LeashIndex Get the report

Index / data

Adobe InDesign

io-github-nutriandrea-indesign-nutria-mcp declares 197 capabilities across 197 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-02 from tools/list answered by the npm package indesign-nutria-mcp@1.6.1 (published to npm as indesign-nutria-mcp, listed in the official MCP registry as io.github.nutriandrea/indesign-nutria-mcp 1.6.1), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 197 tools

197 of 197 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 16 of 197 tools

16 tools are classified as irreversible and declare no limit.

high · no-expiry · All 197 tools

197 of 197 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 197 tools

197 of 197 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 114 of 197 tools

114 tools can modify data and declare no limit.

low · uncapped-read · 67 of 197 tools

67 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
document_createwrite inferred
document_openwrite assumed
document_savewrite assumed
document_closedelete inferred
document_getInforead inferred
document_listOpenread inferred
document_getStateread inferred
document_getPageStoriesread inferred
document_getStoryPagesread inferred
page_addwrite inferred
page_deletedelete inferred
page_duplicatewrite assumed
page_movewrite inferred
page_getInforead inferred
page_listAllread inferred
page_applyMasterwrite assumed
text_addFramewrite inferred
text_setContentwrite inferred
text_getContentread inferred
text_getStoriesread inferred
text_applyParagraphStylewrite assumed
text_findReplaceread inferred
text_getTextFramesread inferred
style_listParagraphread inferred
style_listCharacterread inferred
style_listObjectread inferred
style_createParagraphwrite inferred
style_createCharacterwrite inferred
style_duplicatewrite assumed
style_deletedelete inferred
image_listread inferred
image_getLinksread inferred
shape_createwrite inferred
shape_listread inferred
group_listread inferred
group_ungroupwrite assumed
export_documentwrite assumed
export_batchFolderwrite assumed
export_preflightwrite assumed
export_getSwatchesread inferred
export_getFontsread inferred
export_getMasterSpreadsread inferred
export_getTablesread inferred
export_getXmlTagsread inferred
export_executeScriptwrite assumed
script_runwrite assumed
master_createwrite inferred
master_duplicatewrite assumed
master_applywrite assumed
master_deletedelete inferred
master_listread inferred
master_getPagesread inferred
table_createwrite inferred
table_listread inferred
table_addRowwrite inferred
table_addColumnwrite inferred
table_deleteRowdelete inferred
table_deleteColumndelete inferred
table_setCellwrite inferred
table_getInforead inferred
table_mergeCellswrite inferred
table_splitCellwrite inferred
table_setCellFillwrite inferred
table_setCellStrokewrite inferred
table_setCellInsetwrite inferred
table_setCellAlignmentwrite inferred
table_setHeaderFooterwrite inferred
table_setRowColumnSizewrite inferred
resources_listLinksread inferred
resources_updateLinkwrite inferred
resources_updateAllLinkswrite inferred
resources_embedLinkwrite assumed
resources_unembedLinkwrite assumed
resources_getLinkInforead inferred
book_listread inferred
book_openwrite assumed
book_getDocumentsread inferred
book_synchronizewrite assumed
interactive_listHyperlinksread inferred
interactive_addHyperlinkwrite inferred
interactive_deleteHyperlinkdelete inferred
interactive_listButtonsread inferred
interactive_listAnchorsread inferred
xml_listTagsread inferred
xml_addTagwrite inferred
xml_deleteTagdelete inferred
xml_tagPageItemwrite assumed
xml_exportwrite assumed
xml_importwrite assumed
toc_createStylewrite inferred
toc_generatewrite assumed
toc_listStylesread inferred
toc_updatewrite inferred
note_addFootnotewrite inferred
note_listFootnotesread inferred
note_footnoteOptionswrite inferred
note_addEndnotewrite inferred
index_addEntrywrite inferred
index_generatewrite assumed
index_listTopicsread inferred
index_createTopicwrite inferred
grep_findread inferred
grep_replaceread inferred
grep_findFormatread inferred
grep_replaceFormatread inferred
text_linkFrameswrite assumed
text_unlinkFrameswrite assumed
text_setColumnswrite inferred
text_setTextWrapwrite inferred
text_setDropCapdelete inferred
text_setKeepOptionswrite inferred
text_setInsetSpacingwrite inferred
text_setAutoSizewrite inferred
text_setVerticalJustificationwrite inferred
text_setFirstBaselinewrite inferred
text_setIgnoreWrapwrite inferred
text_setParagraphRuleAbovewrite inferred
text_setParagraphRuleBelowwrite inferred
text_setTabswrite inferred
text_setHyphenationwrite inferred
text_getFormattingread inferred
text_applyCharStylewrite assumed
text_applyFontwrite assumed
text_searchread inferred
text_searchFormattingread inferred
xref_createwrite inferred
xref_listread inferred
xref_updateFormatwrite inferred
effect_applyDropShadowdelete inferred
effect_applyFeatherwrite assumed
effect_applyTransparencywrite inferred
effect_applyGradientFeatherwrite assumed
transform_alignwrite assumed
transform_distributewrite assumed
transform_rotatewrite assumed
transform_scalewrite assumed
transform_flipwrite assumed
tableStyle_createwrite inferred
tableStyle_listread inferred
cellStyle_createwrite inferred
cellStyle_listread inferred
section_createwrite inferred
section_listread inferred
section_setNumberingwrite inferred
section_deletedelete inferred
color_swatch_createwrite inferred
color_swatch_listread inferred
color_swatch_deletedelete inferred
color_gradient_createwrite inferred
color_applywrite assumed
color_ink_listread inferred
font_listread inferred
font_findread inferred
font_changewrite assumed
font_glyph_insertwrite inferred
font_missing_checkread inferred
image_placewrite assumed
image_adjustwrite assumed
image_fitwrite assumed
image_relinkwrite assumed
image_inforead inferred
layer_createwrite inferred
layer_listread inferred
layer_reorderwrite inferred
layer_setPropertieswrite inferred
layer_deletedelete inferred
shape_rectangle_createwrite inferred
shape_ellipse_createwrite inferred
shape_polygon_createwrite inferred
shape_line_createwrite inferred
shape_modifywrite inferred
shape_deletedelete inferred
undowrite assumed
redowrite assumed
undo_historyread inferred
undo_beginGroupwrite assumed
undo_endGroupwrite assumed
anchoredObject_createwrite inferred
anchoredObject_setPositionwrite inferred
anchoredObject_releasewrite assumed
anchoredObject_getSettingsread inferred
anchoredObject_setPropertieswrite inferred
list_defineread inferred
list_applyToParagraphread inferred
list_applyToSelectionread inferred
list_removeFromParagraphdelete inferred
list_listread inferred
list_restartNumberingread inferred
dataMerge_selectDataSourcewrite inferred
dataMerge_listFieldsread inferred
dataMerge_mergeRecordsread inferred
dataMerge_exportwrite inferred
dataMerge_removeDataSourcedelete inferred
preview_documentread inferred
recipe_flowTextStorywrite assumed
recipe_exportPresetwrite assumed
changes_getStatusread inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.