LeashIndex Get the report

Index / storage

MORVS

io-github-morvs-ai-morvs declares 82 capabilities across 82 tools, with 3 critical issues.

86/100 exposureHigh exposure

Manifest recorded 2026-10-16 from tools/list on https://api.morvs.ai/mcp, published in the official MCP registry as io.github.morvs-ai/morvs 0.1.8. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 82 tools

82 of 82 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 2 of 82 tools

2 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 2 of 82 tools

2 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 82 tools

82 of 82 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 82 tools

82 of 82 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · 80 of 82 tools

80 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
searchread declared
dossierread declared
company_profileread declared
company_risk_flagsread declared
company_insider_pulseread declared
cluster_buyspay inferred
cluster_sellsread declared
upcoming_sales_pressureread declared
newsread declared
estimate_filing_datesread declared
fund_holdingspay inferred
fda_firm_dossierread declared
drug_labelread declared
watchlistread declared
cross_vertical_activeread declared
entity_timelineread declared
entity_material_eventsread declared
clinical_trials_recentread declared
lobbying_by_clientread declared
epa_facilitiesread declared
patents_recentread declared
patents_by_assigneeread declared
courts_recentread declared
courts_by_partyread declared
sanctions_checkread declared
cfpb_by_companyread declared
nih_by_orgread declared
nhtsa_by_manufacturerread declared
doj_by_companyread declared
kev_by_vendorread declared
kev_recentread declared
nsf_by_orgread declared
screen_allread declared
lobbying_by_issueread declared
entity_relationshipsread declared
common_owner_rollupread declared
influence_chainread declared
dataset_freshnessread declared
flagged_carriersread declared
adviser_searchread declared
advisers_flaggedread declared
search_340bread declared
pharmacy_340b_clientsread declared
bsee_searchread declared
bsee_worst_operatorsread declared
fails_to_deliver_topread declared
fails_to_deliver_searchread declared
short_volume_most_shortedread declared
short_volume_searchread declared
short_interest_squeezeread declared
short_interest_searchread declared
short_squeeze_candidatesread declared
chemical_accident_searchread declared
chemical_accident_worstread declared
csb_investigation_searchread declared
trade_remedy_searchread declared
fcc_grantee_searchread declared
broadcast_station_searchread declared
house_price_index_searchread declared
crop_insurance_searchread declared
income_by_zip_searchread declared
documented_vessel_searchread declared
ag_census_county_searchread declared
building_permits_searchread declared
fair_market_rent_searchread declared
migration_flows_searchread declared
resolveread declared
compare_entitiesread declared
screen_batchread declared
debarments_checkread declared
doj_recentread declared
nhtsa_recentread declared
fed_enforcement_recentread declared
drone_company_checkread declared
drone_product_lookupread declared
data_broker_checkread declared
data_broker_diffread declared
forced_labor_company_checkread declared
forced_labor_source_compareread declared
pfas_system_lookupread declared
pfas_rule_impactread declared
pfas_system_historyread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-1184 tools/list on https://api.morvs.ai/mcp, published in the official MCP registry as io.github.morvs-ai/morvs 0.1.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.