LeashIndex Get the report

Index / calendar

io.github.Glade-tool/glade-mcp

io-github-glade-tool-glade-mcp declares 97 capabilities across 97 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-12 from tools/list answered by the PyPI package gladekit-mcp==0.7.14 (published to PyPI as gladekit-mcp, listed in the official MCP registry as io.github.Glade-tool/glade-mcp 0.7.14), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Note. Installed with the MCP Python SDK held below version 2.0. With the newest SDK this version of the package stopped before it could list its tools.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 97 tools

97 of 97 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 4 of 97 tools

4 tools are classified as irreversible and declare no limit.

high · no-expiry · All 97 tools

97 of 97 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 97 tools

97 of 97 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 67 of 97 tools

67 tools can modify data and declare no limit.

low · uncapped-read · 26 of 97 tools

26 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
request_user_inputwrite inferred
get_session_summaryread inferred
thinkwrite assumed
get_scene_hierarchyread inferred
get_gameobject_inforead inferred
find_game_objectsread inferred
get_selectionread inferred
set_selectionwrite inferred
get_unity_console_logsread inferred
refresh_asset_databasewrite assumed
open_scenewrite assumed
save_scenewrite assumed
create_game_objectwrite inferred
create_primitivewrite inferred
destroy_game_objectdelete inferred
set_game_object_activewrite inferred
set_game_object_parentwrite inferred
duplicate_game_objectwrite assumed
rename_game_objectwrite inferred
list_childrenread inferred
set_layerwrite inferred
set_tagwrite inferred
snap_to_groundwrite assumed
align_objectswrite assumed
group_objectswrite inferred
set_transformwrite inferred
set_local_transformwrite inferred
set_transform_batchwrite inferred
get_gameobject_componentsread inferred
get_component_inspector_propertiesread inferred
add_componentwrite inferred
remove_componentdelete inferred
set_component_propertywrite inferred
set_script_component_propertywrite inferred
set_object_referencewrite inferred
create_tilemapwrite inferred
set_tilemap_tileswrite inferred
add_tilemap_collider_2dwrite inferred
create_scriptwrite inferred
modify_scriptwrite inferred
get_script_contentread inferred
find_scriptsread inferred
find_referencesread inferred
find_component_usagesread inferred
compile_scriptsread inferred
create_folderwrite inferred
move_assetwrite inferred
delete_assetdelete inferred
list_assetsread inferred
check_asset_existsread inferred
create_prefabwrite inferred
instantiate_prefabwrite assumed
get_prefab_inforead inferred
create_materialwrite inferred
set_material_propertywrite inferred
assign_material_to_rendererwrite inferred
list_materialsread inferred
change_material_shaderwrite assumed
create_lightwrite inferred
set_light_propertieswrite inferred
set_render_settingswrite inferred
create_audio_sourcewrite inferred
set_audio_source_propertieswrite inferred
assign_audio_clipwrite inferred
create_animator_controllerwrite inferred
add_animator_parameterswrite inferred
add_animator_statewrite inferred
add_animator_transitionwrite inferred
assign_animator_controllerwrite inferred
create_colliderwrite inferred
set_collider_propertieswrite inferred
create_character_controllerwrite inferred
add_rigidbodywrite inferred
set_rigidbody_propertieswrite inferred
create_physics_materialwrite inferred
add_rigidbody_2dwrite inferred
create_collider_2dwrite inferred
look_at_game_viewread inferred
create_camerawrite inferred
set_camera_propertieswrite inferred
create_canvaswrite inferred
create_ui_elementwrite inferred
import_tmp_essential_resourceswrite assumed
create_event_systemwrite inferred
start_runtime_observationwrite assumed
stop_runtime_observationwrite assumed
get_runtime_eventsread inferred
get_play_mode_stateread inferred
apply_queued_fixsend inferred
find_assetread inferred
import_assetwrite assumed
list_imported_assetsread inferred
get_relevant_toolsread inferred
remember_for_sessionwrite assumed
recall_session_memoriesread inferred
batch_executewrite inferred
search_project_scriptsread inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.