LeashIndex Get the report

Index / other

Aseprite Live

io-github-oaktreegames-aseprite-live-mcp declares 139 capabilities across 139 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-03 from tools/list answered by the PyPI package aseprite-live-mcp==0.2.0 (published to PyPI as aseprite-live-mcp, listed in the official MCP registry as io.github.oaktreegames/aseprite-live-mcp 0.2.0), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Note. Installed with the MCP Python SDK held below version 2.0. With the newest SDK this version of the package stopped before it could list its tools.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 139 tools

139 of 139 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 12 of 139 tools

12 tools are classified as irreversible or destructive and declare no limit. 11 of them are counted only because the server annotated them destructiveHint. In MCP that annotation marks a tool that may make destructive changes rather than only additive ones; it does not say the change cannot be undone.

high · no-expiry · All 139 tools

139 of 139 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 139 tools

139 of 139 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 103 of 139 tools

103 tools can modify data and declare no limit.

low · uncapped-read · 24 of 139 tools

24 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
statusread declared
get_sprite_inforead declared
get_pixelread declared
set_sprite_metadatawrite inferred
get_sprite_metadataread declared
get_pixelsread declared
open_spritewrite assumed
save_spritewrite assumed
close_spritedestructive declared
set_active_spritewrite inferred
list_spritesread declared
create_spritewrite inferred
expand_canvaswrite assumed
import_spritesheetwrite assumed
add_layerwrite inferred
add_groupwrite inferred
move_layer_to_groupwrite inferred
list_layersread declared
delete_layerdestructive declared
rename_layerwrite inferred
set_layer_visibilitywrite inferred
set_layer_opacitywrite inferred
flatten_spritedestructive declared
set_layer_blend_modewrite inferred
duplicate_layerwrite assumed
merge_layer_downdestructive declared
move_layerwrite inferred
import_image_as_layerwrite assumed
add_framewrite inferred
duplicate_framewrite assumed
delete_framedestructive declared
set_frame_durationwrite inferred
add_frameswrite inferred
set_frame_durationswrite inferred
reverse_frameswrite assumed
set_onion_skinwrite inferred
clear_celdestructive declared
set_cel_positionwrite inferred
set_cel_opacitywrite inferred
draw_pixelswrite inferred
draw_polylinewrite assumed
draw_rectanglewrite assumed
draw_linewrite assumed
draw_circlewrite assumed
fill_areawrite assumed
draw_ellipsewrite assumed
draw_gradientwrite assumed
apply_ditherwrite assumed
add_outlinewrite inferred
get_paletteread declared
set_palette_colorwrite inferred
add_palette_colorwrite inferred
set_palettewrite inferred
apply_preset_palettewrite assumed
generate_color_rampwrite assumed
extract_palette_from_imagewrite assumed
sort_palettewrite assumed
palette_from_spritewrite assumed
load_palettewrite assumed
save_palettewrite inferred
apply_bundled_palettewrite assumed
replace_colorwrite assumed
quantize_to_palettewrite assumed
adjust_hslwrite assumed
get_color_statsread declared
apply_shadingwrite assumed
palette_ramp_walkwrite assumed
adjust_brightness_contrastwrite assumed
invert_colorswrite assumed
desaturatewrite assumed
box_blurwrite assumed
sharpenwrite assumed
paint_with_stampwrite assumed
draw_iso_boxwrite assumed
draw_iso_cylinderwrite assumed
fill_polygonread inferred
iso_recessed_panelwrite assumed
select_rectanglewrite inferred
select_allwrite assumed
deselectwrite assumed
select_ellipsewrite assumed
select_by_colorwrite assumed
invert_selectionwrite assumed
get_selectionread declared
erase_areadestructive declared
flip_spritewrite assumed
resize_spritewrite assumed
crop_spritedestructive declared
rotate_spritewrite assumed
autocrop_spritewrite assumed
set_color_modewrite inferred
create_slicewrite inferred
set_slice_pivotwrite inferred
set_slice_centerwrite inferred
list_slicesread declared
delete_slicedestructive declared
create_tagwrite inferred
delete_tagdestructive declared
list_tagsread declared
rename_tagwrite inferred
set_tag_colorwrite inferred
set_tag_rangewrite inferred
set_tag_directionwrite inferred
create_tilemap_layerwrite inferred
add_tilewrite inferred
draw_on_tilewrite inferred
set_tileswrite inferred
get_tilemap_inforead declared
export_tilesetwrite assumed
tween_framesread inferred
tween_cel_opacitywrite assumed
smear_framewrite assumed
frame_diffread declared
render_onion_compositewrite inferred
export_spritewrite assumed
export_spritesheetwrite assumed
export_layerswrite assumed
export_tagswrite assumed
export_unity_spritewrite inferred
export_unity_sliceswrite inferred
measure_paddingread declared
qa_sweepread declared
batch_exportwrite assumed
batch_resizewrite assumed
batch_apply_palettewrite assumed
undowrite inferred
redowrite inferred
get_editor_stateread declared
set_editor_viewread inferred
set_symmetrywrite inferred
ask_pointwrite assumed
get_asked_pointread declared
cancel_ask_pointdelete inferred
show_choice_dialogread inferred
get_dialog_choiceread declared
watch_changeswrite assumed
get_watched_changesread declared
stop_watching_changeswrite assumed
run_luadestructive declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.