# workflow_orchestrator

Meta-tool that CHAINS multiple MCP tools sequentially into a named workflow — delivering a composite output in a single call. 10 predefined workflows: compliance_full_audit (6 steps: KYC+sanctions+AI_gov+privacy+ESRS+CSRD), deal_due_diligence (7 steps: deep_dive+registry+court+patents+KYC+financials+M&A), market_entry_brief (6 steps: country_study+regulations+procurement+tax+AGOA+market_brief), competitor_intelligence_pack (5 steps: deep_dive+intel+patents+earnings+pitch_deck), esg_360 (5 steps: ESG_audit+carbon+CSRD+ESRS+supplier_esg), ip_freedom_to_operate (4 steps: patent_search+async_deep+IP_audit+competitive), climate_property_assessment (3 steps: climate_risk+real_estate+geo), pharma_target_screen (4 steps: trials+adverse_events+patents+meta_analysis), sanctions_360 (5 steps: KYC+Russian_sec+registry+crypto_wallet+court_filings), talent_market_brief (4 steps: salary+trends+adjacent_roles+skills_taxonomy). Returns steps_executed, consolidated P0/P1/P2 signals, overall_status, estimated_cost_usd, and raw outputs per step. Cache: 1h LRU per (workflow, target). Budget: 60s global timeout → partial if exceeded. Use when an agent needs a composite liverable without orchestrating tools manually.

Agent View of the PolicyLayer registry record for `workflow_orchestrator`. HTML page: https://policylayer.com/tools/io-github-getgapup-gapup-mcp/workflow-orchestrator

## Facts

- Tool: `workflow_orchestrator`
- Server: Gapup Mcp (`https://mcp.gapup.io/mcp`) — https://policylayer.com/tools/io-github-getgapup-gapup-mcp.md
- Homepage: https://github.com/getgapup/gapup-mcp-public
- Risk category: Execute (High risk)
- Registry record: grade F, identity unverified
- Server auth posture: open
- Server rate-limited: no
- Parameters: 5 (2 required)
- Recommended policy verdict: Rate-limited

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `async` | boolean | no | If true, returns a job_id immediately (<200ms) instead of waiting for the result. Poll the result with job_result(job_id). Use for slow tools to avoid client ti |
| `params` | object | no | Optional overrides passed to sub-tools. Keys depend on workflow (e.g., country, sector, role, drug, technology, wallet_address, acquirer). |
| `target` | object | yes | The entity to analyze. A company name for most workflows; location for climate_property_assessment; role+country for talent_market_brief. |
| `workflow` | string | yes | Named workflow to execute. Each workflow chains 3-7 tools sequentially. |
| `skip_failed_steps` | boolean | no | Default true: continue on step failure. Set false to abort on first error. |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "workflow_orchestrator",
    "arguments": {
      "target": {},
      "workflow": "<workflow>"
    }
  }
}
```

## Why workflow_orchestrator is rated High

This tool orchestrates and executes chains of multiple other tools (up to 7 steps per workflow) in sequence. It triggers external operations across KYC, sanctions, financial, legal, and ESG systems. Because it chains other tools — some of which may be Financial or Destructive — in an automated pipeline, misuse has a critical blast radius: a single call can trigger cascading effects across many systems.

From the tool's own definition: "Meta-tool that CHAINS multiple MCP tools sequentially into a named workflow — delivering a composite output in a single call."

## Use case

AI agents invoke workflow_orchestrator to trigger actions in Gapup Mcp. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Gapup Mcp:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "workflow_orchestrator": {
      "limits": [
        {
          "counter": "workflow_orchestrator_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Gapup Mcp (270)

- `adversarial_input_stress_tester` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/adversarial-input-stress-tester.md
- `dora_operational_resilience_stress_tes` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/dora-operational-resilience-stress-tes.md
- `financial_model_3statement` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/financial-model-3statement.md
- `gl_reconciler` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/gl-reconciler.md
- `lgpd_data_subject_rights_automator` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/lgpd-data-subject-rights-automator.md
- `monte_carlo_portfolio` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/monte-carlo-portfolio.md
- `process_mining` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/process-mining.md
- `ugc_moderation_classifier` — Execute — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/ugc-moderation-classifier.md
- `abm_architect` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/abm-architect.md
- `account_expansion_mapper` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/account-expansion-mapper.md
- `anti_demissions_hr` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/anti-demissions-hr.md
- `audit_pre_flight` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/audit-pre-flight.md
- `budget_variance_ai` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/budget-variance-ai.md
- `capacity_planning` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/capacity-planning.md
- `capital_strategy` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/capital-strategy.md
- `churn_defender` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/churn-defender.md
- `competitor_moves` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/competitor-moves.md
- `competitor_recommendations` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/competitor-recommendations.md
- `content_engine` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/content-engine.md
- `cross_sell_reco` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/cross-sell-reco.md
- `customer_voice_synth` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/customer-voice-synth.md
- `cyber_risk_auditor` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/cyber-risk-auditor.md
- `deal_structurer` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/deal-structurer.md
- `discovery_prep` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/discovery-prep.md
- `diversity_inclusion_metrics` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/diversity-inclusion-metrics.md
- `earnings_reviewer` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/earnings-reviewer.md
- `enps_auto` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/enps-auto.md
- `event_marketing` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/event-marketing.md
- `fraud_detector` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/fraud-detector.md
- `funding_hunter` — Financial — https://policylayer.com/tools/io-github-getgapup-gapup-mcp/funding-hunter.md
- …and 240 more: https://policylayer.com/tools/io-github-getgapup-gapup-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-getgapup-gapup-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-getgapup-gapup-mcp