LeashIndex Get the report

Index / data

ETABS MCP

io-github-moha2005269-etabs-mcp declares 71 capabilities across 71 tools, with 2 critical issues.

99/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list answered by the PyPI package etabs-mcp==0.3.2 (published to PyPI as etabs-mcp, listed in the official MCP registry as io.github.Moha2005269/etabs-mcp 0.3.2), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 71 tools

71 of 71 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 11 of 71 tools

11 tools are classified as irreversible and declare no limit.

high · no-expiry · All 71 tools

71 of 71 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 71 tools

71 of 71 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 28 of 71 tools

28 tools can modify data and declare no limit.

low · uncapped-read · 32 of 71 tools

32 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
etabs_list_installationsread declared
etabs_connectwrite assumed
etabs_instancesread inferred
etabs_statusread declared
etabs_disconnectdestructive declared
etabs_model_overviewread declared
etabs_new_modeldestructive declared
etabs_open_modeldestructive declared
etabs_save_modelwrite assumed
etabs_set_unitswrite inferred
etabs_get_storiesread declared
etabs_set_storieswrite inferred
etabs_add_frameswrite inferred
etabs_add_areaswrite inferred
etabs_add_pointswrite inferred
etabs_list_objectsread declared
etabs_delete_objectsdestructive declared
etabs_set_restraintswrite inferred
etabs_assign_sectionwrite inferred
etabs_selectread inferred
etabs_generate_buildingdestructive declared
etabs_list_propertiesread declared
etabs_define_materialwrite assumed
etabs_define_frame_sectionwrite assumed
etabs_define_area_sectionwrite assumed
etabs_define_load_patternswrite assumed
etabs_assign_loadswrite inferred
etabs_define_combinationswrite assumed
etabs_list_load_definitionsread declared
etabs_define_seismic_loadwrite assumed
etabs_define_wind_loadwrite assumed
etabs_define_response_spectrumwrite assumed
etabs_set_mass_sourcewrite inferred
etabs_assign_diaphragmwrite inferred
etabs_set_modal_casewrite inferred
etabs_run_analysiswrite assumed
etabs_analysis_statusread declared
etabs_unlock_modeldestructive declared
etabs_get_resultsread declared
etabs_run_designwrite assumed
etabs_job_statusread declared
etabs_job_waitread declared
etabs_get_design_summaryread declared
etabs_design_codesread inferred
etabs_run_shear_wall_designwrite assumed
etabs_get_wall_designread declared
etabs_get_concrete_designread declared
etabs_get_slab_designread declared
etabs_menudestructive declared
etabs_dialogsread inferred
etabs_code_checksread declared
etabs_scale_response_spectrumdestructive declared
etabs_list_tablesread declared
etabs_get_tableread declared
etabs_edit_tablewrite inferred
etabs_screenshotread declared
etabs_show_windowread inferred
etabs_refresh_viewread inferred
etabs_render_viewread declared
etabs_find_objectsread inferred
etabs_what_changedread declared
etabs_checkpointwrite inferred
etabs_list_checkpointsread declared
etabs_restore_checkpointdestructive declared
etabs_export_modelread declared
etabs_design_reportwrite inferred
etabs_assign_labelwrite inferred
etabs_search_apiread declared
etabs_describe_apiread declared
etabs_call_apidestructive declared
etabs_call_api_batchdestructive declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.