Yaver
UnverifiedNPMyaver-cli
F
Catalogue entry updated 9 days ago
Auth postureNot probedno remote endpoint probed yet
Tools6454 Financial · 41 Destructive · 203 Execute · 86 Write · 311 Read
Worst categoryFinancialgrade tracks the peak, not the average
Capability mix
Financial 4Destructive 41Execute 203Write 86Read 311
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Lethal trifectaReads attacker-controllable content, holds secrets, and can run code + reach the network — a full exfiltration/RCE path if unconstrained.
Tools 645
cloud_scaleyaver_billing_checkoutyaver_billing_manageyaver_managed_cloud_onboardingacl_remove_peer
View all 645 tools
cancel_schedulecloud_destroycompanion_downdata_deletedb_pushdb_resetdb_restoredns_flushdns_removedocker_prunedocker_rmdocker_rmifeedback_deleteforgot_passwordgit_member_removegit_stashguest_deleteguest_revokejobs_cancelmachine_onboarding_removemachine_removemigrate_rollbackmodels_removemonitor_removephone_project_deleteproxy_removerelay_clear_passwordrelease_rollbackremote_destroyremove_relay_serverrunner_queue_clearservices_removesourcemaps_deleteswitch_cleanupswitch_rollbacktunnel_removeyaver_ask_useryaver_auth_factory_resetyaver_auth_logoutyaver_clear_logsacl_add_peeracl_call_peer_tooladb_commandandroid_app_installandroid_app_launchandroid_app_queryandroid_lintarchive_extractauth_dev_startauth_dev_stopauth_dev_tokensauth_oauth_testbackend_startbackend_stopbenchmarkbrowser_clickbrowser_closebrowser_evaluatebrowser_interactive_startbrowser_interactive_stopbrowser_navigatebrowser_openbrowser_scrollbrowser_selectbrowser_typebrowser_waitbrowser_wait_navigationbuild_androidbuild_ioscalculatecf_d1check_runcheck_singlecloud_backupcloud_clicloud_deploycloud_emu_startcloud_emu_stopcloud_redeploycompanion_upcontinue_taskconvex_actionconvex_deployconvex_mutateconvex_queryconvex_runcopilot_completedata_querydb_migratedb_querydb_seeddb_studiodev_environment_clone_startdevice_broadcast_commanddevice_reauth_startdevice_reauth_waitdiagnosedocker_builddocker_composedocker_execdocker_pulldocker_pushdocker_restartdocker_startdocker_stopdomain_ddns_startdomain_setupdrizzle_generatedrizzle_pushdroid_inputdroid_launcheas_buildeas_submiteslint_checkexec_commandexpose_startexpose_stopflutter_buildflutter_doctorflutter_testgh_rungithub_workflow_runglab_rungo_buildgo_generatego_pprof_cpugo_pprof_heapgo_staticcheckgo_test_suitego_vet_checkgradle_buildgradle_testhttp_requestinfra_powerinfra_service_actionjobs_enqueuejobs_retryjqlintmachine_repairmake_cleanmake_runmigrate_runmigrate_verifymobile_deploy_to_phonemobile_hermes_doctormobile_hermes_reloadmobile_project_buildmobile_project_preparemodels_runmodels_servenative_buildnpm_run_scriptopen_urlopsphone_project_promotephone_project_runtime_deploypingpkg_installpod_installport_scanpreview_createpreview_stoppreview_stop_allpreview_stop_servingprisma_generateprisma_pushproject_new_quickproxy_startproxy_stoppublish_ci_dispatchpublish_runpublish_submitpush_androidpush_iospytest_suiteregex_testremote_dev_prepareremote_execremote_provisionremote_setuprun_shortcutrun_testsrunner_attachrunner_auth_browser_cancelrunner_auth_browser_startrunner_auth_browser_submit_callbackrunner_auth_browser_submit_coderunner_auth_setuprunner_autorunrunner_detachrunner_model_proberunner_queue_addsandbox_quickstartsandbox_runschedule_selfschedule_taskselenium_clickselenium_closeselenium_navigateselenium_searchselenium_startselenium_typeservice_actionservices_startservices_stopsession_transferset_work_dirsimulator_bootssl_provisionstop_taskstorage_startstorage_stopstudio_permission_videosupabase_dbsupabase_deploysupport_startswitch_runsystemctltestkit_runtestkit_self_heal_selectortsc_checktype_checkvibe_preview_clip_recordvibe_preview_startvibe_preview_stopweb_preview_reloadweb_preview_startweb_preview_stopwire_pushwireless_connect_androidwireless_pair_androidwireless_pushwireless_setup_androidworkspace_initxcode_buildxcode_testyaver_auth_pollyaver_auth_startyaver_auth_waityaver_doctoryaver_lazy_setupyaver_self_host_onboardingaccount_connectaccount_disconnectadd_relay_serverarchive_createauth_dev_usersauth_oauth_savebackend_collection_createbackend_userscf_kvchange_passwordchat_replyclipboard_writeconfig_setconvex_install_helpercreate_gistcreate_taskdata_insertdata_updatedb_generatedevice_primary_setdevice_voice_hints_setdns_adddocker_cpdocs_configdomain_adderror_resolvefeedback_createfeedback_fixgit_member_invitegit_oauth_startgit_push_credsgithub_issue_creategithub_pr_creategitignoregitlab_issue_creategitlab_mr_createguest_configguest_inviteguest_leaveinit_projectinvitelicensemachine_onboarding_applymachine_rolesmigrate_planmonitor_addnotifyoauth_client_createoauth_user_createopencode_config_setphone_project_createphone_project_design_patchphone_project_importphone_project_pushphone_project_schemaphone_project_seedprettier_checkproject_runtime_applyproject_self_host_createproject_wizard_generateproject_wizard_startproxy_addpublish_uploadrelay_set_passwordrelease_rolloutrunner_auth_credentials_importrunner_auth_setsandbox_configsdk_token_createservices_addsession_importset_ios_install_methodstorage_bucket_createstorage_uploadswitch_planswitch_runnertemplate_usetotp_disabletotp_enable_begintotp_enable_confirmtunnel_addwrite_fileyaver_auth_link_startyaver_auth_merge_startyaver_auth_merge_waityaver_auth_unlinkaccount_listaccount_statusacl_healthacl_list_peer_toolsacl_list_peersadb_devicesadb_screenshotandroid_app_statusapp_review_checkappstore_statusauth_dev_setupauth_dev_statusauth_logauth_oauth_listauth_oauth_migrateauth_oauth_setupbackend_backupbackend_collectionsbackend_recordsbackend_schemabackend_setupbackend_statusbase64browser_extract_attributebrowser_extract_textbrowser_get_dombrowser_interactive_statusbrowser_screenshotbrowser_sessionscf_pagescf_r2cf_workerschangelogchat_conversationschat_historyclipboard_readcloud_emu_configcloud_emu_statuscloud_logscloud_planscloud_provisioncloud_statuscommit_messagecompanion_cron_listcompanion_detectcompanion_statuscompiler_versionconsole_machinesconvex_browseconvex_exportconvex_local_statusconvex_logsconvex_schemaconvex_tablescopilot_modelscpu_infodata_browsedata_tablesdb_backupdb_schemadb_statusdev_environment_clone_plandev_environment_clone_statusdevice_primary_getdevice_reauth_statusdfdiffdisk_usagedns_listdns_lookupdocker_disk_usagedocker_historydocker_imagesdocker_inspectdocker_logsdocker_networksdocker_portdocker_psdocker_statsdocker_topdocker_volumesdocs_listdocs_searchdomain_checkdomain_detect_ipdomain_dns_checkdomain_listdomain_ssl_statusdroid_framedroid_statusdroid_ui_textsduemulatorsenv_listenv_readepocherror_listexpo_statusexpose_listfake_datafeedback_listfeedback_showfeedback_speakfind_large_filesfork_taskformat_codefree_memoryget_configget_infoget_ios_install_methodget_relay_configget_system_infoget_taskgit_blame_filegit_branchesgit_ci_statusgit_infogit_issuesgit_log_advancedgit_membersgit_oauth_statusgit_prsgit_refloggit_remotesgit_shortloggit_statsgit_tagsgithub_badgegithub_ci_statusgithub_issuesgithub_prsgithub_releasesgithub_repo_infogithub_starsgitlab_cigitlab_issuesgitlab_mrsgitlab_pipelinesgo_fmt_checkgo_mod_graphgo_mod_tidygo_mod_whygo_module_infogo_module_versionsgo_vulncheckguest_acceptguest_listguest_usagehashhostname_infohttp_statushttp_timinginfra_summaryjobs_listjwt_decodelines_of_codelist_directorylist_machineslist_projectslist_runnerslist_scheduleslist_shortcutslist_taskslisten_portsload_averageloc_countlog_searchmachine_doctormachine_onboarding_statusmachine_roles_doctormake_targetsmigrate_statusmigrate_targetsmobile_platform_matrixmobile_project_actions_auditmobile_project_statusmodels_listmodels_psmodels_pullmodels_recommendmodels_statusmonitor_listnet_doctornetwork_connectionsnetwork_interfacesnpm_infonpm_searchnpm_versionsoauth_client_listoauth_user_listop_getop_listopencode_config_getops_planops_verbspassword_genphone_project_design_getphone_project_exportphone_project_getphone_project_listphone_project_templatesphone_project_widget_listplaystore_statusplaystore_trackpod_outdatedport_checkpreview_listprimary_authprimary_pingprimary_projectsprimary_statusprisma_statusprocess_killprocess_listproject_contextproject_runtimeproject_wizard_answerproxy_listproxy_statusps_auxps_treepublic_ippublish_config_getpublish_listpublish_statusqr_coderead_filerelay_testrelease_listremote_costremote_statusrunner_auth_browser_statusrunner_auth_statusrunner_queue_listrunner_statussandbox_statusscreenshotsearch_contentsearch_filesselenium_screenshotselenium_sessionsselenium_snapshotselenium_statusselenium_textservice_listservice_statusservices_logsservices_statussession_exportsession_listsimulator_screenshotsimulatorssourcemaps_listsourcemaps_resolvessl_checkstorage_bucket_liststorage_configstorage_liststorage_presignstorage_statusstudio_job_statusstudio_liststudio_permission_prosesupabase_functionssupabase_migrationssupabase_statussupport_statussupport_stopswitch_costswitch_historyswitch_targetssystem_infotail_logstemplate_listtestflight_buildstestkit_flake_reporttestkit_last_failuretestkit_list_specstotp_statustreetree_dirtunnel_listtunnel_testunameuuidvibe_preview_clipsvibe_preview_releasevibe_preview_snapshotvibe_preview_statusvibe_preview_summariesweb_searchwifi_infowire_detectwireless_detectworkspace_listworkspace_scaffoldworkspace_statusworkspace_web_appsyaver_askyaver_auth_capabilitiesyaver_auth_link_waityaver_auth_list_identitiesyaver_auth_statusyaver_billing_statusyaver_devicesyaver_health_deepyaver_helpyaver_logsyaver_onboardyaver_pingyaver_status
Change history
No change history on record for this server.
Recommended policy
cloud_scalerequire approval
acl_remove_peerdeny
acl_add_peerrequire approval
account_connectrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →