LeashIndex Get the report

Index / other

Neonjelly

io-neonjelly-mcp declares 60 capabilities across 60 tools, with 1 critical issue.

69/100 exposureElevated

Manifest recorded 2026-10-11 from tools/list on https://mcp.neonjelly.io/c/{connect_token}/mcp, published in the official MCP registry as io.neonjelly/mcp 1.0.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 60 tools

60 of 60 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 60 tools

60 of 60 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 60 tools

60 of 60 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 1 of 60 tools

1 tool can modify data and declares no limit.

low · uncapped-read · 59 of 60 tools

59 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
whoamiread declared
upgraderead declared
resolve_storeread declared
list_playbooksread declared
get_examplesread declared
brief_marketread declared
cohort_tamread declared
find_peersread declared
diligence_packread declared
compare_stacksread declared
competitor_movesread declared
overlap_vendorsread declared
screen_dropshipread declared
source_mapread declared
winning_skusread declared
niche_researchread declared
search_product_ideasread declared
suggest_product_ideasread declared
trending_product_ideasread declared
get_product_researchread declared
list_product_sellersread declared
product_searchread declared
product_intelread declared
change_trackerread declared
price_watchread declared
assortment_watchread declared
get_contactsread declared
find_outreachread declared
get_upstream_healthread declared
search_storesread declared
get_storeread declared
compare_storesread declared
get_store_trafficread declared
get_store_productsread declared
get_store_appsread declared
get_store_historyread declared
get_store_changesread declared
search_productsread declared
get_productread declared
get_product_changesread declared
get_changesread declared
search_appsread declared
get_appread declared
get_app_storesread declared
get_analytics_overviewread declared
get_verticalsread declared
get_countriesread declared
get_moversread declared
create_signalwrite inferred
list_signalsread declared
get_signalread declared
get_signal_statsread declared
get_signal_salesread declared
get_signal_inventoryread declared
get_signal_socialread declared
get_signal_adsread declared
get_signal_appsread declared
get_signal_product_changesread declared
get_signal_insightsread declared
list_signal_insightsread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.