LeashIndex Get the report

Index / data

Gillby

io-github-onewave-ai-gillby declares 118 capabilities across 118 tools, with 2 critical issues.

96/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://www.gillby.com/mcp, published in the official MCP registry as io.github.OneWave-AI/gillby 1.0.1. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 118 tools

118 of 118 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 6 of 118 tools

6 tools are classified as irreversible and declare no limit.

high · no-expiry · All 118 tools

118 of 118 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 118 tools

118 of 118 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 2 of 118 tools

2 tools can modify data and declare no limit.

low · uncapped-read · 110 of 118 tools

110 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
check_route_conditionsread declared
compare_spotsread declared
delete_my_placedestructive declared
delete_my_tripdestructive declared
find_anchoragesread declared
find_beachesread declared
find_boat_rampsread declared
find_dive_sitesread declared
find_fuel_docksread declared
find_inletsread declared
find_marinasread declared
find_piersread declared
find_reefsread declared
find_waterfront_diningread declared
find_wrecksread declared
get_activity_scoresread declared
get_air_temperatureread declared
get_algae_reportsread declared
get_beach_bacteriaread declared
get_boatread declared
get_briefingread declared
get_california_coverageread declared
get_california_lakeread declared
get_california_protected_areasread declared
get_california_riverread declared
get_california_surfread declared
get_camera_imageread declared
get_canal_dischargesread declared
get_chlorophyllread declared
get_chopread declared
get_chop_historyread declared
get_cloud_coverread declared
get_coastal_sensorsread declared
get_conditionsread declared
get_coral_heatread declared
get_currentsread declared
get_data_coverageread declared
get_datasetread declared
get_departure_windowsread declared
get_depthread declared
get_derelict_vesselsread declared
get_fish_killsread declared
get_fishing_heatmapread declared
get_fishing_insightsread declared
get_fishing_recordsread declared
get_florida_lakesread declared
get_florida_riversread declared
get_forecastread declared
get_gulf_streamread declared
get_hazardsread declared
get_healthread declared
get_historyread declared
get_hurricane_historyread declared
get_hurricanesread declared
get_jellyfish_observationsread declared
get_king_tideread declared
get_lake_okeechobeeread declared
get_lightningread declared
get_marine_alertsread declared
get_my_notification_settingsread declared
get_my_placeread declared
get_my_settingsread declared
get_my_tripread declared
get_my_vesselread declared
get_navigation_noticesread declared
get_observationsread declared
get_park_alertsread declared
get_parking_guidesread declared
get_poiread declared
get_poi_detailsread declared
get_point_conditionsread declared
get_pollution_noticesread declared
get_pressureread declared
get_protected_areasread declared
get_rainread declared
get_rainfall_historyread declared
get_red_tideread declared
get_release_updatesread declared
get_rip_riskread declared
get_sargassumread declared
get_sargassum_outlookread declared
get_shark_researchread declared
get_source_statusread declared
get_spotread declared
get_surf_forecastread declared
get_temperature_frontsread declared
get_thunder_forecastread declared
get_tidesread declared
get_usgs_waterread declared
get_uv_forecastread declared
get_visibilityread declared
get_water_clarityread declared
get_water_temperatureread declared
get_wave_modelsread declared
get_wavesread declared
get_windread declared
list_boatsread declared
list_bridgesread declared
list_california_facilitiesread declared
list_california_lakesread declared
list_california_placesread declared
list_california_riversread declared
list_california_spotsread declared
list_camsread declared
list_datasetsread declared
list_my_placesread declared
list_my_tripsread declared
list_sandbarsread declared
list_spotsread declared
plan_my_routeread declared
plan_routeread declared
save_my_placewrite assumed
save_my_tripwrite assumed
search_poisread declared
update_my_notification_settingsdestructive declared
update_my_placedestructive declared
update_my_settingsdestructive declared
update_my_tripdestructive declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.