LeashIndex Get the report

Index / devtools

io.github.dontsovcmc/wildberries

io-github-dontsovcmc-wildberries declares 235 capabilities across 235 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-15 from tools/list answered by the PyPI package mcp-server-wildberries==0.1.1 (published to PyPI as mcp-server-wildberries, listed in the official MCP registry as io.github.dontsovcmc/wildberries 0.1.1), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Note. Installed with the MCP Python SDK held below version 2.0. With the newest SDK this version of the package stopped before it could list its tools.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 235 tools

235 of 235 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 19 of 235 tools

19 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 2 of 235 tools

2 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 235 tools

235 of 235 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 235 tools

235 of 235 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 68 of 235 tools

68 tools can modify data and declare no limit.

low · uncapped-read · 148 of 235 tools

148 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
wb_pingread inferred
wb_newsread inferred
wb_seller_inforead inferred
wb_seller_ratingread inferred
wb_subscriptionsread inferred
wb_user_invitewrite inferred
wb_usersread inferred
wb_user_access_updatewrite inferred
wb_user_deletedelete inferred
wb_content_parent_categoriesread inferred
wb_content_subjectsread inferred
wb_content_characteristicsread inferred
wb_content_colorsread inferred
wb_content_kindsread inferred
wb_content_countriesread inferred
wb_content_seasonsread inferred
wb_content_vatread inferred
wb_content_tnvedread inferred
wb_content_brandsread inferred
wb_content_tagsread inferred
wb_content_tag_createwrite inferred
wb_content_tag_updatewrite inferred
wb_content_tag_deletedelete inferred
wb_content_tag_linkwrite assumed
wb_content_cards_listread inferred
wb_content_cards_errorsread inferred
wb_content_cards_updatewrite inferred
wb_fbs_orders_newread inferred
wb_fbs_ordersread inferred
wb_fbs_orders_statusread inferred
wb_fbs_order_canceldelete inferred
wb_fbs_stickersread inferred
wb_fbs_stickers_cross_borderread inferred
wb_fbs_orders_status_historyread inferred
wb_fbs_orders_clientread inferred
wb_fbs_reshipment_ordersread inferred
wb_fbs_order_metaread inferred
wb_fbs_order_meta_deletedelete inferred
wb_fbs_order_meta_sgtinwrite inferred
wb_fbs_order_meta_uinwrite inferred
wb_fbs_order_meta_imeiwrite inferred
wb_fbs_order_meta_gtinwrite inferred
wb_fbs_order_meta_expirationwrite inferred
wb_fbs_order_meta_customswrite inferred
wb_fbs_supply_createwrite inferred
wb_fbs_suppliesread inferred
wb_fbs_supply_add_orderswrite inferred
wb_fbs_supplyread inferred
wb_fbs_supply_deletedelete inferred
wb_fbs_supply_ordersread inferred
wb_fbs_supply_deliverwrite assumed
wb_fbs_supply_barcoderead inferred
wb_fbs_supply_boxesread inferred
wb_fbs_pass_officesread inferred
wb_fbs_passesread inferred
wb_fbs_pass_createwrite inferred
wb_fbs_pass_updatewrite inferred
wb_fbs_pass_deletedelete inferred
wb_dbw_orders_newread inferred
wb_dbw_ordersread inferred
wb_dbw_delivery_dateread inferred
wb_dbw_clientread inferred
wb_dbw_orders_statusread inferred
wb_dbw_order_confirmwrite assumed
wb_dbw_stickersread inferred
wb_dbw_order_assemblewrite inferred
wb_dbw_courierread inferred
wb_dbw_order_canceldelete inferred
wb_dbw_order_metaread inferred
wb_dbw_order_meta_deletedelete inferred
wb_dbw_order_meta_sgtinwrite inferred
wb_dbw_order_meta_uinwrite inferred
wb_dbw_order_meta_imeiwrite inferred
wb_dbw_order_meta_gtinwrite inferred
wb_dbs_orders_newread inferred
wb_dbs_ordersread inferred
wb_dbs_groups_inforead inferred
wb_dbs_clientread inferred
wb_dbs_b2b_inforead inferred
wb_dbs_delivery_dateread inferred
wb_dbs_orders_statusread inferred
wb_dbs_order_canceldelete inferred
wb_dbs_order_confirmwrite assumed
wb_dbs_stickersread inferred
wb_dbs_order_deliverwrite inferred
wb_dbs_order_receivewrite assumed
wb_dbs_order_rejectwrite inferred
wb_dbs_order_metaread inferred
wb_dbs_order_meta_deletedelete inferred
wb_dbs_order_meta_sgtinwrite inferred
wb_dbs_order_meta_uinwrite inferred
wb_dbs_order_meta_imeiwrite inferred
wb_dbs_order_meta_gtinwrite inferred
wb_dbs_order_meta_customswrite inferred
wb_pickup_orders_newread inferred
wb_pickup_order_confirmwrite assumed
wb_pickup_order_preparewrite assumed
wb_pickup_clientread inferred
wb_pickup_verify_identityread inferred
wb_pickup_order_receivewrite assumed
wb_pickup_order_rejectwrite inferred
wb_pickup_orders_statusread inferred
wb_pickup_orders_completedread inferred
wb_pickup_order_canceldelete inferred
wb_pickup_order_metaread inferred
wb_pickup_order_meta_deletedelete inferred
wb_pickup_order_meta_sgtinwrite inferred
wb_pickup_order_meta_uinwrite inferred
wb_pickup_order_meta_imeiwrite inferred
wb_pickup_order_meta_gtinwrite inferred
wb_fbw_acceptance_optionsread inferred
wb_fbw_warehousesread inferred
wb_fbw_transit_tariffsread inferred
wb_fbw_suppliesread inferred
wb_fbw_supplyread inferred
wb_fbw_supply_goodsread inferred
wb_fbw_supply_packageread inferred
wb_advert_campaigns_countread inferred
wb_advert_campaignsread inferred
wb_advert_min_bidsread inferred
wb_advert_campaign_createwrite inferred
wb_advert_subjectsread inferred
wb_advert_nmsread inferred
wb_advert_campaign_deletedelete inferred
wb_advert_campaign_renamewrite inferred
wb_advert_campaign_startwrite assumed
wb_advert_campaign_pausewrite assumed
wb_advert_campaign_stopwrite assumed
wb_advert_placements_updatewrite inferred
wb_advert_bids_updatewrite inferred
wb_advert_nms_updatewrite inferred
wb_advert_bid_recommendationsread inferred
wb_advert_search_bidsread inferred
wb_advert_search_bids_setread inferred
wb_advert_search_bids_deletedelete inferred
wb_advert_minus_phrasesread inferred
wb_advert_minus_phrases_setwrite inferred
wb_advert_balanceread inferred
wb_advert_budgetread inferred
wb_advert_budget_depositwrite assumed
wb_advert_cost_historyread inferred
wb_advert_paymentsread inferred
wb_advert_search_statsread inferred
wb_new_feedbacks_questionsread inferred
wb_questions_unanswered_countread inferred
wb_questions_countread inferred
wb_questionsread inferred
wb_question_managewrite assumed
wb_questionread inferred
wb_feedbacks_unanswered_countread inferred
wb_feedbacks_countread inferred
wb_feedbacksread inferred
wb_feedback_answerwrite assumed
wb_feedback_answer_editwrite inferred
wb_feedback_returnwrite inferred
wb_feedbackread inferred
wb_feedbacks_archivedelete inferred
wb_feedback_pinsread inferred
wb_feedback_pinwrite assumed
wb_feedback_unpinwrite assumed
wb_feedback_pins_countread inferred
wb_feedback_pins_limitsread inferred
wb_chatsread inferred
wb_chat_eventsread inferred
wb_chat_sendsend inferred
wb_tariff_commissionsread inferred
wb_tariff_boxread inferred
wb_tariff_palletread inferred
wb_tariff_acceptanceread inferred
wb_tariff_returnread inferred
wb_analytics_sales_funnelread inferred
wb_analytics_sales_funnel_historyread inferred
wb_analytics_sales_funnel_groupedread inferred
wb_analytics_search_reportread inferred
wb_analytics_search_groupsread inferred
wb_analytics_search_detailsread inferred
wb_analytics_search_textsread inferred
wb_analytics_search_ordersread inferred
wb_analytics_stocks_wbread inferred
wb_analytics_stocks_groupsread inferred
wb_analytics_stocks_productsread inferred
wb_analytics_stocks_sizesread inferred
wb_analytics_stocks_officesread inferred
wb_analytics_csv_createwrite inferred
wb_analytics_csv_listread inferred
wb_analytics_csv_retrywrite assumed
wb_analytics_csv_downloadwrite assumed
wb_report_ordersread inferred
wb_report_salesread inferred
wb_report_warehouse_remains_createwrite inferred
wb_report_warehouse_remains_statusread inferred
wb_report_warehouse_remains_downloadwrite assumed
wb_report_exciseread inferred
wb_report_measurement_penaltiesread inferred
wb_report_warehouse_measurementsread inferred
wb_report_deductionsread inferred
wb_report_antifraudread inferred
wb_report_labelingread inferred
wb_report_acceptance_createwrite inferred
wb_report_acceptance_statusread inferred
wb_report_acceptance_downloadwrite assumed
wb_report_paid_storage_createpay inferred
wb_report_paid_storage_statusread inferred
wb_report_paid_storage_downloadpay inferred
wb_report_regional_salesread inferred
wb_report_brandsread inferred
wb_report_brand_categoriesread inferred
wb_report_brand_shareread inferred
wb_report_blocked_productsread inferred
wb_report_shadowed_productsread inferred
wb_report_returnsread inferred
wb_finance_balanceread inferred
wb_finance_sales_reportsread inferred
wb_finance_sales_report_detailread inferred
wb_finance_sales_report_by_periodread inferred
wb_finance_report_detail_by_periodread inferred
wb_finance_acquiring_reportsread inferred
wb_finance_acquiring_detailread inferred
wb_finance_acquiring_by_periodread inferred
wb_finance_document_categoriesread inferred
wb_finance_documentsread inferred
wb_finance_document_downloadwrite assumed
wb_finance_documents_downloadwrite assumed
wb_wbd_keys_addwrite inferred
wb_wbd_keys_deletedelete inferred
wb_wbd_keys_redeemedread inferred
wb_wbd_keys_countread inferred
wb_wbd_keys_listread inferred
wb_wbd_offer_createwrite inferred
wb_wbd_offer_updatewrite inferred
wb_wbd_offerread inferred
wb_wbd_offersread inferred
wb_wbd_offer_priceread inferred
wb_wbd_offer_statusread inferred
wb_wbd_catalogread inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.