LeashIndex Get the report

Index / storage

io.github.olamide-olaniyan/sociavault-mcp

io-github-olamide-olaniyan-sociavault-mcp declares 107 capabilities across 107 tools, with 1 critical issue. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

87/100 exposureHigh exposure

Manifest recorded 2026-11-03 from tools/list answered by the npm package sociavault-mcp@2.0.0 (published to npm as sociavault-mcp, listed in the official MCP registry as io.github.olamide-olaniyan/sociavault-mcp 2.0.0), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 107 tools

107 of 107 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 107 tools

107 of 107 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 107 tools

107 of 107 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 107 tools

107 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
tiktok_profileread declared
tiktok_demographicsread declared
tiktok_videosread declared
tiktok_video_inforead declared
tiktok_transcriptread declared
tiktok_liveread declared
tiktok_commentsread declared
tiktok_comment_repliesread declared
tiktok_followingread declared
tiktok_followersread declared
tiktok_search_usersread declared
tiktok_search_hashtagread declared
tiktok_search_keywordread declared
tiktok_search_musicread declared
tiktok_search_topread declared
tiktok_music_popularread declared
tiktok_music_detailsread declared
tiktok_music_videosread declared
tiktok_trendingread declared
tiktok_creators_popularread declared
tiktok_videos_popularread declared
tiktok_hashtags_popularread declared
tiktok_shop_productsread declared
tiktok_shop_product_detailsread declared
tiktok_shop_searchread declared
tiktok_shop_product_reviewsread declared
instagram_profileread declared
instagram_postsread declared
instagram_post_inforead declared
instagram_transcriptread declared
instagram_commentsread declared
instagram_reelsread declared
instagram_highlightsread declared
instagram_highlight_detailread declared
instagram_reels_by_songread declared
youtube_channelread declared
youtube_channel_videosread declared
youtube_channel_shortsread declared
youtube_videoread declared
youtube_video_transcriptread declared
youtube_searchread declared
youtube_search_hashtagread declared
youtube_video_commentsread declared
youtube_video_comment_repliesread declared
youtube_shorts_trendingread declared
youtube_channel_playlistsread declared
youtube_channel_livesread declared
youtube_channel_community_postsread declared
twitch_profileread declared
twitch_user_videosread declared
twitch_user_scheduleread declared
twitch_clipread declared
tiktok_ad_library_searchread declared
tiktok_ad_library_adread declared
linkedin_profileread declared
linkedin_companyread declared
linkedin_postread declared
facebook_profileread declared
facebook_profile_postsread declared
facebook_comment_repliesread declared
facebook_profile_reelsread declared
facebook_group_postsread declared
facebook_postread declared
facebook_post_transcriptread declared
facebook_post_commentsread declared
facebook_ad_library_ad_detailsread declared
facebook_ad_library_searchread declared
facebook_ad_library_company_adsread declared
facebook_ad_library_search_companiesread declared
facebook_marketplace_location_searchread declared
facebook_marketplace_searchread declared
facebook_marketplace_itemread declared
google_ad_library_company_adsread declared
google_ad_library_ad_detailsread declared
google_ad_library_search_advertisersread declared
linkedin_ad_library_searchread declared
linkedin_ad_library_ad_detailsread declared
twitter_profileread declared
twitter_user_tweetsread declared
twitter_user_tweets_allread declared
twitter_tweetread declared
twitter_tweet_transcriptread declared
twitter_commentsread declared
twitter_quotesread declared
twitter_retweetsread declared
twitter_searchread declared
twitter_followersread declared
twitter_followingsread declared
twitter_communityread declared
twitter_community_tweetsread declared
reddit_subreddit_detailsread declared
reddit_subredditread declared
reddit_subreddit_searchread declared
reddit_post_commentsread declared
reddit_post_transcriptread declared
reddit_searchread declared
threads_profileread declared
threads_user_postsread declared
threads_postread declared
threads_searchread declared
threads_search_usersread declared
google_searchread declared
pinterest_searchread declared
pinterest_pinread declared
pinterest_user_boardsread declared
pinterest_boardread declared
check_creditsread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.