LeashIndex Get the report

Index / data

Homecastr Remote MCP

io-github-dhardestylewis-homecastr-remote declares 44 capabilities across 44 tools, with 1 critical issue.

56/100 exposureElevated

Manifest recorded 2026-10-11 from tools/list on https://www.homecastr.com/api/mcp/mcp, published in the official MCP registry as io.github.dhardestylewis/homecastr-remote 1.14.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 44 tools

44 of 44 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 44 tools

44 of 44 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 44 tools

44 of 44 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 44 tools

44 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
forecast_by_addressread declared
forecast_by_parcelread declared
forecast_by_tabblockread declared
forecast_by_tractread declared
forecast_by_zctaread declared
forecast_by_unitread declared
forecast_by_countyread declared
forecast_by_stateread declared
forecast_by_zip3read declared
forecast_by_h3_cellread declared
get_permit_zoning_readinessread declared
get_census_bps_county_monthlyread declared
get_fast41_projectsread declared
get_epa_echo_npdes_sewer_overflowsread declared
get_epa_echo_npdes_outfallsread declared
get_epa_echo_npdes_sewer_overflow_historyread declared
get_epa_echo_npdes_violationsread declared
list_benchmark_datasetsread declared
get_benchmark_datasetread declared
get_public_forecast_vintageread declared
get_backtest_scoresread declared
list_data_assetsread declared
get_data_assetread declared
list_data_sourcesread declared
get_data_sourceread declared
get_panel_lineageread declared
get_data_coverageread declared
list_source_coverage_indexread declared
list_public_records_acquisitionread declared
get_source_coverage_mapread declared
list_data_schemasread declared
get_data_schemaread declared
get_entityread declared
get_geography_crosswalkread declared
get_provenanceread declared
get_data_artifactread declared
get_forecast_vintageread declared
get_benchmark_resultread declared
get_county_outlookread declared
list_benchmark_sourcesread declared
list_training_runsread declared
get_analytics_eventsread declared
get_api_statusread declared
get_api_usageread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.