LeashIndex Get the report

Index / other

Awesome Mineflayer MCP

io-github-g0osey99-awesome-mineflayer-mcp declares 123 capabilities across 123 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-12 from tools/list answered by the npm package awesome-mineflayer-mcp@1.3.2 (published to npm as awesome-mineflayer-mcp, listed in the official MCP registry as io.github.G0Osey99/awesome-mineflayer-mcp 1.3.2), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 123 tools

123 of 123 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 18 of 123 tools

18 tools are classified as irreversible and declare no limit.

high · no-expiry · All 123 tools

123 of 123 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 123 tools

123 of 123 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 67 of 123 tools

67 tools can modify data and declare no limit.

low · uncapped-read · 38 of 123 tools

38 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
connect_botwrite assumed
disconnect_botwrite assumed
reconnect_botwrite assumed
respawnwrite assumed
get_connection_statusread declared
connect_defaultwrite assumed
get_default_accountread declared
get_stateread declared
get_inventoryread declared
get_observationread declared
list_playersread declared
list_entitiesread declared
find_nearest_entityread declared
get_entity_detailsread declared
get_scoreboardsread declared
get_teamsread declared
get_boss_barsread declared
get_control_statesread declared
get_chat_patternsread declared
support_featureread declared
pathfinder_statusread declared
get_settingsread declared
get_physicsread declared
get_loaded_pluginsread declared
get_block_atread declared
find_blocksread declared
get_cursor_targetread declared
get_blocks_in_regionread declared
wait_for_chunks_to_loadread declared
gotowrite assumed
set_goalwrite inferred
flee_fromwrite inferred
follow_entitywrite assumed
stop_pathfindingwrite assumed
get_path_toread declared
configure_movementswrite assumed
configure_pathfinderread inferred
set_control_statewrite inferred
clear_control_stateswrite assumed
elytra_flywrite assumed
wait_for_tickswrite assumed
set_physics_enabledwrite inferred
look_atwrite assumed
lookwrite inferred
look_at_entitywrite assumed
digwrite assumed
place_blockwrite assumed
activate_blockwrite assumed
activate_entitywrite assumed
swing_armwrite assumed
pvp_attackwrite assumed
attack_entitywrite assumed
pvp_stopwrite assumed
pvp_configurewrite assumed
equip_itemwrite assumed
unequip_itemdelete inferred
toss_itemdelete inferred
set_quickbar_slotwrite inferred
consumewrite assumed
activate_itemwrite assumed
click_windowwrite assumed
move_slot_itemwrite inferred
transfer_itemswrite inferred
open_containerwrite assumed
read_open_containerread declared
container_depositwrite inferred
container_withdrawwrite inferred
close_windowdelete inferred
open_furnacewrite assumed
furnace_actionwrite assumed
furnace_statusread declared
smelt_itemwrite assumed
enchant_itemdestructive declared
anvil_combinedestructive declared
open_villagerwrite assumed
trade_with_villagerwrite assumed
list_recipesread declared
craft_itemwrite assumed
collect_blockdelete inferred
cancel_collectdelete inferred
set_collect_configwrite inferred
equip_tool_for_blockwrite assumed
set_tool_chest_locationswrite inferred
get_best_toolread declared
autoeat_set_enabledwrite inferred
autoeat_configurewrite assumed
autoeat_eatwrite assumed
autoeat_canceldelete inferred
autoeat_previewread declared
armor_equip_allwrite assumed
sleepwrite assumed
wakeread inferred
mount_entitywrite assumed
dismountwrite assumed
steer_vehiclewrite assumed
fishwrite assumed
cancel_fishdelete inferred
write_bookwrite inferred
update_signwrite inferred
chatsend inferred
whispersend inferred
run_commandwrite assumed
tab_completeread declared
register_chat_patternwrite assumed
remove_chat_patterndelete inferred
wait_for_messageread declared
set_settingswrite inferred
creative_set_inventory_slotwrite inferred
creative_clear_inventorywrite assumed
creative_flywrite assumed
creative_fly_towrite assumed
get_eventsread declared
cancel_taskdelete inferred
get_screenshotread declared
render_mapread declared
set_waypointwrite inferred
list_waypointsread declared
delete_waypointdelete inferred
goto_waypointwrite assumed
clear_regiondestructive declared
dig_tunneldestructive declared
dig_staircasedestructive declared
fill_regiondestructive declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.