VaultAssist
UnverifiedREPO3xcaffeine/mcp-server
F
Catalogue entry updated 25 days ago
Auth postureNot probedno remote endpoint probed yet
Tools7910 Destructive · 33 Write · 34 Read · 2 Other
Worst categoryDestructivegrade tracks the peak, not the average
Capability mix
Destructive 10Write 33Read 34Other 2
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.
Tools 79
batch_delete_gmail_emailsclear_completed_tasksdelete_eventdelete_gmail_emaildelete_gmail_label
View all 79 tools
delete_taskdelete_task_listmemory_delete_entitiesmemory_delete_observationsmemory_delete_relationsbatch_modify_gmail_emailsbatch_update_docbatch_update_presentationcreate_doccreate_drive_filecreate_eventcreate_formcreate_gmail_labelcreate_presentationcreate_sheetcreate_spreadsheetcreate_table_with_datacreate_taskcreate_task_listdraft_gmail_emailfind_and_replace_docget_or_create_gmail_labelinsert_doc_elementsinsert_doc_imagememory_add_observationsmemory_create_entitiesmemory_create_relationsmodify_doc_textmodify_eventmodify_gmail_emailmodify_sheet_valuesmove_tasksend_gmail_emailset_publish_settingsupdate_doc_headers_footersupdate_gmail_labelupdate_taskupdate_task_listaboutdebug_table_structureechoget_doc_contentget_drive_file_contentget_eventget_eventsget_formget_form_responseget_pageget_page_thumbnailget_presentationget_spreadsheet_infoget_taskget_task_listget_user_infoinspect_doc_structurelist_calendarslist_docs_in_folderlist_drive_itemslist_form_responseslist_gmail_labelslist_spreadsheetslist_task_listslist_tasksmemory_open_nodesmemory_read_graphmemory_search_nodesread_gmail_emailread_sheet_valuessearch_docssearch_drive_filessearch_gmail_emailsvalidateroll_dicesequentialthinking
Change history
No change history on record for this server.
Recommended policy
batch_delete_gmail_emailsdeny
batch_modify_gmail_emailsrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →