LeashIndex Get the report

Index / data

MangroveAI

io-github-mangrovetechnologies-mangroveai declares 84 capabilities across 84 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

89/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://api.mangrovedeveloper.ai/mcp/, published in the official MCP registry as io.github.MangroveTechnologies/mangroveai 1.0.2. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 84 tools

84 of 84 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 2 of 84 tools

2 tools are classified as irreversible or destructive and declare no limit. 1 of them is counted only because the server annotated it destructiveHint. In MCP that annotation marks a tool that may make destructive changes rather than only additive ones; it does not say the change cannot be undone.

high · no-expiry · All 84 tools

84 of 84 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 84 tools

84 of 84 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 6 of 84 tools

6 tools can modify data and declare no limit.

low · uncapped-read · 76 of 84 tools

76 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
build_strategy_for_regimewrite assumed
classify_market_segmentread declared
create_sweepwrite inferred
delete_strategydelete inferred
evaluate_multiple_signals_seriesread declared
evaluate_signalread declared
evaluate_strategywrite assumed
find_sweep_runsread declared
get_assetread declared
get_backtestread declared
get_backtest_tradesread declared
get_benchmarkread declared
get_chain_tvlread declared
get_etf_flowsread declared
get_execution_config_schemaread declared
get_global_marketread declared
get_influence_scoreread declared
get_lending_ratesread declared
get_market_dataread declared
get_market_regimeread declared
get_ohlcvread declared
get_onchain_seriesread declared
get_perp_funding_ratesread declared
get_playground_dataread declared
get_protocol_tvlread declared
get_signalread declared
get_smart_money_dex_tradesread declared
get_smart_money_flowsread declared
get_smart_money_historical_holdingsread declared
get_smart_money_holdingsread declared
get_smart_money_netflowsread declared
get_smart_money_perp_tradesread declared
get_smart_money_sentimentread declared
get_social_mentionsread declared
get_social_sentimentread declared
get_stablecoin_metricsread declared
get_strategyread declared
get_sweepread declared
get_sweep_limitsread declared
get_sweep_runread declared
get_symbol_exchangesread declared
get_token_dex_tradesread declared
get_token_flowsread declared
get_token_holdersread declared
get_token_unlocksread declared
get_trades_for_strategyread declared
get_treasuriesread declared
get_trendingread declared
get_x_post_countsread declared
kb_get_documentread declared
kb_get_signal_quick_referenceread declared
kb_glossary_getread declared
kb_list_documentsread declared
kb_searchread declared
launch_sweepread inferred
list_approved_assetsread declared
list_backtest_marketsread declared
list_backtestsread declared
list_evaluationsread declared
list_exchangesread declared
list_playground_datasetsread declared
list_positionsread declared
list_run_filtersread declared
list_signal_labelsread declared
list_signalsread declared
list_strategiesread declared
list_sweep_marketsread declared
list_sweepsread declared
list_tradesread declared
load_skillread declared
match_signalsread declared
pause_sweepwrite assumed
query_knowledgeread declared
query_signal_behaviorread declared
run_backtestwrite assumed
save_strategywrite assumed
screen_candidatesread declared
screen_smart_moneyread declared
search_signalsread declared
size_sweepread declared
update_strategydestructive declared
validate_signal_paramsread declared
verify_strategyread declared
discover_toolsread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-2889 tools/list on https://api.mangrovedeveloper.ai/mcp/, published in the official MCP registry as io.github.MangroveTechnologies/mangroveai 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.