LeashIndex Get the report

Index / storage

Dataify MCP

io-github-dataify-server-dataify-mcp declares 82 capabilities across 82 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-16 from tools/list on https://mcp.dataify.com/mcp?tools=user_info,web_unlocker,google_serp,yandex_serp,duckduckgo_serp,bing_serp,amazon,youtube,facebook,instagram,reddit,walmart,google,booking,indeed,airbnb,google_play_store,github,tiktok,linkedin,glassdoor,twitter,crunchbase,zillow,ebay,chatgpt, published in the official MCP registry as io.github.dataify-server/dataify-mcp 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · irreversible-uncapped · All 82 tools

82 tools are classified as irreversible and declare no limit.

critical · no-revocation · All 82 tools

82 of 82 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 82 tools

82 of 82 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 82 tools

82 of 82 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
airbnb_productdestructive declared
amazon_commentdestructive declared
amazon_global_productdestructive declared
amazon_productdestructive declared
amazon_product_listdestructive declared
amazon_sellerdestructive declared
bing_imagesdestructive declared
bing_mapsdestructive declared
bing_newsdestructive declared
bing_searchdestructive declared
bing_shoppingdestructive declared
bing_videosdestructive declared
booking_hotellistdestructive declared
chatgpt_answerdestructive declared
crunchbase_companydestructive declared
duckduckgo_searchdestructive declared
ebay_infodestructive declared
facebook_commentdestructive declared
facebook_eventdestructive declared
facebook_postdestructive declared
facebook_profiledestructive declared
github_repositorydestructive declared
glassdoor_joblistingsdestructive declared
google_ai_modedestructive declared
google_financedestructive declared
google_flightsdestructive declared
google_hotelsdestructive declared
google_imagesdestructive declared
google_jobsdestructive declared
google_lensdestructive declared
google_localdestructive declared
google_map_commentdestructive declared
google_map_detailsdestructive declared
google_mapsdestructive declared
google_newsdestructive declared
google_patentsdestructive declared
google_playdestructive declared
google_play_store_informationdestructive declared
google_play_store_reviewsdestructive declared
google_scholardestructive declared
google_searchdestructive declared
google_shoppingdestructive declared
google_shopping_infodestructive declared
google_trendsdestructive declared
google_videosdestructive declared
indeed_companies_infodestructive declared
instagram_commentdestructive declared
instagram_profilesdestructive declared
instagram_reeldestructive declared
linkedin_company_informationdestructive declared
linkedin_job_listings_informationdestructive declared
query_user_api_keysdestructive declared
query_user_balancedestructive declared
query_user_infodestructive declared
query_user_usagedestructive declared
reddit_commentdestructive declared
reddit_postsdestructive declared
request_web_unlockerdestructive declared
scraper_serp_productsdestructive declared
scraper_serp_statisticsdestructive declared
scraper_serp_toolsdestructive declared
scraper_task_listdestructive declared
scraper_task_resultdestructive declared
scraper_task_statusdestructive declared
tiktok_commentdestructive declared
tiktok_postsdestructive declared
tiktok_profilesdestructive declared
tiktok_shopdestructive declared
twitter_postdestructive declared
twitter_profiledestructive declared
walmart_productdestructive declared
web_unlock_statisticsdestructive declared
web_unlock_taskdestructive declared
yandex_searchdestructive declared
youtube_audiodestructive declared
youtube_commentdestructive declared
youtube_productdestructive declared
youtube_profilesdestructive declared
youtube_transcriptdestructive declared
youtube_videodestructive declared
youtube_video_postdestructive declared
zillow_productdestructive declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.