# vendor_esg_diversity_scanner

For COOs: scans vendor ESG reports to identify suppliers lacking diversity disclosures in GRI or CDP filings. Input a supplier name or identifier to receive a structured assessment of gender, ethnicity, and board diversity metrics. Returns compliance gaps, missing data flags, and source references from CDP open data and GRI standards. Ideal for vendor risk assessment and ESG compliance tracking.

Agent View of the PolicyLayer registry record for `vendor_esg_diversity_scanner`. HTML page: https://policylayer.com/tools/io-github-getgapup-gapup-mcp/vendor-esg-diversity-scanner

## Facts

- Tool: `vendor_esg_diversity_scanner`
- Server: Gapup Mcp (`https://mcp.gapup.io/mcp`) — https://policylayer.com/tools/io-github-getgapup-gapup-mcp.md
- Homepage: https://github.com/getgapup/gapup-mcp-public
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server auth posture: open
- Server rate-limited: no
- Parameters: 4 (1 required)
- Recommended policy verdict: Allowed

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `year` | number | no | Reporting year to check (default: current year) |
| `async` | boolean | no | If true, returns a job_id immediately (<200ms) instead of waiting for the result. Poll the result with job_result(job_id). Use for slow tools to avoid client ti |
| `supplierId` | string | no | CDP or GRI identifier for the supplier (e.g., CDP company ID) |
| `supplierName` | string | yes | Exact or partial name of the supplier to scan |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "vendor_esg_diversity_scanner",
    "arguments": {
      "supplierName": "<supplierName>"
    }
  }
}
```

## Why vendor_esg_diversity_scanner is rated Low

The tool reads and analyzes publicly available ESG report data (CDP, GRI) to produce a structured assessment. It retrieves and queries existing data with no side effects, modifications, or irreversible actions. Severity is low as it only surfaces compliance information from open data sources.

From the tool's own definition: "scans vendor ESG reports to identify suppliers lacking diversity disclosures...Returns compliance gaps, missing data flags, and source references from CDP open data and GRI standards"

## Use case

AI agents call vendor_esg_diversity_scanner to retrieve information from Gapup Mcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Gapup Mcp:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "vendor_esg_diversity_scanner": {}
  }
}
```

## Other tools on Gapup Mcp (270)

- `adversarial_input_stress_tester` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/adversarial-input-stress-tester.md
- `dora_operational_resilience_stress_tes` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/dora-operational-resilience-stress-tes.md
- `financial_model_3statement` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/financial-model-3statement.md
- `gl_reconciler` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/gl-reconciler.md
- `lgpd_data_subject_rights_automator` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/lgpd-data-subject-rights-automator.md
- `monte_carlo_portfolio` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/monte-carlo-portfolio.md
- `process_mining` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/process-mining.md
- `ugc_moderation_classifier` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/ugc-moderation-classifier.md
- `workflow_orchestrator` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/workflow-orchestrator.md
- `abm_architect` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/abm-architect.md
- `account_expansion_mapper` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/account-expansion-mapper.md
- `anti_demissions_hr` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/anti-demissions-hr.md
- `audit_pre_flight` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/audit-pre-flight.md
- `budget_variance_ai` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/budget-variance-ai.md
- `capacity_planning` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/capacity-planning.md
- `capital_strategy` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/capital-strategy.md
- `churn_defender` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/churn-defender.md
- `competitor_moves` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/competitor-moves.md
- `competitor_recommendations` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/competitor-recommendations.md
- `content_engine` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/content-engine.md
- `cross_sell_reco` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/cross-sell-reco.md
- `customer_voice_synth` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/customer-voice-synth.md
- `cyber_risk_auditor` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/cyber-risk-auditor.md
- `deal_structurer` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/deal-structurer.md
- `discovery_prep` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/discovery-prep.md
- `diversity_inclusion_metrics` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/diversity-inclusion-metrics.md
- `earnings_reviewer` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/earnings-reviewer.md
- `enps_auto` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/enps-auto.md
- `event_marketing` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/event-marketing.md
- `fraud_detector` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/fraud-detector.md
- …and 240 more: https://policylayer.com/tools/io-github-getgapup-gapup-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-getgapup-gapup-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-getgapup-gapup-mcp