LeashIndex Get the report

Index / other

1cent Web Intelligence for AI Agents

ru-maxzoa-1cent declares 46 capabilities across 46 tools, with 1 critical issue.

58/100 exposureElevated

Manifest recorded 2026-10-11 from tools/list on https://1cent.maxzoa.ru/mcp, published in the official MCP registry as ru.maxzoa/1cent 0.8.1. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 46 tools

46 of 46 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 46 tools

46 of 46 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 46 tools

46 of 46 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 46 tools

46 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
catalog.tools.searchread declared
demo.url.pulseread declared
demo.live.pulseread declared
web.url.pulseread declared
web.url.passportread declared
web.url.extractread declared
web.url.changedread inferred
web.batch.url_statusread declared
web.url.statusread declared
web.url.redirectsread declared
web.url.headersread declared
web.url.timingread declared
web.url.content_typeread declared
web.url.canonicalread declared
web.url.languageread declared
web.url.hashread declared
web.url.metadataread declared
web.url.social_cardsread declared
web.url.jsonldread declared
web.url.headingsread declared
web.url.word_statsread declared
web.url.linksread declared
web.url.imagesread declared
web.url.textread declared
web.url.markdownread declared
web.url.rag_chunksread declared
web.url.diffread inferred
web.site.robotsread declared
web.site.sitemapsread declared
web.site.feedsread declared
web.site.llms_txtread declared
web.site.security_txtread declared
web.site.openapiread declared
web.url.security_headersread declared
web.url.tlsread declared
web.url.access_flagsread declared
web.url.schema_validationread declared
web.url.accessibilityread declared
web.url.technologyread declared
web.url.policyread declared
web.url.localizationread declared
web.url.content_qualityread declared
web.url.tablesread declared
web.url.citationsread declared
web.url.performanceread declared
web.site.coherenceread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.