io.github.rijul170/alertlogic-mcp
io-github-rijul170-alertlogic-mcp declares 422 capabilities across 422 tools, with 2 critical issues. One of them, no-revocation, is recorded for every server in the index because MCP has no field in which to declare a way to switch a tool off; a missing declaration is not evidence that the control is missing.
Issues
422 of 422 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.
11 tools are classified as irreversible and declare no limit.
422 of 422 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.
422 of 422 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.
110 tools can modify data and declare no limit.
301 tools can read data and declare no limit.
Declared capabilities
| Tool | Read as | Basis |
|---|---|---|
aims_authenticate | read |
declared |
aims_token_info | read |
declared |
aims_list_managed_accounts | read |
declared |
aims_get_account | read |
declared |
aims_list_account_ids | read |
declared |
aims_update_account | write |
inferred |
aims_get_account_details | read |
declared |
aims_get_account_by_name | read |
declared |
aims_get_account_topology | read |
declared |
aims_check_relationship | read |
declared |
aims_list_accounts_by_relationship | read |
declared |
aims_get_account_ids_by_relationship | read |
declared |
aims_list_accounts_managed_v2 | read |
declared |
aims_list_users | read |
declared |
aims_get_user | read |
declared |
aims_create_user | write |
inferred |
aims_update_user | write |
inferred |
aims_get_user_permissions | read |
declared |
aims_list_roles | read |
declared |
aims_create_role | write |
inferred |
aims_get_role | read |
declared |
aims_update_role | write |
inferred |
aims_list_global_roles | read |
declared |
aims_get_global_role | read |
declared |
aims_grant_role | write |
assumed |
aims_get_user_roles | read |
declared |
aims_list_user_role_ids | read |
declared |
aims_get_user_by_email | read |
declared |
aims_get_user_by_username | read |
declared |
aims_get_user_global | read |
declared |
aims_list_access_keys | read |
declared |
aims_create_access_key | write |
inferred |
aims_get_access_key | read |
declared |
aims_update_access_key | write |
inferred |
aims_enroll_mfa | write |
assumed |
aims_change_password | write |
assumed |
deployments_list | read |
declared |
deployments_get | read |
declared |
deployments_create | write |
inferred |
deployments_update | write |
inferred |
assets_query | read |
declared |
assets_get_topology | read |
declared |
assets_declare | write |
assumed |
assets_batch_declare | write |
assumed |
assets_declare_properties | write |
inferred |
assets_list_groups | read |
declared |
assets_create_update_group | write |
inferred |
assets_find | read |
declared |
assets_find_batch | read |
declared |
assets_get_details | read |
declared |
assets_get_details_post | send |
inferred |
assets_query_all | read |
declared |
assets_get_exposures_post | send |
inferred |
policies_list | read |
declared |
policies_get | read |
declared |
credentials_list | read |
declared |
credentials_get | read |
declared |
credentials_create_iam_role | write |
inferred |
credentials_create_azure_ad | write |
inferred |
credentials_get_scan | read |
declared |
credentials_set_scan | write |
inferred |
credentials_get_all_scan | read |
declared |
credentials_get_decrypted | read |
declared |
exclusions_list | read |
declared |
exclusions_get | read |
declared |
exclusions_create | write |
inferred |
exclusions_update | write |
inferred |
exclusions_check_asset | read |
declared |
whitelist_list_tags | read |
declared |
whitelist_add_tag | write |
inferred |
whitelist_list_hosts | read |
declared |
whitelist_check_host | read |
declared |
endpoints_query_batch | read |
declared |
endpoints_get_by_type | read |
declared |
endpoints_get_by_residency | read |
declared |
assets_write_batch | write |
inferred |
incidents_list | read |
declared |
incidents_get | read |
declared |
incident_get_by_friendly_id | read |
declared |
incidents_complete | delete |
inferred |
incidents_reopen | write |
assumed |
incidents_add_feedback | write |
inferred |
incidents_get_elaborations | read |
declared |
incidents_list_partner | read |
declared |
incidents_list_filters | read |
declared |
incidents_get_notes | read |
declared |
incidents_add_note | write |
inferred |
search_submit | read |
inferred |
search_status | read |
declared |
search_results | read |
declared |
search_validate | read |
declared |
search_rerun | read |
inferred |
search_complete | read |
inferred |
search_get_grammar | read |
declared |
search_get_peg | read |
declared |
search_convert_from_v1 | read |
declared |
search_get_messages | read |
declared |
search_get_messages_by_id | read |
declared |
get_exposures | read |
declared |
get_health_summary | read |
declared |
cargo_list_schedules | read |
declared |
cargo_list_executions | read |
declared |
cargo_rerun_execution | write |
assumed |
cargo_rerun_executions | write |
assumed |
cargo_get_schedule | read |
inferred |
cargo_create_schedule | write |
inferred |
cargo_update_schedule | write |
inferred |
cargo_get_execution | read |
declared |
cargo_trigger_instant_report | write |
assumed |
aetuner_list_analytics | read |
declared |
aetuner_get_analytic | read |
declared |
aetuner_set_tuning | write |
inferred |
aetuner_list_analytics_v2 | read |
declared |
aetuner_get_analytic_v2 | read |
declared |
aetuner_update_analytic_v2 | write |
inferred |
aetuner_list_tagsets | read |
declared |
aetuner_update_tagsets | write |
inferred |
vuln_list_exposures | read |
declared |
vuln_list_by_severity | read |
declared |
vuln_get_asset_exposures | read |
declared |
remediations_get_health_by_type | read |
declared |
remediations_get_risk_summary | read |
declared |
remediations_get_risk_by_asset | read |
declared |
remediations_get_scores | read |
declared |
remediations_get_assessment_specs | read |
declared |
remediations_list_items | read |
declared |
remediations_get_item | read |
declared |
remediation_items_list | read |
declared |
remediations_conclude | write |
assumed |
remediations_dispose | write |
assumed |
remediations_undispose | write |
assumed |
sources_list | read |
declared |
sources_get | read |
declared |
sources_create | write |
inferred |
sources_update | write |
inferred |
connectors_update | write |
inferred |
connectors_list_targets | read |
declared |
connectors_get_target | read |
declared |
connectors_create_target | write |
inferred |
connectors_update_target | write |
inferred |
connectors_list_targets_full | read |
declared |
connectors_list_notifications | read |
declared |
connectors_get_notification | read |
declared |
connectors_list_integration_definitions | read |
declared |
connectors_get_payload_types | read |
declared |
connectors_send_notification | send |
inferred |
responder_list_playbooks | read |
declared |
responder_get_playbook | read |
declared |
responder_create_playbook | write |
inferred |
responder_update_playbook | write |
inferred |
responder_get_playbook_stats | read |
declared |
responder_list_playbook_templates | read |
declared |
responder_get_playbook_template | read |
declared |
responder_create_playbook_from_template | write |
inferred |
responder_list_actions | read |
declared |
responder_get_action | read |
declared |
responder_create_execution | write |
inferred |
responder_get_execution | read |
declared |
responder_query_executions | read |
declared |
responder_rerun_execution | write |
assumed |
responder_pause_execution | write |
assumed |
responder_resume_execution | write |
assumed |
responder_list_inquiries | read |
declared |
responder_get_inquiry | read |
declared |
responder_respond_to_inquiry | write |
assumed |
responder_query_inquiry_history | read |
declared |
responder_list_triggers | read |
declared |
responder_create_trigger | write |
inferred |
responder_get_trigger | read |
declared |
responder_update_trigger | write |
inferred |
responder_list_mr_configs | read |
declared |
responder_get_mr_config | read |
declared |
responder_create_mr_config | write |
inferred |
responder_update_mr_config | write |
inferred |
responder_get_limits | read |
declared |
subscriptions_list | read |
declared |
subscriptions_get | read |
declared |
herald_list_notifications_by_type | read |
declared |
herald_get_incident_notifications | read |
declared |
herald_update_subscription | write |
inferred |
herald_list_subscribers | read |
declared |
herald_add_subscriber | write |
inferred |
herald_update_subscribers_batch | write |
inferred |
subscriptions_list_entitlements | read |
declared |
subscriptions_get_accounts_with_entitlement | read |
declared |
herald_list_notification_types | read |
declared |
herald_send_notification | send |
inferred |
herald_get_notification | read |
declared |
herald_list_subscriptions | read |
declared |
herald_create_subscription | write |
inferred |
herald_get_subscription | read |
declared |
connectors_list | read |
declared |
connectors_create_webhook | write |
inferred |
connectors_create_email | send |
inferred |
connectors_get | read |
declared |
connectors_list_integration_types | read |
declared |
endpoints_get | read |
declared |
flags_list | read |
declared |
flags_get | read |
declared |
flags_set | write |
inferred |
dashboards_list | read |
declared |
dashboards_get | read |
declared |
dashboards_create | write |
inferred |
dashboards_update | write |
inferred |
bulk_list_deployments | read |
declared |
bulk_health_check | read |
declared |
ticket_list | read |
declared |
ticket_get | read |
declared |
ticket_create | write |
inferred |
ticket_update | write |
inferred |
ticket_add_comment | write |
inferred |
ticket_list_comments | read |
declared |
ticket_close | delete |
inferred |
ticket_reopen | delete |
inferred |
otis_list_options | read |
declared |
otis_get_option | read |
declared |
otis_create_option | write |
inferred |
otis_update_option | write |
inferred |
otis_list_cross_protected_networks | read |
declared |
otis_list_cross_protecting_networks | read |
declared |
ingest_submit_data | write |
assumed |
ingest_list_sources | read |
declared |
ingest_get_source | read |
declared |
inquisitor_submit_search | read |
declared |
inquisitor_get_search | read |
declared |
scan_scheduler_trigger | write |
assumed |
scan_scheduler_validate_ips | read |
declared |
scan_scheduler_validate_ips_by_type | read |
declared |
scan_scheduler_list_timezones | read |
declared |
scan_scheduler_list_schedules | read |
declared |
scan_scheduler_create_schedule | write |
inferred |
scan_scheduler_get_schedule | read |
inferred |
scan_scheduler_update_schedule | write |
inferred |
scan_scheduler_get_schedule_summary | read |
inferred |
scan_scheduler_get_scan_intervals | read |
declared |
vuln_kb_get | read |
declared |
vuln_kb_list | read |
declared |
vuln_kb_create | write |
inferred |
vuln_kb_batch_create | write |
inferred |
remediation_kb_get | read |
declared |
remediation_kb_list | read |
declared |
remediation_kb_update | write |
inferred |
remediation_kb_create | write |
inferred |
remediation_kb_batch_create | write |
inferred |
suggestions_v1_list | read |
declared |
suggestions_v1_get | read |
declared |
suggestions_v1_create | write |
inferred |
suggestions_v1_update | write |
inferred |
suggestions_v2_list | read |
declared |
suggestions_v2_get | read |
declared |
suggestions_v2_create | write |
inferred |
suggestions_v2_update | write |
inferred |
aecontent_list_analytics | read |
declared |
aecontent_get_analytic | read |
declared |
aecontent_get_analytic_observations | read |
declared |
aecontent_list_observations | read |
declared |
aecontent_list_content_types | read |
declared |
aecontent_list_tags | read |
declared |
aecontent_list_account_analytics | read |
declared |
aecontent_get_account_analytic | read |
declared |
aecontent_create_account_analytic | write |
inferred |
aether_search_exposures | read |
declared |
themis_get_role | read |
declared |
themis_get_roles | read |
declared |
themis_validate_credentials | read |
declared |
watchlist_list_entries | read |
declared |
watchlist_get_entry | read |
declared |
watchlist_add_entry | write |
inferred |
watchlist_update_entry | write |
inferred |
watchlist_batch_add_entries | write |
inferred |
watchlist_check | read |
declared |
usage_get | read |
declared |
usage_get_metric | read |
declared |
usage_get_billing | read |
declared |
usage_get_limits | read |
declared |
assets_manager_export_scope | read |
declared |
assets_manager_import_scope | write |
assumed |
assets_manager_create_network | write |
inferred |
assets_manager_update_network | write |
inferred |
assets_manager_list_protection_levels | read |
declared |
cloud_explorer_list_environments | read |
declared |
cloud_explorer_get_environment | read |
declared |
cloud_explorer_get_topology | read |
declared |
cloud_explorer_get_topology_v2 | read |
declared |
cloud_explorer_list_regions | read |
declared |
cloud_explorer_list_vpcs | read |
declared |
cloud_explorer_list_subnets | read |
declared |
cloud_explorer_list_hosts | read |
declared |
cloud_explorer_list_remediations | read |
declared |
cloud_explorer_get_remediation | read |
declared |
cloud_explorer_list_exposures | read |
declared |
cloud_explorer_get_exposure | read |
declared |
azure_explorer_list_subscriptions | read |
declared |
azure_explorer_get_subscription | read |
declared |
azure_explorer_list_resource_groups | read |
declared |
azure_explorer_get_resource_group | read |
declared |
azure_explorer_list_virtual_networks | read |
declared |
azure_explorer_get_virtual_network | read |
declared |
azure_explorer_list_subnets | read |
declared |
azure_explorer_list_virtual_machines | read |
declared |
azure_explorer_get_virtual_machine | read |
declared |
azure_explorer_list_security_groups | read |
declared |
azure_explorer_get_security_group | read |
declared |
azure_explorer_list_network_interfaces | read |
declared |
azure_explorer_list_public_ips | read |
declared |
aefr_get_audit | read |
declared |
aefr_get_global_evolution_rules | read |
declared |
aefr_get_global_evolution_rules_by_data_type | read |
declared |
aefr_get_global_evolution_rule_by_path | read |
declared |
aefr_get_evolution_rule_by_id | read |
declared |
aefr_get_evolution_rules | read |
declared |
aefr_get_evolution_rule_by_path | read |
declared |
aefr_get_global_triggers | read |
declared |
aefr_get_global_triggers_by_data_type | read |
declared |
aefr_get_global_trigger_by_path | read |
declared |
aefr_get_trigger_by_id | read |
declared |
aefr_create_global_trigger | write |
inferred |
aefr_validate_trigger | read |
declared |
aefr_get_triggers | read |
declared |
aefr_create_trigger | write |
inferred |
aefr_get_global_filters | read |
declared |
aefr_get_global_filters_by_data_type | read |
declared |
aefr_get_global_filter_by_path | read |
declared |
aefr_get_filter_by_id | read |
declared |
aefr_create_global_filter | write |
inferred |
aefr_validate_filter | read |
declared |
aefr_get_filters | read |
declared |
aefr_create_filter | write |
inferred |
aerta_get_audit | read |
declared |
aerta_get_global_rtas | read |
declared |
aerta_get_global_rtas_by_data_type | read |
declared |
aerta_get_global_rta_by_path | read |
declared |
aerta_get_global_rta_by_id | read |
declared |
aerta_create_global_rta | write |
inferred |
aerta_validate_rta | read |
declared |
aerta_get_rtas | read |
declared |
aerta_get_rtas_by_data_type | read |
declared |
aerta_get_rta_by_path | read |
declared |
aerta_create_rta | write |
inferred |
aerta_fetch_rta_by_path | read |
declared |
aerta_fetch_rta_by_id | read |
declared |
aetag_get_audit | read |
declared |
aetag_get_global_tagsets | read |
declared |
aetag_get_global_tagset_by_path | read |
declared |
aetag_get_tagset_by_id | read |
declared |
aetag_create_global_tagset | write |
inferred |
aetag_validate_tagset | read |
declared |
aetag_get_tagsets | read |
declared |
aetag_get_tagset_by_path | read |
declared |
aetag_create_tagset | write |
inferred |
aetag_lookup_tagset | read |
declared |
aetag_get_global_tuning_by_path | read |
declared |
aetag_create_global_tuning | write |
inferred |
aetag_validate_tuning | read |
declared |
aetag_get_tuning_by_path | read |
declared |
aetag_create_tuning | write |
inferred |
aetag_get_definitions | read |
declared |
aetag_get_definition_by_path | read |
declared |
aetag_get_definition_by_id | read |
declared |
aetag_create_definition | write |
inferred |
aetag_validate_definition | read |
declared |
aetag_get_tuning_for_account_ids | read |
declared |
aetag_get_tuning_for_tagset | read |
declared |
aetag_get_tuning_for_analytic | read |
declared |
aepublish_publish_observations | send |
inferred |
kalm_list_named_queries | read |
declared |
kalm_get_named_query | read |
declared |
kalm_list_tables | read |
declared |
kalm_get_table | read |
declared |
notify_send_email | send |
inferred |
notify_send_emails | send |
inferred |
search_stylist_get_results | read |
declared |
search_stylist_export_results | read |
declared |
aemanual_healthcheck | read |
declared |
aemanual_create_incident | write |
inferred |
environments_list | read |
declared |
environments_get | read |
declared |
environments_create_aws | write |
inferred |
environments_update | write |
inferred |
environments_get_status | read |
declared |
environments_list_resources | read |
declared |
environments_trigger_scan | write |
assumed |
environments_list_scans | read |
declared |
environments_get_scan_summary | read |
declared |
scan_result_list_scans | read |
declared |
scan_result_list_executions | read |
declared |
scan_result_get_results | read |
declared |
scan_result_get_latest | read |
declared |
album_get_current_images | read |
declared |
album_get_all_images | read |
declared |
album_get_image | read |
declared |
album_get_image_product_type | read |
declared |
album_get_enabled_image_set | read |
inferred |
album_get_all_image_set | read |
inferred |
album_get_version_image_set | read |
inferred |
album_add_new_images | write |
inferred |
album_enable_version_image_set | write |
inferred |
informant_get_account_messages | read |
declared |
informant_get_deployment_messages | read |
declared |
strawboss_list_jobs | read |
declared |
strawboss_get_job | read |
declared |
strawboss_get_job_results | read |
declared |
strawboss_retry_job | write |
assumed |
strawboss_list_workers | read |
declared |
strawboss_get_worker | read |
declared |
strawboss_get_queue | read |
declared |
tacoma_list_appliances | read |
declared |
tacoma_get_appliance | read |
declared |
tacoma_get_appliance_status | read |
declared |
tacoma_update_appliance | write |
inferred |
tacoma_checkin_appliance | write |
assumed |
tacoma_assign_configuration | write |
inferred |
tacoma_list_configurations | read |
declared |
tacoma_get_configuration | read |
declared |
tacoma_create_configuration | write |
inferred |
tacoma_update_configuration | write |
inferred |
soc_ir_start | read |
declared |
soc_threat_hunt | read |
declared |
soc_mitre_attack_guide | read |
declared |
soc_alertlogic_tool_guide | read |
declared |
soc_log_query_templates | read |
declared |
soc_incident_severity_guide | read |
declared |
tools/list response and it will be re-scored and dated.
Corrections are published alongside the original, not in place of it.