LeashIndex Get the report

Index / storage

DrissionPage MCP

io-github-jumodada-drissionpage-mcp declares 69 capabilities across 69 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-26 from tools/list answered by the PyPI package drissionpage-mcp==0.8.5 (published to PyPI as drissionpage-mcp, listed in the official MCP registry as io.github.jumodada/drissionpage-mcp 0.8.5), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · irreversible-uncapped · 41 of 69 tools

41 tools are classified as irreversible and declare no limit.

critical · no-revocation · All 69 tools

69 of 69 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 69 tools

69 of 69 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 69 tools

69 of 69 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · 28 of 69 tools

28 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
page_navigatedestructive declared
page_navigate_with_http_authdestructive declared
page_go_backdestructive declared
page_go_forwarddestructive declared
page_refreshdestructive declared
tab_listread declared
tab_switchdestructive declared
tab_closedestructive declared
page_resizedestructive declared
page_screenshotread declared
page_screenshot_savedestructive declared
page_export_artifactdestructive declared
page_snapshotread declared
page_accessibility_snapshotread declared
page_observeread declared
page_evaluatedestructive declared
page_pointer_movedestructive declared
page_pointer_dragdestructive declared
page_pointer_drag_elementdestructive declared
page_click_xydestructive declared
page_closedestructive declared
page_get_urlread declared
browser_headers_setdestructive declared
browser_user_agent_setdestructive declared
browser_cache_cleardestructive declared
browser_permission_getread declared
browser_permission_setdestructive declared
browser_permissions_resetdestructive declared
page_dialog_observeread declared
page_dialog_responddestructive declared
element_click_and_downloaddestructive declared
page_console_logsread declared
element_findread declared
element_find_allread declared
element_clickdestructive declared
element_typedestructive declared
element_get_textread declared
element_get_attributeread declared
element_get_propertyread declared
element_get_htmlread declared
element_state_getread declared
element_upload_filedestructive declared
element_click_and_uploaddestructive declared
page_scrolldestructive declared
element_scroll_into_viewdestructive declared
element_hoverdestructive declared
keyboard_pressdestructive declared
element_selectdestructive declared
element_checkdestructive declared
frame_listread declared
frame_snapshotread declared
frame_findread declared
shadow_findread declared
shadow_find_allread declared
browser_cookies_getread declared
browser_cookies_setdestructive declared
browser_cookies_deletedestructive declared
browser_cookies_cleardestructive declared
storage_getread declared
storage_setdestructive declared
storage_cleardestructive declared
wait_for_elementread declared
wait_for_urlread declared
wait_timeread declared
wait_untilread declared
network_listen_startdestructive declared
network_listen_waitread declared
network_listen_stopdestructive declared
network_blocked_urls_setdestructive declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.