Seven
UnverifiedREPOseven-io/seven-mcp
F
Catalogue entry updated 7 days ago
Auth postureNot probedno remote endpoint probed yet
Tools442 Financial · 7 Destructive · 4 Execute · 8 Write · 23 Read
Worst categoryFinancialgrade tracks the peak, not the average
Capability mix
Financial 2Destructive 7Execute 4Write 8Read 23
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.
Tools 44
order_numbertransfer_creditsdelete_contactdelete_groupdelete_number
View all 44 tools
delete_rcsdelete_smsdelete_subaccountdelete_webhookhangup_voicesend_rcssend_smssend_voicecreate_contactcreate_groupcreate_subaccountcreate_webhookupdate_contactupdate_groupupdate_numberupdate_subaccountget_active_numbersget_analyticsget_available_numbersget_balanceget_contactget_groupget_logbook_receivedget_logbook_sentget_logbook_voiceget_numberget_pricingget_statuslist_contactslist_groupslist_subaccountslist_webhookslookup_cnamlookup_formatlookup_hlrlookup_mnplookup_rcsrcs_eventsvalidate_sender
Change history
No changes recorded since first scan. Watched servers surface a diff within the hour.
Recommended policy
order_numberrequire approval
delete_contactdeny
hangup_voicerequire approval
create_contactrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →