LeashIndex Get the report

Index / storage

SolidWorks

io-github-nejcdvorsek-sw-mcp declares 101 capabilities across 101 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-02 from tools/list answered by the PyPI package sw-mcp==0.2.0 (published to PyPI as sw-mcp, listed in the official MCP registry as io.github.NejcDvorsek/sw-mcp 0.2.0), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 101 tools

101 of 101 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 6 of 101 tools

6 tools are classified as irreversible and declare no limit.

high · no-expiry · All 101 tools

101 of 101 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 101 tools

101 of 101 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 71 of 101 tools

71 tools can modify data and declare no limit.

low · uncapped-read · 24 of 101 tools

24 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_statusread inferred
new_documentwrite inferred
add_boxwrite inferred
add_extruded_profilewrite inferred
add_discwrite inferred
add_cylinderwrite inferred
add_conewrite inferred
add_revolved_profilewrite inferred
add_swept_pipewrite inferred
add_swept_profilewrite inferred
add_loftwrite inferred
cut_profilewrite assumed
add_planewrite inferred
list_bodiesread inferred
combine_bodiesread inferred
split_bodywrite assumed
add_threadwrite inferred
add_ribwrite inferred
add_holewrite inferred
add_boss_on_facewrite inferred
add_text_on_facewrite inferred
cut_offset_pocketwrite assumed
cut_slotwrite assumed
add_extruded_slotwrite inferred
extrude_sketchwrite assumed
add_sketchwrite inferred
cut_sketchwrite assumed
add_filletwrite inferred
add_full_roundwrite inferred
add_chamferwrite inferred
add_linear_patternwrite inferred
add_circular_patternwrite inferred
add_axiswrite inferred
run_scriptwrite assumed
add_mirrorwrite inferred
add_shellwrite inferred
add_base_flangewrite inferred
add_edge_flangewrite inferred
flat_patternwrite assumed
add_closed_cornerdelete inferred
add_weld_beadwrite inferred
add_structural_memberwrite inferred
add_end_capwrite inferred
add_gussetwrite inferred
cut_listread inferred
set_dimensionwrite inferred
slice_meshwrite assumed
compare_with_meshread inferred
list_dimensionsread inferred
read_sketchread inferred
list_featuresread inferred
delete_featuredelete inferred
suppress_featurewrite assumed
reorder_featurewrite inferred
set_appearancewrite inferred
set_materialwrite inferred
set_equationwrite inferred
list_equationsread inferred
delete_equationdelete inferred
list_documentsread inferred
activate_documentwrite assumed
delete_matedelete inferred
suppress_matewrite assumed
delete_componentdelete inferred
replace_componentwrite assumed
rebuildwrite assumed
get_mass_propertiesread inferred
get_bounding_boxread inferred
list_facesread inferred
list_edgesread inferred
check_printabilityread inferred
read_modelread inferred
exportwrite assumed
screenshotwrite assumed
make_drawingwrite assumed
build_drawingwrite assumed
drawing_filewrite assumed
set_drawing_propertieswrite inferred
add_viewread inferred
edit_viewread inferred
list_viewsread inferred
import_dimensionswrite assumed
add_dimensionwrite inferred
add_symbolwrite inferred
add_notewrite inferred
add_tablewrite inferred
edit_annotationwrite inferred
auto_layoutread inferred
check_drawingread inferred
render_drawingwrite assumed
close_documentdelete inferred
save_documentwrite assumed
open_documentwrite assumed
insert_componentwrite inferred
list_componentsread inferred
set_component_transformwrite inferred
add_matewrite inferred
check_interferenceread inferred
measure_distancewrite assumed
check_motionread inferred
swept_regionwrite inferred

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-30100 tools/list answered by the PyPI package sw-mcp==0.1.0 (published to PyPI as sw-mcp, listed in the official MCP registry as io.github.NejcDvorsek/sw-mcp 0.1.0), run in an isolated container with no network access and no credentials
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.