Yaver
UnverifiedNPMyaver-cli
F
Catalogue entry updated 12 days ago
Auth postureNot probedno remote endpoint probed yet
Tools6784 Financial · 42 Destructive · 213 Execute · 94 Write · 325 Read
Worst categoryFinancialgrade tracks the peak, not the average
Capability mix
Financial 4Destructive 42Execute 213Write 94Read 325
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Lethal trifectaReads attacker-controllable content, holds secrets, and can run code + reach the network — a full exfiltration/RCE path if unconstrained.
Tools 678
cloud_scaleyaver_billing_checkoutyaver_billing_manageyaver_managed_cloud_onboardingacl_remove_peer
View all 678 tools
cancel_schedulecloud_destroycompanion_downdata_deletedb_pushdb_resetdb_restoredisk_managedns_flushdns_removedocker_prunedocker_rmdocker_rmidogfood_installation_actionfeedback_deleteforgot_passwordgit_member_removegit_stashjobs_cancelmachine_onboarding_removemachine_removemicroservice_downmigrate_rollbackmodels_removemonitor_removephone_project_deleteproxy_removerelay_clear_passwordrelease_rollbackremote_destroyremove_relay_serverrunner_queue_clearservices_removesourcemaps_deleteswitch_cleanupswitch_rollbacktunnel_removeyaver_ask_useryaver_auth_factory_resetyaver_auth_logoutyaver_clear_logsacl_add_peeracl_call_peer_tooladb_commandagent_graph_startagent_graph_stopandroid_app_installandroid_app_launchandroid_app_queryandroid_lintarchive_extractauth_dev_startauth_dev_stopauth_dev_tokensauth_oauth_testbackend_startbackend_stopbenchmarkbrowser_clickbrowser_closebrowser_evaluatebrowser_interactive_startbrowser_interactive_stopbrowser_navigatebrowser_openbrowser_scrollbrowser_selectbrowser_typebrowser_waitbrowser_wait_navigationbuild_androidbuild_ioscalculatecf_d1check_runcheck_singlecloud_backupcloud_clicloud_deploycloud_emu_startcloud_emu_stopcloud_redeploycompanion_upcontinue_taskconvex_actionconvex_deployconvex_mutateconvex_queryconvex_runcopilot_completecreate_taskdata_querydb_migratedb_querydb_seeddb_studiodev_environment_clone_startdevice_broadcast_commanddevice_reauth_startdevice_reauth_waitdiagnosedocker_builddocker_composedocker_execdocker_pulldocker_pushdocker_restartdocker_startdocker_stopdogfood_reloaddogfood_rerenderdomain_ddns_startdomain_setupdrizzle_generatedrizzle_pushdroid_inputdroid_launcheas_buildeas_submiteslint_checkexec_commandexpose_startexpose_stopflutter_buildflutter_doctorflutter_testgh_rungithub_workflow_runglab_rungo_buildgo_generatego_pprof_cpugo_pprof_heapgo_staticcheckgo_test_suitego_vet_checkgradle_buildgradle_testhttp_requestinfra_powerinfra_service_actionjobs_enqueuejobs_retryjqlintmachine_repairmake_cleanmake_runmigrate_runmigrate_verifymobile_deploy_to_phonemobile_hermes_doctormobile_hermes_reloadmobile_project_buildmobile_project_preparemobile_test_openmodels_runmodels_servenative_buildnpm_run_scriptopen_urlopsphone_project_runtime_deploypingpkg_installpod_installport_scanpreview_createpreview_stoppreview_stop_allpreview_stop_servingprimary_authprisma_generateprisma_pushproject_new_quickproxy_startproxy_stoppublish_ci_dispatchpublish_runpublish_submitpush_androidpush_iospytest_suiteregex_testremote_dev_prepareremote_execremote_provisionremote_setuprun_shortcutrun_testsrunner_attachrunner_auth_browser_cancelrunner_auth_browser_startrunner_auth_browser_submit_callbackrunner_auth_browser_submit_coderunner_auth_setuprunner_autorunrunner_detachrunner_model_proberunner_queue_addsandbox_quickstartsandbox_runschedule_selfschedule_taskselenium_clickselenium_closeselenium_fixselenium_navigateselenium_searchselenium_startselenium_typeservice_actionservices_startservices_stopsession_transferset_work_dirsimulator_bootssl_provisionstop_taskstorage_startstorage_stopstudio_permission_videosupabase_dbsupabase_deployswitch_runsystemctltestkit_runtestkit_self_heal_selectortestkit_visual_checktmux_adopt_sessiontmux_send_inputtsc_checktype_checkvibe_preview_clip_recordvibe_preview_startvibe_preview_stopweb_preview_reloadweb_preview_startweb_preview_stopwire_pushwireless_connect_androidwireless_pair_androidwireless_pushwireless_setup_androidworkspace_initxcode_buildxcode_testyaver_auth_pollyaver_auth_startyaver_auth_waityaver_doctoryaver_lazy_setupyaver_request_renderyaver_self_host_onboardingaccount_connectaccount_disconnectadd_relay_serverarchive_createauth_dev_usersauth_oauth_savebackend_collection_createbackend_userscf_kvchange_passwordclipboard_writeconfig_setconvex_install_helpercreate_gistdata_insertdata_updatedb_generatedevice_primary_setdevice_voice_hints_setdns_adddns_localname_restoredns_localname_setdocker_cpdocs_configdogfood_app_setdogfood_tester_setdomain_adderror_resolvefeedback_createfeedback_fixgit_member_invitegit_oauth_startgit_push_credsgithub_issue_creategithub_pr_creategitignoregitlab_issue_creategitlab_mr_createinit_projectlicensemachine_onboarding_applymachine_rolesmicroservice_wrapmigrate_planmobile_workspace_onboarding_selectmonitor_addnotifyoauth_client_createoauth_user_createopencode_config_setops_planphone_project_createphone_project_design_patchphone_project_importphone_project_promotephone_project_pushphone_project_schemaphone_project_seedphone_project_web_approvephone_project_web_publishprettier_checkproject_runtime_applyproject_self_host_createproject_wizard_generateproject_wizard_startproxy_addpublish_uploadrelay_set_passwordrelease_rolloutrunner_auth_credentials_importrunner_auth_setsandbox_configsdk_token_createservices_addsession_importset_ios_install_methodstorage_bucket_createstorage_uploadswitch_planswitch_runnertemplate_usetmux_close_sessionstotp_disabletotp_enable_begintotp_enable_confirmtunnel_addwrite_fileyaver_auth_link_startyaver_auth_merge_startyaver_auth_merge_waityaver_auth_unlinkyaver_openrouter_integrateyaver_report_completeyaver_sdk_integrateaccount_listaccount_statusacl_healthacl_list_peer_toolsacl_list_peersadb_devicesadb_screenshotagent_graph_listagent_graph_showagent_machine_inventoryagent_shutdownandroid_app_statusapp_review_checkappstore_statusauth_dev_setupauth_dev_statusauth_logauth_oauth_listauth_oauth_migrateauth_oauth_setupbackend_backupbackend_collectionsbackend_recordsbackend_schemabackend_setupbackend_statusbase64browser_extract_attributebrowser_extract_textbrowser_get_dombrowser_interactive_statusbrowser_screenshotbrowser_sessionscf_pagescf_r2cf_workerschangelogclipboard_readcloud_emu_configcloud_emu_statuscloud_logscloud_planscloud_provisioncloud_statuscommit_messagecompanion_cron_listcompanion_detectcompanion_statuscompiler_versionconsole_machinesconvex_browseconvex_exportconvex_local_statusconvex_logsconvex_schemaconvex_tablescopilot_modelscpu_infodata_browsedata_tablesdb_backupdb_schemadb_statusdev_environment_clone_plandev_environment_clone_statusdevice_primary_getdevice_reauth_statusdfdiffdisk_usagedns_listdns_localname_statusdns_lookupdocker_disk_usagedocker_historydocker_imagesdocker_inspectdocker_logsdocker_networksdocker_portdocker_psdocker_statsdocker_topdocker_volumesdocs_listdocs_searchdogfood_app_listdogfood_installation_listdogfood_statusdogfood_tester_listdomain_checkdomain_detect_ipdomain_dns_checkdomain_listdomain_ssl_statusdroid_framedroid_statusdroid_ui_elementsdroid_ui_textsduemulatorsenv_listenv_readepocherror_listexec_statusexpo_statusexpose_listfake_datafeedback_listfeedback_showfeedback_speakfind_large_filesfork_taskformat_codefree_memoryget_configget_infoget_ios_install_methodget_relay_configget_system_infoget_taskgit_blame_filegit_branchesgit_ci_statusgit_infogit_issuesgit_log_advancedgit_membersgit_oauth_statusgit_prsgit_refloggit_remotesgit_shortloggit_statsgit_sync_remotegit_tagsgithub_badgegithub_ci_statusgithub_issuesgithub_prsgithub_releasesgithub_repo_infogithub_starsgitlab_cigitlab_issuesgitlab_mrsgitlab_pipelinesgo_fmt_checkgo_mod_graphgo_mod_tidygo_mod_whygo_module_infogo_module_versionsgo_vulncheckhashhostname_infohttp_statushttp_timinginfra_summaryjobs_listjwt_decodelines_of_codelist_directorylist_machineslist_projectslist_runnerslist_scheduleslist_shortcutslist_taskslisten_portsload_averageloc_countlog_searchmachine_doctormachine_onboarding_statusmachine_roles_doctormake_targetsmicroservice_detectmicroservice_statusmigrate_statusmigrate_targetsmobile_platform_matrixmobile_project_actions_auditmobile_project_statusmobile_workspace_onboarding_statusmodels_listmodels_psmodels_pullmodels_recommendmodels_statusmonitor_listnet_doctornetwork_connectionsnetwork_interfacesnpm_infonpm_searchnpm_versionsoauth_client_listoauth_user_listop_getop_listopencode_config_getops_verbspassword_genphone_project_design_getphone_project_exportphone_project_getphone_project_listphone_project_templatesphone_project_web_rollbackphone_project_web_statusphone_project_widget_listplaystore_statusplaystore_trackpod_outdatedport_checkpreview_listprimary_pingprimary_projectsprimary_statusprisma_statusprocess_killprocess_listproject_contextproject_profileproject_runtimeproject_wizard_answerproxy_listproxy_statusps_auxps_treepublic_ippublish_config_getpublish_listpublish_statusqr_coderead_filerelay_testrelease_listremote_costremote_statusrunner_auth_browser_statusrunner_auth_statusrunner_queue_listrunner_statussandbox_statusscreenshotsearch_contentsearch_filesselenium_screenshotselenium_sessionsselenium_snapshotselenium_statusselenium_textservice_listservice_statusservices_logsservices_statussession_exportsession_intentsession_listsimulator_screenshotsimulatorssourcemaps_listsourcemaps_resolvessl_checkstorage_bucket_liststorage_configstorage_liststorage_presignstorage_statusstudio_job_statusstudio_liststudio_permission_prosesupabase_functionssupabase_migrationssupabase_statusswitch_costswitch_historyswitch_targetssystem_infotail_logstemplate_listtestflight_buildstestkit_flake_reporttestkit_last_failuretestkit_list_specstmux_detach_sessiontmux_list_sessionstmux_streamtotp_statustreetree_dirtunnel_listtunnel_testunameuuidvibe_preview_clipsvibe_preview_releasevibe_preview_snapshotvibe_preview_statusvibe_preview_summariesweb_searchwifi_infowire_detectwireless_detectworkspace_layoutworkspace_listworkspace_scaffoldworkspace_statusworkspace_web_appsyaver_askyaver_auth_capabilitiesyaver_auth_link_waityaver_auth_list_identitiesyaver_auth_statusyaver_billing_statusyaver_devicesyaver_health_deepyaver_helpyaver_logsyaver_onboardyaver_pingyaver_status
Change history
No change history on record for this server.
Recommended policy
cloud_scalerequire approval
acl_remove_peerdeny
acl_add_peerrequire approval
account_connectrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →