Appaloft
UnverifiedNPM@appaloft/mcp
F
Catalogue entry updated 43 days ago
Auth postureNot probedno remote endpoint probed yet
Tools4282 Financial · 46 Destructive · 85 Execute · 108 Write · 187 Read
Worst categoryFinancialgrade tracks the peak, not the average
Capability mix
Financial 2Destructive 46Execute 85Write 108Read 187
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Lethal trifectaReads attacker-controllable content, holds secrets, and can run code + reach the network — a full exfiltration/RCE path if unconstrained.
Tools 428
organizations_transfer_ownerworkspace_collaborations_writer_leases_transferaccount_deleteaccount_sessions_revokeagent_adapters_uninstall
View all 428 tools
agent_workspace_profiles_uninstallaudit_events_archives_pruneaudit_events_prunecertificates_deletecertificates_revokeconnections_revokecontrol_plane_portability_artifacts_deletecredentials_delete_sshdependency_resources_deletedeployments_archivedeployments_prunedomain_bindings_deletedomain_events_pruneoperator_work_pruneorganizations_deleteorganizations_remove_memberpreview_environments_deleteprojects_deleteprovider_job_logs_pruneresources_archiveresources_deleteresources_detach_storageresources_runtime_control_attempts_pruneresources_runtime_log_archives_pruneresources_secrets_deletesandbox_credentials_revokesandbox_files_removesandbox_ports_revokesandbox_snapshots_deletesandbox_templates_deletesandboxes_agent_tasks_cancelsandboxes_candidate_previews_deletesandboxes_source_artifacts_deletesandboxes_terminatescheduled_tasks_deleteservers_capacity_pruneservers_deactivateservers_deletesource_links_deletestorage_volumes_deletestorage_volumes_prune_backupstunnels_revokeworkspace_collaborations_participants_removeagent_workspace_profiles_compileaudit_events_legal_holds_releaseauth_bootstrap_first_adminblueprints_installcertificates_retryconnections_capability_acceptconnections_capability_applyconnections_connect_callbackconnections_connect_startcontrol_plane_portability_importcredentials_rotate_sshdependency_resources_importdependency_resources_provisiondependency_resources_provisioning_acceptdependency_resources_rotate_connectiondeploy_tokens_revokedeployments_canceldeployments_cleanup_runtimedeployments_createdeployments_force_redeploydeployments_reconcile_staledeployments_redeploydeployments_retrydeployments_rollbackdomain_bindings_confirm_ownershipdomain_bindings_retry_verificationenvironments_cloneenvironments_duplicate_profileenvironments_lockenvironments_promoteenvironments_sync_profileenvironments_unlockenvironments_unset_variablemigrations_cleanupoperator_work_canceloperator_work_dead_letteroperator_work_retryrepository_bindings_bindrepository_bindings_unbindresources_bind_dependencyresources_configure_healthresources_reset_healthresources_rotate_dependency_binding_secretresources_runtime_restartresources_runtime_startresources_runtime_stopresources_secrets_rotateresources_unbind_dependencyresources_unset_variablesandbox_credentials_grantsandbox_credentials_requestsandbox_ports_exposesandboxes_agent_tasks_deliversandboxes_agent_tasks_steersandboxes_agent_tasks_stopsandboxes_agents_approvals_resolvesandboxes_agents_runs_cancelsandboxes_candidate_previews_createsandboxes_execsandboxes_network_policy_configuresandboxes_pausesandboxes_promotions_acceptsandboxes_promotions_plansandboxes_promotions_retryscheduled_tasks_configurescheduled_tasks_run_nowservers_bootstrap_proxyservers_configure_edge_proxyservers_prepare_runtimesource_events_ingestsource_events_prunesource_events_replaysource_links_relinkstatic_artifacts_publish_payloadstorage_volumes_cleanup_runtimesystem_control_plane_secret_rotation_applysystem_db_migratesystem_instance_upgrade_applyterminal_sessions_expiretunnels_startworkspace_collaborations_handoffs_offerworkspace_collaborations_participants_change_roleworkspace_collaborations_writer_leases_acquireworkspace_collaborations_writer_leases_releaseworkspace_collaborations_writer_leases_renewaccount_profile_changeagent_adapters_disableagent_adapters_installagent_workspace_profiles_configure_credential_connectionsagent_workspace_profiles_configure_mcp_connectionsagent_workspace_profiles_disableagent_workspace_profiles_installaudit_events_archives_createaudit_events_legal_holds_configureblueprints_plan_installcertificates_importcertificates_issue_or_renewcontrol_plane_portability_exportcredentials_create_sshdefault_access_domain_policies_configuredependency_resources_backup_policies_configuredependency_resources_create_backupdependency_resources_provisioning_plandependency_resources_renamedependency_resources_restore_backupdeploy_tokens_createdeploy_tokens_rotatedeployments_plandomain_bindings_configure_certificate_policydomain_bindings_configure_routedomain_bindings_createenvironments_archiveenvironments_createenvironments_renameenvironments_set_variablegithub_agent_agent_profiles_creategithub_agent_agent_profiles_disablegithub_agent_automation_rules_creategithub_agent_automation_rules_disablegithub_agent_repository_bindings_createmigrations_applymigrations_planoperator_work_mark_recoveredorganizations_change_member_roleorganizations_invite_memberorganizations_profile_changeorganizations_reactivate_memberorganizations_switch_currentpreview_policies_configureprojects_archiveprojects_configure_workspace_profileprojects_createprojects_renameprojects_reorderprojects_restoreprojects_set_descriptionresources_attach_storageresources_configure_accessresources_configure_auto_deployresources_configure_networkresources_configure_rolloutresources_configure_runtimeresources_configure_scaleresources_configure_sourceresources_createresources_import_variablesresources_restoreresources_runtime_logs_archiveresources_secrets_createresources_set_variableretention_defaults_configureruntime_monitoring_thresholds_configuresandbox_files_writesandbox_processes_terminatesandbox_snapshots_createsandbox_templates_createsandboxes_agent_tasks_approvesandboxes_agent_tasks_createsandboxes_agent_tasks_resumesandboxes_agents_runs_createsandboxes_agents_runtimes_attachsandboxes_agents_runtimes_createsandboxes_agents_runtimes_terminatesandboxes_createsandboxes_resumesandboxes_source_artifacts_createscheduled_runtime_prune_policies_configurescheduled_tasks_createservers_configure_credentialservers_configure_runtime_target_profileservers_configure_workload_rolesservers_registerservers_renameservers_reordersource_events_complete_checkstatic_artifacts_publishstatic_artifacts_publish_archivestorage_volumes_backup_policies_configurestorage_volumes_createstorage_volumes_create_backupstorage_volumes_renamestorage_volumes_restore_backupterminal_sessions_closeterminal_sessions_openworkspace_collaborations_closeworkspace_collaborations_createworkspace_collaborations_handoffs_resolveworkspace_collaborations_lanes_addworkspace_collaborations_lanes_archiveworkspace_collaborations_lanes_native_attach_issueworkspace_collaborations_lanes_terminal_access_issueworkspace_collaborations_participants_addworkspaces_openaccount_profile_showaccount_sessions_listagent_adapters_listagent_adapters_showagent_adapters_validateagent_workspace_profiles_listagent_workspace_profiles_showagent_workspace_profiles_validateaudit_events_archives_listaudit_events_archives_showaudit_events_exportaudit_events_export_globalaudit_events_legal_holds_listaudit_events_legal_holds_showaudit_events_listaudit_events_showauth_bootstrap_statusblueprints_installation_showblueprints_listblueprints_showcapabilities_querycertificates_listcertificates_showconnections_capability_planconnections_catalog_listconnections_categories_listconnections_listconnections_showconnections_status_showcontrol_plane_portability_artifacts_listcontrol_plane_portability_artifacts_showcontrol_plane_portability_export_plancontrol_plane_portability_import_plancredentials_list_sshcredentials_showdefault_access_domain_policies_listdefault_access_domain_policies_showdependency_resources_backup_policies_listdependency_resources_backup_policies_showdependency_resources_countdependency_resources_inspectdependency_resources_listdependency_resources_list_backupsdependency_resources_provisioning_statusdependency_resources_querydependency_resources_showdependency_resources_show_backupdeploy_tokens_listdeploy_tokens_showdeployments_cleanup_previewdeployments_countdeployments_listdeployments_proofdeployments_recovery_readinessdeployments_showdeployments_stale_attemptsdeployments_timelinedeployments_timeline_streamdomain_bindings_delete_checkdomain_bindings_dns_plandomain_bindings_dns_readiness_inspectdomain_bindings_listdomain_bindings_showentitlements_queryenvironments_countenvironments_diffenvironments_diff_profileenvironments_effective_precedenceenvironments_listenvironments_plan_duplicateenvironments_showgithub_agent_agent_profiles_listgithub_agent_automation_rules_listgithub_agent_repository_bindings_listmigrations_statusmigrations_verifyoperator_work_listoperator_work_showoperator_work_stream_eventsorganizations_current_contextorganizations_list_invitationsorganizations_list_membersorganizations_profile_showpreview_environments_listpreview_environments_showpreview_policies_showprojects_countprojects_delete_checkprojects_listprojects_showrepository_bindings_showresources_access_failure_evidence_lookupresources_countresources_delete_checkresources_diagnostic_summaryresources_effective_configresources_healthresources_health_historyresources_listresources_list_dependency_bindingsresources_proxy_configuration_previewresources_runtime_log_archives_listresources_runtime_log_archives_showresources_runtime_logsresources_secrets_listresources_secrets_showresources_showresources_show_dependency_bindingretention_defaults_listretention_defaults_showruntime_monitoring_rollupruntime_monitoring_samples_listruntime_monitoring_thresholds_showruntime_usage_inspectsandbox_credentials_listsandbox_files_listsandbox_files_readsandbox_ports_listsandbox_processes_listsandbox_processes_showsandbox_snapshots_listsandbox_snapshots_showsandbox_templates_listsandbox_templates_showsandboxes_agent_tasks_listsandboxes_agent_tasks_showsandboxes_agents_approvals_listsandboxes_agents_approvals_showsandboxes_agents_harnesses_listsandboxes_agents_runs_eventssandboxes_agents_runs_events_streamsandboxes_agents_runs_listsandboxes_agents_runs_showsandboxes_agents_runtimes_listsandboxes_agents_runtimes_showsandboxes_candidate_previews_showsandboxes_events_streamsandboxes_listsandboxes_promotions_listsandboxes_promotions_showsandboxes_showsandboxes_source_artifacts_listsandboxes_source_artifacts_showscheduled_runtime_prune_policies_listscheduled_runtime_prune_policies_showscheduled_task_runs_listscheduled_task_runs_logsscheduled_task_runs_showscheduled_tasks_listscheduled_tasks_showservers_capacity_inspectservers_countservers_delete_checkservers_listservers_runtime_readinessservers_showservers_test_connectivityservers_test_draft_connectivitysource_events_listsource_events_showsource_links_listsource_links_showstatic_artifacts_publications_liststorage_volumes_backup_planstorage_volumes_backup_policies_liststorage_volumes_backup_policies_showstorage_volumes_liststorage_volumes_list_backupsstorage_volumes_restore_planstorage_volumes_showstorage_volumes_show_backupsystem_control_plane_secret_rotation_plansystem_db_statussystem_doctorsystem_github_app_connection_showsystem_github_repositories_listsystem_instance_upgrade_checksystem_integrations_listsystem_plugins_listsystem_providers_listterminal_sessions_listterminal_sessions_showtunnels_listtunnels_showworkspace_collaborations_lanes_authorize_accessworkspace_collaborations_listworkspace_collaborations_show
Change history
No change history on record for this server.
Recommended policy
organizations_transfer_ownerrequire approval
account_deletedeny
agent_workspace_profiles_compilerequire approval
account_profile_changerate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →