LeashIndex Get the report

Index / payments

Peer

io-github-zkp2p-peer declares 97 capabilities across 97 tools, with 3 critical issues.

92/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list on https://mcp.peer.xyz/mcp, published in the official MCP registry as io.github.zkp2p/peer 0.4.1. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 97 tools

97 of 97 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 3 of 97 tools

3 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 3 of 97 tools

3 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 97 tools

97 of 97 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 97 tools

97 of 97 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · 94 of 97 tools

94 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
peer_quoteread declared
peer_payee_resolve_hashread declared
peer_deposit_listread declared
peer_deposit_showread declared
peer_deposit_show_manyread declared
peer_pv_deposit_showread declared
peer_pv_deposit_show_manyread declared
peer_pv_deposit_list_ownerread declared
peer_indexer_deposits_listread declared
peer_indexer_deposits_list_relationsread declared
peer_indexer_deposits_showread declared
peer_indexer_deposits_by_idsread declared
peer_indexer_deposits_by_ids_relationsread declared
peer_indexer_deposits_fund_activitiespay inferred
peer_indexer_makers_fund_activitiespay inferred
peer_indexer_deposits_snapshotsread declared
peer_indexer_queryread declared
peer_intent_listread declared
peer_intent_showread declared
peer_intent_fulfill_inputsread declared
peer_intent_hook_pre_getread declared
peer_pv_intent_list_ownerread declared
peer_pv_intent_showread declared
peer_indexer_intents_by_deposit_idsread declared
peer_indexer_intents_by_ownerread declared
peer_indexer_intents_showread declared
peer_indexer_intents_expiredread declared
peer_indexer_intents_fulfilled_eventsread declared
peer_indexer_intents_fulfillment_amountsread declared
peer_indexer_intents_fulfillment_and_paymentpay inferred
peer_vault_listread declared
peer_vault_showread declared
peer_vault_delegatesread declared
peer_vault_snapshotsread declared
peer_vault_manual_rate_updatesread declared
peer_vault_oracle_config_updatesread declared
peer_vault_manager_feeread declared
peer_vault_effective_rateread declared
peer_oracle_supports_inlineread declared
peer_oracle_validate_feedsread declared
peer_delegate_showread declared
peer_indexer_delegations_by_depositread declared
peer_market_spreadsread declared
peer_market_orderbookread declared
peer_market_compareread declared
peer_market_volumeread declared
peer_market_leaderboardread declared
peer_market_protocol_statsread declared
peer_market_vaultsread declared
peer_market_explorer_addressread declared
peer_market_explorer_depositread declared
peer_market_explorer_intentread declared
peer_market_explorer_makerread declared
peer_market_explorer_verifierread declared
peer_market_explorer_vaultread declared
peer_market_explorer_searchread declared
peer_market_depositsread declared
peer_market_intentsread declared
peer_market_activityread declared
peer_market_taker_historyread declared
peer_market_maker_historyread declared
peer_market_meta_platformsread declared
peer_market_meta_currenciesread declared
peer_market_api_key_listread declared
peer_market_creditsread declared
peer_balanceread declared
peer_checkout_listread declared
peer_checkout_showread declared
peer_config_showread declared
peer_config_platformsread declared
peer_config_currenciesread declared
peer_stake_stateread declared
peer_stake_indexed_stateread declared
peer_stake_balanceread declared
peer_stake_lockedread declared
peer_stake_freeread declared
peer_stake_claimableread declared
peer_stake_ownerread declared
peer_stake_selected_ownerread declared
peer_stake_authorizationread declared
peer_stake_admissions_pausedread declared
peer_stake_risk_windowread declared
peer_stake_dispute_protection_enabledread declared
peer_guardian_availableread declared
peer_guardian_policyread declared
peer_guardian_quote_extensionread declared
peer_guardian_payer_fundingread declared
peer_cash_capabilitiesread declared
peer_cash_fill_statsread declared
peer_cash_source_capabilitiesread declared
peer_cash_quote_sourceread declared
peer_cash_relay_statusread declared
peer_cash_estimateread declared
peer_cash_finalizeread declared
peer_cash_buyerread declared
peer_cash_orderread declared
peer_cash_ordersread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.