Index / devtools

com.mcparmory/datadog

com-mcparmory-datadog declares 770 capabilities across 770 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the PyPI package mcparmory-datadog==1.0.3 (published to PyPI as mcparmory-datadog, listed in the official MCP registry as com.mcparmory/datadog 1.0.3), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 770 tools

770 of 770 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 154 of 770 tools

154 tools are classified as irreversible and declare no limit.

high · no-expiry · All 770 tools

770 of 770 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 770 tools

770 of 770 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 250 of 770 tools

250 tools can modify data and declare no limit.

low · uncapped-read · 366 of 770 tools

366 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

Tool	Read as	Basis
`list_agent_versions`	`read`	declared
`list_agents`	`read`	declared
`get_agent_info`	`read`	declared
`list_deployments`	`read`	declared
`deploy_fleet_configuration`	`write`	inferred
`start_agent_upgrade`	`destructive`	declared
`get_deployment`	`read`	declared
`cancel_deployment`	`destructive`	declared
`list_schedules`	`read`	declared
`create_fleet_upgrade_schedule`	`write`	inferred
`get_schedule`	`read`	declared
`update_schedule`	`write`	inferred
`delete_schedule`	`destructive`	declared
`trigger_schedule`	`write`	inferred
`list_datastores`	`read`	declared
`create_datastore`	`write`	inferred
`get_datastore`	`read`	declared
`update_datastore`	`write`	inferred
`delete_datastore`	`destructive`	declared
`list_datastore_items`	`read`	declared
`update_datastore_item`	`write`	inferred
`delete_datastore_item`	`destructive`	declared
`bulk_write_datastore_items`	`write`	inferred
`delete_datastore_items`	`destructive`	declared
`list_app_key_registrations`	`read`	declared
`get_app_key_registration`	`read`	declared
`create_action_connection`	`write`	inferred
`get_action_connection`	`read`	declared
`update_action_connection`	`write`	inferred
`delete_action_connection`	`destructive`	declared
`list_aws_scan_options`	`read`	declared
`enable_aws_scan_options`	`write`	assumed
`get_aws_scan_options`	`read`	declared
`configure_aws_scan_options`	`write`	assumed
`delete_aws_scan_options`	`destructive`	declared
`list_azure_scan_options`	`read`	declared
`enable_azure_agentless_scanning`	`write`	assumed
`get_azure_scan_options_subscription`	`read`	declared
`configure_azure_scan_options`	`write`	assumed
`delete_azure_scan_options`	`destructive`	declared
`list_gcp_scan_options`	`read`	declared
`enable_gcp_agentless_scanning`	`write`	assumed
`get_gcp_scan_options`	`read`	declared
`update_gcp_scan_options`	`write`	inferred
`delete_gcp_scan_options`	`destructive`	declared
`list_aws_ondemand_tasks`	`read`	declared
`scan_aws_resource`	`write`	assumed
`get_aws_ondemand_task`	`read`	declared
`list_span_metrics`	`read`	declared
`create_spans_metric`	`write`	inferred
`get_span_metric`	`read`	declared
`update_spans_metric`	`write`	inferred
`delete_span_metric`	`destructive`	declared
`list_apm_retention_filters`	`read`	declared
`create_retention_filter`	`write`	inferred
`reorder_retention_filters`	`write`	inferred
`get_retention_filter_apm`	`read`	declared
`update_retention_filter_apm`	`write`	inferred
`delete_retention_filter_apm`	`destructive`	declared
`list_services`	`read`	declared
`list_apps`	`read`	declared
`create_app`	`write`	inferred
`delete_apps`	`destructive`	declared
`get_app`	`read`	declared
`update_app`	`write`	inferred
`delete_app`	`destructive`	declared
`publish_app`	`send`	inferred
`unpublish_app`	`destructive`	declared
`list_application_keys`	`read`	declared
`get_application_key`	`read`	declared
`update_application_key`	`write`	inferred
`delete_application_key`	`destructive`	declared
`list_audit_logs`	`read`	declared
`search_audit_logs`	`read`	inferred
`list_cases`	`read`	declared
`create_case`	`write`	inferred
`list_projects`	`read`	declared
`create_project`	`write`	inferred
`get_project`	`read`	declared
`update_project`	`write`	inferred
`delete_project`	`destructive`	declared
`delete_notification_rule`	`destructive`	declared
`list_case_types`	`read`	declared
`create_case_type`	`write`	inferred
`list_custom_attributes`	`read`	declared
`delete_case_type`	`destructive`	declared
`list_custom_attributes_by_case_type`	`read`	declared
`create_case_type_custom_attribute`	`write`	inferred
`delete_custom_attribute`	`destructive`	declared
`get_case`	`read`	declared
`archive_case`	`destructive`	declared
`assign_case`	`write`	inferred
`update_case_attributes`	`write`	inferred
`add_case_comment`	`write`	inferred
`remove_case_comment`	`destructive`	declared
`update_case_custom_attribute`	`write`	inferred
`remove_case_custom_attribute`	`destructive`	declared
`update_case_description`	`write`	inferred
`update_case_priority`	`write`	inferred
`link_incident_to_case`	`write`	assumed
`create_and_link_jira_issue`	`write`	inferred
`link_jira_issue`	`write`	assumed
`remove_jira_issue_link`	`destructive`	declared
`create_case_notebook`	`write`	inferred
`assign_case_to_project`	`write`	inferred
`create_servicenow_ticket`	`write`	inferred
`update_case_status`	`read`	inferred
`update_case_title`	`write`	inferred
`unarchive_case`	`delete`	inferred
`unassign_case`	`destructive`	declared
`list_catalog_entities`	`read`	declared
`upsert_catalog_entity`	`write`	inferred
`preview_catalog_entities`	`read`	inferred
`delete_catalog_entity`	`destructive`	declared
`list_catalog_kinds`	`read`	declared
`upsert_catalog_kind`	`write`	inferred
`delete_kind`	`destructive`	declared
`list_catalog_relations`	`read`	declared
`create_change_request`	`write`	inferred
`get_change_request`	`read`	declared
`update_change_request`	`write`	inferred
`create_change_request_branch`	`write`	inferred
`update_change_request_decision`	`write`	inferred
`remove_change_request_decision`	`destructive`	declared
`send_pipeline_event`	`send`	inferred
`aggregate_pipeline_events`	`write`	assumed
`list_pipeline_events`	`read`	declared
`search_pipeline_events`	`read`	inferred
`retrieve_test_optimization_settings`	`read`	inferred
`configure_test_optimization_settings`	`write`	assumed
`delete_test_optimization_settings`	`destructive`	declared
`aggregate_test_events`	`write`	assumed
`list_test_events`	`read`	declared
`search_test_events`	`read`	inferred
`get_aws_persona_mapping`	`read`	declared
`create_custom_framework`	`write`	inferred
`get_custom_framework`	`read`	declared
`update_custom_framework`	`write`	inferred
`delete_custom_framework`	`destructive`	declared
`list_resource_evaluation_filters`	`read`	declared
`update_resource_filters`	`write`	inferred
`get_branch_coverage_summary`	`read`	inferred
`get_commit_coverage_summary`	`read`	inferred
`list_container_images`	`read`	declared
`list_containers`	`read`	declared
`list_allocation_rules`	`read`	declared
`create_allocation_rule`	`write`	inferred
`reorder_allocation_rules`	`write`	assumed
`retrieve_allocation_rule`	`read`	declared
`update_allocation_rule`	`write`	inferred
`delete_allocation_rule`	`destructive`	declared
`list_aws_cur_configs`	`read`	declared
`create_aws_cur_config`	`write`	inferred
`get_aws_cur_config`	`read`	declared
`update_aws_cur_config`	`write`	inferred
`delete_aws_cur_config`	`destructive`	declared
`list_azure_cost_configs`	`read`	declared
`create_azure_cost_config`	`write`	inferred
`get_azure_uc_config`	`read`	declared
`toggle_azure_cost_config`	`write`	assumed
`delete_azure_uc_config`	`destructive`	declared
`upsert_budget`	`write`	inferred
`get_budget`	`read`	declared
`delete_budget`	`destructive`	declared
`list_budgets`	`read`	declared
`list_custom_costs_files`	`read`	declared
`upload_custom_costs`	`write`	inferred
`fetch_custom_costs_file`	`read`	declared
`delete_custom_costs_file`	`destructive`	declared
`list_gcp_usage_cost_configs`	`read`	declared
`create_gcp_usage_cost_config`	`write`	inferred
`get_gcp_usage_cost_config`	`read`	declared
`toggle_gcp_usage_cost_config`	`write`	assumed
`archive_gcp_usage_cost_config`	`destructive`	declared
`list_active_billing_dimensions`	`read`	declared
`list_monthly_cost_attribution`	`read`	declared
`list_csm_agents`	`read`	declared
`analyze_cloud_accounts_coverage`	`read`	declared
`analyze_csm_hosts_and_containers_coverage`	`read`	declared
`analyze_serverless_csm_coverage`	`read`	declared
`list_serverless_agents`	`read`	declared
`list_application_keys_current_user`	`read`	declared
`create_application_key`	`write`	inferred
`get_application_key_current_user`	`read`	declared
`update_application_key_current_user`	`write`	inferred
`delete_application_key_current_user`	`destructive`	declared
`list_dashboard_list_items`	`read`	declared
`add_dashboards_to_list`	`read`	inferred
`update_dashboard_list_dashboards`	`write`	inferred
`remove_dashboards_from_list`	`destructive`	declared
`list_datasets`	`read`	declared
`create_dataset`	`write`	inferred
`get_dataset`	`read`	declared
`update_dataset`	`write`	inferred
`delete_dataset`	`destructive`	declared
`list_deletion_requests`	`read`	declared
`cancel_deletion_request`	`destructive`	declared
`list_deployment_gates`	`read`	declared
`create_deployment_gate`	`write`	inferred
`list_deployment_gate_rules`	`read`	declared
`create_deployment_rule`	`write`	inferred
`get_deployment_rule`	`read`	declared
`update_deployment_rule`	`write`	inferred
`delete_deployment_rule`	`destructive`	declared
`get_deployment_gate`	`read`	declared
`update_deployment_gate`	`write`	inferred
`delete_deployment_gate`	`destructive`	declared
`evaluate_deployment_gates`	`write`	assumed
`get_deployment_gate_evaluation`	`read`	declared
`record_deployment`	`write`	assumed
`delete_deployment`	`destructive`	declared
`list_deployments_event`	`read`	inferred
`get_deployment_event`	`read`	declared
`mark_deployment_failure`	`destructive`	declared
`report_incident`	`write`	assumed
`delete_incident_event`	`destructive`	declared
`list_incident_failures`	`read`	inferred
`get_incident_failure`	`read`	declared
`list_downtimes`	`read`	declared
`schedule_downtime`	`write`	assumed
`get_downtime`	`read`	declared
`update_downtime`	`write`	inferred
`cancel_downtime`	`destructive`	declared
`search_issues`	`read`	inferred
`get_issue`	`read`	declared
`assign_issue`	`write`	inferred
`unassign_issue`	`destructive`	declared
`update_issue_state`	`write`	inferred
`list_events`	`read`	declared
`publish_event`	`send`	inferred
`search_events`	`read`	inferred
`get_event`	`read`	declared
`list_feature_flags`	`read`	declared
`create_feature_flag`	`write`	inferred
`list_environments`	`read`	declared
`create_feature_flag_environment`	`write`	inferred
`get_feature_flag_environment`	`read`	declared
`update_environment`	`write`	inferred
`delete_environment`	`destructive`	declared
`get_feature_flag`	`read`	declared
`update_feature_flag`	`write`	inferred
`archive_feature_flag`	`destructive`	declared
`disable_feature_flag`	`destructive`	declared
`enable_feature_flag`	`write`	assumed
`restore_feature_flag`	`delete`	inferred
`get_hamr_connection`	`read`	declared
`configure_hamr_connection`	`write`	inferred
`list_incidents`	`read`	declared
`create_incident`	`write`	inferred
`list_incident_handles`	`read`	declared
`list_notification_templates`	`read`	declared
`get_notification_template`	`read`	declared
`delete_notification_template`	`destructive`	declared
`list_postmortem_templates`	`read`	declared
`get_postmortem_template`	`read`	declared
`delete_postmortem_template`	`destructive`	declared
`list_incident_types`	`read`	declared
`get_incident_type`	`read`	declared
`import_incident`	`write`	assumed
`search_incidents`	`read`	declared
`get_incident`	`read`	declared
`update_incident`	`write`	inferred
`delete_incident`	`destructive`	declared
`list_incident_attachments`	`read`	declared
`attach_incident_document`	`write`	assumed
`create_postmortem_attachment`	`write`	inferred
`update_incident_attachment`	`write`	inferred
`remove_incident_attachment`	`destructive`	declared
`list_incident_impacts`	`read`	declared
`create_incident_impact`	`write`	inferred
`remove_incident_impact`	`destructive`	declared
`list_incident_integrations`	`read`	declared
`create_incident_integration`	`write`	inferred
`get_incident_integration`	`read`	declared
`update_incident_integration`	`write`	inferred
`remove_incident_integration`	`destructive`	declared
`list_incident_todos`	`read`	declared
`create_incident_todo`	`write`	inferred
`get_incident_todo`	`read`	declared
`update_incident_todo`	`write`	inferred
`remove_incident_todo`	`destructive`	declared
`list_aws_accounts`	`read`	declared
`create_aws_account_integration`	`write`	inferred
`get_aws_account_integration`	`read`	declared
`update_aws_account_integration`	`write`	inferred
`delete_aws_account_integration`	`destructive`	declared
`get_aws_ccm_config`	`read`	declared
`configure_aws_account_ccm`	`write`	assumed
`configure_aws_account_ccm_update`	`write`	inferred
`delete_aws_ccm_config`	`destructive`	declared
`list_aws_cloudwatch_namespaces`	`read`	declared
`list_event_bridge_sources`	`read`	declared
`create_eventbridge_source`	`write`	inferred
`delete_event_bridge_source`	`destructive`	declared
`generate_aws_external_id`	`write`	assumed
`list_aws_log_services`	`read`	declared
`list_gcp_sts_accounts`	`read`	declared
`create_gcp_service_account`	`write`	inferred
`update_gcp_sts_account`	`write`	inferred
`delete_gcp_sts_account`	`destructive`	declared
`list_gcp_sts_delegates`	`read`	declared
`create_gcp_principal`	`write`	inferred
`get_google_chat_space`	`read`	declared
`list_organization_handles`	`read`	declared
`create_organization_handle`	`write`	inferred
`get_organization_handle`	`read`	declared
`update_organization_handle`	`write`	inferred
`remove_organization_handle`	`destructive`	declared
`list_jira_accounts`	`read`	declared
`delete_jira_account`	`destructive`	declared
`list_jira_issue_templates`	`read`	declared
`create_issue_template`	`write`	inferred
`get_issue_template`	`read`	declared
`delete_issue_template`	`destructive`	declared
`get_teams_channel`	`read`	declared
`list_ms_teams_tenant_handles`	`read`	declared
`get_ms_teams_tenant_handle`	`read`	declared
`list_ms_teams_webhook_handles`	`read`	declared
`get_workflows_webhook_handle`	`read`	declared
`list_oci_products`	`read`	declared
`list_tenancy_configs`	`read`	declared
`get_tenancy_config`	`read`	declared
`update_tenancy_config`	`write`	inferred
`delete_tenancy_config`	`destructive`	declared
`list_opsgenie_services`	`read`	declared
`create_opsgenie_service`	`write`	inferred
`get_opsgenie_service`	`read`	declared
`update_opsgenie_service`	`write`	inferred
`delete_opsgenie_service`	`destructive`	declared
`list_assignment_groups`	`read`	declared
`list_business_services`	`read`	declared
`list_servicenow_templates`	`read`	declared
`list_servicenow_instances`	`read`	declared
`list_servicenow_users`	`read`	declared
`list_integrations`	`read`	declared
`list_cloudflare_accounts`	`read`	declared
`create_cloudflare_account`	`write`	inferred
`get_cloudflare_account`	`read`	declared
`update_cloudflare_account`	`write`	inferred
`delete_cloudflare_account`	`destructive`	declared
`list_confluent_accounts`	`read`	declared
`create_confluent_account`	`write`	inferred
`get_confluent_account`	`read`	declared
`update_confluent_account`	`write`	inferred
`delete_confluent_account`	`destructive`	declared
`list_confluent_resources`	`read`	declared
`add_confluent_resource`	`write`	inferred
`get_confluent_resource`	`read`	declared
`update_confluent_resource`	`write`	inferred
`delete_confluent_resource`	`destructive`	declared
`list_fastly_accounts`	`read`	declared
`create_fastly_account`	`write`	inferred
`get_fastly_account`	`read`	declared
`update_fastly_account`	`write`	inferred
`delete_fastly_account`	`destructive`	declared
`list_services_fastly`	`read`	declared
`create_fastly_service`	`write`	inferred
`get_fastly_service`	`read`	declared
`update_fastly_service`	`write`	inferred
`delete_fastly_service`	`destructive`	declared
`list_okta_accounts`	`read`	declared
`create_okta_account`	`write`	inferred
`get_okta_account`	`read`	declared
`update_okta_account`	`write`	inferred
`delete_okta_account`	`destructive`	declared
`list_experiments`	`read`	declared
`create_experiment`	`write`	inferred
`delete_experiments`	`destructive`	declared
`update_experiment`	`write`	inferred
`push_experiment_events`	`write`	inferred
`list_llm_observability_projects`	`read`	declared
`create_project_llm_obs`	`write`	inferred
`delete_llm_observability_projects`	`destructive`	declared
`update_llm_observability_project`	`write`	inferred
`list_datasets_llm_obs`	`read`	declared
`create_dataset_llm_obs`	`write`	inferred
`delete_datasets`	`destructive`	declared
`update_dataset_llm_obs`	`write`	inferred
`list_dataset_records`	`read`	declared
`append_dataset_records`	`read`	inferred
`update_observability_records`	`read`	inferred
`delete_dataset_records`	`destructive`	declared
`send_logs`	`send`	inferred
`aggregate_logs`	`write`	assumed
`list_archive_order`	`read`	declared
`reorder_archives`	`delete`	inferred
`list_log_archives`	`read`	declared
`create_archive`	`delete`	inferred
`get_archive`	`read`	declared
`update_archive`	`write`	inferred
`delete_archive`	`destructive`	declared
`list_archive_readers`	`read`	declared
`list_custom_destinations`	`read`	declared
`get_custom_destination`	`read`	declared
`update_custom_destination`	`write`	inferred
`delete_custom_destination`	`destructive`	declared
`list_log_metrics`	`read`	declared
`create_logs_metric`	`write`	inferred
`get_logs_metric`	`read`	declared
`update_logs_metric`	`write`	inferred
`delete_logs_metric`	`destructive`	declared
`list_restriction_queries`	`read`	declared
`get_restriction_query`	`read`	declared
`update_restriction_query`	`read`	inferred
`delete_restriction_query`	`destructive`	declared
`list_restriction_query_roles`	`read`	declared
`grant_role_to_restriction_query`	`read`	inferred
`revoke_role_from_restriction_query`	`destructive`	declared
`search_logs`	`read`	declared
`search_logs_advanced`	`read`	inferred
`list_metrics`	`read`	declared
`configure_metric_tags`	`write`	assumed
`remove_metric_tags`	`destructive`	declared
`list_metric_configurations`	`read`	declared
`list_metric_tags`	`read`	declared
`get_metric_assets`	`read`	declared
`estimate_metric_cardinality`	`read`	declared
`get_metric_tag_cardinality_details`	`read`	declared
`get_metric_tags`	`read`	declared
`configure_metric_tags_single`	`write`	assumed
`update_metric_tag_configuration`	`write`	inferred
`remove_metric_tag_configuration`	`destructive`	declared
`list_metric_volumes`	`read`	declared
`get_notification_rule_monitor`	`read`	declared
`delete_notification_rule_monitor`	`destructive`	declared
`list_monitor_policies`	`read`	declared
`get_monitor_policy`	`read`	declared
`update_monitor_policy`	`write`	inferred
`delete_monitor_policy`	`destructive`	declared
`list_monitor_templates`	`read`	declared
`create_monitor_template`	`write`	inferred
`get_monitor_template`	`read`	declared
`update_monitor_template`	`write`	inferred
`delete_monitor_template`	`destructive`	declared
`validate_monitor_template_update`	`read`	inferred
`list_monitor_downtimes`	`read`	declared
`list_devices`	`read`	declared
`get_device`	`read`	declared
`list_device_interfaces`	`read`	declared
`list_device_tags`	`read`	declared
`update_device_tags`	`write`	inferred
`list_interface_tags`	`read`	declared
`update_interface_tags`	`write`	inferred
`list_aggregated_connections`	`read`	declared
`list_aggregated_dns_traffic`	`read`	declared
`list_pipelines`	`read`	declared
`validate_pipeline`	`read`	inferred
`get_pipeline`	`read`	declared
`update_pipeline`	`write`	inferred
`delete_pipeline`	`destructive`	declared
`create_escalation_policy`	`write`	inferred
`get_escalation_policy`	`read`	declared
`update_escalation_policy`	`write`	inferred
`delete_escalation_policy`	`destructive`	declared
`create_page`	`write`	inferred
`acknowledge_page`	`write`	assumed
`escalate_page`	`send`	inferred
`resolve_page`	`write`	assumed
`create_schedule`	`write`	inferred
`get_schedule_oncall`	`read`	declared
`update_schedule_oncall`	`write`	inferred
`delete_schedule_oncall`	`destructive`	declared
`get_on_call_user`	`read`	declared
`list_team_on_call_users`	`read`	declared
`list_notification_channels`	`read`	declared
`create_notification_channel`	`write`	inferred
`get_notification_channel`	`read`	declared
`remove_notification_channel`	`destructive`	declared
`get_notification_rules_user`	`read`	declared
`get_notification_rule_user`	`read`	declared
`remove_notification_rule`	`destructive`	declared
`list_org_connections`	`read`	declared
`establish_org_connection`	`write`	assumed
`update_org_connection`	`write`	inferred
`delete_org_connection`	`destructive`	declared
`list_findings`	`read`	declared
`update_findings_mute_status`	`read`	inferred
`get_finding`	`read`	declared
`list_powerpacks`	`read`	declared
`create_powerpack`	`write`	inferred
`get_powerpack`	`read`	declared
`update_powerpack`	`write`	inferred
`delete_powerpack`	`destructive`	declared
`list_processes`	`read`	declared
`send_server_event`	`send`	inferred
`list_account_facet_values`	`read`	inferred
`query_accounts`	`read`	inferred
`compute_product_analytics`	`write`	assumed
`analyze_product_timeseries`	`read`	inferred
`query_users_by_event_and_properties`	`read`	inferred
`list_user_facet_values`	`read`	inferred
`query_users`	`read`	inferred
`get_entity_mapping`	`read`	declared
`create_entity_connection`	`write`	inferred
`update_entity_connection`	`write`	inferred
`delete_data_connection`	`destructive`	declared
`list_data_connections`	`read`	declared
`query_scalar_metrics`	`read`	inferred
`query_timeseries`	`read`	inferred
`query_reference_table_rows`	`read`	inferred
`list_reference_tables`	`read`	declared
`create_reference_table`	`write`	inferred
`get_reference_table`	`read`	declared
`update_reference_table`	`write`	inferred
`delete_reference_table`	`destructive`	declared
`fetch_reference_table_rows`	`read`	declared
`upsert_reference_table_rows`	`write`	inferred
`delete_reference_table_rows`	`destructive`	declared
`initiate_reference_table_upload`	`write`	inferred
`list_waf_custom_rules`	`read`	declared
`create_waf_custom_rule`	`write`	inferred
`get_waf_custom_rule`	`read`	declared
`update_waf_custom_rule`	`write`	inferred
`delete_waf_custom_rule`	`destructive`	declared
`list_waf_exclusion_filters`	`read`	declared
`create_waf_exclusion_filter`	`write`	inferred
`get_waf_exclusion_filter`	`read`	declared
`update_waf_exclusion_filter`	`write`	inferred
`delete_waf_exclusion_filter`	`destructive`	declared
`list_agent_rules`	`read`	declared
`create_workload_protection_agent_rule`	`write`	inferred
`get_agent_rule`	`read`	declared
`update_agent_rule`	`write`	inferred
`delete_agent_rule`	`destructive`	declared
`list_workload_protection_policies`	`read`	declared
`create_workload_protection_policy`	`write`	inferred
`download_workload_protection_policy`	`read`	declared
`get_workload_protection_policy`	`read`	declared
`update_workload_protection_policy`	`write`	inferred
`delete_workload_protection_policy`	`destructive`	declared
`list_heatmap_snapshots`	`read`	declared
`create_heatmap_snapshot`	`write`	inferred
`update_heatmap_snapshot`	`write`	inferred
`delete_heatmap_snapshot`	`destructive`	declared
`list_roles`	`read`	declared
`list_role_templates`	`read`	declared
`get_role`	`read`	declared
`clone_role`	`write`	inferred
`list_role_users`	`read`	declared
`remove_user_from_role`	`destructive`	declared
`aggregate_rum_events`	`write`	assumed
`list_rum_applications`	`read`	declared
`create_rum_application`	`write`	inferred
`order_retention_filters`	`write`	assumed
`list_retention_filters`	`read`	declared
`create_rum_retention_filter`	`write`	inferred
`get_retention_filter`	`read`	declared
`update_retention_filter`	`write`	inferred
`delete_retention_filter`	`destructive`	declared
`get_rum_application`	`read`	declared
`update_rum_application`	`write`	inferred
`delete_rum_application`	`destructive`	declared
`list_rum_metrics`	`read`	declared
`create_rum_metric`	`write`	inferred
`get_rum_metric`	`read`	declared
`update_rum_metric`	`write`	inferred
`delete_rum_metric`	`destructive`	declared
`list_rum_events`	`read`	declared
`search_rum_events`	`read`	inferred
`list_replay_playlists`	`read`	declared
`create_replay_playlist`	`write`	inferred
`get_replay_playlist`	`read`	declared
`update_replay_playlist`	`write`	inferred
`delete_replay_playlist`	`destructive`	declared
`list_replay_playlist_sessions`	`read`	declared
`remove_replay_playlist_sessions`	`destructive`	declared
`add_session_to_replay_playlist`	`write`	inferred
`remove_session_from_replay_playlist`	`destructive`	declared
`list_session_view_segments`	`read`	declared
`list_replay_session_watchers`	`read`	declared
`record_session_watch`	`write`	assumed
`delete_replay_session_watch`	`destructive`	declared
`list_replay_viewership_sessions`	`read`	declared
`list_scorecard_outcomes`	`read`	declared
`batch_update_scorecard_outcomes`	`write`	inferred
`batch_create_scorecard_outcomes`	`write`	inferred
`list_scorecard_rules`	`read`	declared
`create_scorecard_rule`	`write`	inferred
`update_scorecard_rule`	`write`	inferred
`delete_scorecard_rule`	`destructive`	declared
`list_seat_users`	`read`	declared
`assign_seats_to_users`	`write`	inferred
`unassign_seats`	`destructive`	declared
`list_entity_risk_scores`	`read`	declared
`download_workload_policy`	`read`	declared
`search_security_findings`	`read`	declared
`create_security_cases`	`write`	inferred
`detach_findings_from_case`	`destructive`	declared
`attach_findings_to_case`	`write`	assumed
`create_security_finding_jira_issues`	`read`	inferred
`attach_security_findings_to_jira_issue`	`write`	assumed
`search_findings`	`read`	inferred
`list_sboms`	`read`	declared
`get_sbom`	`read`	declared
`list_scanned_assets`	`read`	declared
`update_signal_notification_rule`	`write`	inferred
`list_vulnerabilities`	`read`	declared
`list_vulnerable_assets`	`read`	declared
`list_workload_security_agent_rules`	`read`	declared
`create_workload_security_agent_rule`	`write`	inferred
`get_workload_security_agent_rule`	`read`	declared
`update_workload_security_agent_rule`	`write`	inferred
`delete_workload_security_agent_rule`	`destructive`	declared
`list_critical_assets`	`read`	declared
`create_critical_asset`	`write`	inferred
`list_critical_assets_by_rule`	`read`	declared
`get_critical_asset`	`read`	declared
`update_critical_asset`	`write`	inferred
`delete_critical_asset`	`destructive`	declared
`list_security_filters`	`read`	declared
`create_security_filter`	`write`	inferred
`get_security_filter`	`read`	declared
`update_security_filter`	`write`	inferred
`delete_security_filter`	`destructive`	declared
`list_suppressions`	`read`	declared
`create_suppression_rule`	`write`	inferred
`get_suppressions_affecting_rule`	`read`	inferred
`list_rule_suppressions`	`read`	declared
`validate_suppression_rule`	`read`	inferred
`get_suppression`	`read`	declared
`update_suppression`	`write`	inferred
`delete_suppression`	`destructive`	declared
`list_suppression_versions`	`read`	declared
`list_content_pack_states`	`read`	declared
`activate_content_pack`	`write`	assumed
`deactivate_content_pack`	`destructive`	declared
`list_security_monitoring_rules`	`read`	declared
`export_security_monitoring_rules`	`read`	inferred
`convert_security_monitoring_rule_to_terraform`	`write`	assumed
`test_security_rule`	`read`	inferred
`validate_security_rule`	`read`	inferred
`get_security_monitoring_rule`	`read`	declared
`delete_security_rule`	`destructive`	declared
`convert_security_monitoring_rule`	`read`	declared
`test_security_monitoring_rule`	`read`	inferred
`list_rule_versions`	`read`	declared
`list_security_signals`	`read`	declared
`list_security_signals_search`	`read`	inferred
`get_signal`	`read`	declared
`assign_security_signal`	`write`	inferred
`update_security_signal_incidents`	`write`	inferred
`update_security_signal_state`	`destructive`	declared
`list_scanning_groups`	`read`	declared
`reorder_scanning_groups`	`read`	inferred
`create_scanning_group`	`write`	inferred
`update_scanning_group`	`write`	inferred
`delete_scanning_group`	`destructive`	declared
`create_scanning_rule`	`write`	inferred
`update_scanning_rule`	`write`	inferred
`delete_scanning_rule`	`destructive`	declared
`list_standard_patterns`	`read`	declared
`submit_timeseries`	`write`	assumed
`create_service_account`	`write`	inferred
`list_application_keys_service_account`	`read`	declared
`get_application_key_service_account`	`read`	declared
`update_service_account_application_key`	`write`	inferred
`delete_application_key_service_account`	`destructive`	declared
`list_service_definitions`	`read`	declared
`register_service_definition`	`write`	inferred
`get_service_definition`	`read`	declared
`delete_service_definition`	`destructive`	declared
`list_security_signals_threat_hunting`	`read`	declared
`search_security_signals`	`read`	declared
`get_threat_hunting_signal`	`read`	declared
`list_threat_hunting_jobs`	`read`	declared
`start_threat_hunting_job`	`write`	assumed
`create_signal_from_job_result`	`destructive`	declared
`get_threat_hunting_job`	`read`	declared
`delete_threat_hunting_job`	`destructive`	declared
`cancel_threat_hunting_job`	`destructive`	declared
`list_security_signals_by_job`	`read`	declared
`generate_slo_report`	`read`	inferred
`download_slo_report`	`read`	declared
`get_slo_report_status`	`read`	declared
`get_slo_status`	`read`	declared
`aggregate_spans`	`write`	assumed
`list_spans`	`read`	declared
`search_spans`	`read`	inferred
`submit_sca_dependencies`	`write`	assumed
`resolve_vulnerable_symbols`	`write`	assumed
`get_custom_ruleset`	`read`	declared
`update_ruleset`	`write`	inferred
`delete_ruleset`	`destructive`	declared
`create_custom_rule`	`write`	inferred
`get_custom_rule`	`read`	declared
`delete_custom_rule`	`destructive`	declared
`list_rule_revisions`	`read`	declared
`create_rule_revision`	`write`	inferred
`revert_custom_rule`	`destructive`	declared
`get_custom_rule_revision`	`read`	declared
`fetch_rulesets`	`read`	inferred
`list_secrets_rules`	`read`	declared
`list_status_pages`	`read`	declared
`create_status_page`	`write`	inferred
`list_degradations`	`read`	declared
`list_maintenances`	`read`	declared
`get_status_page`	`read`	declared
`update_status_page`	`write`	inferred
`delete_status_page`	`destructive`	declared
`list_status_page_components`	`read`	declared
`create_component`	`write`	inferred
`get_component`	`read`	declared
`update_component`	`write`	inferred
`delete_component`	`destructive`	declared
`create_degradation`	`destructive`	declared
`get_degradation`	`read`	declared
`update_degradation`	`write`	inferred
`delete_degradation`	`destructive`	declared
`schedule_maintenance`	`write`	assumed
`get_maintenance`	`read`	declared
`update_maintenance`	`write`	inferred
`create_synthetics_suite`	`write`	inferred
`delete_suites`	`destructive`	declared
`search_suites`	`read`	declared
`get_synthetics_suite`	`read`	declared
`update_synthetics_suite`	`write`	inferred
`bulk_delete_synthetics_tests`	`destructive`	declared
`create_network_test`	`write`	inferred
`get_network_test`	`read`	declared
`update_network_test`	`write`	inferred
`update_global_variable`	`write`	inferred
`list_tag_pipeline_rulesets`	`read`	declared
`reorder_tag_pipeline_rulesets`	`write`	assumed
`validate_tag_query`	`read`	inferred
`get_tag_pipeline_ruleset`	`read`	declared
`list_teams`	`read`	declared
`create_team`	`write`	inferred
`list_team_hierarchy_links`	`read`	declared
`create_team_hierarchy_link`	`write`	inferred
`get_team_hierarchy_link`	`read`	declared
`delete_team_hierarchy_link`	`destructive`	declared
`list_team_connections`	`read`	declared
`create_team_connections`	`write`	inferred
`delete_team_connections`	`destructive`	declared
`list_team_sync_configurations`	`read`	declared
`get_team`	`read`	declared
`update_team`	`write`	inferred
`delete_team`	`destructive`	declared
`list_team_links`	`read`	declared
`add_team_link`	`write`	inferred
`get_team_link`	`read`	declared
`update_team_link`	`write`	inferred
`remove_team_link`	`destructive`	declared
`list_team_members`	`read`	declared
`add_team_member`	`write`	inferred
`update_team_member_role`	`write`	inferred
`remove_team_member`	`destructive`	declared
`list_flaky_tests`	`read`	inferred
`update_flaky_tests`	`write`	inferred
`list_billing_dimension_mappings`	`read`	declared
`estimate_cost_by_organization`	`read`	declared
`list_historical_costs`	`read`	declared
`list_hourly_usage`	`read`	declared
`get_projected_cost`	`read`	declared
`list_usage_attribution_types`	`read`	declared
`send_invitations`	`send`	inferred
`get_invitation`	`read`	declared
`list_users`	`read`	declared
`create_user`	`write`	inferred
`get_user`	`read`	declared
`update_user`	`write`	inferred
`disable_user`	`destructive`	declared
`list_user_organizations`	`read`	declared
`list_user_memberships`	`read`	declared
`get_workflow`	`read`	declared
`delete_workflow`	`destructive`	declared
`list_workflow_instances`	`read`	declared
`execute_workflow`	`write`	assumed
`get_workflow_instance`	`read`	declared
`cancel_workflow_instance`	`destructive`	declared

Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.

Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.