LeashIndex Get the report

Index / payments

Organizze

io-github-mcp-dir-organizze-mcp declares 68 capabilities across 68 tools, with 3 critical issues.

98/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list on https://api.mcp.ai/p_organizze, published in the official MCP registry as io.github.mcp-dir/organizze-mcp 0.1.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 68 tools

68 of 68 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 10 of 68 tools

10 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 4 of 68 tools

4 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 68 tools

68 of 68 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 68 tools

68 of 68 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 21 of 68 tools

21 tools can modify data and declare no limit.

low · uncapped-read · 37 of 68 tools

37 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
organizze_list_accountsread declared
organizze_list_credit_cardsread declared
organizze_list_categoriesread declared
organizze_list_transactionsread declared
organizze_list_transferencesread declared
organizze_list_budgetsread declared
organizze_get_credit_card_invoicesread declared
organizze_get_financial_summaryread declared
organizze_search_transactionsread declared
organizze_get_transactionread declared
organizze_get_credit_card_invoiceread declared
organizze_get_budget_summaryread declared
organizze_get_income_vs_expensesread declared
organizze_transactions_list_resultsread declared
organizze_suggest_categoriesread declared
organizze_get_account_contextread declared
organizze_resolve_entityread declared
organizze_get_upcoming_billsread declared
organizze_get_monthly_overviewread declared
organizze_get_categories_reportread declared
organizze_get_categories_evolutionread declared
organizze_get_tags_reportread declared
organizze_get_invoices_matrixread declared
organizze_find_duplicatesread declared
organizze_find_installmentsread declared
organizze_find_subscriptionsread declared
organizze_get_bank_connectionsread declared
organizze_get_open_finance_statusread declared
organizze_get_latest_importsread declared
organizze_get_balancesread declared
organizze_get_cashflow_forecastread declared
organizze_list_recurrencesread declared
organizze_list_institutionsread declared
organizze_load_skillread declared
organizze_create_transactionwrite inferred
organizze_create_accountwrite inferred
organizze_inform_invoice_paymentpay inferred
organizze_update_transactionwrite inferred
organizze_delete_transactiondelete inferred
organizze_set_transaction_paidpay inferred
organizze_create_transferwrite inferred
organizze_register_invoice_paymentpay inferred
organizze_uninform_invoice_paymentpay inferred
organizze_create_categorywrite inferred
organizze_update_categorywrite inferred
organizze_delete_categorydelete inferred
organizze_create_budgetwrite inferred
organizze_update_budgetwrite inferred
organizze_delete_budgetdelete inferred
organizze_clone_budgetswrite assumed
organizze_update_accountwrite inferred
organizze_delete_accountdelete inferred
organizze_create_credit_cardwrite inferred
organizze_update_credit_cardwrite inferred
organizze_delete_credit_carddelete inferred
organizze_mass_create_transactionswrite inferred
organizze_mass_update_transactionswrite inferred
organizze_mass_delete_transactionsdelete inferred
organizze_add_transactions_tagswrite inferred
organizze_update_transactions_categorieswrite inferred
organizze_update_transactions_descriptionswrite inferred
organizze_mass_manage_categorieswrite assumed
show_versionread declared
report_bugwrite assumed
connectread declared
toolkit_inforead declared
marketplacewrite assumed
authenticatewrite assumed
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.