LeashIndex Get the report

Index / data

LogicNodes

io-logicnodes-tools declares 83 capabilities across 83 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

89/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://logicnodes.io/mcp/v2, published in the official MCP registry as io.logicnodes/tools 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 83 tools

83 of 83 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 3 of 83 tools

3 tools are classified as irreversible and declare no limit.

high · no-expiry · All 83 tools

83 of 83 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 83 tools

83 of 83 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 5 of 83 tools

5 tools can modify data and declare no limit.

low · uncapped-read · 75 of 83 tools

75 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_gas_pricesread inferred
list_supported_chainsread inferred
verify_answerread declared
table_calcread declared
quote_checkread declared
reconcileread declared
json_checkread declared
invoice_checkread declared
timesheet_calcread declared
list_opsread declared
contact_normalizeread declared
find_free_slotsread declared
date_seriesread declared
table_joinread declared
pii_redactread declared
id_checkread declared
table_profileread declared
holiday_calendarread declared
fx_rateread declared
x402_service_searchread declared
chain_inforead declared
address_validateread declared
token_amount_convertread declared
evm_balanceread declared
tx_statusread declared
token_priceread declared
x402_settlement_verifyread declared
tx_safety_checkread declared
counterparty_checkread declared
sanctions_checkread declared
gas_estimateread declared
aptos_address_validateread declared
aptos_name_resolveread declared
aptos_asset_resolveread declared
aptos_amount_convertread declared
aptos_balance_getread declared
aptos_fee_estimateread declared
aptos_tx_simulateread declared
aptos_tx_decoderead declared
aptos_tx_statusread declared
aptos_viewread declared
decimal_calcread declared
text_factsread declared
slippage_boundsread declared
swap_price_impactread declared
money_calcread declared
interest_calcread declared
loan_calcread declared
unit_convertread declared
address_format_checkread declared
time_convertread declared
business_daysread declared
evm_nonceread declared
evm_blockread declared
evm_tx_receiptread declared
evm_token_metadataread declared
evm_allowanceread declared
evm_contract_typeread declared
evm_logsread declared
evm_calldata_decoderead declared
evm_log_decoderead declared
payment_verifyread declared
random_from_blockread declared
erc8004_agentread declared
erc8004_reputationread declared
evm_spend_reportread declared
ens_resolveread declared
wallet_watch_createwrite inferred
wallet_watch_statusread declared
wallet_watch_canceldelete inferred
audit_log_createwrite inferred
audit_log_appendwrite assumed
audit_log_exportread declared
deal_dispute_reviewread declared
operator_verify_startread inferred
operator_verify_checkread inferred
agent_register_prepareread declared
agent_register_publishsend inferred
x402_provider_reportread declared
x402_monitor_createwrite inferred
x402_monitor_statusread declared
x402_monitor_canceldelete inferred
x402_provider_claimwrite assumed

Record history

Earlier records for this server. A correction is added here, never written over the record it corrects.

RecordedExposureSource
2026-10-2885 tools/list on https://logicnodes.io/mcp/v2, published in the official MCP registry as io.logicnodes/tools 1.0.0
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.