LeashIndex Get the report

Index / storage

PixInsight Connector

io-github-mxcoppell-pixinsight-connector declares 91 capabilities across 91 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

99/100 exposureHigh exposure

Manifest recorded 2026-10-30 from tools/list answered by the npm package pixinsight-connector@2.5.2 (published to npm as pixinsight-connector, listed in the official MCP registry as io.github.mxcoppell/pixinsight-connector 2.5.2), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 91 tools

91 of 91 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 6 of 91 tools

6 tools are classified as irreversible and declare no limit.

high · no-expiry · All 91 tools

91 of 91 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 91 tools

91 of 91 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 41 of 91 tools

41 tools can modify data and declare no limit.

low · uncapped-read · 44 of 91 tools

44 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
align_fileswrite assumed
verify_astrometryread inferred
run_plate_solvewrite assumed
copy_astrometric_solutionread inferred
catalog_starsread inferred
combine_channelsread inferred
align_to_referencewrite assumed
run_per_channel_abewrite assumed
lrgb_combineread inferred
compare_imagesread inferred
multi_scale_enhanceread inferred
shell_detail_enhancewrite assumed
inspect_environmentwrite assumed
run_pjsrwrite assumed
run_pixelmathread inferred
pixelmath_new_imageread inferred
run_processwrite assumed
run_pjsr_filewrite assumed
ensure_dirwrite inferred
open_imagewrite assumed
close_imagedelete inferred
list_open_imagesread inferred
rename_viewread inferred
clone_imageread inferred
restore_from_clonewrite assumed
crop_imagewrite assumed
get_image_dimensionsread inferred
get_image_statsread inferred
export_imagewrite inferred
list_processesread inferred
describe_processread inferred
create_luminance_maskwrite inferred
apply_maskread inferred
remove_maskdelete inferred
close_maskdelete inferred
create_zone_maskswrite inferred
create_adaptive_zone_maskswrite inferred
measure_uniformitywrite assumed
measure_starsread inferred
measure_star_layerread inferred
measure_ringingwrite assumed
measure_sharpnesswrite assumed
measure_core_clippingwrite assumed
measure_clipped_blocksread inferred
measure_highlight_texturewrite assumed
measure_saturationwrite assumed
measure_tonal_presencewrite assumed
measure_bright_chromawrite assumed
measure_subject_detailwrite assumed
ha_inject_redread inferred
ha_inject_luminanceread inferred
extract_pseudo_oiiiread inferred
continuum_subtract_haread inferred
dynamic_narrowband_blendread inferred
create_synthetic_luminancewrite inferred
save_previewread inferred
save_and_show_previewread inferred
run_scnrdelete inferred
run_gradient_correctiondelete inferred
run_background_neutralizationwrite assumed
run_nxtread inferred
linear_fitread inferred
run_lheread inferred
run_bxtread inferred
run_sxtread inferred
run_aberead inferred
run_hdrmtread inferred
run_curvesread inferred
find_filtersread inferred
run_spfcwrite assumed
run_spccwrite assumed
run_mgcwrite assumed
reproject_to_referencewrite assumed
resample_imagewrite assumed
pixinsight_inforead inferred
star_protected_blendwrite assumed
restore_star_colorread inferred
robust_median_stretchread inferred
stretch_starswrite inferred
auto_stretchread inferred
set_stfwrite inferred
continuous_clampwrite assumed
run_wbppwrite assumed
wbpp_statusread inferred
scan_workspacewrite assumed
workspace_inforead inferred
set_workspacewrite inferred
resume_bridgewrite assumed
list_packsread inferred
job_statusread inferred
cancel_jobdelete inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.