LeashIndex Get the report

Index / payments

GPT55 Model Gateway

xyz-558686-gpt55-token-gateway declares 214 capabilities across 214 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list on https://gpt55.558686.xyz/mcp, published in the official MCP registry as xyz.558686.gpt55/token-gateway 2026.8.5. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 214 tools

214 of 214 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 18 of 214 tools

18 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 18 of 214 tools

18 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 214 tools

214 of 214 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 214 tools

214 of 214 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · 196 of 214 tools

196 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
gpt55_x402_pingread declared
gpt55_balance_topupread declared
gpt55_balance_metered_chat_completionread declared
chat_gpt_5_6_soulread declared
chat_gpt_5_6_terraread declared
chat_gpt_5_5read declared
gpt55_x402_buyer_payment_execution_runbookpay inferred
gpt55_x402_wallet_payment_activation_agentpay inferred
gpt55_x402_wallet_payment_activation_agent_getread declared
gpt55_x402_agent_wallet_incident_response_packread declared
gpt55_x402_procurement_vendor_risk_dossierread declared
gpt55_x402_mcp_production_launch_auditread declared
gpt55_x402_wallet_receipt_accounting_packread declared
gpt55_x402_agent_spend_simulatorread declared
gpt55_x402_seller_price_ladder_optimizerread declared
gpt55_x402_directory_trust_evidence_packread declared
gpt55_x402_agent_payment_authorization_ato_packpay inferred
gpt55_x402_mcp_entitlement_receipt_gatewayread declared
gpt55_x402_autonomous_procurement_policy_engineread declared
gpt55_x402_bazaar_listing_revenue_repairread declared
gpt55_x402_wallet_drain_prevention_firewallread declared
gpt55_x402_ai_crawler_license_enforcement_packread declared
gpt55_x402_payment_slo_monitoring_packpay inferred
gpt55_x402_agentic_api_red_team_briefread declared
gpt55_x402_agent_treasury_rebalancing_policyread declared
gpt55_x402_paid_api_contract_test_suitepay inferred
gpt55_x402_mcp_tool_revenue_share_ledgerread declared
gpt55_x402_agent_wallet_key_rotation_drillread declared
gpt55_x402_enterprise_buyer_onboarding_dossierread declared
gpt55_x402_model_arbitrage_router_policyread declared
gpt55_x402_settlement_dispute_evidence_lockboxread declared
gpt55_x402_agent_market_data_procurement_firewallread declared
gpt55_x402_buyer_payment_client_implementation_sprintpay inferred
gpt55_x402_flowise_payment_node_blueprintpay inferred
gpt55_x402_mcp_enterprise_rollout_packread declared
gpt55_x402_payment_tax_invoice_reconciliation_kitpay inferred
gpt55_x402_soc2_payment_control_evidence_packpay inferred
gpt55_x402_private_gateway_deployment_planread declared
gpt55_x402_agent_procurement_rfp_response_packread declared
gpt55_x402_conversion_forensics_war_roomread declared
gpt55_x402_agent_credit_line_underwriting_packread declared
gpt55_x402_payment_retry_slo_autopilotpay inferred
gpt55_x402_mcp_tenant_entitlement_isolation_packread declared
gpt55_x402_data_room_receipt_redaction_packread declared
gpt55_x402_usage_quota_billing_reconciliation_agentread declared
gpt55_x402_refund_dispute_resolution_playbookpay inferred
gpt55_x402_model_procurement_benchmark_packread declared
gpt55_x402_agent_runbook_compliance_attestation_packread declared
gpt55_x402_agent_data_leak_containment_planread declared
gpt55_x402_agent_approval_workflow_compilerread declared
gpt55_x402_model_sla_breach_claims_packread declared
gpt55_x402_mcp_asset_inventory_risk_registerread declared
gpt55_x402_cross_chain_payment_failover_playbookpay inferred
gpt55_x402_enterprise_security_questionnaire_autofillread declared
gpt55_x402_customer_support_refund_triage_agentpay inferred
gpt55_x402_seller_revenue_leakage_forensics_packread declared
gpt55_summarizeread declared
gpt55_translateread declared
gpt55_translate_getread declared
gpt55_rewriteread declared
gpt55_answerread declared
gpt55_code_reviewread declared
gpt55_extract_jsonread declared
gpt55_url_metadataread declared
gpt55_url_metadata_getread declared
gpt55_url_textread declared
gpt55_url_text_getread declared
gpt55_url_linksread declared
gpt55_url_links_getread declared
gpt55_github_repository_supply_chain_evidenceread declared
gpt55_evm_wallet_balanceread declared
gpt55_evm_wallet_balance_getread declared
gpt55_x402_site_auditread declared
gpt55_x402_site_audit_getread declared
gpt55_x402_quote_inspectorread declared
gpt55_x402_quote_inspector_getread declared
gpt55_x402_batch_quote_inspectorread declared
gpt55_x402_batch_quote_inspector_getread declared
gpt55_x402_discovery_price_compareread declared
gpt55_x402_discovery_price_compare_getread declared
gpt55_x402_buyer_shortlistread declared
gpt55_x402_buyer_shortlist_getread declared
gpt55_x402_prepay_trust_checkread declared
gpt55_x402_prepay_trust_check_getread declared
gpt55_x402_buyer_prepay_risk_scoreread declared
gpt55_x402_buyer_prepay_risk_score_getread declared
gpt55_sub2api_official_metered_invoiceread declared
gpt55_sub2api_balance_ledger_simulatorread declared
gpt55_gpt55_plus_half_price_subscriptionread declared
gpt55_x402_payment_failure_doctorpay inferred
gpt55_x402_payment_failure_doctor_getread declared
gpt55_x402_wallet_funding_readiness_doctorread declared
gpt55_x402_wallet_funding_readiness_doctor_getread declared
gpt55_x402_client_compatibility_adapterread declared
gpt55_x402_client_compatibility_adapter_getread declared
gpt55_x402_receipt_dispute_packread declared
gpt55_x402_receipt_dispute_pack_getread declared
gpt55_x402_receipt_bound_execution_gateread declared
gpt55_x402_agent_task_receipt_outboxread declared
gpt55_x402_directory_compliance_repair_packread declared
gpt55_x402_directory_compliance_repair_pack_getread declared
gpt55_x402_agent_payment_policy_compilerpay inferred
gpt55_x402_agent_payment_approval_packpay inferred
gpt55_x402_agent_spend_recurrence_guardread declared
gpt55_x402_paid_mcp_authorization_bridgepay inferred
gpt55_x402_verify_settle_recovery_packread declared
gpt55_x402_buyer_client_adapter_packread declared
gpt55_x402_revenue_recovery_agentread declared
gpt55_x402_agent_payment_due_diligence_packpay inferred
gpt55_x402_agent_payment_due_diligence_pack_getread declared
gpt55_x402_bazaar_searchread declared
gpt55_x402_bazaar_search_getread declared
gpt55_x402_market_benchmarkread declared
gpt55_x402_market_benchmark_getread declared
gpt55_x402_listing_seo_auditread declared
gpt55_x402_listing_seo_audit_getread declared
gpt55_x402_opportunity_finderread declared
gpt55_x402_opportunity_finder_getread declared
gpt55_x402_directory_rank_trackerread declared
gpt55_x402_directory_rank_tracker_getread declared
gpt55_http_statusread declared
gpt55_http_status_getread declared
gpt55_json_validateread declared
gpt55_json_validate_getread declared
gpt55_text_statsread declared
gpt55_text_stats_getread declared
gpt55_hash_textread declared
gpt55_hash_text_getread declared
gpt55_base64_codecread declared
gpt55_base64_codec_getread declared
gpt55_url_parseread declared
gpt55_url_parse_getread declared
gpt55_timestampread declared
gpt55_timestamp_getread declared
gpt55_jwt_decoderead declared
gpt55_jwt_decode_getread declared
gpt55_slugifyread declared
gpt55_slugify_getread declared
gpt55_case_convertread declared
gpt55_case_convert_getread declared
gpt55_regex_matchread declared
gpt55_regex_match_getread declared
gpt55_html_stripread declared
gpt55_html_strip_getread declared
gpt55_query_parseread declared
gpt55_query_parse_getread declared
gpt55_unique_linesread declared
gpt55_unique_lines_getread declared
gpt55_sort_linesread declared
gpt55_sort_lines_getread declared
gpt55_diff_linesread declared
gpt55_diff_lines_getread declared
gpt55_json_minifyread declared
gpt55_json_minify_getread declared
gpt55_uri_codecread declared
gpt55_uri_codec_getread declared
gpt55_html_entity_codecread declared
gpt55_html_entity_codec_getread declared
gpt55_email_normalizeread declared
gpt55_email_normalize_getread declared
gpt55_evm_transaction_risk_decoderread declared
gpt55_evm_transaction_risk_decoder_getread declared
gpt55_eip712_signature_risk_decoderread declared
gpt55_eip712_signature_risk_decoder_getread declared
gpt55_wallet_signing_safety_packread declared
gpt55_wallet_signing_safety_pack_getread declared
gpt55_domain_extractread declared
gpt55_domain_extract_getread declared
gpt55_color_convertread declared
gpt55_color_convert_getread declared
gpt55_uuidread declared
gpt55_uuid_getread declared
gpt55_json_keysread declared
gpt55_json_keys_getread declared
gpt55_x402_mcp_integration_kitread declared
gpt55_x402_mcp_integration_kit_getread declared
gpt55_x402_agent_core_integration_kitread declared
gpt55_x402_agent_core_integration_kit_getread declared
gpt55_x402_seller_intelligence_bundleread declared
gpt55_x402_seller_intelligence_bundle_getread declared
gpt55_x402_seller_action_planread declared
gpt55_x402_seller_action_plan_getread declared
gpt55_x402_base_builder_funding_readinessread declared
gpt55_x402_base_builder_funding_readiness_getread declared
gpt55_x402_crawler_monetization_kitread declared
gpt55_x402_crawler_monetization_kit_getread declared
gpt55_translate_standardread declared
gpt55_translate_plusread declared
gpt55_translate_professionalread declared
gpt55_summarize_standardread declared
gpt55_summarize_plusread declared
gpt55_summarize_professionalread declared
gpt55_code_review_standardread declared
gpt55_code_review_plusread declared
gpt55_code_review_professionalread declared
gpt55_rewrite_standardread declared
gpt55_rewrite_plusread declared
gpt55_rewrite_professionalread declared
gpt55_answer_standardread declared
gpt55_answer_plusread declared
gpt55_answer_professionalread declared
gpt55_extract_json_standardread declared
gpt55_extract_json_plusread declared
gpt55_extract_json_professionalread declared
gpt55_translate_miniread declared
gpt55_translate_proread declared
gpt55_translate_batchread declared
gpt55_summarize_miniread declared
gpt55_summarize_proread declared
gpt55_code_review_miniread declared
gpt55_code_review_proread declared
gpt55_rewrite_miniread declared
gpt55_answer_miniread declared
gpt55_extract_json_miniread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.