LeashIndex Get the report

Index / payments

io.github.sarveshtalele/personal-finance

io-github-sarveshtalele-personal-finance declares 54 capabilities across 54 tools, with 1 critical issue. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

77/100 exposureHigh exposure

Manifest recorded 2026-11-04 from tools/list answered by the PyPI package personal-finance-mcp==1.0.2 (published to PyPI as personal-finance-mcp, listed in the official MCP registry as io.github.sarveshtalele/personal-finance 1.0.2), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Note. Installed with the MCP Python SDK held below version 2.0. With the newest SDK this version of the package stopped before it could list its tools.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 54 tools

54 of 54 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 54 tools

54 of 54 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 54 tools

54 of 54 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 10 of 54 tools

10 tools can modify data and declare no limit.

low · uncapped-read · 44 of 54 tools

44 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
calculate_future_valueread inferred
calculate_present_valueread inferred
calculate_annuity_fvread inferred
calculate_annuity_pvread inferred
calculate_perpetuityread inferred
calculate_rule_of_72read inferred
calculate_effective_rateread inferred
calculate_real_returnread inferred
calculate_inflation_impactread inferred
calculate_savings_neededread inferred
calculate_emiread inferred
loan_amortizationread inferred
compare_loansread inferred
calculate_prepayment_savingsread inferred
invest_or_prepay_loanwrite assumed
analyze_debt_consolidationread inferred
calculate_net_worthread inferred
analyze_financial_ratiosread inferred
calculate_emergency_fundread inferred
analyze_budgetread inferred
plan_financial_goalwrite assumed
plan_retirementwrite assumed
plan_educationwrite assumed
calculate_insurance_needread inferred
financial_health_checkwrite assumed
calculate_bond_priceread inferred
calculate_ytmread inferred
calculate_current_yieldread inferred
calculate_bond_durationread inferred
calculate_bond_convexityread inferred
calculate_zero_coupon_bondread inferred
value_stock_ddmwrite assumed
value_stock_two_stage_ddmwrite assumed
value_stock_pewrite assumed
value_stock_dcfwrite assumed
calculate_dividend_yieldread inferred
calculate_sip_returnsread inferred
calculate_sip_neededread inferred
compare_lumpsum_vs_sipread inferred
analyze_expense_ratio_impactread inferred
calculate_swpread inferred
calculate_cagrread inferred
calculate_navread inferred
calculate_portfolio_returnread inferred
calculate_portfolio_riskread inferred
analyze_two_asset_portfolioread inferred
calculate_capm_returnread inferred
calculate_sharpe_ratioread inferred
calculate_treynor_ratioread inferred
calculate_jensens_alpharead inferred
calculate_information_ratioread inferred
calculate_sortino_ratioread inferred
suggest_asset_allocationwrite assumed
rebalance_portfolioread inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.