LeashIndex Get the report

Index / other

KiCad Tools

io-github-productofamerica-mcp-server-kicad declares 109 capabilities across 109 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list answered by the PyPI package mcp-server-kicad==0.21.1 (published to PyPI as mcp-server-kicad, listed in the official MCP registry as io.github.ProductOfAmerica/mcp-server-kicad 0.21.1), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 109 tools

109 of 109 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 22 of 109 tools

22 tools are classified as irreversible and declare no limit.

high · no-expiry · All 109 tools

109 of 109 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 109 tools

109 of 109 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 48 of 109 tools

48 tools can modify data and declare no limit.

low · uncapped-read · 39 of 109 tools

39 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_schematic_summaryread declared
list_schematic_componentsread declared
list_schematic_labelsread declared
list_schematic_wiresread declared
list_schematic_global_labelsread declared
list_schematic_hierarchical_labelsread declared
list_schematic_sheetsread declared
list_schematic_junctionsread declared
list_schematic_no_connectsread declared
list_schematic_bus_entriesread declared
get_symbol_pinsread declared
get_pin_positionsread declared
get_net_connectionsread declared
place_componentwrite assumed
remove_componentdestructive declared
remove_labeldestructive declared
remove_wiredestructive declared
remove_junctiondestructive declared
add_wireswrite inferred
add_labelwrite inferred
add_junctionswrite inferred
add_lib_symbolwrite inferred
move_componentwrite inferred
set_component_propertywrite inferred
set_page_sizewrite inferred
add_global_labelwrite inferred
add_hierarchical_labelwrite inferred
remove_hierarchical_labeldestructive declared
modify_hierarchical_labeldestructive declared
add_power_symbolwrite inferred
auto_place_decoupling_capwrite assumed
add_textwrite inferred
remove_textdestructive declared
wire_pins_to_netread inferred
connect_pinswrite assumed
no_connect_pinwrite assumed
remove_no_connectdestructive declared
list_unconnected_pinsread inferred
run_ercwrite assumed
export_schematicwrite assumed
export_netlistwrite assumed
export_bomwrite assumed
list_pcb_footprintsread declared
list_pcb_tracesread declared
list_pcb_netsread declared
list_pcb_zonesread declared
list_pcb_layersread declared
list_pcb_graphic_itemsread declared
get_board_inforead declared
get_footprint_padsread declared
place_footprintwrite assumed
move_footprintwrite inferred
check_placementread declared
remove_footprintdestructive declared
add_tracewrite inferred
add_viawrite inferred
add_pcb_textwrite inferred
add_pcb_linewrite inferred
add_copper_zonewrite inferred
add_keepout_zonewrite inferred
fill_zoneswrite assumed
update_pcb_from_schematicwrite inferred
set_trace_widthwrite inferred
remove_tracesdestructive declared
add_thermal_viaswrite inferred
set_net_classwrite inferred
remove_dangling_tracksdestructive declared
run_drcwrite assumed
export_pcbwrite assumed
export_gerberswrite assumed
export_3dread inferred
export_positionswrite assumed
export_ipc2581destructive declared
autoroute_pcbwrite assumed
get_footprint_boundsread declared
validate_boardread declared
list_lib_symbolsread declared
get_symbol_inforead declared
add_symbolwrite inferred
export_symbol_svgwrite assumed
upgrade_symbol_libdestructive declared
list_lib_footprintsread declared
get_footprint_inforead declared
export_footprint_svgwrite assumed
upgrade_footprint_libdestructive declared
create_projectwrite inferred
create_schematicwrite inferred
create_symbol_librarywrite inferred
create_sym_lib_tabledestructive declared
add_hierarchical_sheetwrite inferred
remove_hierarchical_sheetdestructive declared
modify_hierarchical_sheetdestructive declared
add_sheet_pinwrite inferred
remove_sheet_pindestructive declared
annotate_schematicwrite inferred
validate_hierarchyread declared
is_root_schematicread declared
list_hierarchyread declared
get_sheet_inforead declared
trace_hierarchical_netread declared
list_cross_sheet_netsread declared
get_symbol_instancesread declared
move_hierarchical_sheetdestructive declared
reorder_sheet_pagesdestructive declared
duplicate_sheetdestructive declared
flatten_hierarchydestructive declared
export_hierarchical_netlistwrite assumed
run_jobsetwrite assumed
get_versionread declared

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-15100 tools/list answered by the PyPI package mcp-server-kicad==0.21.0 (published to PyPI as mcp-server-kicad, listed in the official MCP registry as io.github.ProductOfAmerica/mcp-server-kicad 0.21.0), run in an isolated container with no network access and no credentials
2026-10-13100 tools/list answered by the PyPI package mcp-server-kicad==0.20.1 (published to PyPI as mcp-server-kicad, listed in the official MCP registry as io.github.ProductOfAmerica/mcp-server-kicad 0.20.1), run in an isolated container with no network access and no credentials
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.