pipeworx-gateway

Security Findings (4282)

• HighAS-003

  🔀Scope Mismatch ×2

  tool name "search_activities" implies read-only operation but declares exec permission

  search_activities

  tool name "get_account_detail" implies read-only operation but declares exec permission

  get_account_detail

  Fix: Ensure tool names, descriptions, and permission declarations are internally consistent. Use explicit naming conventions that fully reflect actual capabilities.

• HighAS-013

  👥Tool Shadowing ×2

  tool name "airquality" duplicates "air_quality" already registered in this tool set — a malicious server can shadow a trusted tool by registering an identical name

  airquality

  tool name "station_info" duplicates "stationinfo" already registered in this tool set — a malicious server can shadow a trusted tool by registering an identical name

  station_info

  Fix: Two or more tools registered in your MCP environment share an identical or near-identical name. A malicious server can shadow a trusted tool this way, intercepting calls you intend for the legitimate tool. Remove the conflicting server or rename its tools to be unambiguous.

• MediumAS-009

  🎭Typosquatting

  efetch:tool name "efetch" is suspiciously similar to the well-known MCP tool "fetch" (edit distance 1) — possible typosquatting

  Fix: This tool name closely resembles a well-known MCP tool name. Verify the server's authenticity before use. If you maintain this server, rename the tool to avoid collision with the canonical tool it resembles.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×663

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  bluesky_get_postsbluesky_search_postsget_feedget_threadscience_get_apodbooks_search_booksnutrition_search_productssearch_mealssearch_cocktailssearch_breweriesart_search_artworksart_get_artworksearch_poemssearch_universitiesrick_and_morty_search_charactersget_characterrick_and_morty_search_episodesget_gemsearch_gemsrubygems_get_versionssec_search_companiesgeolocate_ipnpm_search_packagesget_downloadssearch_laureatesstackexchange_search_questionssearch_countriessearch_wikipediasearch_repossearch_hnget_top_storiesget_itemsearch_moviessearch_tv_showssports_search_teamssports_search_playerssearch_airportsjokes_search_jokesget_crewget_treasury_ratessearch_wantedsearch_drug_eventssearch_drug_labelssearch_food_recallssearch_dealsgamedeals_search_gamessearch_artistssearch_releasesradio_search_stationsget_top_stationslist_networksget_networksearch_networksecondata_get_seriespatents_search_patentsget_patentsearch_inventorssearch_launcheslist_gamesswapi_search_peoplejikan_search_animejikan_search_characterscrossref_search_worksopenalex_search_worksopenalex_search_authorssearch_institutionssearch_pubmedgbif_search_speciessearch_sitesarchive_searchwayback_checksearch_cvesspacenews_get_articlesspacenews_search_articlesget_blogsartic_search_artworkssearch_iconschess_get_gamessearch_adviceget_memesswisstransport_search_stationsget_tlesearch_satellitescreate_qrread_qrairquality_get_forecastsearch_addressnominatim_reverse_geocodelist_spellsdogceo_random_imagedogceo_list_breedsbreed_imagesrandom_breed_imagechucknorris_search_jokeschucknorris_list_categoriesdadjokes_search_jokesgutendex_search_booksgutendex_get_bookpopular_booksgenerate_avatarmicrolink_get_metadatatake_screenshotpicture_of_daynumbersapi_random_factuselessfacts_random_factdogsapi_list_breedslist_factsget_status_catlist_codesipinfo_lookup_ipgenerate_with_optionssearch_cardssf_querysf_get_recordsf_searchsheets_createhs_get_contacths_search_contactshs_get_companyhs_get_dealjira_searchnotion_searchnotion_query_databasemaps_place_searchzd_search_ticketsic_search_contactsgh_list_reposgh_list_orgsgmail_get_messagegmail_searchgmail_senddrive_get_contentdrive_searchgcal_create_eventgcal_search_eventsgads_searchlinear_list_issueslinear_get_issuelinear_create_issuelinear_searchasana_search_tasksclickup_list_tasksclickup_get_taskclickup_create_taskmonday_search_itemsconfluence_get_pageconfluence_searchconfluence_create_pagegitlab_list_projectsgitlab_list_issuesgitlab_list_mrsgitlab_get_filetwilio_send_smstwilio_make_callfreshdesk_search_ticketsqb_querywoo_list_productswoo_get_productwoo_list_orderswoo_get_orderwoo_list_customersairtable_list_recordsdropbox_searchdropbox_get_metadatadropbox_downloadzoho_search_recordspipedrive_searchamp_user_searchfred_get_seriesfred_searchfred_series_infobls_get_seriesbls_searchyt_searchyt_channel_detailsattom_property_searchattom_school_searchsearch_developmentsapi_football_standingsteam_searchleague_searchapi_football_predictionsaltos_list_filesgong_search_callschargebee_get_subscriptionedgar_search_filingscfpb_search_complaintsfdic_search_institutionsfdic_financialsfdic_summarydefi_stablecoinsct_searchrxnorm_searchsam_search_opportunitiessam_entity_searchusa_award_searchsbir_search_awardssbir_search_solicitationsnass_queryecho_facility_searchecho_search_by_violationlist_packsget_connection_configsearch_packssearch_mcp_directorysearch_gifstrending_gifsrandom_gifboardgames_search_gamesanilist_search_animepypi_search_packagespypi_get_releasesearch_cratesget_cratecrates_get_versionsdockerhub_search_imagesgitlab_public_search_projectssearch_issuesdevto_get_articlesdevto_search_articlesdevto_get_articlepaperswithcode_search_papersget_repositoriesnba_search_playerscongress_search_billsget_subredditreddit_search_postsget_hottestget_newestget_storyget_tagmastodon_searchjsonplaceholder_get_postsjsonplaceholder_get_postget_usersget_commentsurlhaus_lookup_urllookup_hosturlhaus_get_recentlookup_payloadrandom_catcat_by_tagquotes_random_quotequotes_search_quotesget_company_newssearch_symbolsearch_coinseurostat_get_dataseteurostat_search_datasetsecb_get_dataopenaire_search_publicationsopenaire_search_datasetssearch_softwareopenaire_search_projectsget_research_productopenaire_get_projectsearch_noticesget_noticeentreprises_fr_searchget_enterpriseepo_ops_search_patentsnetwork_infodoaj_search_articlessearch_journalsdoaj_get_articledoaj_get_journaldblp_search_publicationsdblp_search_authorssearch_venuespackagist_searchpackagist_get_packagepackage_statsmaven_central_searchsearch_by_coordsnuget_searchdbnomics_searchdbnomics_get_seriessearch_statsestat_japan_get_metadataestat_japan_get_datadata_gov_sg_search_datasetsquery_datasettmyopen_meteo_forecasthistoricalair_qualitymarineodds_api_list_sportsodds_api_get_scoresodds_api_get_eventsthesportsdb_search_teamsthesportsdb_search_playersget_chainfind_rpccoinpaprika_searchsearch_agenciessearch_routessearch_stopstafsearch_modelshuggingface_search_datasetssearch_spacesget_modelsearch_notessearch_incidentsget_incidentusajobs_searchget_jobadzuna_searchremotive_searchsearch_drugssearch_foodsnpi_registry_searchget_providermedlineplus_searchbookbrainz_searchbookbrainz_lookupgoogle_books_searchuk_parliament_search_membersuk_parliament_search_billssearch_hansardsearch_activitiessearch_drucksachensearch_plenarprotokollesearch_personssearch_interventionsnosdeputes_fr_search_questionssearch_debatessearch_pairsblockscout_searchhashratenasa_eonet_get_eventnearestphoton_searchphoton_reversewiktionary_searchwikiquote_searchwikidata_sparql_querysparqldbpedia_resourcedbpedia_abstractconceptnet_queryitunes_search_searchitunes_search_lookupitunes_search_top_podcastssearch_podcastsfyyd_search_episodesget_podcast_by_urlgh_repo_statsbundlephobia_historyrecent_searchesfeaturecaniuse_searchmdn_search_searchmdn_search_summaryfetch_schemaget_templatespdx_license_searcheol_searchget_pageeuropepmc_searchdeezer_searchclevelandart_searchopenverse_search_imagessearch_audiofrinkiac_searchuniprot_searchproteomes_searchtaxonomy_searchpredictionuniprotrcsb_pdb_searchchembl_searchreactome_searchorcid_searchror_searchror_getinspire_hep_searchauthors_searchinstitutions_searchconferences_searchhal_fr_searchebi_ols_searchopentargets_searchdatagov_au_searchdatagov_au_resourcedatagouv_fr_search_datasetsresourcessearch_organizationsreuses_searchdocuments_searchwgs_searchprojects_searchtatoeba_searchkitsu_search_animesearch_mangacatalogueoflife_searchtranscriptgnomad_searchstring_db_networkesearchefetchegquerymonarch_initiative_searchplos_searchsearch_authored_bydata_europa_searchquery_batchdeps_dev_queryanapioficeandfire_bookanapioficeandfire_charactersanapioficeandfire_charactermygene_info_queryquery_manyquery_catalogvizier_cone_searchsimbad_objectsimbad_scriptsimbad_cone_searchephemerisobserversvectorskepler_candidatesdataverse_harvard_searchopenfigi_searchopendata_canada_searchgov_uk_content_searchsearch_autocompletequery_tablecommons_wikimedia_searchfile_inforegistrable_domainseriesmitre_attck_searchdata_ny_querydata_cityofchicago_querypagetldr_pages_searchrfc_editor_searchbioregistry_searchbioregistry_resolveopenfoodfacts_searchlemmy_searchhourly_datamast_nasa_cone_searchmission_searchpypi_stats_recentoverallzenodo_searchlicensesdeno_land_searchrdap_entitynameserverhpo_api_searchhpo_api_term_childrenpatents_searchscholarly_searchtrack_searchpoint_elevationdemgiantbomb_searchurlscan_io_searchsubmitfoodish_randomitem_searchcomicvine_searchvideos_searchtenor_searchsearch_suggestionsresolve_vanity_urlsearch_destiny_playersearch_destiny_players_by_global_namewordnik_searchhisto_hourtitle_searchnetworksgemini_crypto_networkhttpbin_gethttpbin_posthttpbin_statusimagesearch_docssearch_indexfeeddummyjson_product_searchartist_searchvenue_searchsetlist_searchsearch_moviesearch_tvsearch_personsearch_multinewsapi_top_headlinesnewsapi_sourcesthe_guardian_searchrecipe_searchingredient_searchspoonacular_product_searchtilequerystatic_image_urlclan_searchtournament_searchlisten_notes_searchsnapgeocode_searchsearch_earthquakesimf_get_datasearch_indicatorsposthog_get_eventssendgrid_get_statsget_transactionsgnews_search_newssearch_documentssearch_opinionscourt_listener_search_docketsget_opinionopen_sanctions_search_entitiesopen_corporates_search_companiesopen_corporates_get_companysearch_officerssearch_candidatessearch_committeessemantic_scholar_search_paperssearch_nonprofitssearch_schoolsopen_food_facts_search_productsgeonames_search_placespropublica_congress_search_billscheck_urldatagov_search_datasetsdatagov_get_datasetsearch_urlcheck_availabilitysearch_filingscdc_search_datasetscore_research_search_paperscore_research_get_papermetals_api_get_latestmetals_api_get_historicalmediastack_search_newslatest_newshealthdata_search_datasetshealthdata_get_datasetwikidata_search_entitiesarxiv_search_papersarxiv_get_papersearch_observationssearch_taxalist_popular_indicatorsfetch_indicatorget_indicator_metadataoecd_list_curated_flowsoecd_search_dataflowsoecd_fetch_datasetsearch_leiget_leiget_lei_relationshipssearch_grantsnih_reporter_get_projectnih_reporter_search_publicationssearch_awardsget_awardsearch_opportunitiesget_opportunitygdelt_search_articlessearch_eventscompanies_house_search_companiescompanies_house_get_companypermid_search_entitiespermid_get_entityvirustotal_lookup_urlvirustotal_lookup_ipcheck_passwordget_breachsearch_pulsesget_pulselookup_indicatorweb_searchnews_searchfull_queryget_oaunpaywall_search_papersoverpass_querypois_nearplaces_in_bboxopen_library_search_booksget_book_by_isbnopen_library_get_workopen_library_get_authorsearch_showstvmaze_get_showtvmaze_search_peopleget_hourly_forecastget_daily_historysearch_doisget_doisearch_by_namelist_elevatedfoursquare_search_placeslist_parksget_parkget_aqi_by_locationwaqi_search_stationssearch_factorsquery_subgraphintrospect_schemaget_account_detailtop_locationsget_collectionsearch_titlesget_by_titleget_by_imdb_idcurrent_by_zipcurrent_by_locationopenstates_search_billsopenstates_get_billsearch_legislatorsget_legislatorgovtrack_search_billsgovtrack_get_billgovtrack_search_membersgovtrack_get_membersearch_votesget_vote_detailget_agencyregulations_gov_search_docketssearch_commentsgovinfo_search_packagesgovinfo_get_packageget_cube_metadataget_csv_download_urlget_versionget_observationsbis_list_curated_flowsbis_search_dataflowsbis_fetch_datasetrecent_notablesearch_plantstrefle_search_speciesget_cellsearch_iocsearch_hashsearch_malwaresearch_tagsearch_familysearch_signaturediscogs_searchsearch_songsget_songspotify_searchget_trackget_recommendationstrakt_searchebay_searchebay_get_itempolymarket_searchpolymarket_price_historyimdb_searchsearch_by_animesearch_by_charactercould_have_been_email_analyzequotable_search_quotestemperature_random_generate

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• LowAS-002

  ⚠️Excessive Permissions ×11

  input schema exposes 12 properties (threshold: 10)

  attom_property_searchdeepl_translatediscogs_search

  input schema exposes 13 properties (threshold: 10)

  adzuna_searchsetlist_search

  input schema exposes 14 properties (threshold: 10)

  npi_registry_search

  input schema exposes 15 properties (threshold: 10)

  deals

  input schema exposes 11 properties (threshold: 10)

  list_titleseverythingthe_guardian_searchsearch_events

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×2530

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  ask_pipeworxdiscover_toolsresolve_entitycompare_entitiespipeworx_feedbackrememberrecallforgetget_weatherweather_get_forecastweather_get_historicalget_profilebluesky_get_postsbluesky_search_postsget_feedget_followersget_followsget_threadresolve_handlegeo_geocodegeo_reverse_geocodegeo_get_countrygeo_get_timezoneget_sunrise_sunsetget_iss_locationget_earthquakesscience_get_air_qualityscience_get_apodget_crypto_priceget_crypto_marketget_exchange_ratedefine_worddictionary_get_synonymsbooks_search_booksbooks_get_bookbooks_get_authorholidays_get_holidaysholidays_is_today_holidaynext_holidaysnutrition_search_productsnutrition_get_productsearch_mealsget_mealrandom_mealmeals_by_ingredientsearch_cocktailsget_cocktailrandom_cocktailcocktails_by_ingredientsearch_breweriesget_brewerybreweries_by_cityart_search_artworksart_get_artworkget_departmentssearch_poemspoems_by_authorrandom_poemssearch_universitiesrick_and_morty_search_charactersget_characterrick_and_morty_search_episodesrick_and_morty_get_episodeget_locationget_gemsearch_gemsrubygems_get_versionsget_dependenciesget_reverse_dependenciesget_intensityget_intensity_by_dateget_generation_mixsec_search_companiesget_company_filingssec_get_company_factsgeolocate_ipbatch_geolocatedns_lookupdns_lookup_allreverse_dnsnpm_search_packagesnpm_get_packageget_downloadssearch_laureatesget_prizes_by_yearget_rateconvertget_historical_rateget_currenciesstackexchange_search_questionsget_answersstack_get_userworldbank_get_countryget_indicatorget_populationget_gdpsearch_countriesget_country_by_codecountries_by_regioncountries_by_languagecountries_by_currencysearch_wikipediaget_article_summaryget_article_sectionsget_random_articlessearch_reposget_repolist_repo_issuesget_usersearch_hnget_top_storiesget_itemsearch_moviessearch_tv_showsget_tv_showget_tv_schedulesports_search_teamssports_search_playersget_league_tableget_last_eventsget_next_eventssearch_airportsget_airportcalculate_distancejokes_get_jokejokes_search_jokesget_joke_categoriesget_joke_flagsget_latest_launchget_next_launchspacex_get_past_launchesget_rocketsget_crewget_starlinkget_national_debtget_treasury_ratesget_federal_spendingsearch_wantedget_wanted_personsearch_drug_eventssearch_drug_labelssearch_food_recallsget_global_statsget_country_statsdisease_get_historicalget_vaccine_statsget_pokemonget_typeget_abilityget_evolution_chainsearch_dealsgamedeals_search_gamesget_game_detailslist_storesget_questionstrivia_list_categoriesget_category_statssearch_artistsmusicbrainz_get_artistsearch_releasesmusicbrainz_get_releaseradio_search_stationsget_top_stationsradio_list_countriesradio_list_tagsget_flights_in_areaflights_get_aircraftget_arrivalsget_departureslist_networksget_networksearch_networksfind_synonymsfind_rhymesfind_relatedwords_autocompletefind_wordstranslate_translatetranslate_detect_languagetranslate_list_languagesecondata_get_seriesget_unemploymentget_cpiget_employment_by_industrypatents_search_patentsget_patentsearch_inventorsget_upcoming_launcheslaunches_get_past_launcheslaunches_get_launchsearch_launcheslist_gamesvideogames_get_gamefilter_gamesswapi_search_peopleget_planetget_starshipget_filmjikan_search_animejikan_get_animejikan_top_animejikan_search_characterscrossref_search_workscrossref_get_workcrossref_get_journalopenalex_search_worksopenalex_search_authorssearch_institutionsget_conceptsearch_pubmedget_summarypubmed_get_abstractgbif_search_speciesgbif_get_speciesget_occurrencesget_currentsearch_sitesget_dailyarchive_searcharchive_get_metadatawayback_checkdecode_vinget_makesget_modelssimplifyderiveintegratefactorget_crimesget_forcesget_outcomessearch_cvesget_cverecent_cvesget_article_viewsget_top_articlesget_project_viewsspacenews_get_articlesspacenews_search_articlesget_blogsget_verseget_passagerandom_verseartic_search_artworksartic_get_artworkartic_get_artistget_exhibitionssearch_iconsget_iconsiconify_list_collectionsevaluateconvert_unitsget_timesget_times_datechess_get_playerchess_get_statschess_get_gamesget_leaderboardszenquotes_random_quotetoday_quotelist_quotesrandom_advicesearch_adviceget_adviceget_memesget_fruitlist_fruitsget_by_nutritionswisstransport_search_stationsget_connectionsget_stationboardpredict_agepredict_age_countrypredict_genderpredict_gender_countrypredict_nationalitybatch_predictget_tlesearch_satellitestle_list_recentget_monstersget_weaponsget_armorget_skillsidentify_colorgenerate_schemeconvert_colorcreate_qrread_qronthisday_get_eventsget_birthsget_deathsgenerate_usersgenerate_by_genderget_wave_forecastget_current_wavesairquality_get_air_qualityairquality_get_forecastsearch_addressnominatim_reverse_geocodenominatim_lookuplookup_zipcodelookup_citylookup_postcodenearest_postcodesvalidate_postcoderandom_postcodeget_spellget_monsterget_classlist_spellsnew_deckdeckofcards_draw_cardsshuffle_deckget_factcatfacts_list_breedsget_factsdogceo_random_imagedogceo_list_breedsbreed_imagesrandom_breed_imagechucknorris_random_jokechucknorris_search_jokeschucknorris_list_categoriesjoke_by_categorydadjokes_random_jokedadjokes_search_jokesdadjokes_get_jokegutendex_search_booksgutendex_get_bookpopular_booksbooks_by_topiclist_exercisesget_exerciselist_muscleslist_equipmentrandom_emojiget_by_categoryget_by_groupvalidate_emailcheck_domaingenerate_avatarlist_stylesmicrolink_get_metadatatake_screenshotget_river_dischargeget_flood_forecastget_climate_projectioncompare_modelson_this_dayfeatured_articlemost_readpicture_of_daynumber_factdate_factmath_factnumbersapi_random_factuselessfacts_random_facttoday_factdogsapi_list_breedsget_breedlist_factsget_groupsget_status_catlist_codesipinfo_lookup_ipget_my_ipget_ratesexchangerate_get_pairgenerate_paragraphsgenerate_with_optionslist_allget_heroget_powerstatsget_biographyrandom_cardtarot_draw_cardssearch_cardsget_cardxkcd_get_latestget_comicrandom_comicsf_querysf_get_recordsf_searchsf_describesf_list_objectssf_create_recordsf_update_recordsf_delete_recordsheets_readsheets_writesheets_appendsheets_get_spreadsheetsheets_createhs_list_contactshs_get_contacths_search_contactshs_list_companieshs_get_companyhs_list_dealshs_get_dealjira_searchjira_get_issuejira_list_projectsjira_get_projectslack_list_channelsslack_channel_historyslack_send_messageslack_list_usersslack_join_channelnotion_searchnotion_get_pagenotion_get_databasenotion_query_databasenotion_list_pagesdocs_getdocs_get_textdocs_createdocs_insert_textdocs_append_textdocs_replace_textmaps_geocodemaps_reverse_geocodemaps_place_searchmaps_place_detailsmaps_directionsmaps_distance_matrixmaps_elevationstripe_list_customersstripe_get_customerstripe_list_chargesstripe_list_subscriptionsstripe_get_balancestripe_list_invoiceszd_list_ticketszd_get_ticketzd_search_ticketszd_list_userszd_get_useric_search_contactsic_get_contactic_list_conversationsic_get_conversationic_list_companiesgh_list_reposgh_get_repogh_list_issuesgh_list_pullsgh_list_orgsgh_get_filegmail_list_messagesgmail_get_messagegmail_searchgmail_sendgmail_list_labelsdrive_list_filesdrive_get_filedrive_get_contentdrive_create_filedrive_searchgcal_list_eventsgcal_get_eventgcal_create_eventgcal_list_calendarsgcal_search_eventsgads_list_campaignsgads_get_campaigngads_campaign_metricsgads_list_ad_groupsgads_searchga_run_reportga_list_propertiesga_get_realtimega_get_metadatalinear_list_issueslinear_get_issuelinear_create_issuelinear_list_teamslinear_searchasana_list_workspacesasana_list_tasksasana_get_taskasana_create_taskasana_list_projectsasana_search_tasksclickup_list_tasksclickup_get_taskclickup_create_taskclickup_list_spacesclickup_list_foldersmonday_list_boardsmonday_get_boardmonday_list_itemsmonday_create_itemmonday_search_itemsconfluence_list_pagesconfluence_get_pageconfluence_searchconfluence_create_pageconfluence_list_spacesgitlab_list_projectsgitlab_get_projectgitlab_list_issuesgitlab_list_mrsgitlab_get_filetwilio_send_smstwilio_list_messagestwilio_get_messagetwilio_list_callstwilio_make_callfreshdesk_list_ticketsfreshdesk_get_ticketfreshdesk_search_ticketsfreshdesk_list_contactsfreshdesk_get_contactpaypal_list_transactionspaypal_get_orderpaypal_list_invoicespaypal_get_invoicepaypal_list_disputesqb_queryqb_get_customerqb_list_invoicesqb_get_invoiceqb_list_accountsmailchimp_list_audiencesmailchimp_get_audiencemailchimp_list_campaignsmailchimp_get_campaignmailchimp_list_membersshopify_list_productsshopify_get_productshopify_list_ordersshopify_get_ordershopify_list_customerswoo_list_productswoo_get_productwoo_list_orderswoo_get_orderwoo_list_customersairtable_list_recordsairtable_get_recordairtable_create_recordairtable_list_basesairtable_get_base_schemadropbox_list_folderdropbox_searchdropbox_get_metadatadropbox_downloaddropbox_create_folderzoho_list_recordszoho_get_recordzoho_search_recordszoho_create_recordzoho_list_modulespipedrive_list_dealspipedrive_get_dealpipedrive_list_personspipedrive_get_personpipedrive_searchgreenhouse_list_candidatesgreenhouse_get_candidategreenhouse_list_jobsgreenhouse_get_jobgreenhouse_list_applicationsbamboohr_list_employeesbamboohr_get_employeebamboohr_get_directorybamboohr_list_timeoffbamboohr_get_employee_filesfb_list_ad_accountsfb_list_campaignsfb_get_campaignfb_campaign_insightsfb_list_adsetsli_list_ad_accountsli_list_campaignsli_get_campaignli_campaign_analyticsli_list_creativesamp_get_eventsamp_get_active_usersamp_get_retentionamp_user_searchamp_get_user_activityfred_get_seriesfred_searchfred_series_infofred_categoryfred_releasesbls_get_seriesbls_searchbls_latestbls_popular_seriescensus_acscensus_building_permitscensus_housing_startscensus_homeownershipcensus_available_datasetshud_fair_market_rentshud_income_limitshud_crosswalkhud_chashud_list_statesyt_searchyt_video_detailsyt_channel_detailsyt_channel_videosyt_video_commentsattom_property_detailattom_property_searchattom_sales_historyattom_avmattom_assessmentattom_sales_trendattom_rental_avmattom_school_searchget_briefingsearch_developmentsai_briefing_get_recentget_model_landscapeai_briefing_get_timelineget_ai_toolbeltget_ai_newswhat_happenedcase_shiller_metro_comparehousing_market_snapshothousing_property_reporthousing_rental_analysishousing_affordability_checkhousing_employment_outlookhousing_signal_scanhousing_mortgage_historyfixturesapi_football_standingsteam_searchleague_searchapi_football_predictionsh2haltos_market_statsaltos_inventory_trendaltos_active_listingsaltos_pending_salesaltos_new_listingsaltos_list_filesgong_list_callsgong_get_callgong_get_transcriptgong_list_usersgong_search_callsklaviyo_list_profilesklaviyo_get_profileklaviyo_list_listsklaviyo_list_campaignsklaviyo_get_campaignchargebee_list_subscriptionschargebee_get_subscriptionchargebee_list_customerschargebee_get_customerchargebee_list_invoicesashby_list_candidatesashby_get_candidateashby_list_jobsashby_get_jobashby_list_applicationsedgar_search_filingsedgar_company_filingsedgar_company_factsedgar_company_conceptedgar_ticker_to_cikcfpb_search_complaintscfpb_company_complaintscfpb_get_complaintcfpb_top_companiescfpb_product_breakdownfdic_search_institutionsfdic_get_institutionfdic_financialsfdic_failuresfdic_summaryav_quoteav_dailyav_overviewav_income_statementav_balance_sheetav_earningsdefi_tvl_protocolsdefi_protocol_detaildefi_chain_tvldefi_protocol_feesdefi_stablecoinsdefi_yieldsfintech_company_deep_divefintech_bank_health_checkfintech_market_snapshotct_searchct_get_studyct_count_by_conditionct_sponsor_trialsct_recent_updatesfda_drug_eventsfda_drug_approvalsfda_drug_labelsfda_drug_recallsfda_event_countsrxnorm_searchrxnorm_get_propertiesrxnorm_relatedrxnorm_interactionsrxnorm_ndcpharma_drug_profilepharma_pipeline_scanpharma_safety_reportsam_search_opportunitiessam_get_opportunitysam_entity_searchsam_set_aside_opportunitiesusa_spending_by_agencyusa_award_searchusa_spending_by_categoryusa_recipient_profileusa_spending_trendssbir_search_awardssbir_get_awardsbir_search_solicitationssbir_company_awardssbir_agency_statsgovcon_contractor_profilegovcon_opportunity_scangovcon_agency_landscapenass_querynass_crop_productionnass_pricesnass_livestocknass_crop_progressfas_exportsfas_importsfas_productionfas_commodity_codeseia_serieseia_petroleumeia_natural_gaseia_electricityeia_ethanolcomtrade_trade_datacomtrade_top_partnerscomtrade_top_commoditiescomtrade_country_codescensus_importscensus_exportscensus_trade_balancecensus_trade_trendstreasury_customs_revenuetreasury_receiptstreasury_debttreasury_exchange_ratestrade_bilateral_analysistrade_country_profiletrade_macro_dashboardecho_facility_searchecho_compliance_historyecho_violationsecho_enforcement_actionsecho_search_by_violationghg_facility_emissionsghg_emissions_by_sectortri_facility_releasestri_chemical_releasestri_trendslist_packsget_pack_toolsget_connection_configsearch_packsget_platform_statussearch_mcp_directoryget_trademark_by_serialget_trademark_by_registrationget_trademark_documentssearch_gifstrending_gifsrandom_gifboardgames_search_gamesboardgames_get_gamehot_gamesanilist_search_animeanilist_get_animetrending_animepypi_search_packagespypi_get_packagepypi_get_releasesearch_cratesget_cratecrates_get_versionsdockerhub_search_imagesdockerhub_get_imageget_tagsgitlab_public_search_projectsgitlab_public_get_projectsearch_issuesdevto_get_articlesdevto_search_articlesdevto_get_articlepaperswithcode_search_paperspaperswithcode_get_paperget_repositoriestrending_papersget_current_standingsget_race_resultsf1_get_scheduleget_driverget_standingsnhl_get_scoresnhl_get_schedulenhl_get_playernba_search_playersnba_get_playerget_teamsnba_get_gamescongress_search_billscongress_get_billcongress_get_memberscongress_get_votesget_predictionsget_water_levelslist_stationsnoaa_get_forecastnoaa_get_alertsget_stationsget_subredditreddit_search_postsreddit_get_postget_hottestget_newestget_storyget_tagmastodon_searchmastodon_get_trendingget_accountmastodon_get_timelineget_fireballsget_close_approachesget_neo_feedjsonplaceholder_get_postsjsonplaceholder_get_postget_usersget_commentsurlhaus_lookup_urllookup_hosturlhaus_get_recentlookup_payloadrandom_catcat_by_tagcataas_list_tagsdomain_lookupdomain_statusinsider_tradesinsider_8kinsider_13dinsider_activity_summaryquotes_random_quotequotes_search_quotescheck_attributionquote_by_locationlist_authorslist_full_text_worksget_sceneget_actget_chapterget_quoteget_company_newsget_earnings_calendarsearch_symbolcoingecko_get_coinsearch_coinsget_market_datacoingecko_get_trendingeurostat_get_dataseteurostat_search_datasetseurostat_list_datasetsecb_exchange_ratehicp_inflationecb_get_datalist_dataflowsopenaire_search_publicationsopenaire_search_datasetssearch_softwareopenaire_search_projectsget_research_productopenaire_get_projectsearch_noticesget_noticeentreprises_fr_searchget_enterprisenearbyepo_ops_search_patentsget_biblioget_familyepo_ops_get_abstractget_claimsday_ahead_pricesactual_loadactual_generation_per_typecross_border_flowinstalled_capacitywhoisnetwork_infoas_overviewasn_neighboursbgp_stateabuse_contactgeolocprefix_overviewdoaj_search_articlessearch_journalsdoaj_get_articledoaj_get_journaldblp_search_publicationsdblp_search_authorssearch_venuespackagist_searchpackagist_get_packagepackagist_list_versionspackage_statsmaven_central_searchsearch_by_coordsmaven_central_list_versionsmaven_central_latest_versionnuget_searchnuget_get_packagenuget_list_versionsnuget_latest_versionpkg_go_dev_list_versionspkg_go_dev_latest_versionget_module_infoget_go_moddbnomics_searchlist_providersdbnomics_list_datasetsdbnomics_get_seriesfind_seriessearch_statsestat_japan_get_metadataestat_japan_get_datalist_data_catalogdata_gov_sg_search_datasetsdata_gov_sg_get_datasetquery_datasetweather_nowair_quality_psiair_quality_pm25uv_indextaxi_availabilitytraffic_incidentspoint_dataclimatologyregional_datapv_performancemonthly_radiationtmyopen_meteo_forecasthistoricalopen_meteo_geocodeair_qualitymarinefloodschedulemlb_stats_standingsmlb_stats_get_teamteam_rostermlb_stats_get_playermlb_stats_player_statsget_boxscoreget_game_feedodds_api_list_sportsget_oddsget_event_oddsodds_api_get_scoresodds_api_get_eventsthesportsdb_list_sportslist_leaguesthesportsdb_search_teamsthesportsdb_get_teamleague_teamsthesportsdb_search_playersthesportsdb_get_playerteam_events_lastteam_events_nextevents_by_dayleague_tablecoinmarketcap_quoteslistings_latestcoinmarketcap_metadataglobal_metricscoinmarketcap_categoriescoinmarketcap_categorylist_projectsl2beat_get_projecttvs_breakdowntvs_historyactivitychainlist_list_chainsget_chainfind_rpclist_coinscoinpaprika_get_cointickers_latesthistorical_ohlcglobal_marketcoinpaprika_searchflightsairportsairlinesaviationstack_citiesaviationstack_countriesroutessearch_agenciessearch_routessearch_stopsdepartures_at_stoplist_feedsmetartafpirepsigmetairmetgairmetwindsaloftstationinfosearch_modelshuggingface_search_datasetssearch_spacesget_modelhuggingface_get_datasetget_spacelist_model_fileslist_dataset_filestrending_modelstrending_datasetslist_venuesget_venuelist_submissionsget_noteopenreview_get_papersearch_notessearch_incidentsget_incidentai_incident_db_list_recentlist_taxonomiesusajobs_searchget_jobusajobs_list_agencieslist_pay_gradeslist_occupational_seriesadzuna_searchadzuna_categoriessalary_histogramtop_companiesadzuna_historyregional_statsremotive_searchremotive_list_categoriesremotive_get_companysearch_drugsget_druglist_labels_for_drug_namerecent_updateslist_classessearch_foodsget_foodlist_foodslist_food_groupsnutrients_for_foodnpi_registry_searchget_providerconnectmedlineplus_searchbookbrainz_searchbookbrainz_lookupbrowsegoogle_books_searchget_volumeget_by_isbnlist_bookshelfuk_parliament_search_membersuk_parliament_get_memberuk_parliament_search_billsuk_parliament_get_billbill_stagessearch_hansardrecent_divisionssearch_activitiessearch_drucksachenget_drucksachesearch_plenarprotokolleget_plenarprotokollsearch_personslist_deputiesget_deputysearch_interventionsnosdeputes_fr_search_questionsnosdeputes_fr_list_voteslist_groupssearch_debateslist_billsopenparliament_ca_get_billopenparliament_ca_list_voteslist_politiciansget_politicianlist_committeeslist_committee_meetingsdexscreener_get_pairdexscreener_get_tokensearch_pairslatest_token_profileslatest_boosted_tokenstoken_boosts_topblockscout_get_addressget_address_txnsget_address_token_transfersblockscout_get_transactionblockscout_get_tokenblockscout_get_blockblockscout_searchblockscout_list_chainsrecommended_feesmempool_statsblock_heightmempool_space_get_blockmempool_space_get_transactionget_tx_statusmempool_space_get_addressget_address_transactionshashratemining_poolsiss_nowastrosnasa_eonet_eventsnasa_eonet_get_eventnasa_eonet_geojsonnasa_eonet_list_categorieslist_sourceslist_layersupcoming_launchesprevious_launcheslaunch_library_get_launchlaunch_library_list_agencieslist_astronautslist_eventslist_expeditionsroutetablenearestosrm_matchtripphoton_searchphoton_reversewordsmeans_likerhymessounds_likespelled_likepredicts_nexthomophonesdefinitionwiktionary_summarywiktionary_searchetymologywiktionary_pronunciationswikiquote_searchwikiquote_summarywikiquote_quotesquote_of_the_daywikidata_sparql_queryinstances_ofsubclasses_ofproperties_ofentities_atdbpedia_lookupsparqldbpedia_resourcedbpedia_abstractconceptnet_lookupconceptnet_queryrelatednessitunes_search_searchitunes_search_lookuptop_moviesitunes_search_top_podcaststop_bookssearch_podcastsfyyd_search_episodesget_podcastget_podcast_by_urllatest_episodesfyyd_top_podcastsfyyd_categoriesnpm_package_statsgh_repo_statstop_npm_packageslist_npm_filesresolve_versionlist_npm_versionsbundlephobia_sizesimilarbundlephobia_historyrecent_searchespackagephobia_sizefeaturecaniuse_searchlist_browserssupportmdn_search_searchmdn_search_summarybcdlist_schemasfind_schema_forfetch_schemaschemastore_lookuplist_templatesget_templatecomposelist_licensesget_licenseget_license_textspdx_license_searcheol_searchget_pagepages_by_namehierarchyeuropepmc_searcheuropepmc_get_articleeuropepmc_abstracteuropepmc_referenceseuropepmc_citationsdetailspublishedpublisherbiorxiv_summarydeezer_searchtrackalbumdeezer_artistartist_topchartlyricssuggesttip_heightblockstream_info_blockblockstream_info_transactiontx_statusblockstream_info_addressaddress_txsmempoolfee_estimatescollectivemembersopencollective_transactionsopencollective_eventsclevelandart_searchclevelandart_get_artworkcreatorsexhibitionsopenverse_search_imagessearch_audioopenverse_get_imageget_audioimage_relatedaudio_relatedfeodotracker_listfeodotracker_check_ipfeodotracker_recentaggressivelichess_userlichess_userslichess_user_statususer_performancetop_playersleaderboardstv_channelscloud_evaltablebaseopening_explorercodeforces_useruser_ratingcodeforces_user_statuscontest_listcontest_standingsproblemsetrecent_actionsblog_entry_viewfrinkiac_searchfrinkiac_randomcaptionmet_no_forecastnowcastsunriseairqualityoceanforecastcodestats_usercodestats_recentflickr_public_recentby_userby_groupuniprot_searchuniprot_getproteomes_searchtaxonomy_searchkeywordfeature_summarypredictionalphafold_summaryannotationsuniprotrcsb_pdb_searchrcsb_pdb_structurepolymer_entityligandassemblyrcsb_pdb_summarychembl_searchmoleculechembl_targetmechanismactivitiesdrug_indicationsreactome_searchpathwayparticipantspathways_for_entityorthologous_eventsorcid_recordworksworkemploymenteducationorcid_searchror_searchror_getaffiliationinspire_hep_searchliteratureauthors_searchinspire_hep_authorinstitutions_searchconferences_searchhal_fr_searchhal_fr_gethal_fr_authorhal_fr_structurelist_ontologiesget_ontologyebi_ols_searchget_termterm_ancestorsebi_ols_term_childrenopentargets_targetdiseasedrugopentargets_searchtarget_associationsdisease_associationstarget_known_drugsdatagov_au_searchdatagov_au_packagedatagov_au_organizationsdatagov_au_groupsdatagov_au_tagsdatagov_au_resourcedatagouv_fr_search_datasetsdatagouv_fr_datasetresourcessearch_organizationsorganizationreuses_searchrfcdocumentdocuments_searchwgwgs_searchietf_datatracker_personrepology_projectproblemsrepositoriesmaintainerprojects_searchtatoeba_searchsentencetranslationstatoeba_languagessquiggle_teamssquiggle_gamessquiggle_standingssquiggle_sourcestipsladderblockchair_statsblockchair_blockblockchair_transactionblockchair_addressnodekitsu_search_animesearch_mangaanimemangakitsu_top_animetop_mangakitsu_categoriescatalogueoflife_searchname_matchcatalogueoflife_usagetaxonclassificationvernacularsynonymscatalogueoflife_childrenvariantgnomad_generegiontranscriptgnomad_searchstring_db_resolveinteractionsstring_db_networkenrichmentstring_db_homologyensembl_lookuplookup_symbolxrefssequenceensembl_homologyvariationvepeinfoesearchesummaryefetchelinkegquerymonarch_initiative_searchmonarch_initiative_entityassociationsphenotype_to_genegene_to_diseaseopencitations_referencesopencitations_citationscitation_countreferences_countopencitations_metadatacitationplos_searchplos_articlesearch_authored_byplos_recentdata_europa_searchdata_europa_packagedata_europa_organizationsdata_europa_groupsdata_europa_tagsstationsstation_metadatanoaa_tides_predictionswater_levelcurrentsmet_obsdatumsfmi_forecastfmi_latest_observationsfmi_recent_observationswarningsgdacs_eventseventgdacs_geojsonrssvulnerabilitiesquery_batchosv_dev_getdeps_dev_projectdeps_dev_packagedeps_dev_versiondeps_dev_dependenciesdeps_dev_queryfilmsfilmstudio_ghibli_peoplestudio_ghibli_personstudio_ghibli_locationsstudio_ghibli_locationspeciesspecies_onevehiclesvehiclebooksanapioficeandfire_bookanapioficeandfire_charactersanapioficeandfire_characterhouseshousemygene_info_querymygene_info_genequery_manymygene_info_metadatataxonomyalertssolar_windkp_indexaurora_forecastgoes_xrayboulder_kpforecast_textcatalogsquery_catalogvizier_cone_searchvizier_objectsimbad_objectsimbad_scriptsimbad_tapsimbad_cone_searchhorizons_nasa_lookupephemerisobserversvectorsexoplanet_archive_tapplanetscompositekepler_candidatesmicrolensinggtex_genemedian_expressiontop_expressed_genessingle_tissue_eqtlstissuesdataverse_harvard_searchdataverse_harvard_datasetdataset_filesdataversemapopenfigi_searchfilteropendata_canada_searchopendata_canada_packageopendata_canada_organizationsopendata_canada_groupscontentgov_uk_content_searchorganisationstaxonssearch_autocompletesubjectstable_metaquery_tableaudiobooksaudiobookauthorstrackscommons_wikimedia_searchfile_infofile_revisionscategory_memberscommons_wikimedia_random_imageparsepublic_suffixregistrable_domainlist_versioniso_codes_countrysubdivisionslanguagecurrencyiso_codes_scriptiso_codes_listons_uk_datasetsons_uk_datasetons_uk_editionsons_uk_latest_observationsseriescatalogcisa_kev_entryvendorscisa_kev_recentweaknessmitre_cwe_categoryviewmitre_cwe_childrenparentsdescendantsrelationshiptechniquetacticmitre_attck_groupsoftwaremitigationmitre_attck_searchdomainsdata_ny_datasetsdata_ny_querydata_ny_metadatacolumn_datadata_cityofchicago_datasetsdata_cityofchicago_querydata_cityofchicago_metadatamepsmepplenary_documentssession_calendarformulacaskanalytics_installanalytics_cask_installrecent_formulaepagecommandstldr_pages_platformstldr_pages_searchrfc_textrfc_metadataerratabcpstdrfc_editor_searchprefixbioregistry_searchbioregistry_resolveprefixeselevationopentopodata_datasetsopenfoodfacts_productopenfoodfacts_searchopenfoodfacts_categorybrandopenfoodfacts_countrysnippetlemmacorpus_concordancekwiclemmy_postslemmy_postlemmy_commentslemmy_communitiescommunitysitelemmy_searchstation_infodaily_datahourly_dataevent_datalatestreservoirsconvective_outlookmesoscale_discussionsstorm_reportswatches_activemast_nasa_cone_searchmission_searchcaomlookup_namepypi_stats_recentoverallpython_majorpython_minorsystemzenodo_searchzenodo_recordrecord_fileszenodo_communitiescommunity_recordsarticlesfigshare_articlearticle_filescollectionscollectionfigshare_categorieslicensesgoproxy_modulegoproxy_versionsversion_infogo_moddeno_land_moduledeno_land_versionsdeno_land_versiondeno_land_searchdeno_land_dependenciesrdap_domainrdap_ipasnrdap_entitynameserverdatos_gob_es_datasetsdatos_gob_es_datasetdatos_gob_es_publishersdatos_gob_es_themestermhpo_api_searchhpo_api_term_childrenterm_parentsterm_descendantsgene_diseasesdisease_phenotypesopendatasoft_datasetsopendatasoft_datasetrecordsfacetsinstance_infopatents_searchscholarly_searchpatentscholarlyballdontlie_teamsteamplayersballdontlie_playerballdontlie_gamesballdontlie_gameseason_averagesballdontlie_statsartist_infoartist_top_tracksartist_similaralbum_infotrack_infotrack_searchuser_top_trackstag_top_artistschart_top_artistsopencages_geocodeopencages_reversepoint_elevationdemopentopography_datasetsgiantbomb_searchgiantbomb_gamegiantbomb_gamesgiantbomb_charactercompaniesgiantbomb_releasesgiantbomb_platformsurlscan_io_searchresultsubmiturlscan_io_domainurlscan_io_ipusername_to_uuidusername_to_uuid_atmojang_profilename_historyblocked_serversdealsdealstorescheapshark_gamescheapshark_gamecodewars_useruser_completeduser_authoredkatauser_profileuser_solveduser_recent_submissionsdaily_questionproblemproblemset_statsfoodish_randomrandom_by_categorylast_pulsepulse_atpulse_by_chain_pulselatest_in_chainchain_infouser_by_usernameroblox_useruser_friendsuser_followers_countuser_followings_countuser_badgesuser_gamesuser_presenceroblox_grouproblox_gamewynncraft_playerplayer_charactersguildguild_listonline_playersleaderboarditem_databaseitem_searchwynncraft_newsworldsitemsachievementsprofessionscurrenciesbuildquagganswvw_matchescommerce_pricescommerce_listingspirate_weather_forecastforecast_gridtickersticker_detailsaggregatesdaily_open_closeprevious_closegrouped_dailypolygon_io_newspolygon_io_splitspolygon_io_dividendsmarket_holidaysmarket_statusexchangescomicvine_searchcomicvine_characterscomicvine_characterissuesissuevolumesvolumecomicvine_peoplecomicvine_personcomicvine_publishersvideovideos_searchvimeo_useruser_videoschannelchannel_videosvimeo_categoriesvimeo_categorycategory_videostenor_searchfeaturedtenor_categoriessearch_suggestionstenor_autocompletetrending_termstenor_postsresolve_vanity_urlplayer_summaryplayer_summariesfriend_listowned_gamesrecently_playedplayer_achievementssteam_player_statsplayer_levelplayer_bansapp_newsapp_detailsapp_listcurrent_player_countaccount_by_riot_idaccount_by_puuidsummoner_by_puuidmatch_ids_by_puuidriot_games_matchmatch_timelineleague_entrieschampion_rotationschampion_masterysummoner_top_masteryriot_games_statusmanifestsearch_destiny_playersearch_destiny_players_by_global_namebungie_profilebungie_characterlinked_profilesbungie_clanbungie_clan_membersuser_by_idequipped_loadouthistorical_statshistorical_stats_for_accountentity_definitiondefinitionsexamplestop_examplerelatedphraseswordnik_pronunciationshyphenationfrequencyword_of_the_dayrandom_wordrandom_wordswordnik_searchcryptocompare_priceprice_multiprice_fullhisto_minutehisto_hourhisto_daytop_pairstop_volume_fulltop_market_capcryptocompare_newsnews_categoriesnews_feedssocial_statsall_coinsall_exchangestitle_searchtitle_detailtitle_sourcestitle_seasonswatchmode_releaseslist_titleswatchmode_sourcesnetworkswatchmode_genresregionswatchmode_languagesserver_timesystem_statusassetsasset_pairskraken_tickerkraken_ohlcdepthkraken_tradesspreadbitstamp_tickerticker_hourorder_bookbitstamp_transactionseur_usdtrading_pairsbitstamp_ohlcsymbolssymbol_detailsgemini_crypto_tickerticker_v2candlesgemini_crypto_bookgemini_crypto_tradesprice_feedgemini_crypto_networkgas_feesipv4ipv6current_timecurrent_time_coordinatecurrent_time_ipcurrent_iso_zoned_date_timecurrent_zone_infoconvert_time_zoneday_of_the_weeklist_zonestranslate_to_isohttpbin_gethttpbin_postheadershttpbin_ipuser_agenthttpbin_statusdelayuuidbase64_encodebase64_decodejson_anythingxml_anythinghtml_anythingrobots_txtimagecookiesdocssearch_docsindexsearch_indexdbdevdocs_io_entrytypesfeedconditionsicd10cmicd9cmproceduresdrugsloincnpi_individualnpi_organizationucumdisease_namesproductsdummyjson_productdummyjson_product_searchproducts_categoriesdummyjson_usersdummyjson_userdummyjson_postsdummyjson_postdummyjson_commentsrecipesrecipedummyjson_quotestodossetlist_fm_artistartist_searchartist_setlistsvenuevenue_searchvenue_setlistssetlistsetlist_searchsetlist_fm_useruser_attendedsetlist_fm_citiessetlist_fm_countriesconfigurationsearch_moviesearch_tvsearch_personsearch_multimoviemovie_creditsmovie_videosmovie_recommendationstvtv_seasontv_episodetmdb_personperson_combined_creditstmdb_trendingdiscover_moviediscover_tvgenres_moviegenres_tvnewsapi_top_headlineseverythingnewsapi_sourcesthe_guardian_searchitemsectionsthe_guardian_tagsthe_guardian_editionsdeepl_translatedeepl_usagesource_languagestarget_languagesglossary_language_pairsrecipe_searchrecipe_informationrecipe_randomrecipe_summaryrecipe_similarrecipe_nutritionrecipe_ingredientsrecipe_tasterecipe_price_breakdowningredient_searchingredient_informationspoonacular_product_searchproduct_informationmeal_plan_generatemeal_plan_weekwine_pairingwine_recommendationconvert_amountgeocode_forwardgeocode_reversemapbox_directionsdirections_matrixisochronemap_matchingtilequerystatic_image_urltime_seriesquotetwelvedata_priceeodtwelvedata_exchange_ratecurrency_conversionstocksforex_pairscryptocurrenciesetfsindicesearningsearnings_calendartwelvedata_dividendstwelvedata_splitstwelvedata_profileclash_royale_playerclash_royale_player_battlesplayer_upcoming_chestsclash_royale_clanclash_royale_clan_membersclan_war_logclan_current_warclan_searchtournamenttournament_searchcardsclash_royale_locationsclash_royale_locationrankings_clansclash_royale_rankings_playersbrawl_stars_playerbrawl_stars_player_battlesclubclub_membersbrawlersbrawlerevents_rotationbrawl_stars_rankings_playersrankings_clubsrankings_brawlerssetssetset_partsset_minifigspartspartrebrickable_themescolorsrail_linesrail_stationsrail_station_inforail_predictionsrail_incidentsbus_routesbus_route_detailsbus_stopsbus_predictionsbus_incidentslisten_notes_searchpodcastepisodelisten_notes_genresbest_podcastsrecommendations_for_podcastrecommendations_for_episodeopenrouteservice_directionsmatrixisochronessnapelevation_lineelevation_pointgeocode_searchnasa_get_apodget_asteroidsget_mars_photosusgs_earthquake_get_recentsearch_earthquakesusgs_earthquake_get_eventget_datasetsimf_get_datasearch_indicatorsposthog_get_eventsget_personsget_insightssendgrid_get_statsget_blocksget_bouncesmixpanel_get_eventsget_funnelsget_retentionget_accountsget_transactionsplaid_get_balancegnews_search_newsgnews_top_headlinessearch_documentsget_documentrecent_rulessearch_opinionscourt_listener_search_docketsget_opinionopen_sanctions_search_entitiesopen_sanctions_get_entityget_indicatorswho_gho_get_datawho_gho_list_countriesopen_corporates_search_companiesopen_corporates_get_companysearch_officerssearch_candidatescandidate_financialssearch_committeessemantic_scholar_search_paperssemantic_scholar_get_papersemantic_scholar_get_authorsearch_nonprofitsget_organizationget_filingget_flightsopensky_get_aircraftopensky_get_statesairspace_activitysearch_schoolsget_schoolopen_food_facts_search_productsopen_food_facts_get_productget_categoriesnager_date_get_holidaysnager_date_is_today_holidayget_long_weekendsnager_date_list_countriesgeonames_search_placesget_nearbygeonames_get_timezonepropublica_congress_get_memberspropublica_congress_get_memberpropublica_congress_search_billspropublica_congress_get_votesestimate_electricityestimate_flightestimate_vehicleabuseipdb_check_ipreport_ipget_blacklistshodan_internetdb_lookup_ipcheck_urldatagov_search_datasetsdatagov_get_datasetlist_organizationssearch_urlcheck_availabilityfrankfurter_get_latestfrankfurter_get_historicalget_timeserieslist_currenciessec_xbrl_get_company_factsget_company_conceptsearch_filingsget_company_financialscdc_search_datasetscdc_get_datasetcore_research_search_paperscore_research_get_papercountry_state_city_list_countriescountry_state_city_get_statesget_citiesmetals_api_get_latestmetals_api_get_historicalmediastack_search_newslatest_newsget_rent_estimateget_propertyhealthdata_search_datasetshealthdata_get_datasetwikidata_search_entitieswikidata_get_entityarxiv_search_papersarxiv_get_papersearch_observationssearch_taxatop_specieslist_popular_indicatorsfetch_indicatorget_indicator_metadataoecd_list_curated_flowsoecd_search_dataflowsoecd_fetch_datasetsearch_leiget_leiget_lei_relationshipssearch_grantsnih_reporter_get_projectnih_reporter_search_publicationssearch_awardsget_awardsearch_opportunitiesget_opportunitygdelt_search_articlestimeline_tonetimeline_volumesearch_eventsevent_counts_by_countrycompanies_house_search_companiescompanies_house_get_companyget_officersget_filingsget_persons_with_significant_controlpermid_search_entitiespermid_get_entitylookup_filevirustotal_lookup_urllookup_domainvirustotal_lookup_ipip_contextcheck_passwordcheck_password_prefixlist_breachesget_breachlist_data_classescheck_accountsearch_pulsesget_pulselookup_indicatoretherscan_get_balanceget_token_balancelist_transactionsget_contract_abiget_contract_sourceweb_searchnews_searchshort_answerfull_queryget_oaunpaywall_search_papersoverpass_querypois_nearplaces_in_bboxopen_library_search_booksget_book_by_isbnopen_library_get_workopen_library_get_authorsearch_showstvmaze_get_showlist_episodestvmaze_get_scheduletvmaze_search_peoplenws_get_forecastget_hourly_forecastnws_get_alertsget_observationget_daily_historyget_monthly_normalssearch_doisget_doilist_repositoriessearch_by_nameget_compoundpubchem_get_synonymsget_classificationlist_volcanoeslist_elevatedlist_noticesfoursquare_search_placesget_placenearby_placeslist_parksget_parklist_alertslist_campgroundslist_things_to_doget_aqi_by_cityget_aqi_by_locationget_aqi_by_stationwaqi_search_stationslibretranslate_translatelibretranslate_detect_languagelibretranslate_list_languagessearch_factorsestimate_emissionslist_unit_typesquery_subgraphintrospect_schemaget_account_detailget_token_holdingslist_transfersget_token_metasolscan_get_transactionlist_competitionsget_competition_matchesget_competition_standingsfootball_data_get_teamget_team_matchesinternet_qualityattack_summarytop_locationsbgp_leaksget_collectionget_collection_statslist_collection_nftsget_nftlist_owned_nftssearch_titlesget_by_titleget_by_imdb_idcurrent_by_zipcurrent_by_locationforecast_by_zipobservations_in_bboxopenstates_search_billsopenstates_get_billsearch_legislatorsget_legislatorgovtrack_search_billsgovtrack_get_billgovtrack_search_membersgovtrack_get_membersearch_votesget_vote_detailfbi_crime_list_agenciesget_agencynational_estimatestate_summaryagency_summarylist_offense_slugsregulations_gov_search_docketsget_docketlist_documentssearch_commentsget_commentgovinfo_list_collectionsgovinfo_search_packagesgovinfo_get_packagelist_granulesget_granulelist_cubesget_cube_metadataget_latest_dataget_changed_seriesget_csv_download_urluk_ons_list_datasetsuk_ons_get_datasetlist_editionsget_versionget_observationsbis_list_curated_flowsbis_search_dataflowsbis_fetch_datasetebird_recent_observationsrecent_notablenearby_observationsfind_specieslist_subregionssearch_plantsget_planttrefle_search_speciestrefle_get_specieslist_distributionsget_elevationget_elevationscoords_to_wordswords_to_coordsautosuggestwhat3words_list_languagesget_cellcells_in_areasearch_iocrecent_iocssearch_hashsearch_malwareget_sample_infosearch_tagsearch_familysearch_signaturerecent_samplesdiscogs_searchdiscogs_get_releaseget_masterdiscogs_get_artistget_labelsearch_songsget_songgenius_get_artistlist_artist_songsget_annotationspotify_searchget_trackspotify_get_artistget_albumget_artist_top_tracksget_audio_featuresget_recommendationstrakt_searchget_movietrakt_get_showlist_seasonstrakt_get_episodetrakt_trendingpopularzillow_home_valueszillow_rent_priceszillow_market_snapshotzillow_top_marketsebay_searchebay_get_itemebay_get_categoriespolymarket_searchpolymarket_top_marketspolymarket_marketpolymarket_eventpolymarket_price_historyimdb_searchimdb_get_titleimdb_top_ratedimdb_episodesalways_seven_generateanimequotes_random_quotesearch_by_animesearch_by_characterapology_generaterandom_activityactivity_by_typeactivity_by_participantsbuzzword_density_analyzechaos_index_calculateconspiracy_theory_generatecorporate_apology_generatecould_have_been_email_analyzeemoji_oracle_consultexcuse_generateiss_number_generatejargon_translator_translatelinkedin_humblebrag_generatemagic_8_ball_askmercury_number_generateopenaq_get_latestget_locationsget_measurementspassive_aggression_detectperformance_review_generatephoenix_number_generatepress_release_generatequotable_random_quotequotable_search_quotesget_authorsquotable_list_tagsschrodingers_boolean_evaluatescream_void_screamsend_that_email_analyzeshakespeare_insult_generateship_on_friday_checkstartup_oracle_evaluatetake_the_meeting_evaluatetarot_draw_pulltemperature_random_generatethe_committee_conveneget_time_by_timezonelist_timezonesget_time_by_ipconvert_timetinder_bio_generatevictorian_complaint_generateyc_rejection_generateyesterdays_number_get

  Fix: Review and remediate the identified issue.

• InfoAS-002

  ⚠️Excessive Permissions ×831

  declared capabilities: filesystem access

  get_profileget_followersget_followsget_userchess_get_playerlist_fruitsgenerate_usersgenerate_by_gendersf_create_recordsf_update_recordsf_delete_recordsheets_writeslack_list_usersdocs_creategh_get_filegmail_list_labelsdrive_list_filesdrive_get_filedrive_create_fileasana_create_taskclickup_list_foldersmonday_create_itemqb_get_customerairtable_create_recorddropbox_list_folderdropbox_create_folderzoho_create_recordgreenhouse_list_candidatesgreenhouse_get_candidatebamboohr_list_employeesbamboohr_get_directorybamboohr_get_employee_filesklaviyo_list_profilesklaviyo_get_profilechargebee_get_customerashby_list_candidatesashby_get_candidateedgar_company_conceptfdic_get_institutionfintech_company_deep_divefintech_bank_health_checkct_recent_updatespharma_safety_reportget_drivernhl_get_playernba_get_playerget_accountpkg_go_dev_list_versionspkg_go_dev_latest_versionget_module_infoget_go_modmlb_stats_get_teammlb_stats_get_playerthesportsdb_get_teamthesportsdb_get_playercoinpaprika_get_coinairportsairlineslist_model_fileslist_dataset_filesremotive_get_companyrecent_updatesget_deputyget_politicianlatest_token_profileslist_astronautsroutetableosrm_matchtriplist_npm_fileslist_schemasfind_schema_forlichess_usercodeforces_usercodestats_useropentargets_targetdiseasedrugassociationsdataset_filescontenttaxonssubjectstable_metafile_revisionsons_uk_latest_observationsrecord_filesarticle_filesgoproxy_modulegoproxy_versionsversion_infogo_modmojang_profilecodewars_useruser_profileroblox_uservimeo_useruser_videoschannel_videosplayer_summaryplayer_summariesbungie_profilelinked_profilesdevdocs_io_entrysetlist_fm_usermapbox_directionsdirections_matrixisochronemap_matchingtwelvedata_profileclash_royale_playerclash_royale_clanbrawl_stars_playerclubopenrouteservice_directionsmatrixisochronesget_personssemantic_scholar_get_authorget_filingslookup_fileget_sample_infodiscogs_get_artistget_labelzillow_top_marketsjargon_translator_translatetinder_bio_generate

  declared capabilities: network access

  bluesky_get_postsget_feedget_threadscience_get_apodbooks_search_booksnutrition_search_productssearch_mealssearch_cocktailssearch_breweriesart_search_artworksart_get_artworksearch_poemssearch_universitiesrick_and_morty_search_charactersget_characterrick_and_morty_search_episodesget_gemsearch_gemsrubygems_get_versionssec_search_companiesgeolocate_ipnpm_search_packagesget_downloadssearch_laureatesstackexchange_search_questionssearch_countriessearch_wikipediasearch_repossearch_hnget_top_storiesget_itemsearch_moviessearch_tv_showssports_search_teamssports_search_playerssearch_airportsjokes_search_jokesget_crewsearch_wantedsearch_drug_eventssearch_food_recallssearch_dealsgamedeals_search_gamessearch_artistssearch_releasesradio_search_stationsget_top_stationslist_networksget_networksearch_networksecondata_get_seriesget_patentsearch_inventorssearch_launcheslist_gamesswapi_search_peoplejikan_search_animejikan_search_characterscrossref_search_worksopenalex_search_worksopenalex_search_authorssearch_institutionssearch_pubmedgbif_search_speciessearch_sitesarchive_searchwayback_checksearch_cvesspacenews_get_articlesspacenews_search_articlesget_blogsartic_search_artworkssearch_iconschess_get_gamessearch_adviceget_memesget_tlesearch_satellitesread_qrairquality_get_forecastsearch_addresslist_spellsdogceo_random_imagedogceo_list_breedsbreed_imagesrandom_breed_imagechucknorris_search_jokeschucknorris_list_categoriesdadjokes_search_jokesgutendex_search_booksgutendex_get_bookpopular_booksgenerate_avatarmicrolink_get_metadatatake_screenshotpicture_of_daynumbersapi_random_factdogsapi_list_breedsget_status_catlist_codesipinfo_lookup_ipsearch_cardssf_get_recordsf_searchhs_get_dealjira_searchic_search_contactsgh_list_reposgh_list_orgsgmail_get_messagegcal_search_eventsgads_searchlinear_list_issueslinear_get_issuelinear_searchasana_search_tasksclickup_list_tasksclickup_get_taskmonday_search_itemsgitlab_list_projectsgitlab_list_issuesgitlab_list_mrstwilio_make_callqb_querywoo_list_productswoo_get_productwoo_list_orderswoo_get_orderwoo_list_customersairtable_list_recordszoho_search_recordsfred_get_seriesfred_searchfred_series_infobls_get_seriesbls_searchyt_searchyt_channel_detailsattom_property_searchattom_school_searchapi_football_standingsteam_searchleague_searchapi_football_predictionsgong_search_callsedgar_search_filingscfpb_search_complaintsfdic_search_institutionsdefi_stablecoinsct_searchrxnorm_searchsam_search_opportunitiessam_entity_searchusa_award_searchsbir_search_awardssbir_search_solicitationsnass_queryecho_facility_searchecho_search_by_violationlist_packsget_connection_configsearch_packssearch_gifstrending_gifsrandom_gifboardgames_search_gamesanilist_search_animepypi_search_packagespypi_get_releasesearch_cratesget_cratecrates_get_versionsdockerhub_search_imagesgitlab_public_search_projectssearch_issuesdevto_get_articlesdevto_search_articlesdevto_get_articlepaperswithcode_search_papersget_repositoriesnba_search_playerscongress_search_billsget_subredditreddit_search_postsget_hottestget_newestget_storyget_tagjsonplaceholder_get_postsjsonplaceholder_get_postget_usersget_commentsurlhaus_get_recentrandom_catcat_by_tagquotes_random_quotequotes_search_quotesget_company_newseurostat_get_datasetecb_get_dataopenaire_search_publicationsopenaire_search_datasetssearch_softwareopenaire_search_projectsget_research_productopenaire_get_projectget_noticeentreprises_fr_searchget_enterprisenetwork_infodoaj_search_articlessearch_journalsdoaj_get_articledoaj_get_journaldblp_search_publicationsdblp_search_authorssearch_venuespackagist_searchpackagist_get_packagepackage_statsmaven_central_searchsearch_by_coordsnuget_searchdbnomics_searchdbnomics_get_seriesestat_japan_get_metadataestat_japan_get_datadata_gov_sg_search_datasetsquery_datasettmyopen_meteo_forecasthistoricalair_qualitymarineodds_api_list_sportsodds_api_get_scoresodds_api_get_eventsthesportsdb_search_teamsthesportsdb_search_playersget_chainfind_rpccoinpaprika_searchsearch_agenciessearch_routessearch_stopssearch_notesget_incidentusajobs_searchget_jobadzuna_searchremotive_searchsearch_drugssearch_foodsnpi_registry_searchget_providerbookbrainz_searchbookbrainz_lookupgoogle_books_searchuk_parliament_search_membersuk_parliament_search_billssearch_hansardsearch_drucksachensearch_plenarprotokollesearch_personssearch_interventionsnosdeputes_fr_search_questionssearch_debatessearch_pairsblockscout_searchhashratenasa_eonet_get_eventphoton_searchwiktionary_searchwikiquote_searchdbpedia_resourcedbpedia_abstractitunes_search_searchitunes_search_lookupitunes_search_top_podcastssearch_podcastsfyyd_search_episodesget_podcast_by_urlbundlephobia_historyrecent_searchesfeaturecaniuse_searchmdn_search_searchmdn_search_summaryfetch_schemaget_templatespdx_license_searcheol_searchget_pagedeezer_searchclevelandart_searchopenverse_search_imagessearch_audiofrinkiac_searchuniprot_searchproteomes_searchtaxonomy_searchuniprotrcsb_pdb_searchchembl_searchreactome_searchror_searchror_getinspire_hep_searchauthors_searchinstitutions_searchconferences_searchhal_fr_searchebi_ols_searchopentargets_searchdatagov_au_searchdatagouv_fr_search_datasetssearch_organizationsreuses_searchdocuments_searchwgs_searchprojects_searchtatoeba_searchkitsu_search_animesearch_mangacatalogueoflife_searchgnomad_searchstring_db_networkefetchmonarch_initiative_searchplos_searchsearch_authored_bydata_europa_searchanapioficeandfire_bookanapioficeandfire_charactersanapioficeandfire_characterquery_manyvizier_cone_searchsimbad_objectsimbad_cone_searchopenfigi_searchopendata_canada_searchgov_uk_content_searchsearch_autocompletecommons_wikimedia_searchseriesmitre_attck_searchtldr_pages_searchrfc_editor_searchbioregistry_searchbioregistry_resolveopenfoodfacts_searchlemmy_searchhourly_datamast_nasa_cone_searchmission_searchpypi_stats_recentoverallzenodo_searchlicensesdeno_land_searchrdap_entitynameserverhpo_api_searchhpo_api_term_childrenpatents_searchscholarly_searchtrack_searchpoint_elevationdemgiantbomb_searchurlscan_io_searchsubmitfoodish_randomitem_searchcomicvine_searchtenor_searchsearch_suggestionsresolve_vanity_urlsearch_destiny_playersearch_destiny_players_by_global_namewordnik_searchhisto_hourtitle_searchnetworksgemini_crypto_networkhttpbin_statusimagesearch_docssearch_indexfeeddummyjson_product_searchartist_searchvenue_searchsetlist_searchsearch_moviesearch_tvsearch_personsearch_multinewsapi_top_headlinesnewsapi_sourcesthe_guardian_searchrecipe_searchingredient_searchspoonacular_product_searchstatic_image_urlclan_searchtournament_searchlisten_notes_searchgeocode_searchsearch_earthquakesposthog_get_eventssendgrid_get_statsget_transactionsgnews_search_newssearch_opinionscourt_listener_search_docketsget_opinionopen_corporates_search_companiesopen_corporates_get_companysearch_officerssearch_candidatessearch_committeessemantic_scholar_search_paperssearch_nonprofitssearch_schoolsopen_food_facts_search_productsgeonames_search_placespropublica_congress_search_billsdatagov_search_datasetsdatagov_get_datasetsearch_urlcheck_availabilitysearch_filingscdc_search_datasetscore_research_search_paperscore_research_get_papermetals_api_get_latestmetals_api_get_historicalmediastack_search_newslatest_newshealthdata_search_datasetshealthdata_get_datasetwikidata_search_entitiesarxiv_search_papersarxiv_get_papersearch_observationssearch_taxalist_popular_indicatorsfetch_indicatorget_indicator_metadataoecd_list_curated_flowsoecd_fetch_datasetget_leiget_lei_relationshipsnih_reporter_get_projectnih_reporter_search_publicationssearch_awardsget_awardsearch_opportunitiesget_opportunitysearch_eventscompanies_house_search_companiespermid_search_entitiespermid_get_entityvirustotal_lookup_urlvirustotal_lookup_ipget_breachsearch_pulsesget_pulseweb_searchnews_searchfull_queryget_oaopen_library_search_booksget_book_by_isbnopen_library_get_workopen_library_get_authorsearch_showstvmaze_get_showtvmaze_search_peopleget_hourly_forecastget_daily_historyget_doisearch_by_nameget_parkwaqi_search_stationsintrospect_schematop_locationsget_collectionsearch_titlesget_by_titleget_by_imdb_idopenstates_search_billsopenstates_get_billsearch_legislatorsget_legislatorgovtrack_get_billgovtrack_search_membersgovtrack_get_membersearch_votesget_vote_detailget_agencygovinfo_get_packageget_cube_metadataget_versionget_observationsbis_list_curated_flowsbis_search_dataflowsbis_fetch_datasetsearch_plantstrefle_search_speciesget_cellsearch_iocsearch_malwaresearch_tagsearch_familysearch_signaturediscogs_searchsearch_songsget_songspotify_searchget_trackget_recommendationstrakt_searchebay_searchpolymarket_searchpolymarket_price_historyimdb_searchsearch_by_animesearch_by_characterquotable_search_quotestemperature_random_generate

  declared capabilities: network access, database access

  bluesky_search_postsswisstransport_search_stationssf_queryhs_search_contactsnotion_searchnotion_query_databasezd_search_ticketsgmail_searchconfluence_searchfreshdesk_search_ticketssearch_developmentssearch_mcp_directoryurlhaus_lookup_urllookup_hostsearch_symbolsearch_coinseurostat_search_datasetssearch_noticesepo_ops_search_patentssearch_statssearch_incidentsmedlineplus_searchwikidata_sparql_queryconceptnet_queryeuropepmc_searchorcid_searchesearchegqueryquery_batchdeps_dev_querymygene_info_queryquery_catalogdata_ny_querydata_cityofchicago_querytilequeryimf_get_datasearch_indicatorssearch_documentsopen_sanctions_search_entitiescheck_urlsearch_leisearch_grantsgdelt_search_articlesoverpass_querysearch_doisfoursquare_search_placeslist_parkssearch_factorsquery_subgraphgovtrack_search_billsregulations_gov_search_docketsgovinfo_search_packages

  declared capabilities: database access

  dns_lookup_allget_questionslist_exerciseslist_muscleslist_equipmentlist_allsf_describesf_list_objectsnotion_get_databasegcal_list_calendarsga_run_reportairtable_list_basesairtable_get_base_schemacensus_available_datasetsregional_dataaviationstack_citieslist_venuessalary_histogramwordsentities_atsuggesthal_fr_authoreinfoelinkvulnerabilitiesvizier_objectsimbad_tapexoplanet_archive_tapcaomitem_databasedbdiscover_movieget_datasetsmixpanel_get_eventsabuseipdb_check_iptimeline_tonetimeline_volumelist_repositoriesnearby_placeslist_documents

  declared capabilities: HTTP requests

  get_treasury_ratesnominatim_reverse_geocodeuselessfacts_random_factlist_factsgenerate_with_optionsconfluence_get_pagetwilio_send_smsfdic_financialsfdic_summaryphoton_reversekepler_candidatesregistrable_domainhttpbin_gethttpbin_postcheck_passwordpois_nearplaces_in_bboxlist_elevatedget_aqi_by_locationcurrent_by_zipcurrent_by_locationrecent_notableebay_get_item

  declared capabilities: network access, filesystem access

  search_drug_labelscreate_qrsheets_createhs_get_contacths_get_companydrive_get_contentgitlab_get_filedropbox_searchdropbox_get_metadatadropbox_downloadpipedrive_searchamp_user_searchaltos_list_filesmastodon_searchsearch_modelshuggingface_search_datasetssearch_spacesget_modelgh_repo_statspredictiondatagov_au_resourceresourcesdataverse_harvard_searchfile_infovideos_searchcompanies_house_get_companylookup_indicatorsearch_commentsget_csv_download_urlsearch_hash

  declared capabilities: network access, filesystem access, database access

  patents_search_patentsdrive_searchlookup_payload

  declared capabilities: network access, HTTP requests

  maps_place_searchoecd_search_dataflowsunpaywall_search_papers

  declared capabilities: filesystem access, HTTP requests

  gmail_sendnearestsnap

  declared capabilities: code/command execution, filesystem access

  gcal_create_event

  declared capabilities: code/command execution, network access, filesystem access

  linear_create_issueclickup_create_task

  declared capabilities: network access, filesystem access, HTTP requests

  confluence_create_page

  declared capabilities: code/command execution

  chargebee_get_subscriptiontaftranscriptephemerisobserversvectorspageget_account_detailcould_have_been_email_analyze

  declared capabilities: code/command execution, network access

  search_activitiessimbad_script

  declared capabilities: code/command execution, database access

  sparql

  declared capabilities: network access, filesystem access, database access, HTTP requests

  query_table

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-010

  🔑Insecure Secret Handling ×237

  input parameter "_apiKey" accepts a credential (informational; not evidence of insecure handling)

  patents_search_patentsget_patentsearch_inventorsmaps_geocodemaps_reverse_geocodemaps_place_searchmaps_place_detailsmaps_directionsmaps_distance_matrixmaps_elevationstripe_list_customersstripe_get_customerstripe_list_chargesstripe_list_subscriptionsstripe_get_balancestripe_list_invoicesclickup_list_tasksclickup_get_taskclickup_create_taskclickup_list_spacesclickup_list_foldersmonday_list_boardsmonday_get_boardmonday_list_itemsmonday_create_itemmonday_search_itemsgitlab_list_projectsgitlab_get_projectgitlab_list_issuesgitlab_list_mrsgitlab_get_filefreshdesk_list_ticketsfreshdesk_get_ticketfreshdesk_search_ticketsfreshdesk_list_contactsfreshdesk_get_contactmailchimp_list_audiencesmailchimp_get_audiencemailchimp_list_campaignsmailchimp_get_campaignmailchimp_list_membersshopify_list_productsshopify_get_productshopify_list_ordersshopify_get_ordershopify_list_customerswoo_list_productswoo_get_productwoo_list_orderswoo_get_orderwoo_list_customersairtable_list_recordsairtable_get_recordairtable_create_recordairtable_list_basesairtable_get_base_schemapipedrive_list_dealspipedrive_get_dealpipedrive_list_personspipedrive_get_personpipedrive_searchgreenhouse_list_candidatesgreenhouse_get_candidategreenhouse_list_jobsgreenhouse_get_jobgreenhouse_list_applicationsbamboohr_list_employeesbamboohr_get_employeebamboohr_get_directorybamboohr_list_timeoffbamboohr_get_employee_filesamp_get_eventsamp_get_active_usersamp_get_retentionamp_user_searchamp_get_user_activityfred_get_seriesfred_searchfred_series_infofred_categoryfred_releasesbls_get_seriesbls_latestcensus_acscensus_building_permitscensus_housing_startscensus_homeownershipcensus_available_datasetshud_fair_market_rentshud_income_limitshud_crosswalkhud_chashud_list_statesyt_searchyt_video_detailsyt_channel_detailsyt_channel_videosyt_video_commentsattom_property_detailattom_property_searchattom_sales_historyattom_avmattom_assessmentattom_sales_trendattom_rental_avmattom_school_searchfixturesapi_football_standingsteam_searchleague_searchapi_football_predictionsh2hklaviyo_list_profilesklaviyo_get_profileklaviyo_list_listsklaviyo_list_campaignsklaviyo_get_campaignchargebee_list_subscriptionschargebee_get_subscriptionchargebee_list_customerschargebee_get_customerchargebee_list_invoicesashby_list_candidatesashby_get_candidateashby_list_jobsashby_get_jobashby_list_applicationsav_quoteav_dailyav_overviewav_income_statementav_balance_sheetav_earningssam_search_opportunitiessam_get_opportunitysam_entity_searchsam_set_aside_opportunitiesgovcon_contractor_profilegovcon_opportunity_scannass_querynass_crop_productionnass_pricesnass_livestocknass_crop_progresseia_serieseia_petroleumeia_natural_gaseia_electricityeia_ethanolnba_search_playersnba_get_playerget_teamsnba_get_gamesget_quoteget_company_newsget_earnings_calendarsearch_symbolnasa_get_apodget_asteroidsget_mars_photosposthog_get_eventsget_personsget_insightssendgrid_get_statsget_blocksget_bouncesmixpanel_get_eventsget_funnelsget_retentionget_accountsget_transactionsplaid_get_balancegnews_search_newsgnews_top_headlinessearch_candidatescandidate_financialssearch_committeessearch_schoolsget_schoolgeonames_search_placesget_nearbygeonames_get_timezonepropublica_congress_get_memberspropublica_congress_get_memberpropublica_congress_search_billspropublica_congress_get_votesestimate_electricityestimate_flightestimate_vehicleabuseipdb_check_ipreport_ipget_blacklistcore_research_search_paperscore_research_get_papercountry_state_city_list_countriescountry_state_city_get_statesget_citiesmetals_api_get_latestmetals_api_get_historicalmediastack_search_newslatest_newsget_rent_estimateget_property

  input parameter "_authToken" accepts a credential (informational; not evidence of insecure handling)

  twilio_send_smstwilio_list_messagestwilio_get_messagetwilio_list_callstwilio_make_call

  input parameter "_clientSecret" accepts a credential (informational; not evidence of insecure handling)

  paypal_list_transactionspaypal_get_orderpaypal_list_invoicespaypal_get_invoicepaypal_list_disputes

  input parameter "_apiSecret" accepts a credential (informational; not evidence of insecure handling)

  woo_list_productswoo_get_productwoo_list_orderswoo_get_orderwoo_list_customers

  input parameter "_secretKey" accepts a credential (informational; not evidence of insecure handling)

  amp_get_eventsamp_get_active_usersamp_get_retentionamp_user_searchamp_get_user_activity

  input parameter "api_key" accepts a credential (informational; not evidence of insecure handling)

  get_trademark_by_serialget_trademark_by_registrationget_trademark_documentsfeed

  input parameter "token_address" accepts a credential (informational; not evidence of insecure handling)

  dexscreener_get_tokenget_token_meta

  input parameter "token" accepts a credential (informational; not evidence of insecure handling)

  token_boosts_topget_address_token_transfersgemini_crypto_network

  input parameter "access_token" accepts a credential (informational; not evidence of insecure handling)

  get_accountsget_transactionsplaid_get_balance

  input parameter "password" accepts a credential (informational; not evidence of insecure handling)

  check_password

  input parameter "token_id" accepts a credential (informational; not evidence of insecure handling)

  get_nft

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.

• InfoAS-006

  💻Arbitrary Code Execution ×5

  tool name or description implies arbitrary script/code execution — capability unconfirmed (no exec permission or code/script/eval input property found)

  evaluatecloud_evalschrodingers_boolean_evaluatestartup_oracle_evaluatetake_the_meeting_evaluate

  Fix: This tool can execute arbitrary code or shell commands on the host system. Remove it unless strictly required. If kept: (1) restrict access to trusted users/agents only, (2) require human approval before each invocation (Claude Desktop: set approval_required: true; other clients: enable equivalent confirmation), (3) use the most restrictive sandbox or read-only mode available, and (4) never expose this tool to untrusted input sources.