declared
furnace_ageread declared
roof_replacement_costread declared
fence_costread declared
wheelchair_rampread declared
pickleball_court_costread declared
ev_charger_install_costread declared
epoch_convertread declared
har_to_openapiread declared
inspect_binaryread declared
extract_stringsread declared
inspect_apkread declared
read_barcoderead declared
make_barcoderead declared
make_run_loopread declared
company_factsread declared
proofreadread declared
apa_citation_generatorread declared
bmi_calculatorread declared
body_fat_calculatorread declared
calorie_calculatorread declared
character_countread declared
concrete_calculatorread declared
decimal_to_fractionread declared
font_generatorread declared
fraction_calculatorread declared
gpa_calculatorread declared
grade_calculatorread declared
heart_rate_zonesread declared
json_formatterread declared
one_rep_max_calculatorread declared
pace_calculatorread declared
square_footage_calculatorread declared
volume_calculatorread declared
word_countread declared
date_calculatorread declared
hours_calculatorread declared
time_card_calculatorread declared
percentage_calculatorread declared
tip_calculatorread declared
ratio_calculatorread declared
compound_interest_calculatorread declared
margin_calculatorread declared
discount_calculatorread declared
gcf_calculatorread declared
lcm_calculatorread declared
prime_number_checkerread declared
slope_calculatorread declared
pythagorean_theorem_calculatorread declared
average_calculatorread declared
gravel_calculatorread declared
mulch_calculatorread declared
inflation_calculatorread declared
unit_convertread declared
scientific_evaluateread declared
quadratic_solveread declared
pay_convertpay inferred
long_divideread declared
scientific_notationread declared
round_decimalread declared
calendar_age_differenceread declared
julian_day_convertread declared
mass_volume_convertread declared
board_feetread declared
paint_quantityread declared
fuel_costread declared
unit_priceread declared
loan_scheduleread declared
powerread declared
logarithmread declared
simplify_sqrtread declared
z_scoreread declared
combinationsread declared
roiread declared
retirement_drawdownread declared
debt_to_incomeread declared
base_convertread declared
roman_numeralread declared
round_sig_figsread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1185 tools/list on https://apitoolcalls.com/mcp?tools=all, published in the official MCP registry as io.github.cowerxdev/apitoolcalls 0.2.4
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.