LeashIndex Get the report

Index / data

io.github.Sandeeprdy1729/timps

io-github-sandeeprdy1729-timps declares 69 capabilities across 69 tools, with 2 critical issues.

94/100 exposureHigh exposure

Manifest recorded 2026-10-13 from tools/list answered by the npm package @timps-ai/timps-mcp@2.0.3 (published to npm as @timps-ai/timps-mcp, listed in the official MCP registry as io.github.Sandeeprdy1729/timps 2.0.3), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · irreversible-uncapped · 1 of 69 tools

1 tool is classified as irreversible and declares no limit.

critical · no-revocation · All 69 tools

69 of 69 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 69 tools

69 of 69 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 69 tools

69 of 69 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 33 of 69 tools

33 tools can modify data and declare no limit.

low · uncapped-read · 35 of 69 tools

35 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
timps_chatsend inferred
timps_get_memoriesread inferred
timps_store_memorywrite assumed
timps_check_contradictionread inferred
timps_get_positionsread inferred
timps_check_regretwrite assumed
timps_log_decisionwrite assumed
timps_burnout_analyzeread inferred
timps_record_signalwrite assumed
timps_warn_bug_patternread inferred
timps_record_bugwrite assumed
timps_check_tech_debtread inferred
timps_record_incidentwrite assumed
timps_lookup_apiread inferred
timps_record_api_quirkwrite assumed
timps_extract_commitmentswrite assumed
timps_get_pending_commitmentsread inferred
timps_complete_commitmentwrite assumed
timps_record_mentionwrite assumed
timps_relationship_checkread inferred
timps_log_past_decisionwrite assumed
timps_simulate_decisionwrite assumed
timps_ingest_manifesto_signalwrite inferred
timps_get_manifestoread inferred
timps_chronos_ingestwrite assumed
timps_chronos_queryread inferred
timps_chronos_statsread inferred
timps_nexus_ingestwrite assumed
timps_nexus_queryread inferred
timps_nexus_statsread inferred
timps_nexus_graphread inferred
timps_synapse_ingestwrite assumed
timps_synapse_queryread inferred
timps_synapse_statsread inferred
timps_synapse_graphread inferred
timps_synapse_consolidatewrite assumed
timps_get_session_historyread inferred
timps_get_architecture_decisionsread inferred
timps_get_code_patternsread inferred
timps_record_patternwrite assumed
timps_get_patterns_for_contextread inferred
timps_detect_architecture_driftread inferred
timps_predict_bug_riskread inferred
timps_get_incident_timelineread inferred
timps_check_deployment_riskread inferred
timps_get_velocity_trendread inferred
timps_get_context_switchesread inferred
timps_record_learningwrite assumed
timps_get_shared_decisionsread inferred
timps_record_review_patternwrite assumed
timps_temporal_queryread inferred
timps_chrono_foresightwrite assumed
timps_chrono_consolidatewrite assumed
timps_skill_shadowwrite assumed
timps_log_questionwrite assumed
timps_curriculum_planwrite assumed
timps_observe_culturewrite inferred
timps_codebase_culturewrite assumed
timps_record_contributionwrite assumed
timps_mark_contributor_activewrite assumed
timps_institutional_memoryread inferred
timps_verify_engram_chainread inferred
timps_false_memory_checkwrite assumed
timps_explain_provenanceread inferred
timps_resolve_conflictread inferred
timps_audit_memorywrite assumed
timps_register_triggerwrite assumed
timps_reveal_biasread inferred
timps_infer_schemaswrite assumed
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.