Appaloft
UnverifiedNPM@appaloft/mcp
F
Catalogue entry updated 47 days ago
Auth postureNot probedno remote endpoint probed yet
Tools3581 Financial · 43 Destructive · 84 Execute · 63 Write · 167 Read
Worst categoryFinancialgrade tracks the peak, not the average
Capability mix
Financial 1Destructive 43Execute 84Write 63Read 167
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Lethal trifectaReads attacker-controllable content, holds secrets, and can run code + reach the network — a full exfiltration/RCE path if unconstrained.
Tools 358
organizations_transfer_owneraccount_deleteaccount_sessions_revokeaudit_events_archives_pruneaudit_events_prune
View all 358 tools
certificates_deletecertificates_revokeconnections_revokecontrol_plane_portability_artifacts_deletecredentials_delete_sshdependency_resources_deletedeployments_archivedeployments_prunedomain_bindings_deletedomain_events_pruneoperator_work_pruneorganizations_deleteorganizations_remove_memberpreview_environments_deleteprojects_deleteprovider_job_logs_pruneresources_archiveresources_deleteresources_detach_storageresources_runtime_control_attempts_pruneresources_runtime_log_archives_pruneresources_secrets_deletesandbox_credentials_revokesandbox_files_removesandbox_ports_revokesandbox_snapshots_deletesandbox_templates_deletesandboxes_candidate_previews_deletesandboxes_source_artifacts_deletesandboxes_terminatescheduled_tasks_deleteservers_capacity_pruneservers_deactivateservers_deletesource_events_prunesource_links_deletestorage_volumes_deletestorage_volumes_prune_backupstunnels_revokeaudit_events_legal_holds_releaseauth_bootstrap_first_adminblueprints_installcertificates_issue_or_renewcertificates_retryconnections_capability_acceptconnections_capability_applyconnections_connect_callbackconnections_connect_startcontrol_plane_portability_importcredentials_rotate_sshdependency_resources_importdependency_resources_provisiondependency_resources_provisioning_acceptdependency_resources_provisioning_plandependency_resources_rotate_connectiondeploy_tokens_revokedeployments_canceldeployments_createdeployments_force_redeploydeployments_reconcile_staledeployments_redeploydeployments_retrydeployments_rollbackdomain_bindings_configure_routedomain_bindings_confirm_ownershipdomain_bindings_retry_verificationenvironments_cloneenvironments_duplicate_profileenvironments_lockenvironments_promoteenvironments_sync_profileenvironments_unlockenvironments_unset_variableoperator_work_canceloperator_work_dead_letteroperator_work_retryresources_bind_dependencyresources_configure_healthresources_configure_networkresources_configure_runtimeresources_configure_sourceresources_reset_healthresources_rotate_dependency_binding_secretresources_runtime_restartresources_runtime_startresources_runtime_stopresources_secrets_rotateresources_unbind_dependencyresources_unset_variablesandbox_credentials_grantsandbox_credentials_requestsandbox_ports_exposesandboxes_agents_approvals_resolvesandboxes_agents_runs_cancelsandboxes_agents_runs_createsandboxes_agents_runtimes_createsandboxes_candidate_previews_createsandboxes_createsandboxes_execsandboxes_network_policy_configuresandboxes_pausesandboxes_promotions_acceptsandboxes_promotions_plansandboxes_promotions_retrysandboxes_resumescheduled_tasks_configurescheduled_tasks_run_nowservers_bootstrap_proxyservers_configure_edge_proxyservers_prepare_runtimeservers_test_connectivityservers_test_draft_connectivitysource_events_ingestsource_events_replaysource_links_relinkstatic_artifacts_publish_payloadstorage_volumes_cleanup_runtimesystem_control_plane_secret_rotation_applysystem_db_migratesystem_instance_upgrade_applyterminal_sessions_expireterminal_sessions_opentunnels_startaccount_profile_changeaudit_events_archives_createaudit_events_legal_holds_configureblueprints_plan_installcertificates_importcontrol_plane_portability_exportcredentials_create_sshdefault_access_domain_policies_configuredependency_resources_backup_policies_configuredependency_resources_create_backupdependency_resources_renamedependency_resources_restore_backupdeploy_tokens_createdeploy_tokens_rotatedomain_bindings_createenvironments_archiveenvironments_createenvironments_renameenvironments_set_variableoperator_work_mark_recoveredorganizations_change_member_roleorganizations_invite_memberorganizations_profile_changeorganizations_reactivate_memberorganizations_switch_currentpreview_policies_configureprojects_archiveprojects_createprojects_renameprojects_reorderprojects_restoreprojects_set_descriptionresources_attach_storageresources_configure_accessresources_configure_auto_deployresources_createresources_import_variablesresources_restoreresources_runtime_logs_archiveresources_secrets_createresources_set_variableretention_defaults_configureruntime_monitoring_thresholds_configuresandbox_files_writesandbox_processes_terminatesandbox_snapshots_createsandbox_templates_createsandboxes_agents_runtimes_terminatesandboxes_source_artifacts_createscheduled_runtime_prune_policies_configurescheduled_tasks_createservers_configure_credentialservers_registerservers_renameservers_reorderstatic_artifacts_publishstatic_artifacts_publish_archivestorage_volumes_backup_policies_configurestorage_volumes_createstorage_volumes_create_backupstorage_volumes_renamestorage_volumes_restore_backupterminal_sessions_closeaccount_profile_showaccount_sessions_listaudit_events_archives_listaudit_events_archives_showaudit_events_exportaudit_events_export_globalaudit_events_legal_holds_listaudit_events_legal_holds_showaudit_events_listaudit_events_showauth_bootstrap_statusblueprints_installation_showblueprints_listblueprints_showcapabilities_querycertificates_listcertificates_showconnections_capability_planconnections_catalog_listconnections_categories_listconnections_listconnections_showconnections_status_showcontrol_plane_portability_artifacts_listcontrol_plane_portability_artifacts_showcontrol_plane_portability_export_plancontrol_plane_portability_import_plancredentials_list_sshcredentials_showdefault_access_domain_policies_listdefault_access_domain_policies_showdependency_resources_backup_policies_listdependency_resources_backup_policies_showdependency_resources_countdependency_resources_inspectdependency_resources_listdependency_resources_list_backupsdependency_resources_provisioning_statusdependency_resources_querydependency_resources_showdependency_resources_show_backupdeploy_tokens_listdeploy_tokens_showdeployments_cleanup_previewdeployments_countdeployments_listdeployments_plandeployments_proofdeployments_recovery_readinessdeployments_showdeployments_stale_attemptsdeployments_timelinedeployments_timeline_streamdomain_bindings_delete_checkdomain_bindings_dns_plandomain_bindings_dns_readiness_inspectdomain_bindings_listdomain_bindings_showentitlements_queryenvironments_countenvironments_diffenvironments_diff_profileenvironments_effective_precedenceenvironments_listenvironments_plan_duplicateenvironments_showoperator_work_listoperator_work_showoperator_work_stream_eventsorganizations_current_contextorganizations_list_invitationsorganizations_list_membersorganizations_profile_showpreview_environments_listpreview_environments_showpreview_policies_showprojects_countprojects_delete_checkprojects_listprojects_showresources_access_failure_evidence_lookupresources_countresources_delete_checkresources_diagnostic_summaryresources_effective_configresources_healthresources_health_historyresources_listresources_list_dependency_bindingsresources_proxy_configuration_previewresources_runtime_log_archives_listresources_runtime_log_archives_showresources_runtime_logsresources_secrets_listresources_secrets_showresources_showresources_show_dependency_bindingretention_defaults_listretention_defaults_showruntime_monitoring_rollupruntime_monitoring_samples_listruntime_monitoring_thresholds_showruntime_usage_inspectsandbox_credentials_listsandbox_files_listsandbox_files_readsandbox_ports_listsandbox_processes_listsandbox_processes_showsandbox_snapshots_listsandbox_snapshots_showsandbox_templates_listsandbox_templates_showsandboxes_agents_approvals_listsandboxes_agents_approvals_showsandboxes_agents_runs_eventssandboxes_agents_runs_events_streamsandboxes_agents_runs_listsandboxes_agents_runs_showsandboxes_agents_runtimes_listsandboxes_agents_runtimes_showsandboxes_candidate_previews_showsandboxes_events_streamsandboxes_listsandboxes_promotions_listsandboxes_promotions_showsandboxes_showsandboxes_source_artifacts_listsandboxes_source_artifacts_showscheduled_runtime_prune_policies_listscheduled_runtime_prune_policies_showscheduled_task_runs_listscheduled_task_runs_logsscheduled_task_runs_showscheduled_tasks_listscheduled_tasks_showservers_capacity_inspectservers_countservers_delete_checkservers_listservers_showsource_events_listsource_events_showsource_links_listsource_links_showstatic_artifacts_publications_liststorage_volumes_backup_planstorage_volumes_backup_policies_liststorage_volumes_backup_policies_showstorage_volumes_liststorage_volumes_list_backupsstorage_volumes_restore_planstorage_volumes_showstorage_volumes_show_backupsystem_control_plane_secret_rotation_plansystem_db_statussystem_doctorsystem_github_app_connection_showsystem_github_repositories_listsystem_instance_upgrade_checksystem_integrations_listsystem_plugins_listsystem_providers_listterminal_sessions_listterminal_sessions_showtunnels_listtunnels_show
Change history
No change history on record for this server.
Recommended policy
organizations_transfer_ownerrequire approval
account_deletedeny
audit_events_legal_holds_releaserequire approval
account_profile_changerate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →