LeashIndex Get the report

Index / storage

com.mcparmory/klaviyo

com-mcparmory-klaviyo declares 295 capabilities across 295 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the PyPI package mcparmory-klaviyo==1.0.3 (published to PyPI as mcparmory-klaviyo, listed in the official MCP registry as com.mcparmory/klaviyo 1.0.3), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 295 tools

295 of 295 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 37 of 295 tools

37 tools are classified as irreversible and declare no limit.

high · no-expiry · All 295 tools

295 of 295 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 295 tools

295 of 295 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 66 of 295 tools

66 tools can modify data and declare no limit.

low · uncapped-read · 192 of 295 tools

192 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
get_accountsread declared
get_accountread declared
list_campaignsread declared
get_campaignread declared
update_campaignwrite inferred
delete_campaigndestructive declared
get_campaign_messageread declared
update_campaign_messagewrite inferred
get_campaign_send_jobread declared
update_campaign_send_jobdestructive declared
get_campaign_recipient_estimation_jobread declared
get_campaign_recipient_estimationread declared
clone_campaignwrite inferred
assign_template_to_campaign_messagewrite inferred
send_campaignsend inferred
trigger_campaign_recipient_estimationread inferred
get_campaign_for_campaign_messageread declared
get_campaign_id_for_campaign_messageread declared
get_template_for_campaign_messageread declared
get_template_id_for_campaign_messageread declared
get_image_for_campaign_messageread declared
get_image_id_for_campaign_messageread declared
update_image_for_campaign_messagewrite inferred
list_tags_for_campaignread declared
list_tag_ids_for_campaignread declared
list_messages_for_campaignread declared
list_message_ids_for_campaignread declared
list_catalog_itemsread declared
create_catalog_itemwrite inferred
get_catalog_itemread declared
update_catalog_itemwrite inferred
delete_catalog_itemdestructive declared
list_catalog_variantsread declared
create_catalog_variantwrite inferred
get_catalog_variantread declared
update_catalog_variantwrite inferred
delete_catalog_variantdestructive declared
list_catalog_categoriesread declared
create_catalog_categorywrite inferred
get_catalog_categoryread declared
update_catalog_categorywrite inferred
delete_catalog_categorydestructive declared
list_bulk_create_catalog_items_jobsread declared
create_catalog_items_bulk_jobwrite inferred
get_bulk_create_catalog_items_jobread declared
list_catalog_item_bulk_update_jobsread declared
create_catalog_item_bulk_update_jobwrite inferred
get_bulk_update_catalog_items_jobread declared
list_bulk_delete_catalog_items_jobsread declared
create_catalog_item_bulk_delete_jobdestructive declared
get_bulk_delete_catalog_items_jobread declared
list_bulk_create_variants_jobsread declared
create_catalog_variants_bulkwrite inferred
get_bulk_create_variants_jobread declared
list_bulk_update_variants_jobsread declared
create_catalog_variant_bulk_update_jobwrite inferred
get_bulk_update_variants_jobread declared
list_bulk_delete_variants_jobsread declared
create_catalog_variant_bulk_delete_jobdestructive declared
get_bulk_delete_variants_jobread declared
list_bulk_create_categories_jobsread declared
create_catalog_categories_bulk_jobwrite inferred
get_bulk_create_categories_jobread declared
list_bulk_update_categories_jobsread declared
create_catalog_category_bulk_update_jobwrite inferred
get_bulk_update_categories_jobread declared
list_bulk_delete_categories_jobsread declared
create_catalog_category_bulk_delete_jobdestructive declared
get_bulk_delete_categories_jobread declared
create_back_in_stock_subscriptionwrite inferred
list_items_for_catalog_categoryread declared
list_item_ids_for_catalog_categoryread declared
add_items_to_catalog_categorywrite inferred
update_items_for_catalog_categorywrite inferred
remove_items_from_catalog_categorydestructive declared
list_variants_for_catalog_itemread declared
list_variant_ids_for_catalog_itemread declared
list_categories_for_catalog_itemread declared
list_category_ids_for_catalog_itemread declared
add_categories_to_catalog_itemwrite inferred
update_categories_for_catalog_itemwrite inferred
remove_categories_from_catalog_itemdestructive declared
list_couponsread declared
create_couponwrite inferred
get_couponread declared
update_couponwrite inferred
delete_coupondestructive declared
list_coupon_codesread declared
create_coupon_codewrite inferred
get_coupon_coderead declared
update_coupon_codewrite inferred
delete_coupon_codedestructive declared
list_coupon_code_bulk_create_jobsread declared
create_coupon_code_bulk_jobwrite inferred
get_coupon_code_bulk_create_jobread declared
get_coupon_for_coupon_coderead declared
get_coupon_relationship_for_coupon_coderead declared
list_coupon_codes_for_couponread declared
list_coupon_code_ids_for_couponread declared
list_data_sourcesread declared
create_data_sourcewrite inferred
get_data_sourceread declared
delete_data_sourcedestructive declared
create_data_source_records_bulkwrite inferred
create_data_source_recordread inferred
create_profile_deletion_jobdestructive declared
list_eventsread declared
create_eventwrite inferred
get_eventread declared
create_events_bulkwrite inferred
get_metric_for_eventread declared
list_metrics_for_eventread declared
get_profile_for_eventread declared
get_profile_id_for_eventread declared
list_flowsread declared
get_flowread declared
update_flow_statusread inferred
delete_flowdestructive declared
get_flow_actionread declared
get_flow_messageread declared
list_actions_for_flowread declared
list_action_ids_for_flowread declared
get_tags_for_flowread declared
list_tag_ids_for_flowread declared
get_flow_for_flow_actionread declared
get_flow_relationship_for_flow_actionread declared
list_flow_action_messagesread declared
list_message_ids_for_flow_actionread declared
get_flow_action_for_messageread declared
get_flow_action_for_flow_messageread declared
get_template_for_flow_messageread declared
get_template_id_for_flow_messageread declared
list_formsread declared
create_formwrite inferred
get_formread declared
delete_formdestructive declared
get_form_versionread declared
list_versions_for_formread declared
list_version_ids_for_formread declared
get_form_for_form_versionread declared
get_form_id_for_form_versionread declared
list_imagesread declared
import_image_from_urlwrite assumed
get_imageread declared
update_imagewrite inferred
create_image_from_filewrite inferred
list_listsread declared
create_listread inferred
get_listread declared
update_listread inferred
delete_listdestructive declared
list_tags_for_listread declared
list_tag_ids_for_listread declared
list_profiles_for_listread declared
list_profile_ids_for_listread declared
add_profiles_to_listread inferred
remove_profiles_from_listdestructive declared
list_flows_triggered_by_listread declared
list_flow_trigger_ids_for_listread declared
list_metricsread declared
get_metricread declared
get_metric_propertyread declared
list_custom_metricsread declared
create_custom_metricwrite inferred
get_custom_metricread declared
update_custom_metricwrite inferred
delete_custom_metricdestructive declared
list_mapped_metricsread declared
get_mapped_metricread declared
update_mapped_metricwrite inferred
query_metric_aggregatesread inferred
list_flows_triggered_by_metricread declared
list_flow_ids_triggered_by_metricread declared
get_metric_propertiesread declared
list_property_ids_for_metricread declared
get_metric_for_metric_propertyread declared
get_metric_id_for_metric_propertyread declared
get_metrics_for_custom_metricread declared
list_metrics_for_custom_metricread declared
get_metric_for_mapped_metricread declared
get_metric_id_for_mapped_metricread declared
get_custom_metric_for_mapped_metricread declared
get_custom_metric_id_for_mapped_metricread declared
list_profilesread declared
create_profilewrite inferred
get_profileread declared
update_profilewrite inferred
list_bulk_import_profiles_jobsread declared
create_profile_bulk_import_jobwrite inferred
get_bulk_import_profiles_jobread declared
list_bulk_suppress_profiles_jobsread declared
create_profile_suppression_bulk_jobwrite inferred
get_bulk_suppress_profiles_jobread declared
list_bulk_unsuppress_profiles_jobsread declared
remove_profile_suppressions_bulkdestructive declared
get_bulk_unsuppress_profiles_jobread declared
list_push_tokensread declared
create_or_update_push_tokenwrite inferred
get_push_tokenread declared
delete_push_tokendestructive declared
create_or_update_profilewrite inferred
merge_profileswrite inferred
subscribe_profiles_bulksend inferred
unsubscribe_profiles_bulkdestructive declared
list_push_tokens_for_profileread declared
list_push_token_ids_for_profileread declared
list_lists_for_profileread declared
get_lists_for_profile_relationshipread declared
get_segments_for_profileread declared
list_segment_ids_for_profileread declared
get_lists_for_bulk_import_profiles_jobread declared
get_list_ids_for_bulk_import_profiles_jobread declared
list_profiles_for_bulk_import_jobread declared
list_profile_ids_for_bulk_import_jobread declared
list_import_errors_for_bulk_import_profiles_jobread declared
get_profile_for_push_tokenread declared
get_profile_id_for_push_tokenread declared
query_campaign_values_reportread inferred
query_flow_values_reportread inferred
get_flow_series_analyticsread inferred
query_form_values_reportread inferred
get_form_series_analyticsread inferred
get_segment_values_reportread inferred
get_segment_series_reportread inferred
list_reviewsread declared
get_reviewread declared
update_reviewwrite inferred
list_segmentsread declared
create_segmentwrite inferred
get_segmentread declared
update_segmentwrite inferred
delete_segmentdestructive declared
list_tags_for_segmentread declared
list_tag_ids_for_segmentread declared
list_profiles_for_segmentread declared
list_profile_ids_for_segmentread declared
list_flows_triggered_by_segmentread declared
list_flow_ids_triggered_by_segmentread declared
list_tagsread declared
create_tagwrite inferred
get_tagread declared
update_tagwrite inferred
delete_tagdestructive declared
list_tag_groupsread declared
create_tag_groupwrite inferred
get_tag_groupread declared
update_tag_groupwrite inferred
delete_tag_groupdestructive declared
list_flows_for_tagread declared
add_flows_to_tagwrite inferred
remove_tag_from_flowsdestructive declared
list_campaign_ids_for_tagread declared
add_campaigns_to_tagwrite inferred
remove_tag_from_campaignsdestructive declared
list_lists_for_tagread declared
associate_lists_with_tagread inferred
remove_tag_from_listsdestructive declared
list_segment_ids_for_tagread declared
add_segments_to_tagwrite inferred
remove_tag_from_segmentsdestructive declared
get_tag_group_for_tagread declared
get_tag_group_id_for_tagread declared
list_tags_for_tag_groupread declared
list_tag_ids_for_tag_groupread declared
list_templatesread declared
create_templatewrite inferred
get_templateread declared
update_templatewrite inferred
delete_templatedestructive declared
list_universal_contentread declared
create_universal_contentwrite inferred
get_universal_contentread declared
update_template_universal_contentwrite inferred
delete_universal_contentdestructive declared
render_templatesend inferred
create_template_clonewrite inferred
get_tracking_settingsread declared
get_tracking_settingread declared
list_web_feedsread declared
create_web_feedwrite inferred
get_web_feedread declared
update_web_feedwrite inferred
delete_web_feeddestructive declared
list_webhooksread declared
get_webhookread declared
update_webhookwrite inferred
delete_webhookdestructive declared
list_webhook_topicsread declared
get_webhook_topicread declared
list_client_review_values_reportsread declared
list_client_reviewsread declared
create_client_reviewwrite inferred
create_client_subscriptionwrite inferred
create_or_update_client_profilewrite inferred
subscribe_profile_to_back_in_stock_notificationssend inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.