Index / devtools

com.mcparmory/github

com-mcparmory-github declares 929 capabilities across 929 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the PyPI package mcparmory-github==1.0.6 (published to PyPI as mcparmory-github, listed in the official MCP registry as com.mcparmory/github 1.0.6), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 929 tools

929 of 929 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 188 of 929 tools

188 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 2 of 929 tools

2 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 929 tools

929 of 929 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 929 tools

929 of 929 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 211 of 929 tools

211 tools can modify data and declare no limit.

low · uncapped-read · 530 of 929 tools

530 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

Tool	Read as	Basis
`list_advisories`	`read`	declared
`get_authenticated_app`	`read`	declared
`get_webhook_config`	`read`	declared
`list_webhook_deliveries_app`	`read`	declared
`get_webhook_delivery_app`	`read`	declared
`redeliver_webhook_delivery_app`	`write`	assumed
`list_installation_requests`	`read`	declared
`list_app_installations`	`read`	declared
`get_app_installation`	`read`	declared
`uninstall_app`	`destructive`	declared
`suspend_app_installation`	`destructive`	declared
`unsuspend_app_installation`	`destructive`	declared
`revoke_app_authorization`	`destructive`	declared
`revoke_application_token`	`destructive`	declared
`create_scoped_token`	`write`	inferred
`get_assignment`	`read`	declared
`list_accepted_assignments`	`read`	declared
`list_assignment_grades`	`read`	declared
`list_classrooms`	`read`	declared
`get_classroom`	`read`	declared
`list_assignments`	`read`	declared
`list_codes_of_conduct`	`read`	declared
`get_conduct_code`	`read`	declared
`get_enterprise_actions_cache_storage_limit`	`read`	declared
`list_oidc_custom_property_inclusions`	`read`	declared
`add_oidc_custom_property`	`write`	inferred
`list_code_security_configurations`	`read`	declared
`list_enterprise_code_security_default_configurations`	`read`	declared
`get_code_security_configuration_enterprise`	`read`	declared
`delete_code_security_configuration_enterprise`	`destructive`	declared
`attach_code_security_configuration`	`write`	assumed
`list_code_security_configuration_repositories`	`read`	declared
`list_dependabot_alerts`	`read`	declared
`list_teams_enterprise`	`read`	declared
`create_enterprise_team`	`write`	inferred
`list_enterprise_team_members`	`read`	declared
`add_team_members`	`write`	inferred
`remove_team_members`	`destructive`	declared
`check_enterprise_team_membership`	`read`	declared
`add_team_member`	`write`	inferred
`remove_team_member`	`destructive`	declared
`list_organization_assignments`	`read`	declared
`assign_team_to_organizations`	`write`	inferred
`unassign_team_from_organizations`	`destructive`	declared
`verify_team_organization_assignment`	`read`	declared
`assign_team_to_organization`	`write`	inferred
`unassign_team_from_organization`	`destructive`	declared
`get_enterprise_team`	`read`	declared
`update_enterprise_team`	`write`	inferred
`delete_enterprise_team`	`destructive`	declared
`list_events`	`read`	declared
`list_feeds`	`read`	declared
`list_gists`	`read`	declared
`create_gist`	`write`	inferred
`list_public_gists`	`read`	declared
`list_starred_gists`	`read`	declared
`get_gist`	`read`	declared
`update_gist`	`write`	inferred
`delete_gist`	`destructive`	declared
`list_gist_comments`	`read`	declared
`create_gist_comment`	`write`	inferred
`get_gist_comment`	`read`	declared
`update_gist_comment`	`write`	inferred
`delete_gist_comment`	`destructive`	declared
`list_gist_commits`	`read`	declared
`list_gist_forks`	`read`	declared
`fork_gist`	`write`	inferred
`check_gist_starred`	`read`	declared
`star_gist`	`write`	assumed
`remove_gist_star`	`destructive`	declared
`get_gist_revision`	`read`	declared
`list_gitignore_templates`	`read`	declared
`get_gitignore_template`	`read`	declared
`list_installation_repositories`	`read`	declared
`list_issues`	`read`	declared
`list_licenses`	`read`	declared
`get_license`	`read`	declared
`get_subscription_plan`	`read`	declared
`list_marketplace_plans`	`read`	declared
`get_subscription_plan_stubbed`	`read`	declared
`list_marketplace_plans_stubbed`	`read`	declared
`list_network_events`	`read`	declared
`list_notifications`	`read`	declared
`mark_notifications_as_read`	`read`	inferred
`get_notification_thread`	`read`	declared
`mark_notification_thread_as_read`	`read`	inferred
`mark_notification_thread_as_done`	`destructive`	declared
`get_thread_subscription`	`read`	declared
`configure_thread_notification`	`write`	assumed
`mute_thread_subscription`	`destructive`	declared
`list_organizations`	`read`	declared
`get_actions_cache_storage_limit`	`read`	declared
`list_dependabot_repository_access`	`read`	declared
`update_dependabot_repository_access`	`write`	inferred
`list_organization_budgets`	`read`	declared
`get_budget`	`read`	declared
`update_budget`	`write`	inferred
`delete_budget`	`destructive`	declared
`get_premium_request_usage_report`	`read`	declared
`get_organization_billing_usage`	`read`	declared
`get_billing_usage_summary`	`read`	declared
`get_organization`	`read`	declared
`update_organization`	`write`	inferred
`delete_organization`	`destructive`	declared
`get_actions_cache_usage_for_org`	`read`	declared
`list_actions_cache_usage_by_repository`	`read`	declared
`list_hosted_runners`	`read`	declared
`create_hosted_runner`	`write`	inferred
`list_custom_runner_images`	`read`	declared
`get_custom_runner_image`	`read`	declared
`delete_custom_runner_image`	`destructive`	declared
`list_custom_image_versions`	`read`	declared
`get_custom_runner_image_version`	`read`	declared
`delete_custom_image_version`	`destructive`	declared
`list_github_owned_runner_images`	`read`	declared
`list_partner_runner_images`	`read`	declared
`get_hosted_runners_limits`	`read`	declared
`list_hosted_runner_machine_specs`	`read`	declared
`list_hosted_runner_platforms`	`read`	declared
`get_hosted_runner`	`read`	declared
`update_hosted_runner`	`write`	inferred
`delete_hosted_runner`	`destructive`	declared
`list_oidc_custom_property_inclusions_for_org`	`read`	declared
`add_oidc_custom_property_org`	`write`	inferred
`list_organization_github_actions_repositories`	`read`	declared
`list_organization_self_hosted_runner_repositories`	`read`	declared
`remove_repository_from_self_hosted_runners`	`destructive`	declared
`list_runner_groups`	`read`	declared
`create_runner_group`	`write`	inferred
`get_runner_group`	`read`	declared
`update_runner_group`	`write`	inferred
`delete_runner_group`	`destructive`	declared
`list_github_hosted_runners_in_group`	`read`	declared
`list_runner_group_repositories`	`read`	declared
`update_runner_group_repository_access`	`write`	inferred
`grant_runner_group_repository_access`	`write`	assumed
`revoke_runner_group_repository_access`	`destructive`	declared
`list_runners_in_group`	`read`	declared
`update_runner_group_runners`	`write`	inferred
`add_runner_to_group`	`write`	inferred
`remove_runner_from_group`	`destructive`	declared
`list_organization_runners`	`read`	declared
`list_runner_applications`	`read`	declared
`generate_runner_registration_token`	`write`	assumed
`generate_runner_removal_token`	`destructive`	declared
`get_runner`	`read`	declared
`remove_runner_from_organization`	`destructive`	declared
`list_runner_labels`	`read`	declared
`add_labels_to_runner`	`write`	inferred
`update_runner_labels`	`write`	inferred
`remove_all_custom_labels_from_runner`	`destructive`	declared
`remove_custom_label_from_runner`	`destructive`	declared
`list_organization_secrets`	`read`	declared
`get_organization_public_key`	`read`	declared
`get_organization_secret`	`read`	declared
`create_or_update_organization_secret`	`write`	inferred
`delete_organization_secret`	`destructive`	declared
`list_organization_secret_repositories`	`read`	declared
`update_organization_secret_repositories`	`write`	inferred
`grant_repository_access_to_organization_secret`	`write`	assumed
`remove_repository_from_organization_secret`	`destructive`	declared
`list_organization_variables`	`read`	declared
`create_organization_variable`	`write`	inferred
`get_organization_variable`	`read`	declared
`update_organization_variable`	`write`	inferred
`delete_organization_variable`	`destructive`	declared
`list_organization_variable_repositories`	`read`	declared
`update_org_variable_repositories`	`write`	inferred
`add_repository_to_org_variable`	`write`	inferred
`remove_repository_from_org_variable`	`destructive`	declared
`record_artifact_deployment`	`write`	inferred
`record_cluster_deployments`	`write`	inferred
`register_artifact_storage`	`write`	assumed
`list_artifact_deployment_records`	`read`	declared
`list_artifact_storage_records`	`read`	declared
`list_attestations_by_digests`	`read`	inferred
`delete_attestations`	`destructive`	declared
`delete_attestation_by_subject_digest`	`destructive`	declared
`list_attestation_repositories`	`read`	declared
`delete_attestation`	`destructive`	declared
`list_attestations_organization`	`read`	declared
`list_blocked_users`	`read`	declared
`check_blocked_user`	`read`	declared
`unblock_user_organization`	`destructive`	declared
`list_campaigns`	`read`	declared
`create_campaign`	`write`	inferred
`get_campaign`	`read`	declared
`update_campaign`	`write`	inferred
`delete_campaign`	`destructive`	declared
`list_code_scanning_alerts`	`read`	declared
`list_code_security_configurations_for_org`	`read`	declared
`list_default_code_security_configurations`	`read`	declared
`detach_security_configurations`	`destructive`	declared
`get_code_security_configuration`	`read`	declared
`update_code_security_configuration`	`write`	inferred
`delete_code_security_configuration`	`destructive`	declared
`attach_security_configuration`	`write`	assumed
`list_security_configuration_repositories`	`read`	declared
`list_organization_codespaces`	`read`	declared
`list_organization_secrets_codespaces`	`read`	declared
`get_organization_secret_codespace`	`read`	declared
`create_or_update_organization_secret_codespaces`	`write`	inferred
`delete_organization_secret_codespace`	`destructive`	declared
`list_organization_secret_repositories_codespaces`	`read`	declared
`update_organization_secret_repositories_codespaces`	`write`	inferred
`add_repository_to_organization_secret`	`write`	inferred
`remove_repository_from_organization_secret_codespaces`	`destructive`	declared
`get_copilot_billing`	`read`	declared
`list_copilot_seats`	`read`	declared
`grant_copilot_seats_to_teams`	`pay`	inferred
`revoke_copilot_access_from_teams`	`destructive`	declared
`grant_copilot_seats_to_users`	`pay`	inferred
`revoke_copilot_seat_assignments`	`destructive`	declared
`list_copilot_coding_agent_permissions`	`read`	declared
`list_copilot_coding_agent_repositories`	`read`	declared
`enable_copilot_coding_agent_for_repository`	`write`	assumed
`list_copilot_content_exclusions`	`read`	declared
`get_copilot_metrics`	`read`	declared
`list_organization_dependabot_alerts`	`read`	declared
`list_organization_secrets_dependabot`	`read`	declared
`get_organization_dependabot_public_key`	`read`	declared
`get_organization_secret_dependabot`	`read`	declared
`create_or_update_organization_secret_dependabot`	`write`	inferred
`delete_organization_secret_dependabot`	`destructive`	declared
`list_organization_secret_repositories_dependabot`	`read`	declared
`update_organization_secret_repositories_dependabot`	`write`	inferred
`add_repository_to_organization_secret_dependabot`	`write`	inferred
`remove_repository_from_organization_secret_dependabot`	`destructive`	declared
`list_docker_migration_conflicts`	`read`	declared
`list_organization_events`	`read`	declared
`list_failed_invitations`	`read`	declared
`list_webhooks`	`read`	declared
`create_webhook`	`write`	inferred
`get_organization_webhook`	`read`	declared
`update_webhook`	`write`	inferred
`delete_webhook`	`destructive`	declared
`get_webhook_config_organization`	`read`	declared
`update_webhook_config`	`write`	inferred
`list_webhook_deliveries_organization`	`read`	declared
`get_webhook_delivery_organization`	`read`	declared
`redeliver_webhook_delivery_organization`	`write`	assumed
`list_api_request_stats`	`read`	declared
`get_api_summary_stats`	`read`	declared
`get_api_stats_by_actor`	`read`	declared
`get_api_request_stats`	`read`	declared
`get_user_api_time_stats`	`read`	declared
`get_api_request_stats_by_actor`	`read`	declared
`get_user_api_stats_by_access_type`	`read`	declared
`get_app_organization_installation`	`read`	declared
`list_app_installations_organization`	`read`	declared
`get_organization_interaction_restrictions`	`read`	declared
`list_pending_invitations`	`read`	declared
`invite_organization_member`	`send`	inferred
`cancel_invitation`	`destructive`	declared
`list_invitation_teams`	`read`	declared
`list_issue_fields`	`read`	declared
`create_issue_field`	`write`	inferred
`delete_issue_field`	`destructive`	declared
`list_issue_types`	`read`	declared
`create_issue_type`	`write`	inferred
`delete_issue_type`	`destructive`	declared
`list_organization_issues`	`read`	declared
`list_organization_members`	`read`	declared
`check_organization_membership`	`read`	declared
`list_organization_member_codespaces`	`read`	declared
`delete_codespace_from_organization`	`destructive`	declared
`stop_codespace`	`write`	assumed
`get_copilot_seat_details`	`read`	declared
`get_organization_membership`	`read`	declared
`set_organization_membership`	`write`	inferred
`remove_organization_membership`	`destructive`	declared
`list_organization_migrations`	`read`	declared
`get_migration_status`	`read`	declared
`download_migration_archive`	`read`	declared
`delete_migration_archive`	`destructive`	declared
`unlock_migration_repository`	`destructive`	declared
`list_migration_repositories`	`read`	declared
`list_organization_roles`	`read`	declared
`revoke_team_organization_roles`	`destructive`	declared
`assign_organization_role_to_team`	`write`	inferred
`remove_organization_role_from_team`	`destructive`	declared
`revoke_all_organization_roles_from_user`	`destructive`	declared
`assign_organization_role_to_user`	`write`	inferred
`revoke_organization_role_from_user`	`destructive`	declared
`get_organization_role`	`read`	declared
`list_organization_role_teams`	`read`	declared
`list_organization_role_users`	`read`	declared
`list_outside_collaborators`	`read`	declared
`convert_member_to_outside_collaborator`	`destructive`	declared
`remove_outside_collaborator`	`destructive`	declared
`list_organization_packages`	`read`	declared
`get_organization_package`	`read`	declared
`delete_organization_package`	`destructive`	declared
`restore_organization_package`	`delete`	inferred
`list_organization_package_versions`	`read`	declared
`get_organization_package_version`	`read`	declared
`delete_package_version`	`destructive`	declared
`restore_package_version`	`delete`	inferred
`list_pat_grant_requests`	`read`	declared
`review_pat_grant_requests`	`destructive`	declared
`review_pat_grant_request`	`destructive`	declared
`list_pat_request_repositories`	`read`	declared
`list_organization_pat_grants`	`read`	declared
`revoke_organization_pat_access`	`destructive`	declared
`revoke_org_pat_access`	`destructive`	declared
`list_pat_repositories`	`read`	declared
`list_organization_private_registries`	`read`	declared
`create_organization_private_registry`	`write`	inferred
`get_private_registry_public_key`	`read`	declared
`get_private_registry`	`read`	declared
`update_organization_private_registry`	`write`	inferred
`delete_org_private_registry`	`destructive`	declared
`list_organization_projects`	`read`	declared
`get_organization_project`	`read`	declared
`create_draft_item`	`write`	inferred
`list_project_fields`	`read`	declared
`add_project_field`	`write`	inferred
`get_project_field`	`read`	declared
`list_project_items`	`read`	declared
`add_item_to_project`	`write`	inferred
`get_project_item`	`read`	declared
`update_project_item`	`write`	inferred
`delete_project_item`	`destructive`	declared
`create_project_view`	`read`	inferred
`list_project_view_items`	`read`	declared
`list_organization_custom_property_definitions`	`read`	declared
`get_organization_custom_property`	`read`	declared
`list_organization_repository_custom_properties`	`read`	declared
`batch_update_repository_custom_properties`	`write`	inferred
`list_organization_public_members`	`read`	declared
`check_public_organization_membership`	`read`	declared
`publicize_organization_membership`	`write`	assumed
`remove_public_organization_membership`	`destructive`	declared
`list_organization_repositories`	`read`	declared
`create_organization_repository`	`write`	inferred
`list_organization_rulesets`	`read`	declared
`list_organization_rule_suites`	`read`	declared
`get_organization_rule_suite`	`read`	declared
`get_organization_ruleset`	`read`	declared
`delete_organization_ruleset`	`destructive`	declared
`list_ruleset_history`	`read`	declared
`get_ruleset_version`	`read`	declared
`list_secret_scanning_alerts`	`read`	declared
`list_secret_scanning_patterns`	`read`	declared
`list_organization_security_advisories`	`read`	declared
`list_immutable_release_repositories`	`read`	declared
`enable_repository_immutable_releases`	`read`	inferred
`remove_repository_from_immutable_releases`	`destructive`	declared
`list_network_configurations`	`read`	declared
`get_network_configuration`	`read`	declared
`update_network_configuration`	`write`	inferred
`delete_network_configuration`	`destructive`	declared
`get_network_settings`	`read`	declared
`get_team_copilot_metrics`	`read`	declared
`list_teams`	`read`	declared
`create_team`	`write`	inferred
`get_team`	`read`	declared
`update_team`	`write`	inferred
`delete_team`	`destructive`	declared
`list_team_invitations`	`read`	declared
`list_team_members`	`read`	declared
`get_team_membership`	`read`	declared
`add_or_update_team_membership`	`write`	inferred
`remove_team_member_org`	`destructive`	declared
`list_team_repositories`	`read`	declared
`verify_team_repository_permissions`	`read`	declared
`set_team_repository_permission`	`write`	inferred
`remove_repository_from_team`	`destructive`	declared
`list_child_teams`	`read`	declared
`get_repository`	`read`	declared
`update_repository`	`write`	inferred
`delete_repository`	`destructive`	declared
`list_artifacts`	`read`	declared
`get_artifact`	`read`	declared
`delete_artifact`	`destructive`	declared
`download_artifact`	`read`	declared
`get_cache_retention_limit`	`read`	declared
`get_actions_cache_storage_limit_repository`	`read`	declared
`get_actions_cache_usage`	`read`	declared
`list_caches`	`read`	declared
`delete_actions_cache_by_key`	`destructive`	declared
`delete_actions_cache`	`destructive`	declared
`get_workflow_job`	`read`	declared
`get_workflow_job_logs`	`read`	declared
`rerun_workflow_job`	`write`	assumed
`get_oidc_subject_claim_customization`	`read`	declared
`list_organization_secrets_available_to_repository`	`read`	declared
`list_organization_variables_shared`	`read`	declared
`list_runners`	`read`	declared
`list_runner_downloads`	`read`	declared
`generate_runner_removal_token_repository`	`destructive`	declared
`get_runner_repo`	`read`	declared
`remove_runner_from_repository`	`destructive`	declared
`list_runner_labels_for_repo`	`read`	declared
`add_labels_to_runner_for_repo`	`write`	inferred
`update_runner_labels_repo`	`write`	inferred
`remove_all_custom_labels_from_runner_for_repo`	`destructive`	declared
`remove_runner_label`	`destructive`	declared
`list_workflow_runs`	`read`	declared
`get_workflow_run`	`read`	declared
`delete_workflow_run`	`destructive`	declared
`list_workflow_run_approvals`	`read`	declared
`approve_workflow_run`	`write`	inferred
`list_workflow_run_artifacts`	`read`	declared
`get_workflow_run_attempt`	`read`	declared
`list_workflow_run_attempt_jobs`	`read`	declared
`download_workflow_run_attempt_logs`	`read`	declared
`cancel_workflow_run`	`destructive`	declared
`review_deployment_protection_rule`	`write`	inferred
`force_cancel_workflow_run`	`destructive`	declared
`list_workflow_run_jobs`	`read`	declared
`get_workflow_run_logs_download_url`	`read`	declared
`delete_workflow_run_logs`	`destructive`	declared
`list_pending_deployments`	`read`	declared
`review_pending_deployments`	`destructive`	declared
`rerun_workflow`	`write`	assumed
`rerun_workflow_failed_jobs`	`write`	assumed
`get_workflow_run_usage`	`read`	declared
`list_repository_secrets`	`read`	declared
`get_repository_public_key`	`read`	declared
`get_repository_secret`	`read`	declared
`delete_repository_secret`	`destructive`	declared
`list_repository_variables`	`read`	declared
`create_repository_variable`	`write`	inferred
`get_repository_variable`	`read`	declared
`update_repository_variable`	`write`	inferred
`delete_repository_variable`	`destructive`	declared
`list_workflows`	`read`	declared
`get_workflow`	`read`	declared
`disable_workflow`	`destructive`	declared
`trigger_workflow`	`send`	inferred
`enable_workflow`	`write`	assumed
`list_workflow_runs_for_workflow`	`read`	declared
`list_repository_activities`	`read`	declared
`list_assignees`	`read`	declared
`verify_assignee_permission`	`read`	declared
`create_attestation`	`write`	inferred
`list_attestations`	`read`	declared
`list_autolinks`	`read`	declared
`create_autolink`	`write`	inferred
`get_autolink`	`read`	declared
`delete_autolink`	`destructive`	declared
`get_automated_security_fixes_status`	`read`	declared
`enable_automated_security_fixes`	`write`	inferred
`disable_automated_security_fixes`	`destructive`	declared
`list_branches`	`read`	declared
`get_branch`	`read`	declared
`get_branch_protection`	`read`	declared
`configure_branch_protection`	`write`	assumed
`remove_branch_protection`	`destructive`	declared
`get_branch_admin_protection`	`read`	declared
`enforce_admin_branch_protection`	`write`	assumed
`disable_admin_branch_protection`	`destructive`	declared
`check_branch_signature_protection`	`read`	declared
`disable_branch_signature_protection`	`destructive`	declared
`get_branch_status_checks_protection`	`read`	declared
`disable_branch_status_check_protection`	`destructive`	declared
`list_status_check_contexts`	`read`	declared
`remove_branch_protection_status_check_contexts`	`destructive`	declared
`list_branch_access_restrictions`	`read`	declared
`remove_branch_protection_restrictions`	`destructive`	declared
`list_apps_with_protected_branch_access`	`read`	declared
`update_branch_protection_app_restrictions`	`write`	inferred
`revoke_app_branch_push_access`	`destructive`	declared
`list_teams_with_branch_access`	`read`	declared
`grant_team_branch_push_access`	`write`	inferred
`replace_branch_protection_team_restrictions`	`read`	inferred
`revoke_team_branch_push_access`	`destructive`	declared
`list_branch_protection_users`	`read`	declared
`grant_user_push_access`	`write`	inferred
`revoke_user_branch_access`	`destructive`	declared
`rename_branch`	`write`	inferred
`create_check_run`	`write`	inferred
`get_check_run`	`read`	declared
`update_check_run`	`write`	inferred
`list_check_run_annotations`	`read`	declared
`trigger_check_run_recheck`	`write`	inferred
`create_check_suite`	`write`	inferred
`get_check_suite`	`read`	declared
`list_check_runs`	`read`	declared
`rerun_check_suite`	`write`	inferred
`list_code_scanning_alerts_repository`	`read`	declared
`get_code_scanning_alert`	`read`	declared
`update_code_scanning_alert`	`write`	inferred
`get_autofix_status`	`read`	declared
`create_code_scanning_autofix`	`write`	inferred
`commit_code_scanning_autofix`	`write`	inferred
`list_code_scanning_alert_instances`	`read`	declared
`list_code_scanning_analyses`	`read`	declared
`get_code_scanning_analysis`	`read`	declared
`delete_code_scanning_analysis`	`destructive`	declared
`list_codeql_databases`	`read`	declared
`get_codeql_database`	`read`	declared
`delete_codeql_database`	`destructive`	declared
`create_variant_analysis`	`write`	inferred
`get_variant_analysis`	`read`	declared
`get_variant_analysis_repository_status`	`read`	declared
`get_code_scanning_default_setup`	`read`	declared
`upload_sarif`	`write`	inferred
`get_sarif_upload`	`read`	declared
`get_repository_code_security_configuration`	`read`	declared
`list_codeowners_errors`	`read`	declared
`list_codespaces_in_repository`	`read`	declared
`create_codespace`	`write`	inferred
`list_devcontainers`	`read`	declared
`list_codespace_machines`	`read`	declared
`get_codespace_defaults`	`read`	declared
`list_codespace_secrets`	`read`	declared
`get_codespace_public_key`	`read`	declared
`get_codespace_secret`	`read`	declared
`create_or_update_codespace_secret_repository`	`write`	inferred
`delete_codespace_secret`	`destructive`	declared
`list_collaborators`	`read`	declared
`verify_repository_collaborator`	`read`	declared
`add_collaborator`	`write`	inferred
`remove_collaborator`	`destructive`	declared
`get_collaborator_permission`	`read`	declared
`list_commit_comments`	`read`	declared
`get_commit_comment`	`read`	declared
`update_commit_comment`	`write`	inferred
`delete_commit_comment`	`destructive`	declared
`list_commit_comment_reactions`	`read`	declared
`add_commit_comment_reaction`	`write`	inferred
`remove_commit_comment_reaction`	`destructive`	declared
`list_commits`	`read`	declared
`list_branches_for_commit`	`read`	declared
`list_commit_comments_by_sha`	`read`	declared
`create_commit_comment`	`write`	inferred
`list_pull_requests_for_commit`	`read`	declared
`get_commit`	`read`	declared
`list_check_runs_for_ref`	`read`	declared
`list_check_suites`	`read`	declared
`get_commit_status`	`read`	declared
`list_commit_statuses`	`read`	declared
`get_repository_community_profile`	`read`	declared
`compare_commits`	`read`	declared
`get_repository_content`	`read`	declared
`create_or_update_file`	`write`	inferred
`delete_file`	`destructive`	declared
`list_contributors`	`read`	declared
`list_dependabot_alerts_repository`	`read`	declared
`get_dependabot_alert`	`read`	declared
`update_dependabot_alert`	`write`	inferred
`list_dependabot_secrets`	`read`	declared
`get_dependabot_public_key`	`read`	declared
`get_dependabot_secret`	`read`	declared
`create_or_update_dependabot_secret`	`write`	inferred
`delete_dependabot_secret`	`destructive`	declared
`compare_dependency_changes`	`read`	declared
`export_sbom`	`read`	declared
`submit_dependency_snapshot`	`write`	inferred
`list_deployments`	`read`	declared
`create_deployment`	`write`	inferred
`get_deployment`	`read`	declared
`delete_deployment`	`destructive`	declared
`list_deployment_statuses`	`read`	declared
`create_deployment_status`	`read`	inferred
`get_deployment_status`	`read`	declared
`list_environments`	`read`	declared
`get_environment`	`read`	declared
`configure_environment`	`write`	inferred
`delete_environment`	`destructive`	declared
`list_deployment_branch_policies`	`read`	declared
`create_deployment_branch_policy`	`write`	inferred
`get_deployment_branch_policy`	`read`	declared
`update_deployment_branch_policy`	`write`	inferred
`delete_deployment_branch_policy`	`destructive`	declared
`list_deployment_protection_rules`	`read`	declared
`list_deployment_rule_integrations`	`read`	declared
`get_deployment_protection_rule`	`read`	declared
`disable_deployment_protection_rule`	`destructive`	declared
`list_environment_secrets`	`read`	declared
`get_environment_public_key`	`read`	declared
`get_environment_secret`	`read`	declared
`delete_environment_secret`	`destructive`	declared
`list_environment_variables`	`read`	declared
`create_environment_variable`	`write`	inferred
`get_environment_variable`	`read`	declared
`update_environment_variable`	`write`	inferred
`delete_environment_variable`	`destructive`	declared
`list_repository_events`	`read`	declared
`list_repository_forks`	`read`	declared
`fork_repository`	`write`	inferred
`create_blob`	`write`	inferred
`get_blob`	`read`	declared
`create_commit`	`write`	inferred
`get_commit_object`	`read`	declared
`list_git_refs`	`read`	declared
`get_git_reference`	`read`	declared
`create_git_ref`	`write`	inferred
`update_git_ref`	`write`	inferred
`delete_git_ref`	`destructive`	declared
`create_tag`	`write`	inferred
`get_tag`	`read`	declared
`create_tree`	`write`	inferred
`fetch_tree`	`read`	declared
`list_webhooks_repository`	`read`	declared
`create_webhook_repository`	`write`	inferred
`get_webhook`	`read`	declared
`update_webhook_repository`	`write`	inferred
`delete_webhook_repository`	`destructive`	declared
`get_webhook_config_repository`	`read`	declared
`update_webhook_config_repository`	`write`	inferred
`list_webhook_deliveries`	`read`	declared
`get_webhook_delivery`	`read`	declared
`redeliver_webhook_delivery`	`write`	assumed
`trigger_webhook_ping`	`write`	assumed
`trigger_webhook_test`	`write`	inferred
`get_immutable_releases`	`read`	declared
`get_app_installation_repository`	`read`	declared
`get_repository_interaction_restrictions`	`read`	declared
`remove_interaction_restrictions`	`destructive`	declared
`list_repository_invitations`	`read`	declared
`update_repository_invitation`	`write`	inferred
`delete_repository_invitation`	`destructive`	declared
`list_issues_repository`	`read`	declared
`create_issue`	`write`	inferred
`list_issue_comments_for_repository`	`read`	declared
`get_issue_comment`	`read`	declared
`update_issue_comment`	`write`	inferred
`delete_issue_comment`	`destructive`	declared
`pin_issue_comment`	`write`	assumed
`unpin_issue_comment`	`destructive`	declared
`list_comment_reactions`	`read`	declared
`add_issue_comment_reaction`	`write`	inferred
`remove_issue_comment_reaction`	`destructive`	declared
`list_issue_events`	`read`	declared
`get_issue_event`	`read`	declared
`get_issue`	`read`	declared
`update_issue`	`write`	inferred
`assign_issue_users`	`write`	inferred
`remove_issue_assignees`	`destructive`	declared
`verify_issue_assignee`	`read`	declared
`list_issue_comments`	`read`	declared
`add_issue_comment`	`write`	inferred
`list_blocking_issues`	`read`	declared
`mark_issue_blocked_by`	`write`	assumed
`remove_issue_blocking_dependency`	`destructive`	declared
`list_blocking_dependencies`	`read`	declared
`list_issue_events_for_issue`	`read`	declared
`list_issue_labels`	`read`	declared
`add_issue_labels`	`write`	inferred
`replace_issue_labels`	`write`	inferred
`remove_all_issue_labels`	`destructive`	declared
`remove_issue_label`	`destructive`	declared
`lock_issue`	`write`	inferred
`unlock_issue`	`destructive`	declared
`get_parent_issue`	`read`	declared
`list_issue_reactions`	`read`	declared
`add_issue_reaction`	`write`	inferred
`delete_issue_reaction`	`destructive`	declared
`unlink_sub_issue`	`destructive`	declared
`list_sub_issues`	`read`	declared
`link_sub_issue`	`write`	assumed
`reorder_sub_issue`	`read`	inferred
`list_issue_timeline_events`	`read`	declared
`list_deploy_keys`	`read`	declared
`create_deploy_key`	`write`	inferred
`get_deploy_key`	`read`	declared
`delete_deploy_key`	`destructive`	declared
`list_labels`	`read`	declared
`create_label`	`write`	inferred
`get_label`	`read`	declared
`update_label`	`write`	inferred
`delete_label`	`destructive`	declared
`list_repository_languages`	`read`	declared
`get_repository_license`	`read`	declared
`sync_fork_with_upstream`	`write`	inferred
`merge_branch`	`write`	inferred
`list_milestones`	`read`	declared
`create_milestone`	`write`	inferred
`get_milestone`	`read`	declared
`update_milestone`	`write`	inferred
`delete_milestone`	`destructive`	declared
`list_milestone_labels`	`read`	declared
`list_notifications_repository`	`read`	declared
`mark_repository_notifications_as_read`	`read`	inferred
`get_pages_site`	`read`	declared
`enable_pages_site`	`write`	assumed
`configure_pages_site`	`write`	assumed
`delete_pages_site`	`destructive`	declared
`list_pages_builds`	`read`	declared
`trigger_pages_build`	`write`	inferred
`get_latest_pages_build`	`read`	declared
`get_pages_build`	`read`	declared
`deploy_pages`	`write`	inferred
`get_pages_deployment`	`read`	declared
`cancel_pages_deployment`	`destructive`	declared
`check_private_vulnerability_reporting`	`read`	declared
`list_repository_custom_properties`	`read`	declared
`set_repository_custom_properties`	`write`	inferred
`list_pull_requests`	`read`	declared
`create_pull_request`	`write`	inferred
`list_pull_request_review_comments_for_repo`	`read`	declared
`get_pull_request_review_comment`	`read`	declared
`update_pull_request_review_comment`	`write`	inferred
`delete_pull_request_review_comment`	`destructive`	declared
`list_pull_request_review_comment_reactions`	`read`	declared
`add_reaction_to_pull_request_comment`	`write`	inferred
`remove_pull_request_comment_reaction`	`destructive`	declared
`get_pull_request`	`read`	declared
`update_pull_request`	`write`	inferred
`create_codespace_from_pull_request`	`write`	inferred
`list_pull_request_review_comments`	`read`	declared
`create_pull_request_review_comment`	`write`	inferred
`reply_to_review_comment`	`write`	inferred
`list_pull_request_commits`	`read`	declared
`list_pull_request_files`	`read`	declared
`check_pull_request_merged`	`read`	declared
`merge_pull_request`	`destructive`	declared
`list_pull_request_requested_reviewers`	`read`	declared
`request_pull_request_reviewers`	`write`	inferred
`remove_pull_request_reviewers`	`destructive`	declared
`list_pull_request_reviews`	`read`	declared
`create_pull_request_review`	`write`	inferred
`get_pull_request_review`	`read`	declared
`update_pull_request_review`	`write`	inferred
`delete_pending_review`	`destructive`	declared
`list_review_comments`	`read`	declared
`dismiss_pull_request_review`	`destructive`	declared
`submit_pull_request_review`	`write`	inferred
`sync_pull_request_branch`	`write`	inferred
`get_repository_readme`	`read`	declared
`get_readme`	`read`	declared
`list_releases`	`read`	declared
`create_release`	`write`	inferred
`download_release_asset`	`read`	declared
`update_release_asset`	`write`	inferred
`delete_release_asset`	`destructive`	declared
`generate_release_notes`	`write`	assumed
`get_latest_release`	`read`	declared
`get_release_by_tag`	`read`	declared
`get_release`	`read`	declared
`update_release`	`write`	inferred
`delete_release`	`destructive`	declared
`list_release_assets`	`read`	declared
`upload_release_asset`	`write`	inferred
`list_release_reactions`	`read`	declared
`add_release_reaction`	`write`	inferred
`delete_release_reaction`	`destructive`	declared
`list_branch_rules`	`read`	declared
`list_rule_suites`	`read`	declared
`get_rule_suite`	`read`	declared
`get_ruleset`	`read`	declared
`list_ruleset_history_repository`	`read`	declared
`get_ruleset_version_repository`	`read`	declared
`list_secret_scanning_alerts_repository`	`read`	declared
`get_secret_scanning_alert`	`read`	declared
`update_secret_scanning_alert`	`write`	inferred
`list_secret_alert_locations`	`read`	declared
`bypass_push_protection`	`destructive`	declared
`list_secret_scan_history`	`read`	declared
`list_security_advisories`	`read`	declared
`create_security_advisory`	`destructive`	declared
`report_security_vulnerability`	`destructive`	declared
`get_security_advisory_repository`	`read`	declared
`update_security_advisory`	`write`	inferred
`request_cve_for_advisory`	`write`	inferred
`create_security_advisory_fork`	`write`	inferred
`list_stargazers`	`read`	declared
`get_code_frequency_stats`	`read`	declared
`list_commit_activity_stats`	`read`	declared
`list_contributor_stats`	`read`	declared
`get_repository_participation_stats`	`read`	declared
`get_commit_punch_card`	`read`	declared
`create_commit_status`	`read`	inferred
`list_watchers`	`read`	declared
`get_repository_subscription`	`read`	declared
`configure_repository_subscription`	`write`	assumed
`unwatch_repository`	`destructive`	declared
`list_tags`	`read`	declared
`download_repository_archive`	`read`	declared
`list_repository_teams`	`read`	declared
`list_repository_topics`	`read`	declared
`update_repository_topics`	`write`	inferred
`list_repository_clones`	`read`	declared
`list_popular_paths`	`read`	declared
`get_repository_views`	`read`	declared
`transfer_repository`	`destructive`	declared
`get_vulnerability_alerts_status`	`read`	declared
`enable_vulnerability_alerts`	`write`	assumed
`disable_vulnerability_alerts`	`destructive`	declared
`download_repository_archive_zip`	`read`	declared
`create_repository_from_template`	`write`	inferred
`list_public_repositories`	`read`	declared
`add_issue_field_values`	`write`	inferred
`set_issue_field_values`	`write`	inferred
`delete_issue_field_value`	`destructive`	declared
`search_code`	`read`	declared
`search_commits`	`read`	declared
`search_issues`	`read`	declared
`search_labels`	`read`	declared
`search_repositories`	`read`	declared
`search_topics`	`read`	declared
`search_users`	`read`	declared
`get_authenticated_user`	`read`	declared
`update_user`	`write`	inferred
`list_blocked_users_personal`	`read`	declared
`check_user_blocked`	`read`	declared
`block_user`	`destructive`	declared
`unblock_user`	`destructive`	declared
`list_codespaces`	`read`	declared
`create_codespace_from_pull_request_2`	`write`	inferred
`list_codespace_secrets_for_user`	`read`	declared
`get_codespaces_public_key`	`read`	declared
`get_codespace_secret_for_user`	`read`	declared
`create_or_update_codespace_secret`	`write`	inferred
`delete_codespace_secret_for_user`	`destructive`	declared
`list_repositories_for_secret`	`read`	declared
`update_secret_repositories`	`write`	inferred
`add_repository_to_codespace_secret`	`write`	inferred
`remove_repository_from_codespace_secret`	`destructive`	declared
`get_codespace`	`read`	declared
`update_codespace`	`write`	inferred
`delete_codespace`	`destructive`	declared
`export_codespace`	`write`	assumed
`get_codespace_export_details`	`read`	declared
`list_codespace_machines_available`	`read`	declared
`publish_codespace`	`send`	inferred
`start_codespace`	`write`	assumed
`stop_codespace_authenticated`	`destructive`	declared
`set_primary_email_visibility`	`send`	inferred
`list_emails`	`read`	declared
`add_email`	`send`	inferred
`delete_email`	`destructive`	declared
`list_followers`	`read`	declared
`list_followed_users`	`read`	declared
`check_user_is_followed`	`read`	declared
`follow_user`	`write`	assumed
`unfollow_user`	`destructive`	declared
`list_gpg_keys`	`read`	declared
`add_gpg_key`	`write`	inferred
`get_gpg_key`	`read`	declared
`delete_gpg_key`	`destructive`	declared
`list_app_installations_user`	`read`	declared
`add_repository_to_installation`	`write`	inferred
`remove_repository_from_app_installation`	`destructive`	declared
`get_interaction_restrictions`	`read`	declared
`list_issues_assigned`	`read`	declared
`list_ssh_keys`	`read`	declared
`add_ssh_key`	`write`	inferred
`get_ssh_key`	`read`	declared
`delete_ssh_key`	`destructive`	declared
`list_subscriptions`	`read`	declared
`list_subscriptions_stubbed`	`read`	declared
`list_organization_memberships`	`read`	declared
`get_organization_membership_authenticated`	`read`	declared
`activate_organization_membership`	`write`	assumed
`list_migrations`	`read`	declared
`get_migration_status_user`	`read`	declared
`download_migration_archive_user`	`read`	declared
`delete_migration_archive_user`	`destructive`	declared
`unlock_migration_repository_user`	`destructive`	declared
`list_migration_repositories_user`	`read`	declared
`list_organizations_authenticated`	`read`	declared
`list_packages`	`read`	declared
`get_package`	`read`	declared
`delete_package`	`destructive`	declared
`restore_package`	`delete`	inferred
`list_package_versions`	`read`	declared
`get_package_version`	`read`	declared
`delete_package_version_authenticated`	`destructive`	declared
`restore_package_version_for_authenticated_user`	`delete`	inferred
`list_public_emails`	`read`	declared
`list_repositories`	`read`	declared
`create_repository`	`write`	inferred
`list_repository_invitations_for_user`	`read`	declared
`accept_repository_invitation`	`write`	assumed
`decline_repository_invitation`	`destructive`	declared
`list_social_accounts`	`read`	declared
`add_social_accounts`	`write`	inferred
`delete_social_accounts`	`destructive`	declared
`list_starred_repositories`	`read`	declared
`check_repository_starred`	`read`	declared
`star_repository`	`write`	assumed
`unstar_repository`	`destructive`	declared
`list_watched_repositories`	`read`	declared
`list_teams_authenticated`	`read`	declared
`get_user`	`read`	declared
`create_draft_item_user`	`write`	inferred
`list_users`	`read`	declared
`create_project_view_user`	`read`	inferred
`get_user_by_username`	`read`	declared
`list_attestations_by_digests_user`	`read`	inferred
`delete_attestations_user`	`destructive`	declared
`delete_attestation_by_subject_digest_user`	`destructive`	declared
`delete_attestation_user`	`destructive`	declared
`list_attestations_user`	`read`	declared
`list_user_events`	`read`	declared
`list_organization_events_for_user`	`read`	declared
`list_user_public_events`	`read`	declared
`list_followers_by_username`	`read`	declared
`list_following`	`read`	declared
`check_user_following`	`read`	declared
`list_user_gists`	`read`	declared
`list_gpg_keys_by_username`	`read`	declared
`get_user_hovercard`	`read`	declared
`get_user_installation`	`read`	declared
`list_public_keys`	`read`	declared
`list_user_organizations`	`read`	declared
`list_user_packages`	`read`	declared
`get_package_public`	`read`	declared
`delete_user_package`	`destructive`	declared
`restore_package_for_user`	`delete`	inferred
`list_package_versions_public`	`read`	declared
`get_package_version_public`	`read`	declared
`delete_package_version_user`	`destructive`	declared
`restore_package_version_for_user`	`delete`	inferred
`list_user_projects`	`read`	declared
`get_user_project`	`read`	declared
`list_project_fields_user`	`read`	declared
`add_project_field_user`	`write`	inferred
`get_project_field_user`	`read`	declared
`list_project_items_user`	`read`	declared
`add_item_to_project_user`	`write`	inferred
`get_project_item_user`	`read`	declared
`update_project_item_user`	`write`	inferred
`delete_project_item_user`	`destructive`	declared
`list_project_view_items_user`	`read`	declared
`list_received_events`	`read`	declared
`list_user_public_received_events`	`read`	declared
`list_user_repositories`	`read`	declared
`get_premium_request_usage_report_user`	`read`	declared
`get_billing_usage_report`	`read`	declared
`get_billing_usage_summary_user`	`read`	declared
`list_social_accounts_public`	`read`	declared
`list_ssh_signing_keys_for_user`	`read`	declared
`list_starred_repositories_by_user`	`read`	declared
`list_watched_repositories_by_user`	`read`	declared

Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.

Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.