LeashIndex Get the report

Index / payments

uk.firstmention.api/automaton

uk-firstmention-api-automaton declares 201 capabilities across 201 tools, with 3 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.

100/100 exposureHigh exposure

Manifest recorded 2026-11-08 from tools/list on https://api.firstmention.uk/mcp, published in the official MCP registry as uk.firstmention.api/automaton 1.0.1. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 201 tools

201 of 201 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 4 of 201 tools

4 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 1 of 201 tools

1 tool is classified as moving money and declares no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 201 tools

201 of 201 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 201 tools

201 of 201 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 134 of 201 tools

134 tools can modify data and declare no limit.

low · uncapped-read · 63 of 201 tools

63 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
list_servicesread inferred
agentkit__convertwrite assumed
agentkit__datetimewrite assumed
agentkit__extractsend inferred
agentkit__validateread inferred
agentkit__chainwrite assumed
agentkit__batchwrite assumed
agentkit__repairwrite assumed
agentkit__redactread inferred
agentkit__encodewrite assumed
agentkit__fetchmdread inferred
agentkit__pagebriefwrite assumed
agentkit__deadlinesread inferred
agentkit__watchwrite assumed
agentkit__uptimeread inferred
agentkit__mcpsend inferred
agentkit__cronwrite assumed
agentkit__cronexplainwrite assumed
agentkit__slawrite assumed
agentkit__cronbatchwrite assumed
api_change_check__compareread inferred
basedue__allowancewrite assumed
basedue__approvalsread inferred
basedue__bundlewrite assumed
basedue__checkread inferred
basedue__compareread inferred
basedue__duewrite assumed
basedue__due_alertsread inferred
basedue__estimateread inferred
basedue__exitread inferred
basedue__gasread inferred
basedue__newpoolswrite inferred
basedue__payeewrite assumed
basedue__pricewrite assumed
basedue__reportwrite assumed
basedue__tokenriskwrite assumed
basedue__txwrite assumed
basedue__walletwrite assumed
basedue__watchwrite inferred
bizcal_api__daywrite assumed
bizcal_api__addwrite inferred
bizcal_api__betweenwrite assumed
bizcal_api__yearwrite assumed
bizcal_api__workdayswrite assumed
bizcal_api__batchwrite assumed
bizcal_api__settlewrite assumed
bizcal_api__compareread inferred
bizcal_api__fxwrite assumed
chainread__networkread inferred
chainread__blockread inferred
chainread__balanceread inferred
chainread__tokenread inferred
chainread__txread inferred
chainread__nonceread inferred
chainread__gasread inferred
chainread__coderead inferred
chainread__batchread inferred
chainread__verdictread inferred
chainread__simulateread inferred
chainread__preflightread inferred
chainread__txpreflightread inferred
chainread__watchread inferred
chainread__watch_checkread inferred
chainread__paymentpay inferred
chainread__multireadread inferred
check_sanctions__screenwrite assumed
check_sanctions__addresswrite assumed
check_sanctions__verdictwrite assumed
check_sanctions__batchwrite assumed
check_sanctions__changesread inferred
check_sanctions__watchlistread inferred
check_sanctions__sellerwrite assumed
check_sanctions__tokenwrite assumed
check_sanctions__kybwrite assumed
check_sanctions__entitieswrite assumed
chgwatch__diffwrite assumed
chgwatch__diffmultiwrite assumed
chgwatch__watchwrite assumed
chgwatch__watchlistread inferred
chgwatch__sitemapdiffwrite assumed
company_facts__dossierwrite assumed
company_facts__lookupread inferred
company_facts__lookup_batchread inferred
company_facts__lookup_walletread inferred
company_facts__domainwrite assumed
company_facts__filingswrite assumed
company_facts__lookup_watchread inferred
company_facts__snapshotwrite assumed
company_facts__bundlewrite assumed
domain_intel__dnswrite assumed
domainkit__dnswrite assumed
domainkit__emailsend inferred
domainkit__domainwrite assumed
domainkit__batchwrite assumed
domfacts__dnswrite assumed
domfacts__rdapwrite assumed
domfacts__monitorread inferred
due__duewrite assumed
due__batchwrite assumed
edgar__companywrite assumed
edgar__financialswrite assumed
edgar__searchread inferred
edgar__resolvewrite assumed
funding_rates__fundingwrite assumed
funding_rates__spreadwrite assumed
funding_rates__watchwrite assumed
funding_rates__batchread inferred
funding_rates__carrywrite assumed
fundinglens__ratesread inferred
fundinglens__bestwrite assumed
pageaudit__auditwrite assumed
pageaudit__preflightwrite assumed
pageaudit__watchwrite assumed
pageaudit__watchlistwrite assumed
pageaudit__batchwrite assumed
pageaudit__sellersearchwrite assumed
pageaudit__exportwrite assumed
pageaudit__paycheckwrite assumed
pageaudit__vetwrite assumed
pageaudit__shortlistwrite assumed
pageaudit__txpreflightwrite assumed
pageaudit__claimcheckwrite assumed
pageaudit__addrcheckwrite assumed
pageaudit__canarywrite assumed
pageaudit__bundlewrite assumed
pageaudit__sitemapwrite assumed
pageaudit__peekwrite assumed
pageaudit__sellercheckwrite assumed
pageaudit__datasetwrite assumed
pageaudit__demandwrite assumed
solcheck__feeread inferred
solcheck__slotwrite assumed
solcheck__balancewrite assumed
solcheck__accountwrite assumed
solcheck__tokenwrite assumed
solcheck__holderswrite assumed
solcheck__txwrite assumed
solcheck__riskwrite assumed
solcheck__batchwrite assumed
token_dd__checkread inferred
token_dd__walletwrite assumed
token_dd__batchwrite assumed
token_dd__txwrite assumed
token_dd__txbatchwrite assumed
token_dd__verifyread inferred
token_dd__watchwrite assumed
txpreflight__preflightwrite assumed
txpreflight__verifyread inferred
txpreflight__allowancewrite assumed
txpreflight__guardwrite assumed
txpreflight__sellerwrite assumed
txpreflight__batchread inferred
walletprofile__profilewrite assumed
walletprofile__sanctionswrite assumed
walletprofile__hygienewrite assumed
walletprofile__monitorread inferred
web_extract__extractread inferred
web_extract__batchwrite assumed
web_extract__chunkread inferred
web_extract__schema_extractwrite assumed
web_extract__dossierwrite assumed
webmd__extractwrite assumed
webmd__tableswrite assumed
webmd__jsonldwrite assumed
webmd__sitemapwrite assumed
webread__readread inferred
webread__outlineread inferred
webread__metaread inferred
websearch__searchread inferred
websearch__briefread inferred
websearch__briefbatchwrite assumed
websearch__searchbatchread inferred
websearch__dossierwrite assumed
websearch__depswrite assumed
websearch__rateswrite assumed
websearch__quoteswrite assumed
x402_preflight__checkread inferred
x402_preflight__batchwrite assumed
x402_preflight__verifyread inferred
x402_preflight__screenread inferred
x402_preflight__auditwrite assumed
x402_preflight__monitorread inferred
x402check__checkread inferred
x402check__guardwrite assumed
x402check__diligencewrite assumed
x402check__screenread inferred
x402check__batchwrite assumed
x402check__settleread inferred
x402check__deltawrite assumed
x402check__watchwrite assumed
x402check__reportwrite assumed
x402check__addresswrite assumed
x402index__paycheckwrite assumed
x402index__verdictwrite assumed
x402index__dossierwrite assumed
x402index__historywrite assumed
x402index__batchcheckwrite assumed
x402index__auditwrite assumed
x402index__demandreport_jsonwrite assumed
x402index__demandreport_mdwrite assumed
x402index__pickwrite assumed
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.