LeashIndex Get the report

Index / storage

Apple Tools (Unified)

io-github-jonathanrreed-apple-tools-mcp declares 184 capabilities across 184 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-22 from tools/list answered by the PyPI package apple-tools-mcp==1.1.3 (published to PyPI as apple-tools-mcp, listed in the official MCP registry as io.github.JonathanRReed/apple-tools-mcp 1.1.3), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 184 tools

184 of 184 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 61 of 184 tools

61 tools are classified as irreversible and declare no limit.

high · no-expiry · All 184 tools

184 of 184 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 184 tools

184 of 184 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 19 of 184 tools

19 tools can modify data and declare no limit.

low · uncapped-read · 104 of 184 tools

104 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
apple_get_preferencesread declared
apple_detect_defaultsdestructive declared
apple_update_preferencesdestructive declared
apple_detect_digest_folderdestructive declared
apple_set_digest_folderdestructive declared
apple_ensure_digest_folderwrite assumed
apple_update_contact_preferencesdestructive declared
apple_prepare_communicationread declared
apple_preview_communicationread declared
apple_preview_archive_messageread declared
apple_preview_create_reminder_with_defaultsread declared
apple_preview_create_note_with_defaultsread declared
apple_preview_follow_up_from_mailread declared
apple_send_communicationdestructive declared
apple_archive_messagedestructive declared
apple_list_recent_actionsread declared
apple_undo_actiondestructive declared
apple_create_reminder_with_defaultswrite inferred
apple_create_note_with_defaultswrite inferred
apple_capture_follow_up_from_mailsend inferred
apple_event_collaboration_summaryread declared
apple_maps_search_places_strictread declared
apple_maps_get_directions_strictread declared
apple_find_duplicate_contactsread declared
apple_prepare_unique_contactread declared
apple_list_shortcuts_for_capabilityread declared
apple_route_or_run_shortcutdestructive declared
apple_open_applicationwrite assumed
apple_get_focus_statusread declared
apple_get_system_contextread declared
apple_open_file_pathwrite assumed
apple_reveal_in_finderwrite assumed
apple_tag_filedestructive declared
apple_update_system_settingdestructive declared
apple_control_frontmost_appdestructive declared
apple_suggest_mailboxesread declared
apple_suggest_calendarsread declared
apple_suggest_reminder_listsread declared
apple_suggest_shortcutsread declared
apple_suggest_contactsread declared
apple_suggest_note_foldersread declared
apple_suggest_message_conversationsread declared
apple_suggest_filesread declared
apple_suggest_running_appsread declared
apple_suggest_placesread declared
apple_permission_guideread declared
apple_recheck_permissionsread declared
apple_send_message_interactivedestructive declared
apple_create_event_interactivewrite inferred
apple_healthread declared
apple_overviewread declared
apple_generate_daily_briefingread declared
apple_generate_weekly_briefingread declared
apple_triage_communications_taskread declared
mail_healthread declared
mail_list_mailboxesread declared
mail_search_messagesread declared
mail_get_messageread declared
mail_get_threadread declared
mail_compose_draftsend inferred
mail_reply_messagedestructive declared
mail_reply_latest_in_threaddestructive declared
mail_forward_messagedestructive declared
mail_mark_messagedestructive declared
mail_move_messagedestructive declared
mail_archive_threaddestructive declared
mail_delete_messagedestructive declared
mail_send_messagedestructive declared
calendar_healthread declared
calendar_list_calendarsread declared
calendar_list_eventsread declared
calendar_get_eventread declared
calendar_create_eventwrite inferred
calendar_update_eventdestructive declared
calendar_delete_eventdestructive declared
reminders_healthread declared
reminders_list_listsread declared
reminders_create_listread inferred
reminders_delete_listdestructive declared
reminders_list_remindersread declared
reminders_get_reminderread declared
reminders_create_reminderwrite inferred
reminders_update_reminderdestructive declared
reminders_complete_reminderdestructive declared
reminders_uncomplete_reminderdestructive declared
reminders_delete_reminderdestructive declared
shortcuts_healthread declared
shortcuts_list_shortcutsread declared
shortcuts_list_foldersread declared
shortcuts_view_shortcutread declared
shortcuts_run_shortcutdestructive declared
files_healthread declared
files_list_allowed_rootsread declared
files_list_directoryread declared
files_search_filesread declared
files_get_file_inforead declared
files_read_text_fileread declared
files_recent_filesread declared
files_get_tagsread declared
files_list_recent_locationsread declared
files_get_icloud_statusread declared
files_create_folderwrite inferred
files_move_pathdestructive declared
files_open_pathwrite assumed
files_reveal_in_finderwrite assumed
files_set_tagsdestructive declared
files_add_tagswrite inferred
files_remove_tagsdestructive declared
files_delete_pathdestructive declared
system_healthread declared
system_statusread declared
system_get_batteryread declared
system_get_frontmost_appread declared
system_list_running_appsread declared
system_get_clipboardread declared
system_list_settings_domainsread declared
system_get_appearance_settingsread declared
system_get_accessibility_settingsread declared
system_get_dock_settingsread declared
system_get_finder_settingsread declared
system_get_settings_snapshotread declared
system_get_focus_statusread declared
system_get_context_snapshotread declared
system_read_preference_domainread declared
system_set_appearance_modedestructive declared
system_set_show_all_extensionsdestructive declared
system_set_show_hidden_filesdestructive declared
system_set_finder_path_bardestructive declared
system_set_finder_status_bardestructive declared
system_set_dock_autohidedestructive declared
system_set_dock_show_recentsdestructive declared
system_set_reduce_motiondestructive declared
system_set_increase_contrastdestructive declared
system_set_reduce_transparencydestructive declared
system_set_clipboarddestructive declared
system_show_notificationread inferred
system_open_applicationwrite assumed
system_gui_list_menu_bar_itemsread inferred
system_gui_click_menu_pathdestructive declared
system_gui_press_keysdestructive declared
system_gui_type_textdestructive declared
system_gui_click_buttondestructive declared
system_gui_choose_popup_valuedestructive declared
maps_healthread declared
maps_search_placesread declared
maps_get_directionsread declared
maps_build_maps_linkread declared
maps_open_directions_in_mapswrite assumed
contacts_healthread declared
contacts_list_contactsread declared
contacts_create_contactwrite inferred
contacts_update_contactdestructive declared
contacts_delete_contactdestructive declared
contacts_search_contactsread declared
contacts_get_contactread declared
contacts_resolve_message_recipientread declared
notes_healthread declared
notes_list_accountsread declared
notes_list_foldersread declared
notes_list_notesread declared
notes_get_noteread declared
notes_search_notesread declared
notes_create_notewrite inferred
notes_append_to_notewrite assumed
notes_update_notedestructive declared
notes_delete_notedestructive declared
notes_move_notedestructive declared
notes_create_folderwrite inferred
notes_rename_folderdestructive declared
notes_delete_folderdestructive declared
notes_list_attachmentsread declared
messages_healthread declared
messages_list_conversationsread declared
messages_get_conversationread declared
messages_search_messagesread declared
messages_get_messageread declared
messages_list_attachmentsread declared
messages_send_messagedestructive declared
messages_reply_in_conversationdestructive declared
messages_send_attachmentdestructive declared
apple_list_promptsread declared
apple_get_promptread declared
search_toolsread declared
get_tool_inforead declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-15100 tools/list answered by the PyPI package apple-tools-mcp==1.1.2 (published to PyPI as apple-tools-mcp, listed in the official MCP registry as io.github.JonathanRReed/apple-tools-mcp 1.1.2), run in an isolated container with no network access and placeholder credentials
2026-10-13100 tools/list answered by the PyPI package apple-tools-mcp==1.1.1 (published to PyPI as apple-tools-mcp, listed in the official MCP registry as io.github.JonathanRReed/apple-tools-mcp 1.1.1), run in an isolated container with no network access and placeholder credentials
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.