LeashIndex Get the report

Index / crm

SAGOT

com-sagots-sagot declares 136 capabilities across 136 tools, with 2 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-21 from tools/list on https://sagots.com/mcp, published in the official MCP registry as com.sagots/sagot 0.2.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 136 tools

136 of 136 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 19 of 136 tools

19 tools are classified as irreversible and declare no limit.

high · no-expiry · All 136 tools

136 of 136 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 136 tools

136 of 136 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 67 of 136 tools

67 tools can modify data and declare no limit.

low · uncapped-read · 50 of 136 tools

50 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
access_inforead inferred
waitlist_joinwrite inferred
waitlist_listread inferred
waitlist_updatewrite inferred
waitlist_deletedelete inferred
invitations_createwrite inferred
invitations_listread inferred
invitations_revokedelete inferred
account_registerwrite assumed
account_loginwrite assumed
account_mewrite assumed
account_logoutwrite assumed
account_acceptTermswrite assumed
account_mfaSetupwrite assumed
account_mfaEnablewrite assumed
account_mfaDisablewrite assumed
account_mfaRecoveryCodesread inferred
account_deletedelete inferred
assistants_previewread inferred
assistants_authorizewrite assumed
assistants_listread inferred
assistants_revokedelete inferred
assistants_clients_createwrite inferred
assistants_clients_listread inferred
assistants_clients_revokedelete inferred
workspaces_createwrite inferred
workspaces_listread inferred
workspaces_updatewrite inferred
workspaces_regionwrite assumed
workspaces_deletedelete inferred
members_listread inferred
members_invitewrite assumed
members_updatewrite inferred
members_transferwrite inferred
members_removedelete inferred
members_revokedelete inferred
members_previewread inferred
members_acceptwrite assumed
credentials_createwrite inferred
credentials_listread inferred
credentials_revokedelete inferred
agents_createwrite inferred
agents_listread inferred
agents_getread inferred
agents_savewrite assumed
agents_testread inferred
agents_publishsend inferred
agents_pausewrite assumed
agents_rollbacksend inferred
agents_retirewrite assumed
integrations_savewrite assumed
integrations_listread inferred
integrations_getread inferred
integrations_testwrite assumed
integrations_disconnectwrite assumed
contacts_importwrite assumed
contacts_listread inferred
contacts_historyread inferred
contacts_exportwrite assumed
contacts_updatewrite inferred
contacts_suppresswrite assumed
contacts_erasewrite assumed
campaigns_savewrite assumed
campaigns_listread inferred
campaigns_getread inferred
campaigns_previewread inferred
campaigns_startwrite assumed
campaigns_pausewrite assumed
campaigns_resumewrite assumed
campaigns_canceldelete inferred
calls_createwrite inferred
calls_listread inferred
calls_getread inferred
calls_recordingread inferred
calls_canceldelete inferred
calls_approvewrite inferred
calls_declinewrite assumed
actions_listread inferred
actions_reconcileread inferred
handoffs_listread inferred
handoffs_updatewrite inferred
events_listread inferred
events_replaywrite assumed
policies_getread inferred
policies_updatewrite inferred
usage_getread inferred
billing_getread inferred
billing_topUpwrite assumed
routes_listread inferred
routes_bindwrite assumed
routes_clearAlertwrite assumed
lines_listread inferred
lines_getread inferred
lines_createwrite inferred
lines_twilioNumbersread inferred
lines_updatewrite inferred
lines_verifyNumberread inferred
lines_confirmNumberwrite assumed
lines_testread inferred
lines_clearAlertwrite assumed
lines_deletedelete inferred
artifacts_exportwrite assumed
artifacts_deletedelete inferred
platform_overviewwrite assumed
platform_healthwrite assumed
platform_staff_listread inferred
platform_staff_grantwrite assumed
platform_staff_revokedelete inferred
platform_audit_listread inferred
platform_workspaces_listread inferred
platform_workspaces_getread inferred
platform_workspaces_suspendwrite assumed
platform_workspaces_reactivatewrite assumed
platform_workspaces_limitswrite assumed
platform_accounts_listread inferred
platform_accounts_getread inferred
platform_accounts_suspendwrite assumed
platform_accounts_reactivatewrite assumed
platform_lines_listread inferred
platform_calls_listread inferred
platform_blocklist_listread inferred
platform_blocklist_addwrite inferred
platform_blocklist_removedelete inferred
platform_usagewrite assumed
platform_credits_grantwrite assumed
platform_credits_listread inferred
platform_settings_getread inferred
platform_settings_updatewrite inferred
platform_access_requestwrite inferred
platform_access_listread inferred
platform_access_endwrite assumed
platform_subprocessors_notifysend inferred
support_listread inferred
support_approvewrite inferred
support_denywrite assumed
support_revokedelete inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.