LeashIndex Get the report

Index / storage

io.github.editmamei/editmamei

io-github-editmamei-editmamei declares 62 capabilities across 62 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list answered by the npm package editmamei@1.9.1 (published to npm as editmamei, listed in the official MCP registry as io.github.editmamei/editmamei 1.9.1), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 62 tools

62 of 62 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 18 of 62 tools

18 tools are classified as irreversible and declare no limit.

high · no-expiry · All 62 tools

62 of 62 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 62 tools

62 of 62 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 33 of 62 tools

33 tools can modify data and declare no limit.

low · uncapped-read · 11 of 62 tools

11 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
ps_pingread declared
ps_list_capabilitiesread declared
ps_create_documentwrite inferred
ps_documentwrite assumed
ps_close_documentdestructive declared
ps_open_documentwrite assumed
ps_save_psddestructive declared
ps_exportdestructive declared
ps_create_layerwrite inferred
ps_delete_layerdestructive declared
ps_fill_layerwrite assumed
ps_add_fill_layerwrite inferred
ps_select_layerwrite assumed
ps_groupdestructive declared
ps_clipping_maskwrite assumed
ps_resize_imagedestructive declared
ps_crop_documentdestructive declared
ps_convert_image_modedestructive declared
ps_place_imagewrite assumed
ps_convert_to_smart_objectwrite assumed
ps_rasterize_layerdestructive declared
ps_set_layerwrite inferred
ps_duplicate_layerwrite assumed
ps_copy_to_new_layerwrite assumed
ps_mergedestructive declared
ps_bake_layerwrite assumed
ps_add_layer_stylewrite inferred
ps_transform_layerwrite assumed
ps_filterdestructive declared
ps_apply_adjustmentdestructive declared
ps_add_adjustment_layerwrite inferred
ps_textwrite assumed
ps_selectwrite inferred
ps_modify_selectionwrite inferred
ps_get_selection_previewread declared
ps_layer_maskdestructive declared
ps_selection_channelwrite assumed
ps_select_subjectwrite assumed
ps_select_skywrite assumed
ps_undowrite assumed
ps_redowrite assumed
ps_move_layer_to_positionwrite inferred
ps_get_previewread declared
ps_get_layer_bounds_diffread declared
ps_get_histogramread declared
ps_compare_regionsread declared
ps_inspectread declared
ps_overviewread declared
ps_report_problemwrite inferred
ps_retouchdestructive declared
ps_transform_canvaswrite assumed
ps_guideswrite assumed
ps_detectread declared
ps_pathdestructive declared
ps_vector_maskdestructive declared
ps_apply_imagedestructive declared
ps_calculationswrite assumed
ps_shapewrite assumed
ps_replace_skywrite assumed
ps_read_sceneread declared
ps_select_by_referencewrite assumed
ps_sequencedestructive declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-15100 tools/list answered by the npm package editmamei@1.8.0 (published to npm as editmamei, listed in the official MCP registry as io.github.editmamei/editmamei 1.8.0), run in an isolated container with no network access and no credentials
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.