LeashIndex Get the report

Index / calendar

Good Earth

io-github-lonniev-goodearth-mcp declares 85 capabilities across 85 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-16 from tools/list on https://goodearth-mcp.fastmcp.app/mcp, published in the official MCP registry as io.github.lonniev/goodearth-mcp 0.3.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 85 tools

85 of 85 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 19 of 85 tools

19 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 2 of 85 tools

2 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 85 tools

85 of 85 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 85 tools

85 of 85 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 13 of 85 tools

13 tools can modify data and declare no limit.

low · uncapped-read · 53 of 85 tools

53 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
goodearth_check_balanceread declared
goodearth_purchase_creditspay inferred
goodearth_check_paymentpay inferred
goodearth_restore_creditswrite assumed
goodearth_account_statementread declared
goodearth_account_statement_infographicread declared
goodearth_report_issuewrite assumed
goodearth_service_statusread declared
goodearth_request_echoread declared
goodearth_get_operator_onboarding_statusread declared
goodearth_get_patron_onboarding_statusread declared
goodearth_session_statusread declared
goodearth_request_credential_channelwrite inferred
goodearth_receive_credentialsdestructive declared
goodearth_forget_credentialsdestructive declared
goodearth_update_patron_credentialwrite inferred
goodearth_update_operator_credentialwrite inferred
goodearth_delete_patron_credentialdestructive declared
goodearth_delete_operator_credentialdestructive declared
goodearth_get_patron_credential_fieldsread declared
goodearth_request_npub_proofwrite inferred
goodearth_receive_npub_proofdestructive declared
goodearth_check_proof_statusread declared
goodearth_oracle_how_to_joinread declared
goodearth_oracle_get_tax_rateread declared
goodearth_oracle_lookup_memberread declared
goodearth_oracle_aboutread declared
goodearth_oracle_network_advisoryread declared
goodearth_check_authority_balanceread declared
goodearth_get_pricing_modelread declared
goodearth_set_pricing_modeldestructive declared
goodearth_reset_pricing_modeldestructive declared
goodearth_request_adoptionwrite inferred
goodearth_adoption_statusread declared
goodearth_restore_neon_schemawrite assumed
goodearth_list_canonical_identitiesread declared
goodearth_get_nostr_profileread declared
goodearth_publish_nostr_profiledestructive declared
goodearth_check_priceread declared
goodearth_list_constraint_typesread declared
goodearth_mint_couponwrite inferred
goodearth_list_couponsread declared
goodearth_update_couponwrite inferred
goodearth_delete_coupondestructive declared
goodearth_redeem_couponwrite assumed
goodearth_list_my_couponsread declared
goodearth_forget_coupondestructive declared
goodearth_notarize_ledgerwrite assumed
goodearth_get_notarization_proofread declared
goodearth_list_notarizationsread declared
goodearth_gdd_season_curveread declared
goodearth_frost_windowread declared
goodearth_crop_gdd_statusread declared
goodearth_soil_temp_projectionread declared
goodearth_pest_thresholdread declared
goodearth_calibrationread declared
goodearth_almanacread declared
goodearth_plan_the_seasonread declared
goodearth_review_rosterread declared
goodearth_task_savedestructive declared
goodearth_task_listread declared
goodearth_task_deletedestructive declared
goodearth_task_set_donewrite inferred
goodearth_pest_catalogread declared
goodearth_nearby_speciesread declared
goodearth_wildlife_catalogread declared
goodearth_wildlife_calendarread declared
goodearth_crop_suitabilityread declared
goodearth_tree_suitabilityread declared
goodearth_tree_yearread declared
goodearth_companionsread declared
goodearth_calendar_datasetdestructive declared
goodearth_calendar_fetchread declared
goodearth_calendar_listread declared
goodearth_calendar_revokedestructive declared
goodearth_planting_windowread declared
goodearth_forget_my_grounddestructive declared
goodearth_block_savedestructive declared
goodearth_block_listread declared
goodearth_block_item_savedestructive declared
goodearth_block_item_listread declared
goodearth_disease_riskread declared
goodearth_drying_windowread declared
goodearth_block_transformread declared
goodearth_sunlightread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1199 tools/list on https://goodearth-mcp.fastmcp.app/mcp, published in the official MCP registry as io.github.lonniev/goodearth-mcp 0.3.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.