LeashIndex Get the report

Index / other

Pitwall — F1 Data for Claude

io-github-darshjoshi-pitwall declares 30 capabilities across 30 tools, with 1 critical issue.

43/100 exposureElevated

Manifest recorded 2026-10-15 from tools/list answered by the PyPI package f1pitwall==1.1.1 (published to PyPI as f1pitwall, listed in the official MCP registry as io.github.darshjoshi/pitwall 1.1.1), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 30 tools

30 of 30 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 30 tools

30 of 30 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 30 tools

30 of 30 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 30 tools

30 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
list_seasonsread inferred
list_racesread inferred
get_race_inforead inferred
get_standingsread inferred
get_lap_timesread inferred
get_telemetryread inferred
get_tyre_strategyread inferred
get_pit_stopsread inferred
get_race_controlread inferred
get_weatherread inferred
get_speed_trapsread inferred
get_driver_comparisonread inferred
get_historical_resultsread inferred
get_championship_standingsread inferred
get_live_session_statusread inferred
get_live_positionsread inferred
get_live_lap_timesread inferred
get_live_sector_timesread inferred
get_live_weatherread inferred
get_live_tyresread inferred
get_live_race_controlread inferred
get_live_speed_trapread inferred
get_live_session_clockread inferred
get_live_track_status_historyread inferred
get_live_best_sectorsread inferred
get_live_speed_comparisonread inferred
get_live_stint_historyread inferred
get_live_pit_activityread inferred
get_live_time_gapsread inferred
get_live_mini_sectorsread inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.