LeashIndex Get the report

Index / data

RCSB PDB

io-github-rcsb-rcsb-mcp declares 36 capabilities across 36 tools, with 1 critical issue. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

49/100 exposureElevated

Manifest recorded 2026-11-03 from tools/list answered by the PyPI package rcsb-mcp==0.23.0 (published to PyPI as rcsb-mcp, listed in the official MCP registry as io.github.rcsb/rcsb-mcp 0.23.0), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 36 tools

36 of 36 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 36 tools

36 of 36 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 36 tools

36 of 36 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 36 tools

36 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
rcsb_render_reportread declared
rcsb_find_go_termsread declared
rcsb_find_interpro_domainsread declared
rcsb_find_enzyme_classesread declared
rcsb_find_disease_termsread declared
rcsb_find_organismsread declared
rcsb_query_fulltextread declared
rcsb_list_pdb_search_attributesread declared
rcsb_query_attributeread declared
rcsb_query_sequenceread declared
rcsb_query_chemicalread declared
rcsb_query_structureread declared
rcsb_query_seqmotifread declared
rcsb_query_strucmotifread declared
rcsb_query_composerread declared
rcsb_search_requestread declared
rcsb_describe_seqcoord_objectread declared
rcsb_seqcoord_alignmentsread declared
rcsb_seqcoord_annotationsread declared
rcsb_describe_data_objectread declared
rcsb_get_entriesread declared
rcsb_get_polymer_entitiesread declared
rcsb_get_nonpolymer_entitiesread declared
rcsb_get_branched_entitiesread declared
rcsb_get_polymer_entity_instancesread declared
rcsb_get_nonpolymer_entity_instancesread declared
rcsb_get_branched_entity_instancesread declared
rcsb_get_assembliesread declared
rcsb_get_interfacesread declared
rcsb_get_chem_compsread declared
rcsb_get_entry_groupsread declared
rcsb_get_polymer_entity_groupsread declared
rcsb_get_nonpolymer_entity_groupsread declared
rcsb_get_uniprotread declared
rcsb_get_pubmedread declared
rcsb_get_group_provenanceread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.