LeashIndex Get the report

Index / storage

Solana Snipe Bot MCP

io-github-solara-snipe-bot-solana-snipe-bot-mcp declares 40 capabilities across 40 tools, with 3 critical issues.

87/100 exposureHigh exposure

Manifest recorded 2026-10-14 from tools/list answered by the PyPI package solana-snipe-bot-mcp==1.1.0 (published to PyPI as solana-snipe-bot-mcp, listed in the official MCP registry as io.github.Solara-Snipe-Bot/solana-snipe-bot-mcp 1.1.0), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Note. Installed with the MCP Python SDK held below version 2.0. With the newest SDK this version of the package stopped before it could list its tools.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 40 tools

40 of 40 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 3 of 40 tools

3 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 1 of 40 tools

1 tool is classified as moving money and declares no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 40 tools

40 of 40 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 40 tools

40 of 40 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 16 of 40 tools

16 tools can modify data and declare no limit.

low · uncapped-read · 21 of 40 tools

21 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
start_botwrite assumed
stop_botwrite assumed
sell_allwrite assumed
sell_positionwrite assumed
buy_mintpay inferred
get_configread inferred
update_configwrite inferred
get_config_catalogread inferred
validate_current_configread inferred
preview_strategy_profileread inferred
apply_strategy_profilewrite assumed
update_config_batchwrite inferred
analyze_trade_performanceread inferred
audit_open_positionsread inferred
get_position_exit_quoteread inferred
save_settingswrite assumed
get_open_positionsread inferred
get_positions_statusread inferred
get_graduation_statusread inferred
get_bot_statusread inferred
get_trade_historyread inferred
clear_trade_historyread inferred
get_pnl_tallyread inferred
reset_pnl_tallywrite assumed
get_wallet_balancesread inferred
transfer_solwrite inferred
move_all_solwrite inferred
get_pulse_resultsread inferred
set_pulse_match_modewrite inferred
clear_pulse_resultswrite assumed
get_logread inferred
clear_logwrite assumed
get_pending_commandsread inferred
clear_commandswrite assumed
get_fee_summaryread inferred
close_empty_token_accountsdelete inferred
refresh_pnlwrite assumed
close_positiondelete inferred
get_pulse_price_historyread inferred
get_bot_statsread inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.