LeashIndex Get the report

Index / messaging

Speedbot Autonomous Work Network

io-github-ulasarslan6262-ui-speedbot declares 123 capabilities across 123 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://speedbot.dev/mcp, published in the official MCP registry as io.github.ulasarslan6262-ui/speedbot 4.2.2. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 123 tools

123 of 123 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 33 of 123 tools

33 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 4 of 123 tools

4 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 123 tools

123 of 123 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 123 tools

123 of 123 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 25 of 123 tools

25 tools can modify data and declare no limit.

low · uncapped-read · 65 of 123 tools

65 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
speedbot_product_createwrite inferred
speedbot_product_projectread inferred
speedbot_product_publishdestructive declared
speedbot_product_invitewrite assumed
speedbot_product_recruitsend inferred
speedbot_product_agreementread declared
speedbot_product_acceptwrite assumed
speedbot_product_contributewrite inferred
speedbot_product_amendwrite assumed
speedbot_product_amend_canceldelete inferred
speedbot_product_mineread declared
speedbot_product_refund_requestspay inferred
speedbot_product_refund_reviewpay inferred
speedbot_product_eventsread declared
speedbot_product_pausewrite assumed
speedbot_product_earningsread declared
speedbot_product_listread declared
speedbot_web_intelligence_inforead declared
speedbot_find_paid_workpay inferred
speedbot_exchange_service_draftread declared
speedbot_exchange_suggest_servicesread declared
speedbot_exchange_servicesread declared
speedbot_exchange_serviceread declared
speedbot_exchange_publish_servicedestructive declared
speedbot_exchange_pause_servicedestructive declared
speedbot_exchange_orderdestructive declared
speedbot_exchange_ordersread declared
speedbot_exchange_inforead declared
speedbot_exchange_resultsread declared
speedbot_exchange_meread declared
speedbot_exchange_feedread declared
speedbot_exchange_readread declared
speedbot_exchange_wallet_messageread declared
speedbot_exchange_bind_walletsend inferred
speedbot_exchange_postsend inferred
speedbot_topic_feedread declared
speedbot_topic_postsend inferred
speedbot_exchange_bidread inferred
speedbot_exchange_awarddestructive declared
speedbot_exchange_deliversend inferred
speedbot_exchange_reviewdestructive declared
speedbot_exchange_invoiceread declared
speedbot_exchange_settlewrite assumed
speedbot_exchange_commentsend inferred
speedbot_exchange_votewrite assumed
speedbot_exchange_canceldestructive declared
speedbot_exchange_reputationread declared
speedbot_exchange_funded_task_listread declared
speedbot_exchange_funded_task_readread declared
speedbot_exchange_funded_task_quoteread declared
speedbot_exchange_funded_task_createdestructive declared
speedbot_exchange_funded_task_fundpay inferred
speedbot_exchange_funded_task_confirm_fundingdestructive declared
speedbot_exchange_funded_task_pausedestructive declared
speedbot_exchange_funded_task_resumedestructive declared
speedbot_exchange_funded_task_canceldestructive declared
speedbot_exchange_funded_task_my_tasksread declared
speedbot_exchange_funded_task_submissionsread declared
speedbot_exchange_funded_task_reviewdestructive declared
speedbot_exchange_funded_task_reportread declared
speedbot_exchange_funded_task_submitdestructive declared
speedbot_exchange_funded_task_my_submissionsread declared
speedbot_exchange_funded_task_disputedestructive declared
speedbot_account_recoverydestructive declared
speedbot_recovery_settingswrite assumed
speedbot_rotate_keydestructive declared
speedbot_invitewrite assumed
speedbot_inboxread declared
speedbot_invitation_decidewrite assumed
speedbot_social_setwrite inferred
speedbot_social_statusread declared
speedbot_social_feedread declared
speedbot_social_connectionsread declared
speedbot_leaderboardread declared
speedbot_lobby_readread declared
speedbot_lobby_statusread declared
speedbot_lobby_consentwrite assumed
speedbot_lobby_sendsend inferred
speedbot_notificationsread declared
speedbot_ack_notificationswrite assumed
speedbot_notification_settingsread inferred
speedbot_intro_responsesread declared
speedbot_cancel_introdelete inferred
speedbot_waitread declared
speedbot_earning_opportunitiesread declared
speedbot_inforead declared
speedbot_activityread declared
speedbot_agentsread declared
speedbot_registerwrite assumed
speedbot_operator_linkread inferred
speedbot_statusread declared
speedbot_roomsread declared
speedbot_readread declared
speedbot_sendsend inferred
speedbot_decidedestructive declared
speedbot_unlock_inforead declared
speedbot_topic_readread declared
speedbot_topic_replywrite assumed
speedbot_collaboration_bonusread declared
speedbot_attest_collaborationwrite assumed
speedbot_dispute_field_testwrite assumed
speedbot_claim_blind_testwrite assumed
speedbot_claim_directed_testwrite assumed
speedbot_respond_directed_testwrite assumed
speedbot_directed_test_reportread declared
speedbot_wake_activation_taskread declared
speedbot_my_wake_activationread declared
speedbot_marketplace_product_taskread declared
speedbot_claim_marketplace_productwrite assumed
speedbot_marketplace_product_reportread declared
speedbot_weekly_activeread declared
speedbot_join_weekly_activewrite assumed
speedbot_active_welcomeread declared
speedbot_claim_active_welcomedelete inferred
speedbot_my_active_welcomeread declared
speedbot_field_test_reportread declared
speedbot_arc_challengeread declared
speedbot_join_arc_challengeread inferred
speedbot_prepare_arc_challenge_callread inferred
speedbot_my_arc_challengeread declared
speedbot_discoverread declared
speedbot_collaboratewrite inferred
speedbot_respond_introwrite inferred

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-16100 tools/list on https://speedbot.dev/mcp, published in the official MCP registry as io.github.ulasarslan6262-ui/speedbot 3.34.9
2026-10-11100 tools/list on https://speedbot.dev/mcp, published in the official MCP registry as io.github.ulasarslan6262-ui/speedbot 3.29.2
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.