LeashIndex Get the report

Index / devtools

com.mcparmory/sentry

com-mcparmory-sentry declares 200 capabilities across 200 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list answered by the PyPI package mcparmory-sentry==1.0.2 (published to PyPI as mcparmory-sentry, listed in the official MCP registry as com.mcparmory/sentry 1.0.2), run in an isolated container with no network access and no credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 200 tools

200 of 200 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 36 of 200 tools

36 tools are classified as irreversible and declare no limit.

high · no-expiry · All 200 tools

200 of 200 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 200 tools

200 of 200 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 53 of 200 tools

53 tools can modify data and declare no limit.

low · uncapped-read · 111 of 200 tools

111 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
list_organizationsread declared
get_organizationread declared
update_organizationwrite inferred
update_metric_alert_rulewrite inferred
list_integration_providersread declared
list_organization_dashboardsread declared
create_dashboardwrite inferred
get_organization_dashboardread declared
update_organization_dashboardwrite inferred
delete_organization_dashboarddestructive declared
list_organization_monitorsread declared
update_organization_monitors_enabled_statewrite inferred
delete_monitors_bulkdestructive declared
get_monitor_detectorread declared
update_monitor_detectorwrite inferred
delete_monitordestructive declared
list_organization_discover_saved_queriesread declared
create_saved_queryread inferred
get_discover_saved_queryread declared
update_discover_saved_queryread inferred
delete_discover_saved_querydestructive declared
list_organization_environmentsread declared
resolve_event_idread declared
search_events_in_table_formatread declared
get_events_timeseriesread declared
link_external_userwrite assumed
update_external_userwrite inferred
delete_external_userdestructive declared
list_data_forwarders_for_organizationread declared
create_data_forwarder_for_organizationwrite inferred
update_data_forwarderwrite inferred
delete_data_forwarder_for_organizationdestructive declared
list_organization_integrationsread declared
get_organization_integrationread declared
delete_organization_integrationdestructive declared
list_organization_issuesread declared
bulk_update_issuesdestructive declared
delete_organization_issuesdestructive declared
list_organization_membersread declared
add_member_to_organizationwrite inferred
get_organization_memberread declared
update_organization_member_roleswrite inferred
delete_organization_memberdestructive declared
add_member_to_teamwrite inferred
update_organization_member_team_rolewrite inferred
remove_member_from_teamdestructive declared
list_monitors_for_organizationread declared
create_monitorwrite inferred
get_monitorread declared
update_monitorwrite inferred
delete_monitor_or_monitor_environmentsdestructive declared
list_checkins_for_monitorread declared
list_spike_protection_notificationsread declared
get_spike_protection_notification_actionread declared
get_artifact_install_detailsread declared
get_artifact_size_analysisread declared
list_repositories_for_ownerread declared
get_repository_sync_statusread declared
sync_repositories_for_ownerwrite assumed
list_repository_tokens_for_ownerread declared
get_repositoryread declared
list_repository_branchesread declared
list_test_results_for_repositoryread declared
get_test_results_aggregates_for_repositoryread declared
list_test_suites_for_repositoryread declared
regenerate_repository_upload_tokendestructive declared
list_organization_client_keysread declared
list_organization_projectsread declared
create_metric_monitor_for_projectwrite inferred
list_organization_trusted_relaysread declared
list_release_threshold_statusesread declared
get_organization_releaseread declared
update_organization_releasewrite inferred
delete_organization_releasedestructive declared
list_release_deploysread declared
create_deploy_for_releasewrite inferred
get_replay_count_for_issues_or_transactionsread declared
list_organization_replay_selectorsread declared
list_organization_replaysread declared
get_replay_instanceread declared
list_repository_commitsread declared
list_organization_teams_scimread declared
create_team_in_organizationwrite inferred
list_organization_scim_membersread declared
create_organization_memberwrite inferred
list_sentry_appsread declared
list_release_health_session_statisticsread declared
resolve_short_idread declared
get_organization_events_count_by_projectread declared
get_event_counts_for_organizationread declared
list_organization_teamsread declared
create_teamwrite inferred
list_user_teams_in_organizationread declared
list_alertsread declared
create_alert_for_organizationwrite inferred
update_organization_alerts_bulkwrite inferred
delete_alerts_bulkdestructive declared
get_alertread declared
update_alertwrite inferred
delete_alertdestructive declared
get_projectread declared
update_projectwrite inferred
delete_projectdestructive declared
list_project_environmentsread declared
get_project_environmentread declared
update_project_environment_visibilitywrite inferred
list_project_error_eventsread declared
get_source_map_debug_for_eventread declared
list_project_filtersread declared
update_inbound_data_filterwrite inferred
list_project_client_keysread declared
create_project_client_keywrite inferred
get_client_keyread declared
update_client_keywrite inferred
delete_client_keydestructive declared
list_project_membersread declared
get_monitor_projectread declared
update_monitor_projectwrite inferred
delete_monitor_for_projectdestructive declared
list_checkins_for_monitor_in_projectread declared
get_project_ownership_configurationread declared
update_project_ownership_configurationwrite inferred
get_latest_installable_buildread declared
delete_replaydestructive declared
list_clicked_nodesread declared
list_replay_recording_segmentsread declared
get_recording_segmentread declared
list_users_who_viewed_replayread declared
list_replay_deletion_jobsread declared
create_replay_deletion_jobdestructive declared
get_replay_deletion_jobread declared
get_issue_alert_ruleread declared
update_issue_alert_rulewrite inferred
delete_issue_alert_ruledestructive declared
list_project_symbol_sourcesread declared
add_symbol_source_to_projectwrite inferred
update_project_symbol_sourcewrite inferred
delete_symbol_sourcedestructive declared
list_teams_for_projectread declared
add_team_to_projectwrite inferred
delete_team_from_projectdestructive declared
get_custom_integrationread declared
delete_custom_integrationdestructive declared
get_teamread declared
update_teamwrite inferred
delete_teamdestructive declared
link_external_teamwrite assumed
update_external_teamwrite inferred
delete_external_team_linkdestructive declared
list_team_membersread declared
list_team_projectsread declared
create_project_for_teamwrite inferred
list_organization_repositoriesread declared
list_debug_information_filesread declared
upload_dsym_filewrite inferred
delete_debug_information_filedestructive declared
list_project_usersread declared
list_tag_valuesread declared
get_event_counts_for_projectread declared
list_project_user_feedbackread declared
submit_user_feedbackwrite assumed
list_project_service_hooksread declared
get_service_hookread declared
update_service_hookwrite inferred
remove_service_hookdestructive declared
get_eventread declared
list_project_issuesread declared
update_issues_bulkdestructive declared
delete_issuesdestructive declared
list_tag_values_for_issueread declared
list_issue_hashesread declared
get_issueread declared
update_issuewrite inferred
delete_issuedestructive declared
list_organization_releasesread declared
create_release_for_organizationwrite inferred
list_release_filesread declared
upload_release_filewrite inferred
list_release_files_for_projectread declared
upload_release_file_projectwrite inferred
get_release_fileread declared
update_organization_release_filewrite inferred
delete_release_filedestructive declared
get_release_file_projectread declared
update_release_filewrite inferred
delete_release_file_for_projectdestructive declared
list_release_commitsread declared
list_release_commits_for_projectread declared
list_files_changed_in_release_commitsread declared
list_organization_sentry_app_installationsread declared
create_or_update_external_issuewrite inferred
delete_external_issuedestructive declared
enable_spike_protection_for_projectswrite assumed
disable_spike_protection_for_projectsdestructive declared
get_issue_autofix_stateread declared
trigger_issue_autofixwrite assumed
list_issue_eventsread declared
get_issue_eventread declared
list_external_issues_for_issueread declared
get_tag_values_for_issueread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.