LeashIndex Get the report

Index / calendar

MCP Dubai

io-github-mahdi-salmanzade-mcp-dubai declares 120 capabilities across 120 tools, with 1 critical issue. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

89/100 exposureHigh exposure

Manifest recorded 2026-10-27 from tools/list answered by the PyPI package mcp-dubai==0.4.0 (published to PyPI as mcp-dubai, listed in the official MCP registry as io.github.mahdi-salmanzade/mcp-dubai 0.4.0), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 120 tools

120 of 120 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 120 tools

120 of 120 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 120 tools

120 of 120 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 120 tools

120 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
recommend_toolsread declared
list_featuresread declared
get_knowledge_statusread declared
aboutread declared
get_upstream_statusread declared
air_quality_dubairead declared
air_quality_by_coordsread declared
air_quality_dubai_stationsread declared
prayer_times_forread declared
prayer_times_calendarread declared
qibla_directionread declared
hijri_to_gregorianread declared
gregorian_to_hijriread declared
weather_uae_icaoread declared
weather_uae_allread declared
cbuae_exchange_ratesread declared
cbuae_base_rateread declared
currency_ratesread declared
currency_convertread declared
data_dubai_searchread declared
data_dubai_themesread declared
data_dubai_entitiesread declared
dfm_indexread declared
dfm_stock_quoteread declared
dfm_list_securitiesread declared
dld_search_transactionsread declared
dld_search_rent_contractsread declared
dld_lookup_brokerread declared
fcsc_search_datasetread declared
fcsc_get_datasetread declared
fcsc_list_organizationsread declared
fca_trade_statsread declared
dubai_gold_rateread declared
uae_holidaysread declared
uae_next_holidayread declared
is_uae_holidayread declared
khda_search_schoolread declared
khda_list_curricularead declared
khda_list_areasread declared
makani_reverse_geocoderead declared
makani_detailsread declared
makani_validateread declared
uae_weatherread declared
uae_weather_forecastread declared
weather_by_coordsread declared
list_uae_weather_citiesread declared
osm_search_poiread declared
osm_list_categoriesread declared
quran_surahread declared
quran_ayahread declared
quran_juzread declared
quran_searchread declared
rta_search_metro_stationsread declared
rta_search_bus_routesread declared
rta_salik_tariffread declared
rta_gtfs_static_urlread declared
list_banksread declared
bank_detailsread declared
bank_recommendationread declared
dul_eligibilityread declared
aml_requirementsread declared
emiratisation_requirementsread declared
ubo_filing_guideread declared
pdpl_complianceread declared
cost_of_living_overviewread declared
rent_estimateread declared
dewa_bill_estimateread declared
salik_toll_estimateread declared
grocery_estimateread declared
school_fee_estimateread declared
fuel_price_guideread declared
createapps_championshipread declared
submission_guideread declared
dcde_programsread declared
chamber_membershipread declared
startup_eventsread declared
gitex_inforead declared
ens_calendarread declared
attestation_guideread declared
pro_services_estimateread declared
legal_translation_estimateread declared
chamber_of_commerce_inforead declared
setup_timeline_estimateread declared
common_founder_mistakesread declared
list_free_zonesread declared
free_zone_detailsread declared
compare_free_zonesread declared
list_offshoreread declared
accelerator_searchread declared
vc_listread declared
grant_programsread declared
portal_guideread declared
halal_certificationread declared
moiat_requirementsread declared
trademark_registrationread declared
ip_protectionread declared
parking_zonesread declared
nol_card_guideread declared
setup_advisorread declared
corporate_tax_estimateread declared
vat_filing_calendarread declared
qfzp_checkread declared
esr_statusread declared
einvoicing_timelineread declared
late_payment_penalty_estimateread declared
ejari_guideread declared
rera_rent_increaseread declared
rental_dispute_guideread declared
list_visa_typesread declared
visa_detailsread declared
visa_recommendread declared
golden_visa_checkread declared
list_honorificsread declared
addressee_blockread declared
business_letter_templateread declared
list_salutationsread declared
plan_queryread declared
list_plan_categoriesread declared
synthesize_reportread declared
analyze_setup_decisionread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.