quickbooks-online-mcp-server

Security Findings (700)

• HighAS-012

  🔄Tool Drift

  Tool set changed silently at v0.0.1: 292 tool(s) added, 18 tool(s) removed without a version bump.

  + 292 added

  accounts_addresses_createaccounts_addresses_deleteaccounts_addresses_searchaccounts_addresses_updateaccounts_contacts_createaccounts_contacts_deleteaccounts_contacts_updateaccounts_createaccounts_deleteaccounts_detailsaccounts_searchaccounts_updateadmin_currentadmin_feedbackadmin_listadmin_switchcashflow_banks_listcashflow_conditions_createcashflow_conditions_searchcashflow_mandates_createcashflow_mandates_deletecashflow_mandates_searchcashflow_mandates_updatecashflow_payments_getcashflow_payments_processcashflow_payments_searchcashflow_payments_updatecashflow_receivables_getcashflow_receivables_searchcashflow_receivables_updatecontroller_signals_searchcrm_bankaccounts_createcrm_bankaccounts_deletecrm_bankaccounts_searchcrm_bankaccounts_updatecrm_opportunities_createcrm_opportunities_deletecrm_opportunities_getcrm_opportunities_searchcrm_opportunities_updatecrm_quotations_add_charge_linecrm_quotations_add_linecrm_quotations_createcrm_quotations_deletecrm_quotations_delete_charge_linecrm_quotations_delete_linecrm_quotations_getcrm_quotations_printcrm_quotations_searchcrm_quotations_statuscrm_quotations_updatecrm_quotations_update_charge_linecrm_quotations_update_linedocuments_categories_listdocuments_folders_listdocuments_getdocuments_request_upload_urldocuments_searchdocuments_types_listdocuments_uploadfinancial_aging_payablesfinancial_aging_receivablesfinancial_balance_getfinancial_bank_add_linefinancial_bank_createfinancial_bank_deletefinancial_bank_getfinancial_bank_searchfinancial_budgets_searchfinancial_cash_add_linefinancial_cash_createfinancial_cash_getfinancial_cash_searchfinancial_currencies_listfinancial_exchangerates_listfinancial_generaljournal_add_linefinancial_generaljournal_createfinancial_generaljournal_getfinancial_generaljournal_searchfinancial_glaccounts_createfinancial_glaccounts_deletefinancial_glaccounts_searchfinancial_glaccounts_updatefinancial_glclassifications_listfinancial_journals_listfinancial_journalstatus_listfinancial_outstanding_getfinancial_payables_listfinancial_periods_listfinancial_profitloss_getfinancial_purchase_add_linefinancial_purchase_createfinancial_purchase_getfinancial_purchase_searchfinancial_reporting_balance_searchfinancial_revenue_listfinancial_sales_add_linefinancial_sales_createfinancial_sales_getfinancial_sales_searchfinancial_transactions_searchfinancial_vatcodes_listfinancial_vatpercentages_listhrm_costcenters_createhrm_costcenters_deletehrm_costcenters_searchhrm_costcenters_updatehrm_costunits_createhrm_costunits_deletehrm_costunits_searchhrm_costunits_updatehrm_departments_listinventory_batch_createinventory_batch_deleteinventory_batch_updateinventory_serial_createinventory_serial_deleteinventory_serial_updateitems_batch_historyitems_createitems_deleteitems_detailsitems_groups_listitems_searchitems_serial_historyitems_stockitems_suppliersitems_suppliers_createitems_suppliers_deleteitems_suppliers_updateitems_time_createitems_units_listitems_updateitems_warehouses_createitems_warehouses_deleteitems_warehouses_updatelogistics_deliveries_createlogistics_deliveries_getlogistics_deliveries_searchlogistics_deliveries_updatelogistics_incoterms_listlogistics_receipts_createlogistics_receipts_getlogistics_receipts_searchlogistics_receipts_updatelogistics_returns_processmanufacturing_areas_createmanufacturing_areas_deletemanufacturing_areas_listmanufacturing_areas_updatemanufacturing_assembly_finishmanufacturing_assembly_searchmanufacturing_bom_material_addmanufacturing_bom_material_deletemanufacturing_bom_material_updatemanufacturing_bom_version_createmanufacturing_bom_version_deletemanufacturing_bom_version_updatemanufacturing_bom_versionsmanufacturing_byproducts_searchmanufacturing_materialplan_addmanufacturing_materialplan_deletemanufacturing_materialplan_updatemanufacturing_materials_bommanufacturing_materials_by_productmanufacturing_materials_issuemanufacturing_materials_issues_searchmanufacturing_materials_reversalmanufacturing_materials_reversals_searchmanufacturing_operations_createmanufacturing_operations_deletemanufacturing_operations_listmanufacturing_operations_resource_createmanufacturing_operations_resource_deletemanufacturing_operations_resource_updatemanufacturing_operations_resources_searchmanufacturing_operations_updatemanufacturing_orders_createmanufacturing_orders_deletemanufacturing_orders_getmanufacturing_orders_receiptmanufacturing_orders_receipts_searchmanufacturing_orders_reversalmanufacturing_orders_reversals_searchmanufacturing_orders_routingmanufacturing_orders_searchmanufacturing_orders_updatemanufacturing_planning_overviewmanufacturing_routing_addmanufacturing_routing_deletemanufacturing_routing_updatemanufacturing_workcenters_capacitymanufacturing_workcenters_createmanufacturing_workcenters_deletemanufacturing_workcenters_listmanufacturing_workcenters_updateprojects_createprojects_deleteprojects_getprojects_planning_createprojects_planning_deleteprojects_planning_updateprojects_searchprojects_timecost_deleteprojects_timecost_searchprojects_timecost_summaryprojects_timecost_updateprojects_updatepurchases_invoices_createpurchases_invoices_deletepurchases_invoices_updatepurchases_receipts_add_linepurchasing_invoices_getpurchasing_invoices_searchpurchasing_orders_add_linepurchasing_orders_createpurchasing_orders_deletepurchasing_orders_delete_linepurchasing_orders_getpurchasing_orders_searchpurchasing_orders_updatepurchasing_orders_update_linepurchasing_returns_add_linepurchasing_returns_createpurchasing_returns_getpurchasing_returns_searchsales_deliveries_add_linesales_deliveries_update_linesales_invoices_add_linesales_invoices_createsales_invoices_deletesales_invoices_delete_linesales_invoices_from_orderssales_invoices_getsales_invoices_printsales_invoices_searchsales_invoices_updatesales_invoices_update_linesales_order_lines_searchsales_orders_add_linesales_orders_completesales_orders_createsales_orders_deletesales_orders_delete_linesales_orders_getsales_orders_printsales_orders_searchsales_orders_updatesales_orders_update_linesales_pricelists_listsales_prices_createsales_prices_deletesales_prices_searchsales_prices_updatesales_returns_add_linesales_returns_createsales_returns_deletesales_returns_delete_linesales_returns_getsales_returns_searchsales_returns_update_linestock_batch_searchstock_location_searchstock_serial_searchsubscriptions_add_linesubscriptions_createsubscriptions_deletesubscriptions_delete_linesubscriptions_getsubscriptions_linetypes_listsubscriptions_reasoncodes_listsubscriptions_searchsubscriptions_types_listsubscriptions_updatesubscriptions_update_linewarehouse_createwarehouse_currentwarehouse_deletewarehouse_listwarehouse_locations_listwarehouse_locations_stockwarehouse_shipping_listwarehouse_switchwarehouse_transfers_createwarehouse_transfers_deletewarehouse_transfers_delete_linewarehouse_transfers_getwarehouse_transfers_processwarehouse_transfers_searchwarehouse_transfers_updatewarehouse_transfers_update_linewarehouse_update

  − 18 removed

  QUICKBOOKS_CREATE_ACCOUNTQUICKBOOKS_CREATE_CUSTOMERQUICKBOOKS_CREATE_EMPLOYEEQUICKBOOKS_CREATE_INVOICEQUICKBOOKS_CREATE_VENDORQUICKBOOKS_CUSTOMER_BALANCE_DETAILQUICKBOOKS_CUSTOMER_BALANCE_REPORTQUICKBOOKS_LIST_INVOICESQUICKBOOKS_QUERY_ACCOUNTQUICKBOOKS_READ_ACCOUNTQUICKBOOKS_READ_CUSTOMERQUICKBOOKS_READ_EMPLOYEEQUICKBOOKS_READ_INVOICEQUICKBOOKS_READ_VENDORQUICKBOOKS_UPDATE_FULL_INVOICEQUICKBOOKS_UPDATE_SPARSE_INVOICEQUICKBOOKS_VENDOR_BALANCE_DETAILQUICKBOOKS_VENDOR_BALANCE_REPORT

  Fix: The set of tools exposed by this server changed between scans of the same version — a sign the package was silently updated without a version bump. Audit the changelog and all tool definitions before trusting this server. Pin to a specific commit hash rather than a floating version tag.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×137

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  purchasing_orders_updateprojects_searchmanufacturing_bom_material_addpurchases_invoices_updatesales_orders_searchmanufacturing_materialplan_updateitems_searchmanufacturing_orders_reversals_searchsales_invoices_searchaccounts_createwarehouse_transfers_createaccounts_addresses_searchitems_updatewarehouse_transfers_updatewarehouse_transfers_searchpurchasing_returns_searchsales_orders_update_linedocuments_request_upload_urlfinancial_budgets_searchcashflow_conditions_searchcrm_bankaccounts_createpurchasing_returns_createmanufacturing_materials_issues_searchitems_createfinancial_sales_createmanufacturing_operations_resource_updatecrm_quotations_add_charge_linedocuments_searchprojects_timecost_searchmanufacturing_operations_resources_searchsales_order_lines_searchmanufacturing_operations_createsales_invoices_createcrm_quotations_updatemanufacturing_assembly_searchlogistics_deliveries_searchmanufacturing_operations_resource_createpurchasing_orders_add_linemanufacturing_bom_material_updatehrm_costunits_searchpurchasing_orders_searchfinancial_purchase_add_linecashflow_payments_updatecashflow_mandates_searchsales_returns_searchsubscriptions_update_linesales_invoices_update_linefinancial_generaljournal_add_linecrm_quotations_add_linecrm_quotations_createcontroller_signals_searchfinancial_sales_searchfinancial_cash_add_linesales_deliveries_add_linelogistics_receipts_createsubscriptions_createcashflow_mandates_createhrm_costcenters_searchcashflow_mandates_updatefinancial_purchase_createcrm_bankaccounts_updatecrm_quotations_searchpurchasing_invoices_searchcrm_bankaccounts_searchsales_invoices_updatesales_invoices_add_linestock_batch_searchwarehouse_createaccounts_searchmanufacturing_operations_updateprojects_planning_updatefinancial_bank_add_linecashflow_conditions_createhrm_costcenters_updatecashflow_receivables_updatemanufacturing_routing_addfinancial_glaccounts_updatefinancial_bank_searchcrm_quotations_update_linefinancial_purchase_searchdocuments_gethrm_costunits_createpurchasing_orders_update_linefinancial_glaccounts_searchmanufacturing_bom_version_updatemanufacturing_workcenters_createaccounts_addresses_createprojects_updatemanufacturing_orders_searchhrm_costunits_updatestock_serial_searchpurchasing_orders_createstock_location_searchwarehouse_transfers_update_linemanufacturing_assembly_finishsales_returns_createdocuments_uploadmanufacturing_areas_createlogistics_receipts_searchmanufacturing_orders_updatepurchases_invoices_createcashflow_payments_searchhrm_costcenters_createcashflow_receivables_searchmanufacturing_orders_createmanufacturing_bom_version_createaccounts_updatemanufacturing_workcenters_updatesubscriptions_deletesubscriptions_add_linemanufacturing_workcenters_listmanufacturing_orders_receipts_searchmanufacturing_materialplan_addmanufacturing_materials_reversals_searchmanufacturing_byproducts_searchfinancial_reporting_balance_searchsales_orders_add_linesubscriptions_updatecrm_opportunities_searchsales_orders_createfinancial_sales_add_linecrm_quotations_update_charge_linefinancial_transactions_searchmanufacturing_orders_receiptfinancial_cash_searchsales_orders_updatepurchases_receipts_add_linemanufacturing_areas_updatelogistics_deliveries_createwarehouse_updatesales_prices_searchfinancial_generaljournal_searchprojects_createfinancial_glaccounts_createprojects_planning_createmanufacturing_routing_updatesubscriptions_search

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• LowAS-002

  ⚠️Excessive Permissions ×58

  input schema exposes 13 properties (threshold: 10)

  items_suppliers_createmanufacturing_orders_reversals_searchprojects_timecost_summarymanufacturing_materials_issues_searchcrm_quotations_add_linemanufacturing_orders_receipts_searchmanufacturing_materials_reversals_searchmanufacturing_byproducts_searchsales_orders_add_linecrm_opportunities_search

  input schema exposes 15 properties (threshold: 10)

  projects_searchsales_orders_searchpurchasing_orders_searchmanufacturing_workcenters_createaccounts_addresses_createmanufacturing_orders_searchdocuments_uploadmanufacturing_orders_update

  input schema exposes 12 properties (threshold: 10)

  sales_invoices_searchsales_orders_update_lineprojects_timecost_searchsales_order_lines_searchsales_invoices_createmanufacturing_operations_resource_createpurchasing_orders_add_linesales_invoices_add_linefinancial_bank_add_linecashflow_conditions_createsales_prices_createfinancial_glaccounts_updatemanufacturing_orders_createmanufacturing_bom_version_createprojects_createsubscriptions_search

  input schema exposes 19 properties (threshold: 10)

  accounts_create

  input schema exposes 25 properties (threshold: 10)

  items_updateitems_create

  input schema exposes 11 properties (threshold: 10)

  warehouse_transfers_searchmanufacturing_operations_resource_updatelogistics_deliveries_searchfinancial_generaljournal_add_linefinancial_cash_add_lineprojects_planning_updatepurchasing_orders_update_linemanufacturing_bom_version_updatelogistics_receipts_searchfinancial_glaccounts_createprojects_planning_create

  input schema exposes 14 properties (threshold: 10)

  crm_opportunities_createcrm_quotations_createfinancial_balance_getcrm_quotations_searchpurchasing_invoices_searchprojects_updatefinancial_transactions_search

  input schema exposes 18 properties (threshold: 10)

  accounts_update

  input schema exposes 16 properties (threshold: 10)

  manufacturing_workcenters_updatesales_orders_create

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×292

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  sales_orders_completepurchasing_orders_updatefinancial_periods_listfinancial_currencies_listitems_suppliers_createsales_returns_deletepurchasing_returns_add_lineprojects_searchprojects_timecost_deletemanufacturing_bom_material_addpurchases_invoices_updatesales_orders_searchsales_prices_updatecrm_opportunities_updatehrm_departments_listmanufacturing_materialplan_updatesubscriptions_delete_lineitems_searchmanufacturing_orders_reversals_searchfinancial_purchase_getfinancial_journals_listsales_invoices_searchaccounts_createwarehouse_transfers_createaccounts_addresses_searchitems_updatewarehouse_transfers_updatecashflow_mandates_deletewarehouse_transfers_searchmanufacturing_materials_by_productpurchasing_returns_searchwarehouse_transfers_processwarehouse_locations_listitems_suppliers_updatesales_orders_printprojects_timecost_updatemanufacturing_orders_getsales_orders_update_linesales_invoices_getdocuments_request_upload_urlfinancial_budgets_searchcashflow_conditions_searchitems_stockcrm_bankaccounts_createinventory_serial_updatepurchasing_returns_createprojects_timecost_summarymanufacturing_materials_issues_searchitems_createaccounts_contacts_createsales_pricelists_listmanufacturing_orders_routingmanufacturing_orders_reversalfinancial_sales_createmanufacturing_operations_resource_updatefinancial_vatcodes_listfinancial_glclassifications_listcrm_quotations_add_charge_linedocuments_searchwarehouse_transfers_delete_lineprojects_timecost_searchaccounts_contacts_deletecrm_opportunities_createitems_suppliersmanufacturing_areas_listmanufacturing_operations_resources_searchsales_order_lines_searchmanufacturing_operations_createpurchases_invoices_deletefinancial_bank_deletesales_invoices_createmanufacturing_routing_deletewarehouse_shipping_listitems_warehouses_createcrm_quotations_updatemanufacturing_assembly_searchfinancial_aging_payablescashflow_receivables_getsales_orders_deletemanufacturing_bom_material_deleteitems_warehouses_deletefinancial_outstanding_getlogistics_deliveries_searchmanufacturing_operations_resource_createpurchasing_orders_add_lineitems_suppliers_deletemanufacturing_bom_material_updatehrm_costunits_searchfinancial_generaljournal_createpurchasing_orders_searchlogistics_receipts_updatefinancial_purchase_add_linesales_returns_getcashflow_payments_updatecashflow_mandates_searchcashflow_banks_listsales_returns_searchcrm_quotations_delete_charge_linemanufacturing_operations_deletesubscriptions_update_linesales_invoices_update_linemanufacturing_planning_overviewfinancial_generaljournal_add_linepurchasing_orders_getcrm_quotations_add_linecrm_quotations_printsales_orders_getcrm_quotations_createcontroller_signals_searchfinancial_sales_searchfinancial_cash_add_linecrm_opportunities_getsales_deliveries_add_lineadmin_listsales_invoices_from_orderslogistics_receipts_createsubscriptions_createcashflow_mandates_createhrm_costcenters_searchmanufacturing_materials_issuecashflow_mandates_updatesubscriptions_reasoncodes_listfinancial_balance_getfinancial_purchase_createcrm_bankaccounts_updatecrm_quotations_searchitems_batch_historypurchasing_invoices_searchsubscriptions_types_listcrm_bankaccounts_searchmanufacturing_orders_deleteprojects_deletesales_invoices_updatemanufacturing_bom_version_deletesales_deliveries_update_linesales_invoices_add_linestock_batch_searchwarehouse_createaccounts_searchmanufacturing_operations_updateaccounts_addresses_deletefinancial_profitloss_getpurchasing_orders_deletefinancial_cash_getwarehouse_transfers_deleteprojects_planning_updateaccounts_deletefinancial_bank_add_linemanufacturing_materialplan_deletepurchasing_orders_delete_linecashflow_conditions_createsales_prices_createpurchasing_invoices_gethrm_costcenters_updatecashflow_receivables_updatelogistics_deliveries_getprojects_planning_deleteaccounts_contacts_updatemanufacturing_routing_addwarehouse_currentfinancial_glaccounts_updatecrm_quotations_deletefinancial_bank_searchcrm_quotations_update_lineaccounts_addresses_updatesales_orders_delete_linefinancial_purchase_searchcashflow_payments_getdocuments_getsales_invoices_deletehrm_costunits_createpurchasing_orders_update_lineitems_deleteitems_detailsfinancial_glaccounts_searchcrm_opportunities_deleteadmin_feedbacksales_returns_update_linemanufacturing_bom_version_updatemanufacturing_workcenters_createitems_serial_historyfinancial_aging_receivablesaccounts_addresses_createsales_invoices_printfinancial_exchangerates_listhrm_costcenters_deletecrm_quotations_delete_lineprojects_updatemanufacturing_orders_searchhrm_costunits_updatestock_serial_searchinventory_batch_updatefinancial_generaljournal_getpurchasing_orders_createwarehouse_transfers_getmanufacturing_materials_bomlogistics_returns_processstock_location_searchwarehouse_transfers_update_linemanufacturing_assembly_finishsales_returns_createmanufacturing_materials_reversalsales_returns_add_lineinventory_batch_createprojects_getsales_returns_delete_linedocuments_uploaditems_time_createaccounts_detailsmanufacturing_areas_createwarehouse_listinventory_serial_deletewarehouse_locations_stocklogistics_receipts_searchmanufacturing_workcenters_capacitymanufacturing_orders_updatepurchases_invoices_createcashflow_payments_searchhrm_costcenters_createcashflow_receivables_searchmanufacturing_operations_listinventory_batch_deletemanufacturing_orders_createmanufacturing_bom_version_createmanufacturing_areas_deleteaccounts_updatemanufacturing_workcenters_updatemanufacturing_operations_resource_deletesubscriptions_deletewarehouse_switchfinancial_payables_listfinancial_cash_createsubscriptions_add_linefinancial_journalstatus_listmanufacturing_workcenters_listcrm_bankaccounts_deletefinancial_revenue_listmanufacturing_orders_receipts_searchmanufacturing_materialplan_addmanufacturing_materials_reversals_searchpurchasing_returns_getmanufacturing_byproducts_searchfinancial_reporting_balance_searchsales_orders_add_linedocuments_folders_listsubscriptions_updatelogistics_incoterms_listfinancial_glaccounts_deletesales_prices_deleteitems_groups_listcrm_opportunities_searchsales_orders_createfinancial_sales_add_linecrm_quotations_update_charge_linefinancial_transactions_searchmanufacturing_orders_receiptfinancial_cash_searchsales_orders_updatesubscriptions_getpurchases_receipts_add_linesales_invoices_delete_linefinancial_sales_getmanufacturing_areas_updatedocuments_categories_listlogistics_receipts_getitems_units_listlogistics_deliveries_createwarehouse_updatecrm_quotations_gethrm_costunits_deletesales_prices_searchadmin_currentsubscriptions_linetypes_listfinancial_generaljournal_searchfinancial_vatpercentages_listmanufacturing_workcenters_deleteprojects_createwarehouse_deletefinancial_bank_createmanufacturing_bom_versionsitems_warehouses_updateadmin_switchfinancial_glaccounts_createfinancial_bank_getprojects_planning_createlogistics_deliveries_updatecashflow_payments_processdocuments_types_listcrm_quotations_statusmanufacturing_routing_updateinventory_serial_createsubscriptions_search

  Fix: Review and remediate the identified issue.

• InfoAS-002

  ⚠️Excessive Permissions ×212

  declared capabilities: code/command execution, filesystem access

  purchasing_orders_updatepurchases_invoices_updatemanufacturing_materialplan_updatewarehouse_transfers_createitems_updatewarehouse_transfers_updatesales_orders_update_linecrm_bankaccounts_createpurchasing_returns_createitems_createfinancial_sales_createmanufacturing_operations_createsales_invoices_createcrm_quotations_updatemanufacturing_bom_material_updatesubscriptions_update_linesales_invoices_update_linecrm_quotations_createlogistics_receipts_createsubscriptions_createcashflow_mandates_createcashflow_mandates_updatefinancial_purchase_createcrm_bankaccounts_updatesales_invoices_updatewarehouse_createmanufacturing_operations_updateprojects_planning_updatehrm_costcenters_updatefinancial_glaccounts_updatecrm_quotations_update_linehrm_costunits_createpurchasing_orders_update_linemanufacturing_bom_version_updatemanufacturing_workcenters_createprojects_updatehrm_costunits_updatepurchasing_orders_createwarehouse_transfers_update_linesales_returns_createmanufacturing_areas_createmanufacturing_orders_updatepurchases_invoices_createhrm_costcenters_createmanufacturing_orders_createmanufacturing_bom_version_createmanufacturing_workcenters_updatesubscriptions_deletesubscriptions_updatecrm_quotations_update_charge_linemanufacturing_areas_updatewarehouse_updateprojects_createfinancial_glaccounts_createprojects_planning_createmanufacturing_routing_update

  declared capabilities: filesystem access

  items_suppliers_createsales_returns_deleteprojects_timecost_deletesales_prices_updatecrm_opportunities_updatesubscriptions_delete_linecashflow_mandates_deleteitems_suppliers_updateprojects_timecost_updateinventory_serial_updateprojects_timecost_summaryaccounts_contacts_createwarehouse_transfers_delete_lineaccounts_contacts_deletecrm_opportunities_createpurchases_invoices_deletefinancial_bank_deletemanufacturing_routing_deleteitems_warehouses_createsales_orders_deletemanufacturing_bom_material_deleteitems_warehouses_deleteitems_suppliers_deletefinancial_generaljournal_createlogistics_receipts_updatecrm_quotations_delete_charge_linemanufacturing_operations_deletefinancial_balance_getmanufacturing_orders_deleteprojects_deletemanufacturing_bom_version_deletesales_deliveries_update_lineaccounts_addresses_deletepurchasing_orders_deletewarehouse_transfers_deleteaccounts_deletemanufacturing_materialplan_deletepurchasing_orders_delete_linesales_prices_createprojects_planning_deleteaccounts_contacts_updatecrm_quotations_deleteaccounts_addresses_updatesales_orders_delete_linesales_invoices_deleteitems_deletecrm_opportunities_deletesales_returns_update_linehrm_costcenters_deletecrm_quotations_delete_lineinventory_batch_updateinventory_batch_createsales_returns_delete_lineitems_time_createinventory_serial_deleteinventory_batch_deletemanufacturing_areas_deletemanufacturing_operations_resource_deletefinancial_cash_createcrm_bankaccounts_deletedocuments_folders_listfinancial_glaccounts_deletesales_prices_deletesales_invoices_delete_linehrm_costunits_deletemanufacturing_workcenters_deletewarehouse_deletefinancial_bank_createitems_warehouses_updatelogistics_deliveries_updateinventory_serial_create

  declared capabilities: network access, filesystem access, database access

  projects_searchmanufacturing_orders_reversals_searchsales_invoices_searchwarehouse_transfers_searchmanufacturing_materials_issues_searchmanufacturing_operations_resources_searchmanufacturing_assembly_searchlogistics_deliveries_searchpurchasing_orders_searchsales_returns_searchfinancial_sales_searchcrm_quotations_searchpurchasing_invoices_searchcrm_bankaccounts_searchfinancial_bank_searchfinancial_purchase_searchfinancial_glaccounts_searchmanufacturing_orders_searchlogistics_receipts_searchmanufacturing_orders_receipts_searchmanufacturing_materials_reversals_searchmanufacturing_byproducts_searchcrm_opportunities_searchfinancial_transactions_searchfinancial_cash_searchsales_prices_searchfinancial_generaljournal_searchsubscriptions_search

  declared capabilities: code/command execution

  manufacturing_bom_material_addcrm_quotations_add_charge_linepurchasing_orders_add_linefinancial_purchase_add_linefinancial_generaljournal_add_linecrm_quotations_add_linefinancial_cash_add_linesales_deliveries_add_linesales_invoices_add_linefinancial_bank_add_linemanufacturing_routing_addsubscriptions_add_linemanufacturing_materialplan_addsales_orders_add_linefinancial_sales_add_linepurchases_receipts_add_line

  declared capabilities: network access, filesystem access, database access, HTTP requests

  sales_orders_searchaccounts_addresses_search

  declared capabilities: network access, database access

  items_searchpurchasing_returns_searchfinancial_budgets_searchcashflow_conditions_searchhrm_costunits_searchhrm_costcenters_searchfinancial_reporting_balance_search

  declared capabilities: filesystem access, HTTP requests

  accounts_createmanufacturing_operations_resource_updatemanufacturing_operations_resource_createaccounts_addresses_createaccounts_update

  declared capabilities: network access, filesystem access, HTTP requests

  documents_request_upload_urldocuments_upload

  declared capabilities: database access

  financial_glclassifications_listfinancial_aging_payablesfinancial_aging_receivablesfinancial_payables_list

  declared capabilities: network access, filesystem access

  documents_searchprojects_timecost_searchsales_order_lines_searchdocuments_get

  declared capabilities: code/command execution, filesystem access, HTTP requests

  cashflow_payments_updatecashflow_conditions_createcashflow_receivables_updatesales_orders_createsales_orders_updatelogistics_deliveries_create

  declared capabilities: network access

  cashflow_mandates_searchstock_batch_searchaccounts_searchstock_serial_searchstock_location_searchcashflow_payments_searchcashflow_receivables_searchmanufacturing_workcenters_list

  declared capabilities: network access, HTTP requests

  controller_signals_search

  declared capabilities: code/command execution, HTTP requests

  manufacturing_assembly_finish

  declared capabilities: HTTP requests

  manufacturing_orders_receipt

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.