mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-29 12:59:13 +01:00
DottaandPaperclip
4d90634f74
## Thinking Path > - Paperclip lets people manage AI agents and govern their access to outside services. > - Apps connections keep provider credentials in the instance vault and mediate every action through grants, policies, and audit. > - Agents currently have no Apps connection for reading or managing 1Password items with an operator-supplied service-account token. > - 1Password supports this through its official SDK; its documentation MCP server does not expose vault operations. > - This pull request adds a one-field service-account connection and registers eight reviewed SDK actions through the existing native-provider catalog. > - Operators can select vault permissions in 1Password and agent/action access in Paperclip without installing a CLI or handing durable credentials to agents. ## Linked Issues or Issue Description Related: #16144 adds 1Password as Paperclip's secret-storage backend. This PR adds the separate Apps/tool-access flow with a per-connection credential; it does not change secret providers or use a server-wide ambient token. **Subsystem affected** Apps catalog, native tool-provider registry, and shared connection setup. **Problem or motivation** People need to paste their own `OP_SERVICE_ACCOUNT_TOKEN`, find official service-account setup instructions, and authorize agents to use the selected vaults through ordinary Paperclip governance. **Proposed solution** Add `1password/service-account`, with a password field labeled **Paste your 1Password Service Account token** and a link to [1Password's creation instructions](https://www.1password.dev/service-accounts/get-started#create-a-service-account). Use the pinned official `@1password/sdk` 0.5.0 for vault/item listing, item and secret-reference reads, and item create/update/archive/delete. **Alternatives considered** A remote MCP card would not provide vault access. A local CLI or a third-party MCP package adds installation and credential surfaces that the official SDK avoids. ## What Changed - Added the source and generated catalog definition, permission review, official light/dark artwork, documentation, and capability-map references. - Added a provider-owned SDK bridge with strict schemas, account-domain validation, contract hashes, fixed errors, bounded output, and disposable workers with cancellation/deadlines. - Registered the provider through master's native-provider catalog; existing setup, health, discovery, gateway, policy, and audit owners remain in place. - Labeled the single password field **Paste your 1Password Service Account token**. The shared formatter preserves explicit credential prompts; ordinary key labels retain their existing presentation. - Added credential-ownership, gateway read/write, policy/revocation, worker, setup UI, and interactive Storybook coverage. ## Verification - Final review follow-up: added two deterministic worker-entry tests for nested exact-token redaction and oversized-output rejection. Removing each guard caused exactly its regression test to fail. The focused provider suite passed **15 tests**, and the official server typecheck passed after rebuilding stale workspace SDK artifacts. Current head `569cb7f9bd57db791fb13a6034ce69bf50878cb1` passed the full [CI run](https://github.com/paperclipai/paperclip/actions/runs/40016166260), including typecheck, build, unit/integration tests, and all eight browser shards. The required `ci / verify` and `ci / e2e` gates passed. [Greptile](https://github.com/paperclipai/paperclip/pull/17249#issuecomment-6353731805) and [Paperclip Review](https://github.com/paperclipai/paperclip/pull/17249#issuecomment-6372165895) each rated this exact head **5/5**, with no open findings. Paperclip Review completed with a neutral check because its scoped reviewer could not inspect CI; the full CI result was verified separately. Other neutral checks and intentionally skipped Storybook jobs contain no actionable findings. - CI recovery on the same commit: the first attempt lost six jobs. Five logged simultaneous runner shutdowns at 18:49 UTC on 2026-10-23; the sixth stopped logging before a test result and its root cause was not established. No assertion failure appeared in the retrieved logs. All six jobs and the aggregate gates passed one failed-job retry. [CI run](https://github.com/paperclipai/paperclip/actions/runs/40005754936). - Copy follow-up: the catalog, provider, and setup UI suites passed **275 tests**. The governed gateway lifecycle passed **3 tests** (one live-only test skipped), including create, update, archive, and delete. UI token gates and map checks passed. The branch was rebased onto `9c442cf48e` to resolve additive catalog conflicts while retaining the Vercel and Supabase entries. The existing live write proof below remains applicable; this follow-up changes presentation only. - Five affected suites, including the existing Daytona consumer, passed **290 tests** (one opt-in live test skipped in fixture mode). Full `pnpm -r typecheck` and `pnpm build` passed. The local broad-suite attempt could not complete because PostgreSQL semaphore exhaustion prevented a competing integration suite from starting; the complete affected-file retry passed after disposable-process cleanup. The prior commit `f208a8aff6dc28859cc3f343497e18d85f124579` passed the complete CI matrix. All CI build, typecheck, test, and browser gates also passed on the earlier commit `9e2f3d3140368a08da43b004b2e8d3a0f4c0fa4d`. The separate Paperclip Review reported a worker-result regression-test gap on that head; the follow-up above addresses it. Its review thread is resolved, and both fresh current-head reviews are clean as recorded above. - Token gates, module boundaries, brand validation, map checks, and Storybook catalog checks passed. - Direct SDK create/archive/delete and rejected-call coverage passed (13 provider tests); the Storybook Permissions/Test play completed successfully in Chromium. Server and UI typechecks passed after those fixes. Greptile passed prior commit `9e2f3d3140368a08da43b004b2e8d3a0f4c0fa4d` at **5/5**. Both reviewers also passed the worker-test follow-up at **5/5** as recorded above. - Live 1Password proof on 2026-10-22: connect, eight-action discovery, vault listing through an actual run-scoped gateway, refresh, reconnect preserving identity, another read, removal, and denial through the retained session passed. Credential absence was asserted in responses/audit; an exact-token scan of inspected logs and changed files passed. - Real browser: Connectors → 1Password → token entry → personal access limited to one disposable agent → completion → Permissions → Test `onepassword_list_vaults` succeeded. The disposable connection was removed afterward. - Compiled-worker smoke initially exposed inherited Node launch flags. Workers now use explicit empty `execArgv`; the compiled worker then authenticated successfully and listed one vault. - Live write proof on **2026-10-23**: the replacement Keychain token passed all eight actions through the actual run-scoped gateway for both personal and shared credentials. The test created, listed, read, updated, resolved a secret from, archived, and deleted two synthetic items. Both were absent from subsequent item lists. Refresh/reconnect, identity preservation, removal, retained-session denial, and credential absence passed. The live suite passed **3 tests** (one fixture-only test skipped) in 116.65 seconds. The expanded fixture suite passed **3 tests** (one live-only test skipped); the 13 provider tests and server typecheck passed. An exact-token scan passed over 64 source/log files. - Failure history: the original token denied creation on 2026-10-22 and created no item. The first 2026-10-23 attempt stopped before provider calls because host PostgreSQL semaphore limits prevented test-database startup. A temporary ten-connection test profile allowed the complete retry to pass without changing shared services or host limits. A new delete-result assertion also exposed an outdated fixture response (`success` instead of `deleted`); the fixture was corrected and the complete fixture suite passed. Official contract sources: [service accounts](https://www.1password.dev/service-accounts/get-started), [SDKs](https://www.1password.dev/sdks), [item management](https://www.1password.dev/sdks/manage-items), [official JavaScript SDK](https://github.com/1Password/onepassword-sdk-js). ## Risks - Authorized item/secret reads intentionally return secret values to the agent and ordinary tool-result history. Select trusted agents and use restricted service-account vaults; the connection token itself is redacted. - New connections retain existing Paperclip action defaults, including Allowed writes/destructive actions for selected agents. 1Password still enforces the token's permissions. - Service-account access cannot be changed in place. Create a replacement account and reconnect to change vault permissions; read-only keys can connect but cannot write. - SDK authentication happens per action in a disposable worker. Calls have a 30-second maximum; cancellation stops local work, while a mutation already accepted by 1Password can still finish. Writes are never automatically retried. - Additive dependency and catalog change; no database migration. Disable/remove the connection to withdraw access, or remove the provider from catalog visibility for rollback. ## Model Used OpenAI Codex, based on GPT-6, with code editing, shell/browser tools, and live provider verification. A more specific runtime model ID and context-window limit were not exposed in this session. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used (with version and capability details) - [x] I have checked ROADMAP.md and confirmed this PR does not duplicate planned core work - [x] I have searched GitHub for duplicate or related PRs and linked them above - [x] I have either (a) linked existing issues with `Fixes: #` / `Closes #` / `Refs #` OR (b) described the issue in-PR following the relevant issue template - [x] I have not referenced internal/instance-local Paperclip issues or links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip` URLs) - [x] My branch name describes the change (e.g. `docs/...`, `fix/...`) and contains no internal Paperclip ticket id or instance-derived details - [x] I have run tests locally and they pass - [x] I have added or updated tests where applicable - [x] I have updated relevant documentation to reflect my changes - [x] I have considered and documented any risks above - [x] All Paperclip CI gates are green - [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups - [x] I will address all Greptile and reviewer comments before requesting merge --------- Co-authored-by: Paperclip <noreply@paperclip.ing>
2948 lines
139 KiB
JSON
2948 lines
139 KiB
JSON
{
|
|
"reviewedAt": "2026-09-30",
|
|
"evidenceLevel": "Official documentation and public MCP metadata; no account-bound read/write proof. Runtime discovery never expands this allowlist.",
|
|
"methods": [
|
|
{
|
|
"app": "google-workspace",
|
|
"method": "paperclip-workspace",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/gmail.readonly",
|
|
"https://www.googleapis.com/auth/gmail.compose",
|
|
"https://www.googleapis.com/auth/drive.readonly",
|
|
"https://www.googleapis.com/auth/drive.file",
|
|
"https://www.googleapis.com/auth/documents.readonly",
|
|
"https://www.googleapis.com/auth/documents",
|
|
"https://www.googleapis.com/auth/spreadsheets.readonly",
|
|
"https://www.googleapis.com/auth/spreadsheets",
|
|
"https://www.googleapis.com/auth/presentations.readonly",
|
|
"https://www.googleapis.com/auth/presentations",
|
|
"https://www.googleapis.com/auth/calendar.calendarlist.readonly",
|
|
"https://www.googleapis.com/auth/calendar.events.freebusy",
|
|
"https://www.googleapis.com/auth/calendar.events.readonly",
|
|
"https://www.googleapis.com/auth/calendar.events"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "One grant for selected Gmail, Drive (Docs, Sheets, Slides), and Calendar services. The list is the read/write selection allowlist, not the default request; default write selections request nine scopes. Chat, People, and Search are excluded. Gmail sending remains unsupported.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/guides/configure-mcp-servers",
|
|
"https://developers.google.com/identity/protocols/oauth2/resources/granular-permissions"
|
|
],
|
|
"reviewedAt": "2026-10-19",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-workspace",
|
|
"method": "customer-workspace-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/gmail.readonly",
|
|
"https://www.googleapis.com/auth/gmail.compose",
|
|
"https://www.googleapis.com/auth/drive.readonly",
|
|
"https://www.googleapis.com/auth/drive.file",
|
|
"https://www.googleapis.com/auth/documents.readonly",
|
|
"https://www.googleapis.com/auth/documents",
|
|
"https://www.googleapis.com/auth/spreadsheets.readonly",
|
|
"https://www.googleapis.com/auth/spreadsheets",
|
|
"https://www.googleapis.com/auth/presentations.readonly",
|
|
"https://www.googleapis.com/auth/presentations",
|
|
"https://www.googleapis.com/auth/calendar.calendarlist.readonly",
|
|
"https://www.googleapis.com/auth/calendar.events.freebusy",
|
|
"https://www.googleapis.com/auth/calendar.events.readonly",
|
|
"https://www.googleapis.com/auth/calendar.events"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "One grant for selected Gmail, Drive (Docs, Sheets, Slides), and Calendar services. The list is the read/write selection allowlist, not the default request; default write selections request nine scopes. Chat, People, and Search are excluded. Gmail sending remains unsupported.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/guides/configure-mcp-servers",
|
|
"https://developers.google.com/identity/protocols/oauth2/resources/granular-permissions"
|
|
],
|
|
"reviewedAt": "2026-10-19",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "airtable",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"data.records:read",
|
|
"data.records:write",
|
|
"schema.bases:read",
|
|
"schema.bases:write",
|
|
"data.recordComments:read",
|
|
"data.recordComments:write",
|
|
"workspacesAndBases:read"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create/update records, schema and record comments in selected bases.",
|
|
"evidence": [
|
|
"https://airtable.com/developers/agents/mcp/getting-started",
|
|
"https://support.airtable.com/articles/9897799762-using-the-airtable-mcp-server",
|
|
"https://mcp.airtable.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "DCR/HTTPS OAuth completed for one selected base only with read/write records, comments and base structure. Bounded base-name search passed in 0.6s. 46 actions (24 Read/22 Write); all 22 Write Off persisted after reload. No record data read or writes.",
|
|
"evidenceLimit": "An initial consent-flow review issue was disclosed before the completed grant; qualification stayed limited to bounded reads. No provider writes or actual agents ran. Token-refresh and actual runtime behavior remain unqualified."
|
|
},
|
|
{
|
|
"app": "api-key-generic",
|
|
"method": "api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Actions depend on the operator-supplied API and key; grant read/write on the required resources at the provider.",
|
|
"evidence": [
|
|
"https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Actions depend on the operator-supplied API and key; grant read/write on the required resources at the provider. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions.",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "arcade",
|
|
"method": "mcp",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Actions depend on the user-configured endpoint and its upstream authorizations.",
|
|
"evidence": [
|
|
"https://docs.arcade.dev/en/operate/governance/mcp-gateways"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "asana",
|
|
"method": "managed",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"default"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create/update tasks and projects authorized by the account.",
|
|
"evidence": [
|
|
"https://developers.asana.com/docs/integrating-with-asanas-mcp-server",
|
|
"https://mcp.asana.com/.well-known/oauth-protected-resource/v2"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "Real OAuth, 39 MCP actions, Get me, and forced-expiry refresh verified with a local broker fixture on 2026-09-30."
|
|
},
|
|
{
|
|
"app": "asana",
|
|
"method": "mcp-own-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"default"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create/update tasks and projects authorized by the account.",
|
|
"evidence": [
|
|
"https://developers.asana.com/docs/integrating-with-asanas-mcp-server",
|
|
"https://mcp.asana.com/.well-known/oauth-protected-resource/v2"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "OAuth, 39 MCP actions, and Get me verified in the embedded browser on 2026-09-30."
|
|
},
|
|
{
|
|
"app": "beehiiv",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"read",
|
|
"write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Publication/subscriber actions exposed by the MCP catalog.",
|
|
"evidence": [
|
|
"https://www.beehiiv.com/features/mcp/getting-started",
|
|
"https://mcp.beehiiv.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "bitly",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"mcp.all"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read user, organizations, groups, links, QR codes, analytics, domains, and Bitly Sites; create/update links and QR codes, alter group/domain/site settings, create or edit site content, and publish; permanently delete short links, Sites, site blocks, and redirects. Domain-registration tools may create a complimentary domain after accepting provider/registrar agreements. Actions remain subject to the authorized Bitly account and group permissions.",
|
|
"evidence": [
|
|
"https://dev.bitly.com/bitly-mcp/using-the-bitly-mcp-server/configuration-details/",
|
|
"https://dev.bitly.com/bitly-mcp/using-the-bitly-mcp-server/mcp-tools-reference/",
|
|
"https://dev.bitly.com/bitly-mcp/overview/mcp-changelog/",
|
|
"https://api-ssl.bitly.com/.well-known/oauth-protected-resource",
|
|
"https://api-ssl.bitly.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-09",
|
|
"liveProof": "HTTPS DCR/OAuth with approved mcp.all completed after JSON token response negotiation. Discovered 56 actions (30 read, 26 write). bitly_get_user passed through the Paperclip Test dialog in 2.0s; account values omitted. Reload/catalog refresh retained actions, zero selected agents, and all 26 writes Off. Older recovery connection left all 56 actions Off.",
|
|
"evidenceLimit": "Direct UI Test using the Connector Tester actor, not an agent adapter run. No links created, provider writes, paid actions, token refresh or API-key method tested."
|
|
},
|
|
{
|
|
"app": "bitly",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "The same broad provider MCP catalog as the OAuth method, under the account associated with the API token: link and QR management, analytics, groups, custom-domain operations, and Bitly Sites, including publishing and deletion.",
|
|
"evidence": [
|
|
"https://dev.bitly.com/bitly-mcp/overview/quickstart/",
|
|
"https://dev.bitly.com/bitly-mcp/using-the-bitly-mcp-server/configuration-details/",
|
|
"https://dev.bitly.com/bitly-mcp/using-the-bitly-mcp-server/mcp-tools-reference/"
|
|
],
|
|
"reviewedAt": "2026-10-09",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "A Bitly API token from Settings \u2192 API is documented for MCP bearer auth, but no restriction scope is documented; treat it as capable of the full MCP catalog under that account. Paperclip cannot narrow the token."
|
|
},
|
|
{
|
|
"app": "box",
|
|
"method": "mcp-own-oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "File/folder actions exposed by the configured Box MCP app; app registration and content ACLs apply.",
|
|
"evidence": [
|
|
"https://support.box.com/hc/en-us/articles/43847256139923-Managing-Box-MCP-Servers",
|
|
"https://mcp.box.com/.well-known/oauth-protected-resource",
|
|
"https://api.box.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "Box requires scopes (including Manage AI) on the registered Box app in the Admin Console. Its MCP authorization metadata has no request-scope list; consent and the app registration control file operations."
|
|
},
|
|
{
|
|
"app": "brex",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid",
|
|
"offline_access",
|
|
"email",
|
|
"users.readonly",
|
|
"departments.readonly",
|
|
"locations.readonly",
|
|
"titles.readonly",
|
|
"legal_entities.readonly",
|
|
"cards.readonly",
|
|
"cards",
|
|
"companies.readonly",
|
|
"budgets.readonly",
|
|
"travel.trips.readonly",
|
|
"expenses.card.readonly",
|
|
"expenses.card",
|
|
"expenses.bill",
|
|
"accounts.cash.readonly",
|
|
"vendors.readonly",
|
|
"accounting.integration.read",
|
|
"accounting.record.read"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Own card/expense memos, receipts, attendees and spend limits. No reimbursement creation or expense approval through MCP.",
|
|
"evidence": [
|
|
"https://www.brex.com/support/using-brex-in-ai-apps",
|
|
"https://api.brex.com/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "browser-use-cloud",
|
|
"method": "cloud-v4",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Create/stop browser sessions and run browser tasks under the API key.",
|
|
"evidence": [
|
|
"https://docs.browser-use.com/cloud/api-v4-overview"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Create/stop browser sessions and run browser tasks under the API key. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "candid",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid",
|
|
"profile",
|
|
"email"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "None: nonprofit/funder discovery and research.",
|
|
"evidence": [
|
|
"https://learning.candid.org/getting-started-with-the-candid-mcp-connector/375441",
|
|
"https://mcp.candid.org/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "clickhouse",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"mcp:access",
|
|
"clickstack:access",
|
|
"openid",
|
|
"profile",
|
|
"email"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "ClickStack dashboards, saved searches and alerts; selected service access applies.",
|
|
"evidence": [
|
|
"https://clickhouse.com/blog/announcing-managed-clickstack-mcp-server",
|
|
"https://mcp.clickhouse.cloud/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "cloudflare",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"user:read",
|
|
"account:read"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Cloudflare API actions selected at provider consent or on the API token. Identity scopes alone do not grant account writes.",
|
|
"evidence": [
|
|
"https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/",
|
|
"https://mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "cloudflare",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Cloudflare API actions selected at provider consent or on the API token. Identity scopes alone do not grant account writes.",
|
|
"evidence": [
|
|
"https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/",
|
|
"https://mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Cloudflare API actions selected at provider consent or on the API token. Identity scopes alone do not grant account writes. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "cloudinary",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid",
|
|
"profile",
|
|
"email",
|
|
"offline_access",
|
|
"asset_management",
|
|
"upload",
|
|
"media_generation"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Upload, manage and generate media in the authorized product environment.",
|
|
"evidence": [
|
|
"https://cloudinary.com/documentation/cloudinary_llm_mcp",
|
|
"https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "coda",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"mcp:all"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Modify documents/tables permitted by the account.",
|
|
"evidence": [
|
|
"https://help.coda.io/hc/en-us/articles/44722769665549-Security-recommendations-for-the-Coda-MCP",
|
|
"https://coda.io/.well-known/oauth-protected-resource/apis/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "coda",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Modify documents/tables permitted by the account.",
|
|
"evidence": [
|
|
"https://help.coda.io/hc/en-us/articles/44722769665549-Security-recommendations-for-the-Coda-MCP",
|
|
"https://coda.io/.well-known/oauth-protected-resource/apis/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Modify documents/tables permitted by the account. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "cognee",
|
|
"method": "cloud-local",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Add/process knowledge and manage authorized datasets.",
|
|
"evidence": [
|
|
"https://docs.cognee.ai/cognee-cloud/connections/cloud-mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Add/process knowledge and manage authorized datasets. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "composio",
|
|
"method": "mcp",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Actions depend on the configured toolkits and upstream connected accounts.",
|
|
"evidence": [
|
|
"https://docs.composio.dev/docs/composio-connect"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "context7",
|
|
"method": "mcp",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "Resolve public library names to Context7 IDs and retrieve current public documentation/code examples for a specified library and topic. These are provider-declared read-only, non-destructive lookups; no library, account, repository, or workspace mutation is exposed by the reviewed remote server definition.",
|
|
"evidence": [
|
|
"https://context7.com/docs/api-guide",
|
|
"https://github.com/upstash/context7/blob/master/server.json",
|
|
"https://github.com/upstash/context7/blob/master/packages/mcp/README.md",
|
|
"https://github.com/upstash/context7/blob/master/packages/mcp/src/index.ts"
|
|
],
|
|
"reviewedAt": "2026-10-09",
|
|
"liveProof": "Anonymous Paperclip connection succeeded. Discovery returned 2 read actions (resolve-library-id and query-docs), 0 write actions. Resolve React returned official React docs ID /reactjs/react.dev (source reputation High) in 2.9s; query-docs returned useEffect cleanup guidance from React documentation in 3.0s. After page reload, agent restriction remained Just agents I pick with 0 selected and the same bounded query succeeded again in 3.1s. No API key, OAuth grant, account data, private repository, provider writes, or agent run.",
|
|
"evidenceLimit": "Live proof covers anonymous MCP initialize/discovery and one narrow public React documentation lookup through Paperclip's actual Apps connection and Test dialog, including a successful repeat after reload. It does not prove elevated API-key rate limits, private-repository access, or any non-public provider content."
|
|
},
|
|
{
|
|
"app": "ditto",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid",
|
|
"profile",
|
|
"email",
|
|
"offline_access"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read style guide rules and check text against them; search, create, update, translate and permanently delete text items; create, update, translate and publish library components and link or unlink text items to them (linking replaces a text item's developer ID); link synced Figma text nodes; manage component folders, projects, project blocks, variables, variants, style guides and style guide rules; read statuses and workspace tags. The connection acts as the Ditto user who signs in.",
|
|
"evidence": [
|
|
"https://developer.dittowords.com/guides/connect-the-mcp",
|
|
"https://developer.dittowords.com/mcp-reference/tools",
|
|
"https://api.dittowords.com/.well-known/oauth-protected-resource",
|
|
"https://login.dittowords.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-10",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "ditto",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Read style guide rules and check text against them; search, create, update, translate and permanently delete text items; create, update, translate and publish library components and link or unlink text items to them (linking replaces a text item's developer ID); link synced Figma text nodes; manage component folders, projects, project blocks, variables, variants, style guides and style guide rules; read statuses and workspace tags.",
|
|
"evidence": [
|
|
"https://developer.dittowords.com/guides/connect-the-mcp",
|
|
"https://developer.dittowords.com/mcp-reference/tools",
|
|
"https://developer.dittowords.com/api-reference/authentication"
|
|
],
|
|
"reviewedAt": "2026-10-10",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Ditto API keys are not scoped: a key reaches all data in its workspace, including permanent deletes, and actions are attributed to the user who created the key. Create a separate key for Paperclip so it can be removed independently, and set delete and link actions to Ask first before agents run unattended. Paperclip cannot narrow an existing key."
|
|
},
|
|
{
|
|
"app": "egnyte",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Account-dependent file operations; live write verification outstanding.",
|
|
"evidence": [
|
|
"https://developers.egnyte.com/docs/Remote_MCP_Server",
|
|
"https://mcp-server.egnyte.com/.well-known/oauth-protected-resource",
|
|
"https://mcp-oauth.egnyte.com/.well-known/oauth-authorization-server/egnyte-connect"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "The hosted authorization server selects the Egnyte tenant/account permissions. Neither MCP nor authorization-server metadata advertises request scopes. Documentation rendered no readable body during this review; tenant-bound write proof remains required."
|
|
},
|
|
{
|
|
"app": "embat",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"email",
|
|
"offline_access",
|
|
"openid",
|
|
"profile"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Provider/account dependent; published metadata is identity-only, so no write guarantee.",
|
|
"evidence": [
|
|
"https://tellme.embat.io/.well-known/oauth-protected-resource/mcp",
|
|
"https://complete-book-76.authkit.app/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "enterpret",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "Query the organization's customer feedback and retrieve cited quotes. The current MCP tool catalog has no write actions.",
|
|
"evidence": [
|
|
"https://helpcenter.enterpret.com/en/articles/12665166-enterpret-mcp-server",
|
|
"https://github.com/paperclipai/paperclip/pull/13906"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "token-connect-safe-read-refresh-reconnect-verified",
|
|
"evidenceLimit": "Isolated self-hosted same-machine QA on 2026-09-30. Dashboard revocation did not immediately invalidate the token: it reconnected and completed a safe read. Token-path agent-session deny, real agent process, expiry recovery, VPS, and Cloud remain untested.",
|
|
"keyPermissions": "An organization auth token can read that organization's customer feedback. Use a token from Settings > Enterpret MCP and check its displayed expiry there."
|
|
},
|
|
{
|
|
"app": "enterpret",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"mcp:read"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Query the organization's customer feedback and retrieve cited quotes. OAuth targets the same official read-only MCP; the separate beta Enterpret Agent write MCP is out of scope.",
|
|
"evidence": [
|
|
"https://helpcenter.enterpret.com/en/articles/12665166-enterpret-mcp-server",
|
|
"https://github.com/paperclipai/paperclip/pull/13906"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "tool-list-verified-scope-mismatch",
|
|
"evidenceLimit": "On 2026-10-01 the account holder reported Vivek confirmed the official MCP is read-only and the Agent write MCP is separate. OAuth scope-reporting and token-revocation cache fixes are committed as fast follows after connector deployment; they are not release prerequisites. Fresh authorization/refresh remain unverified. Scope names alone do not establish write access."
|
|
},
|
|
{
|
|
"app": "executor",
|
|
"method": "mcp",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Actions depend on the custom MCP endpoint and configured services.",
|
|
"evidence": [
|
|
"https://executor.sh/docs/mcp-proxy"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "fireflies",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"email",
|
|
"profile"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Share/revoke meeting access, rename/move meetings and create soundbites where the authenticated owner or team-admin role permits. The MCP resource requests profile/email, not separate mutation scopes.",
|
|
"evidence": [
|
|
"https://docs.fireflies.ai/getting-started/mcp-configuration",
|
|
"https://api.fireflies.ai/.well-known/oauth-protected-resource",
|
|
"https://docs.fireflies.ai/mcp-tools/overview"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "fireflies",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Share/revoke meeting access, rename/move meetings and create soundbites where the authenticated owner or team-admin role permits. The MCP resource requests profile/email, not separate mutation scopes.",
|
|
"evidence": [
|
|
"https://docs.fireflies.ai/getting-started/mcp-configuration",
|
|
"https://api.fireflies.ai/.well-known/oauth-protected-resource",
|
|
"https://docs.fireflies.ai/mcp-tools/overview"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Use an API key for an account with write access to the meetings your agents need to share, rename, move or turn into soundbites. Paperclip cannot increase the key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "gauge",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"mcp"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read AI visibility, mentions, citations, answers and competitor data; browse and curate tracked topics and prompts (create, generate, move, tag, and replace keyword lists); pull SEO keyword, GA4, Search Console, PostHog and Google Ads/OpenAI Ads reports; run the content pipeline from brief to article and publish to a connected CMS as a draft, to staging or live; read and edit organization memory files and skills; create, assign and update Action Center items; ask Ask Gauge questions. Access is limited to the organization chosen during consent.",
|
|
"evidence": [
|
|
"https://docs.withgauge.com/help/mcp",
|
|
"https://app.withgauge.com/.well-known/oauth-protected-resource",
|
|
"https://app.withgauge.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "gauge",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Read AI visibility, mentions, citations, answers and competitor data; browse and curate tracked topics and prompts (create, generate, move, tag, and replace keyword lists); pull SEO keyword, GA4, Search Console, PostHog and Google Ads/OpenAI Ads reports; run the content pipeline from brief to article and publish to a connected CMS as a draft, to staging or live; read and edit organization memory files and skills; create, assign and update Action Center items; ask Ask Gauge questions.",
|
|
"evidence": [
|
|
"https://docs.withgauge.com/help/mcp",
|
|
"https://app.withgauge.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Gauge API keys are not scoped: a key reaches every MCP tool in the organization that created it, including publishing to a connected CMS, and requests are attributed to the organization rather than a user. Generate a separate key for Paperclip so it can be deleted independently, and set publish actions to Ask first before agents run unattended. Paperclip cannot narrow an existing key."
|
|
},
|
|
{
|
|
"app": "github",
|
|
"method": "managed",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Repository contents, issues, pull requests and other granted toolsets; selected repos and installation/PAT permissions apply.",
|
|
"evidence": [
|
|
"https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp/"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "Managed github.code uses a GitHub App installation and selected repositories. Installation permissions, not OAuth scope strings, grant code and pull-request writes; retain the managed profile.",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "github",
|
|
"method": "mcp-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Repository contents, issues, pull requests and other granted toolsets; selected repos and installation/PAT permissions apply.",
|
|
"evidence": [
|
|
"https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp/"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Repository contents, issues, pull requests and other granted toolsets; selected repos and installation/PAT permissions apply. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions.",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "gmail",
|
|
"method": "paperclip-read",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/gmail.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Search and read messages, threads, drafts, and labels.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/gmail/api/reference/mcp",
|
|
"https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "gmail",
|
|
"method": "customer-read-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/gmail.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Search and read messages, threads, drafts, and labels.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/gmail/api/reference/mcp",
|
|
"https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "gmail",
|
|
"method": "paperclip-draft",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/gmail.readonly",
|
|
"https://www.googleapis.com/auth/gmail.compose"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read Gmail and create drafts for review in Gmail.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/gmail/api/reference/mcp",
|
|
"https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "gmail",
|
|
"method": "customer-draft-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/gmail.readonly",
|
|
"https://www.googleapis.com/auth/gmail.compose"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read Gmail and create drafts for review in Gmail.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/gmail/api/reference/mcp",
|
|
"https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "gmail",
|
|
"method": "paperclip-archive",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/gmail.readonly",
|
|
"https://www.googleapis.com/auth/gmail.modify"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read Gmail and archive a thread by removing only the INBOX label.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/gmail/api/reference/mcp/tools_list/unlabel_thread",
|
|
"https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-10-14",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "gmail",
|
|
"method": "customer-archive-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/gmail.readonly",
|
|
"https://www.googleapis.com/auth/gmail.modify"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read Gmail and archive a thread by removing only the INBOX label.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/gmail/api/reference/mcp/tools_list/unlabel_thread",
|
|
"https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-10-14",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-calendar",
|
|
"method": "paperclip-read",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/calendar.calendarlist.readonly",
|
|
"https://www.googleapis.com/auth/calendar.events.freebusy",
|
|
"https://www.googleapis.com/auth/calendar.events.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Read calendars, events, and availability.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/calendar/api/reference/mcp",
|
|
"https://calendarmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "google-calendar",
|
|
"method": "customer-read-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/calendar.calendarlist.readonly",
|
|
"https://www.googleapis.com/auth/calendar.events.freebusy",
|
|
"https://www.googleapis.com/auth/calendar.events.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Read calendars, events, and availability.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/calendar/api/reference/mcp",
|
|
"https://calendarmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "google-calendar",
|
|
"method": "paperclip-write",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/calendar.calendarlist.readonly",
|
|
"https://www.googleapis.com/auth/calendar.events"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create, update, respond to, and delete events.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/calendar/api/reference/mcp",
|
|
"https://calendarmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "google-calendar",
|
|
"method": "customer-write-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/calendar.calendarlist.readonly",
|
|
"https://www.googleapis.com/auth/calendar.events"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create, update, respond to, and delete events.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/calendar/api/reference/mcp",
|
|
"https://calendarmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "google-chat",
|
|
"method": "paperclip-read",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/chat.spaces.readonly",
|
|
"https://www.googleapis.com/auth/chat.messages.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Search conversations and read messages.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/chat/api/reference/mcp",
|
|
"https://chatmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-chat",
|
|
"method": "customer-read-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/chat.spaces.readonly",
|
|
"https://www.googleapis.com/auth/chat.messages.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Search conversations and read messages.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/chat/api/reference/mcp",
|
|
"https://chatmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-chat",
|
|
"method": "paperclip-write",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/chat.spaces.readonly",
|
|
"https://www.googleapis.com/auth/chat.messages.readonly",
|
|
"https://www.googleapis.com/auth/chat.messages.create"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read Chat and send messages.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/chat/api/reference/mcp",
|
|
"https://chatmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-chat",
|
|
"method": "customer-write-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/chat.spaces.readonly",
|
|
"https://www.googleapis.com/auth/chat.messages.readonly",
|
|
"https://www.googleapis.com/auth/chat.messages.create"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read Chat and send messages.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/chat/api/reference/mcp",
|
|
"https://chatmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-docs",
|
|
"method": "paperclip-read",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/documents.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Read document text and structure.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/docs/api/reference/mcp",
|
|
"https://docsmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-docs",
|
|
"method": "customer-read-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/documents.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Read document text and structure.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/docs/api/reference/mcp",
|
|
"https://docsmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-docs",
|
|
"method": "paperclip-write",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/documents"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read and update documents.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/docs/api/reference/mcp",
|
|
"https://docsmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-docs",
|
|
"method": "customer-write-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/documents"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read and update documents.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/docs/api/reference/mcp",
|
|
"https://docsmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-drive",
|
|
"method": "paperclip-read",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/drive.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Search and read files and metadata.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/drive/api/reference/mcp",
|
|
"https://drivemcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-drive",
|
|
"method": "customer-read-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/drive.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Search and read files and metadata.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/drive/api/reference/mcp",
|
|
"https://drivemcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-drive",
|
|
"method": "paperclip-write",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/drive.readonly",
|
|
"https://www.googleapis.com/auth/drive.file"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read files and create or copy files.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/drive/api/reference/mcp",
|
|
"https://drivemcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-drive",
|
|
"method": "customer-write-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/drive.readonly",
|
|
"https://www.googleapis.com/auth/drive.file"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read files and create or copy files.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/drive/api/reference/mcp",
|
|
"https://drivemcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-people",
|
|
"method": "paperclip-read",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/directory.readonly",
|
|
"https://www.googleapis.com/auth/userinfo.profile",
|
|
"https://www.googleapis.com/auth/contacts.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Search contacts, directory people, and your profile.",
|
|
"evidence": [
|
|
"https://developers.google.com/people/api/mcp",
|
|
"https://people.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-people",
|
|
"method": "customer-read-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/directory.readonly",
|
|
"https://www.googleapis.com/auth/userinfo.profile",
|
|
"https://www.googleapis.com/auth/contacts.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Search contacts, directory people, and your profile.",
|
|
"evidence": [
|
|
"https://developers.google.com/people/api/mcp",
|
|
"https://people.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-sheets",
|
|
"method": "paperclip-read",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/spreadsheets.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Read spreadsheet values and structure.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/sheets/api/reference/mcp",
|
|
"https://sheetsmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-sheets",
|
|
"method": "customer-read-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/spreadsheets.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Read spreadsheet values and structure.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/sheets/api/reference/mcp",
|
|
"https://sheetsmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-sheets",
|
|
"method": "paperclip-write",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/spreadsheets"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read and update spreadsheet values, formulas, and dimensions.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/sheets/api/reference/mcp",
|
|
"https://sheetsmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-sheets",
|
|
"method": "customer-write-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/spreadsheets"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read and update spreadsheet values, formulas, and dimensions.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/sheets/api/reference/mcp",
|
|
"https://sheetsmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-sheets",
|
|
"method": "local",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Share only named spreadsheets with the Paperclip robot account.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/sheets/api/reference/mcp",
|
|
"https://sheetsmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-slides",
|
|
"method": "paperclip-read",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/presentations.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Read presentation slides and content.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/slides/api/reference/mcp",
|
|
"https://slidesmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-slides",
|
|
"method": "customer-read-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/presentations.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Read presentation slides and content.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/slides/api/reference/mcp",
|
|
"https://slidesmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-slides",
|
|
"method": "paperclip-write",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/presentations"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read and update presentations.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/slides/api/reference/mcp",
|
|
"https://slidesmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-slides",
|
|
"method": "customer-write-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/presentations"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read and update presentations.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/slides/api/reference/mcp",
|
|
"https://slidesmcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-workspace-search",
|
|
"method": "paperclip-read",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/gmail.readonly",
|
|
"https://www.googleapis.com/auth/drive.readonly",
|
|
"https://www.googleapis.com/auth/calendar.readonly",
|
|
"https://www.googleapis.com/auth/chat.messages.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Search Gmail, Drive, Calendar, and Chat without write access.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/guides/universal-search-mcp",
|
|
"https://workspacemcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "google-workspace-search",
|
|
"method": "customer-read-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"https://www.googleapis.com/auth/gmail.readonly",
|
|
"https://www.googleapis.com/auth/drive.readonly",
|
|
"https://www.googleapis.com/auth/calendar.readonly",
|
|
"https://www.googleapis.com/auth/chat.messages.readonly"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Search Gmail, Drive, Calendar, and Chat without write access.",
|
|
"evidence": [
|
|
"https://developers.google.com/workspace/guides/universal-search-mcp",
|
|
"https://workspacemcp.googleapis.com/.well-known/oauth-protected-resource/mcp/v1"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "honcho",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Create peers/sessions and save memory under the API key project.",
|
|
"evidence": [
|
|
"https://honcho.dev/docs/v3/guides/integrations/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "hugging-face",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"read-mcp",
|
|
"read-repos",
|
|
"contribute-repos",
|
|
"jobs"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create/contribute repositories and schedule/run jobs; users must enable those tools in HF MCP settings. Paid compute still requires an eligible account.",
|
|
"evidence": [
|
|
"https://huggingface.co/docs/hub/en/agents-mcp",
|
|
"https://huggingface.co/docs/hub/agents-mcp",
|
|
"https://huggingface.co/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "jira",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"read:me",
|
|
"read:account",
|
|
"offline_access",
|
|
"email",
|
|
"read:jira-work",
|
|
"write:jira-work",
|
|
"search:confluence",
|
|
"read:confluence-user",
|
|
"read:page:confluence",
|
|
"write:page:confluence",
|
|
"read:comment:confluence",
|
|
"write:comment:confluence",
|
|
"read:space:confluence",
|
|
"read:hierarchical-content:confluence",
|
|
"write:component:compass",
|
|
"read:component:compass",
|
|
"read:scorecard:compass",
|
|
"write:scorecard:compass",
|
|
"read:event:compass",
|
|
"read:metric:compass",
|
|
"read:all:twg",
|
|
"write:all:twg"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Jira issues, Confluence pages/comments and Compass components/scorecards. Admin policy and consent toolset choices apply.",
|
|
"evidence": [
|
|
"https://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/",
|
|
"https://mcp.atlassian.com/.well-known/oauth-protected-resource/v1/mcp/authv2"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "kernel",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Launch/manage browsers, profiles, apps and browser automation.",
|
|
"evidence": [
|
|
"https://www.kernel.sh/docs/reference/mcp-server/",
|
|
"https://mcp.onkernel.com/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "kernel",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Launch/manage browsers, profiles, apps and browser automation.",
|
|
"evidence": [
|
|
"https://www.kernel.sh/docs/reference/mcp-server/",
|
|
"https://mcp.onkernel.com/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Launch/manage browsers, profiles, apps and browser automation. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "linear",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"read",
|
|
"write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create/update issues and other authorized workspace resources.",
|
|
"evidence": [
|
|
"https://mcp.linear.app/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "User-approved read/write; selected workspace returned one team in 0.3s. IDs omitted. Catalog refresh and reload retained 68 actions; all 30 write actions Off. No provider writes or actual agent runs.",
|
|
"evidenceLimit": "Browser tester account read only; provider writes, refresh-token expiry, and actual agent-adapter execution remain unqualified. Any agent company installation; UI did not allow narrowing. No actual agent ran."
|
|
},
|
|
{
|
|
"app": "local-falcon",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"api",
|
|
"offline_access"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Account-authorized scans/campaigns; subscription credits apply.",
|
|
"evidence": [
|
|
"https://docs.localfalcon.com/",
|
|
"https://mcp.localfalcon.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "make",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Run selected scenarios; paid plans additionally manage scenarios, data stores and teams.",
|
|
"evidence": [
|
|
"https://developers.make.com/mcp-server",
|
|
"https://mcp.make.com/.well-known/oauth-protected-resource",
|
|
"https://www.make.com/.well-known/oauth-authorization-server/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "2026-10-08: real Paperclip browser Test dialog environment_get returned authenticated organization/team context. Refresh/reload retained 133 actions; all 59 writes set Off and retained after reload. Company-wide installation in isolated test company, no provider write or actual adapter run. Account values excluded.",
|
|
"providerDefaultReason": "Make documents selecting scopes and scenarios during its hosted connection flow. Management tools require a paid plan. Do not replace that resource selection with invented MCP client scopes."
|
|
},
|
|
{
|
|
"app": "manufact",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid",
|
|
"profile",
|
|
"email",
|
|
"offline_access"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Deploy/redeploy/stop servers and edit server configuration under the signed-in role.",
|
|
"evidence": [
|
|
"https://docs.manufact.com/mcp",
|
|
"https://mcp.manufact.com/.well-known/oauth-protected-resource/mcp",
|
|
"https://cloud.manufact.com/.well-known/oauth-authorization-server/api/auth"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "mem0",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Add/update/delete memories under the API key account.",
|
|
"evidence": [
|
|
"https://docs.mem0.ai/platform/mem0-mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Add/update/delete memories under the API key account. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "miro",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"boards:read",
|
|
"boards:write",
|
|
"openid",
|
|
"email"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create board content/diagrams and act on comments; board/team ACLs apply.",
|
|
"evidence": [
|
|
"https://help.miro.com/hc/en-us/articles/31625301583890-How-to-enable-Miro-s-MCP-Server-user-guide",
|
|
"https://mcp.miro.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "mixpanel",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"projects",
|
|
"analysis",
|
|
"events",
|
|
"insights",
|
|
"segmentation",
|
|
"retention",
|
|
"data:read",
|
|
"funnels",
|
|
"flows",
|
|
"data_definitions",
|
|
"alerts",
|
|
"annotations",
|
|
"bookmarks",
|
|
"business_context",
|
|
"cohorts",
|
|
"context",
|
|
"custom_alerts",
|
|
"custom_events",
|
|
"custom_properties",
|
|
"dashboard_reports",
|
|
"experiments",
|
|
"feature_flags",
|
|
"metrics",
|
|
"user_details"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Metadata, annotations, cohorts and enabled management tools; project role still governs each action.",
|
|
"evidence": [
|
|
"https://mixpanel.com/blog/mixpanel-mcp-server/",
|
|
"https://mcp.mixpanel.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "netlify",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"offline_access",
|
|
"read",
|
|
"write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Deploy/manage sites via the account; no Claude-specific scope is required for Paperclip.",
|
|
"evidence": [
|
|
"https://docs.netlify.com/build/build-with-ai/agent-setup-guides/agent-setup-overview/",
|
|
"https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "neon",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"read",
|
|
"write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create, describe and delete projects and branches; manage computes, roles, databases and snapshots; run SQL and apply schema changes; configure Neon Auth and the Data API; read logs. Optional project pinning and read-only mode narrow the hosted server.",
|
|
"evidence": [
|
|
"https://neon.com/docs/ai/neon-mcp-server",
|
|
"https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp",
|
|
"https://mcp.neon.tech/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-02",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "neon",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Create, describe and delete projects and branches; manage computes, roles, databases and snapshots; run SQL and apply schema changes; configure Neon Auth and the Data API; read logs. Optional project pinning and read-only mode narrow the hosted server.",
|
|
"evidence": [
|
|
"https://neon.com/docs/ai/neon-mcp-server",
|
|
"https://neon.com/docs/manage/api-keys",
|
|
"https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-10-02",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Project, branch, compute, snapshot, SQL and schema changes within the key\u2019s reach. A project-scoped key limits access to one project with Editor rights; personal and organization keys reach every project they can access. Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "notion",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"default"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create/update pages and databases shared with the authenticated account.",
|
|
"evidence": [
|
|
"https://developers.notion.com/guides/mcp/build-mcp-client",
|
|
"https://mcp.notion.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "oauth-generic",
|
|
"method": "oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Actions and scope requirements depend on the operator-supplied provider.",
|
|
"evidence": [
|
|
"https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "Operator-defined OAuth endpoints have no provider-specific reviewed scope list. Request only the scopes supplied by the operator; this template is not a curated provider allowlist.",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "oreilly",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid",
|
|
"offline_access"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "None: content discovery and retrieval.",
|
|
"evidence": [
|
|
"https://learning.oreilly.com/apidocs/mcp/content/",
|
|
"https://api.oreilly.com/.well-known/oauth-protected-resource/api/content-discovery/v1/mcp/"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "oreilly",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "None: content discovery and retrieval.",
|
|
"evidence": [
|
|
"https://learning.oreilly.com/apidocs/mcp/content/",
|
|
"https://api.oreilly.com/.well-known/oauth-protected-resource/api/content-discovery/v1/mcp/"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "None: content discovery and retrieval. A read-only key is sufficient."
|
|
},
|
|
{
|
|
"app": "pagerduty",
|
|
"method": "mcp-api-key-us",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Incident and on-call changes require a full-access API key and role access.",
|
|
"evidence": [
|
|
"https://support.pagerduty.com/main/docs/pagerduty-mcp-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Incident and on-call changes require a full-access API key and role access. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "pagerduty",
|
|
"method": "mcp-api-key-eu",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Incident and on-call changes require a full-access API key and role access.",
|
|
"evidence": [
|
|
"https://support.pagerduty.com/main/docs/pagerduty-mcp-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Incident and on-call changes require a full-access API key and role access. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "planetscale",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "SQL writes and database actions only when selected at provider consent; insights-only remains read only.",
|
|
"evidence": [
|
|
"https://planetscale.com/docs/connect/mcp",
|
|
"https://mcp.pscale.dev/.well-known/oauth-protected-resource/mcp/planetscale",
|
|
"https://mcp.pscale.dev/.well-known/oauth-protected-resource/mcp/planetscale-insights-only",
|
|
"https://mcp.pscale.dev/.well-known/oauth-authorization-server/mcp/planetscale-insights-only",
|
|
"https://api.planetscale.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "PlanetScale documents choosing organizations, databases and read/write permission at authorization. Its general authorization server advertises unrelated organization administration too; retain the provider consent selection, and the separate insights-only endpoint."
|
|
},
|
|
{
|
|
"app": "planetscale",
|
|
"method": "mcp-insights-only",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "SQL writes and database actions only when selected at provider consent; insights-only remains read only.",
|
|
"evidence": [
|
|
"https://planetscale.com/docs/connect/mcp",
|
|
"https://mcp.pscale.dev/.well-known/oauth-protected-resource/mcp/planetscale",
|
|
"https://mcp.pscale.dev/.well-known/oauth-protected-resource/mcp/planetscale-insights-only",
|
|
"https://mcp.pscale.dev/.well-known/oauth-authorization-server/mcp/planetscale-insights-only",
|
|
"https://api.planetscale.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "PlanetScale documents choosing organizations, databases and read/write permission at authorization. Its general authorization server advertises unrelated organization administration too; retain the provider consent selection, and the separate insights-only endpoint."
|
|
},
|
|
{
|
|
"app": "posthog",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Analytics objects, feature flags, experiments, error triage and other enabled product actions. readonly/feature/tool filters remain enforced.",
|
|
"evidence": [
|
|
"https://posthog.com/docs/model-context-protocol",
|
|
"https://mcp.posthog.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "Provider read-only preset; active Paperclip project only. Authenticated profile returned in 0.7s; identity values omitted. Catalog refresh and reload retained 380 actions; all 7 write actions Off. No provider writes or actual agent runs.",
|
|
"providerDefaultReason": "PostHog documents the no-scope MCP setup as read/write, with optional readonly and feature filters. The authorization server advertises account administration unrelated to many tools; retain its MCP consent defaults and the existing explicit filters.",
|
|
"evidenceLimit": "Browser tester account read only; provider writes, refresh-token expiry, and actual agent-adapter execution remain unqualified. Any agent company installation; UI did not allow narrowing. No actual agent ran."
|
|
},
|
|
{
|
|
"app": "posthog",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Analytics objects, feature flags, experiments, error triage and other enabled product actions. readonly/feature/tool filters remain enforced.",
|
|
"evidence": [
|
|
"https://posthog.com/docs/model-context-protocol",
|
|
"https://mcp.posthog.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Analytics objects, feature flags, experiments, error triage and other enabled product actions. readonly/feature/tool filters remain enforced. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "postman",
|
|
"method": "mcp-oauth-minimal",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role.",
|
|
"evidence": [
|
|
"https://learning.postman.com/latest-v-12/docs/reference/postman-api/postman-mcp-server/postman-mcp-remote-server",
|
|
"https://mcp.postman.com/.well-known/oauth-protected-resource",
|
|
"https://mcp.postman.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "The official remote MCP setup uses browser sign-in and endpoint-selected minimal/code/full tool catalogs. Its protected-resource and authorization-server metadata publish no scope set; account/workspace rights govern writes."
|
|
},
|
|
{
|
|
"app": "postman",
|
|
"method": "mcp-oauth-code",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role.",
|
|
"evidence": [
|
|
"https://learning.postman.com/latest-v-12/docs/reference/postman-api/postman-mcp-server/postman-mcp-remote-server",
|
|
"https://mcp.postman.com/.well-known/oauth-protected-resource",
|
|
"https://mcp.postman.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "The official remote MCP setup uses browser sign-in and endpoint-selected minimal/code/full tool catalogs. Its protected-resource and authorization-server metadata publish no scope set; account/workspace rights govern writes."
|
|
},
|
|
{
|
|
"app": "postman",
|
|
"method": "mcp-oauth-full",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role.",
|
|
"evidence": [
|
|
"https://learning.postman.com/latest-v-12/docs/reference/postman-api/postman-mcp-server/postman-mcp-remote-server",
|
|
"https://mcp.postman.com/.well-known/oauth-protected-resource",
|
|
"https://mcp.postman.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "The official remote MCP setup uses browser sign-in and endpoint-selected minimal/code/full tool catalogs. Its protected-resource and authorization-server metadata publish no scope set; account/workspace rights govern writes."
|
|
},
|
|
{
|
|
"app": "postman",
|
|
"method": "mcp-eu-key-minimal",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role.",
|
|
"evidence": [
|
|
"https://learning.postman.com/latest-v-12/docs/reference/postman-api/postman-mcp-server/postman-mcp-remote-server",
|
|
"https://mcp.postman.com/.well-known/oauth-protected-resource",
|
|
"https://mcp.postman.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "postman",
|
|
"method": "mcp-eu-key-code",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role.",
|
|
"evidence": [
|
|
"https://learning.postman.com/latest-v-12/docs/reference/postman-api/postman-mcp-server/postman-mcp-remote-server",
|
|
"https://mcp.postman.com/.well-known/oauth-protected-resource",
|
|
"https://mcp.postman.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "postman",
|
|
"method": "mcp-eu-key-full",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role.",
|
|
"evidence": [
|
|
"https://learning.postman.com/latest-v-12/docs/reference/postman-api/postman-mcp-server/postman-mcp-remote-server",
|
|
"https://mcp.postman.com/.well-known/oauth-protected-resource",
|
|
"https://mcp.postman.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Collection/workspace/API actions supported by the selected minimal/code/full endpoint and account role. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "railway",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid",
|
|
"offline_access",
|
|
"workspace:member"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Project/service/deployment operations in authorized workspaces; workspace:member and account role bound access.",
|
|
"evidence": [
|
|
"https://docs.railway.com/ai/mcp-server",
|
|
"https://mcp.railway.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "razorpay",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Provider-authorized payment/account tools; financial policy gates remain. Live verification outstanding.",
|
|
"evidence": [
|
|
"https://razorpay.com/docs/mcp-server/oauth/",
|
|
"https://mcp.razorpay.com/.well-known/oauth-protected-resource",
|
|
"https://mcp.razorpay.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "Neither protected-resource nor authorization-server metadata advertises scopes. Keep hosted provider consent; the previous official OAuth documentation URL returned 404 during review. Account-bound writes need live confirmation.",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "razorpay",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Provider-authorized payment/account tools; financial policy gates remain. Live verification outstanding.",
|
|
"evidence": [
|
|
"https://razorpay.com/docs/mcp-server/oauth/",
|
|
"https://mcp.razorpay.com/.well-known/oauth-protected-resource",
|
|
"https://mcp.razorpay.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Provider-authorized payment/account tools; financial policy gates remain. Live verification outstanding. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions.",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "resend",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"full_access"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "The Resend hosted MCP exposes account/resource reads and mutations, including email sending and domain/template/account management. Provider documentation describes full_access as broad read/create/update/delete access; the separate emails:send grant does not provide a bounded account-metadata read. During qualification all 77 Write actions and all 55 Read actions were explicitly Off in Paperclip after reload.",
|
|
"evidence": [
|
|
"https://resend.com/changelog/remote-mcp-server",
|
|
"https://resend.com/changelog/oauth-support",
|
|
"https://resend.com/changelog/new-api-key-permissions",
|
|
"https://mcp.resend.com/.well-known/oauth-protected-resource",
|
|
"https://api.resend.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-09",
|
|
"liveProof": "Fresh OAuth connection succeeded under the previously approved paperclip/full_access grant. Paperclip catalog exposed 132 actions (55 Read, 77 Write). List Domains succeeded twice via UI Test as Connector Tester and returned one entry each. After the test, all action permissions were Off and stayed Off after reload; human audience Just me and agent audience Just agents I pick with zero selected also persisted. Final fresh setup after the access-marker refinement again preserved Just me and zero agents; one List Domains UI Test passed in 1.4s and final reload confirmed all 132 actions Off.",
|
|
"evidenceLimit": "Test execution was through Paperclip's UI Test dialog as Connector Tester, not a real agent adapter/task. The bounded read returned one entry; names and identifiers are omitted. No provider writes, deletes, sends, or agent runs occurred. Paperclip Off policies do not narrow the provider-side full_access OAuth grant."
|
|
},
|
|
{
|
|
"app": "sanity",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"global"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Edit content permitted by project role; global is MCP authorization, not a bypass of project ACLs.",
|
|
"evidence": [
|
|
"https://www.sanity.io/docs/ai/mcp-server",
|
|
"https://mcp.sanity.io/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "sanity",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Edit content permitted by project role; global is MCP authorization, not a bypass of project ACLs.",
|
|
"evidence": [
|
|
"https://www.sanity.io/docs/ai/mcp-server",
|
|
"https://mcp.sanity.io/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Edit content permitted by project role; global is MCP authorization, not a bypass of project ACLs. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "sentry",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"org:read",
|
|
"project:write",
|
|
"team:write",
|
|
"event:write",
|
|
"alerts:write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Manage projects/teams, triage issues and edit alerts under the authorized organization role.",
|
|
"evidence": [
|
|
"https://mcp.sentry.dev/.well-known/oauth-authorization-server",
|
|
"https://mcp.sentry.dev/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "shopify",
|
|
"method": "ucp-commerce",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Storefront cart operations; checkout/purchase and account privileges remain provider-controlled.",
|
|
"evidence": [
|
|
"https://shopify.dev/docs/apps/build/storefront-mcp/servers/storefront"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "shopify",
|
|
"method": "storefront-mcp",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Storefront cart operations; checkout/purchase and account privileges remain provider-controlled.",
|
|
"evidence": [
|
|
"https://shopify.dev/docs/apps/build/storefront-mcp/servers/storefront"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "similarweb",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "None: analytics retrieval; subscription entitlements apply.",
|
|
"evidence": [
|
|
"https://developers.similarweb.com/docs/similarweb-mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "None: analytics retrieval; subscription entitlements apply. A read-only key is sufficient."
|
|
},
|
|
{
|
|
"app": "slack",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"canvases:read",
|
|
"canvases:write",
|
|
"channels:history",
|
|
"channels:read",
|
|
"channels:write",
|
|
"chat:write",
|
|
"emoji:read",
|
|
"files:read",
|
|
"files:write",
|
|
"groups:history",
|
|
"groups:read",
|
|
"groups:write",
|
|
"im:history",
|
|
"im:read",
|
|
"im:write",
|
|
"lists:read",
|
|
"lists:write",
|
|
"mpim:history",
|
|
"mpim:read",
|
|
"mpim:write",
|
|
"reactions:read",
|
|
"reactions:write",
|
|
"search:read.files",
|
|
"search:read.im",
|
|
"search:read.mpim",
|
|
"search:read.private",
|
|
"search:read.public",
|
|
"search:read.users",
|
|
"users:read",
|
|
"users:read.email"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Send/schedule messages, create conversations, react, edit canvases/lists and upload files. Published internal app/Marketplace and admin approval requirements apply.",
|
|
"evidence": [
|
|
"https://docs.slack.dev/ai/slack-mcp-server/",
|
|
"https://mcp.slack.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "Provider documentation was unavailable or not readable during this review; metadata/registered source only. Account-bound proof remains outstanding."
|
|
},
|
|
{
|
|
"app": "stripe",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"mcp"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Account- and sandbox-specific writes selected during Stripe consent; financial approvals and restricted-key permissions remain.",
|
|
"evidence": [
|
|
"https://docs.stripe.com/mcp",
|
|
"https://mcp.stripe.com/.well-known/oauth-protected-resource",
|
|
"https://access.stripe.com/.well-known/oauth-authorization-server/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "stripe",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Account- and sandbox-specific writes selected during Stripe consent; financial approvals and restricted-key permissions remain.",
|
|
"evidence": [
|
|
"https://docs.stripe.com/mcp",
|
|
"https://mcp.stripe.com/.well-known/oauth-protected-resource",
|
|
"https://access.stripe.com/.well-known/oauth-authorization-server/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Account- and sandbox-specific writes selected during Stripe consent; financial approvals and restricted-key permissions remain. Create a key with read and write permissions for these actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "supabase",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"organizations:read",
|
|
"projects:read",
|
|
"projects:write",
|
|
"database:write",
|
|
"database:read",
|
|
"analytics:read",
|
|
"secrets:read",
|
|
"edge_functions:read",
|
|
"edge_functions:write",
|
|
"environment:read",
|
|
"environment:write",
|
|
"storage:read",
|
|
"storage:write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Unpinned connections can list/create/pause/restore projects and use account cost tools. Hosted MCP supports SQL/migrations, Edge Function deployment, branches and opt-in storage configuration. A project_ref disables account tools. Read-only mode and token permissions remain authoritative. Auth and Data API configuration use the separate Management API method.",
|
|
"evidence": [
|
|
"https://supabase.com/docs/guides/ai-tools/mcp",
|
|
"https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-10-22",
|
|
"liveProof": "2026-10-22: Real browser OAuth in an isolated Paperclip instance discovered 29 MCP tools. An actual process-agent gateway run listed organizations, obtained a zero-monthly-cost quote and confirmation, and created one disposable project that reached ACTIVE_HEALTHY. A read-only reconciliation found exactly one proof project. Dashboard cleanup deleted that project. Earlier harness parsing/duplicate-wake failures are documented in SUPABASE.md. MCP token authentication and all SQL/branch/storage capabilities were not live-tested."
|
|
},
|
|
{
|
|
"app": "supabase",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Unpinned connections can list/create/pause/restore projects and use account cost tools. Hosted MCP supports SQL/migrations, Edge Function deployment, branches and opt-in storage configuration. A project_ref disables account tools. Read-only mode and token permissions remain authoritative. Auth and Data API configuration use the separate Management API method.",
|
|
"evidence": [
|
|
"https://supabase.com/docs/guides/ai-tools/mcp",
|
|
"https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-10-22",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Use a scoped personal access token (sbp_...) with permissions for the enabled MCP tools and selected projects. Project publishable, anon, service_role and secret API keys are not supported. Project creation needs account access; Paperclip cannot increase an issued token\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "superagent",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "List, read, triage and permanently delete findings; start billable repository, application, agent and package red-team reports; run Contributor Trust scans and dependency update runs; score web pages, email, messages, files, skills, MCP repositories and packages; manage Applications, Agents, endpoint clients, groups, runtime guardrail rules and alerts; manage OpenTelemetry destinations; return structured agent reports.",
|
|
"evidence": [
|
|
"https://www.superagent.sh/docs/mcp",
|
|
"https://www.superagent.sh/docs/reference/settings",
|
|
"https://www.superagent.sh/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-10-06",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Superagent organization keys are not scoped: a key reaches everything in its organization, including permanently deleting findings and starting billable report and triage work. Create a separate key for Paperclip so it can be revoked independently, and set billable and destructive actions to Ask first before agents run unattended."
|
|
},
|
|
{
|
|
"app": "supermemory",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid",
|
|
"profile",
|
|
"email",
|
|
"offline_access"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Save memories/documents in the workspace selected at provider consent; read/write choice is provider-controlled.",
|
|
"evidence": [
|
|
"https://supermemory.ai/docs/supermemory-mcp/mcp",
|
|
"https://mcp.supermemory.ai/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "telem",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "None: web search and page fetch tools (usage is billed to the Telem account).",
|
|
"evidence": [
|
|
"https://docs.telem.ai"
|
|
],
|
|
"reviewedAt": "2026-10-03",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "None: web search and page fetch tools (usage is billed to the Telem account). Any Telem API key works."
|
|
},
|
|
{
|
|
"app": "ticket-tailor",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Box-office operations allowed by the API key chosen at provider consent.",
|
|
"evidence": [
|
|
"https://developers.tickettailor.com/docs/mcp/authentication/"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "Hosted authorization controls box-office API-key permissions; do not treat OAuth sign-in as increasing the underlying key permissions. This method requires account-bound proof."
|
|
},
|
|
{
|
|
"app": "ticktick",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"tasks:write",
|
|
"tasks:read"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create/update tasks in the authenticated account.",
|
|
"evidence": [
|
|
"https://help.ticktick.com/articles/7438129581631995904",
|
|
"https://mcp.ticktick.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "todoist",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"data:read_write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Create/update tasks and projects in the authenticated account.",
|
|
"evidence": [
|
|
"https://developer.todoist.com/",
|
|
"https://ai.todoist.net/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "webflow",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Build/edit sites and CMS content for explicitly authorized sites.",
|
|
"evidence": [
|
|
"https://developers.webflow.com/mcp/reference/getting-started",
|
|
"https://mcp.webflow.com/.well-known/oauth-protected-resource",
|
|
"https://mcp.webflow.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"providerDefaultReason": "The official MCP setup installs the Bridge App and asks users to authorize sites. Neither protected-resource nor authorization-server metadata publishes a request-scope list; the installed app and site selection govern writes."
|
|
},
|
|
{
|
|
"app": "wix",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"offline_access"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Site editing and business operations under the signed-in Wix role.",
|
|
"evidence": [
|
|
"https://www.wix.com/studio/developers/mcp-server",
|
|
"https://mcp.wix.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "xero",
|
|
"method": "mcp-own-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid",
|
|
"profile",
|
|
"email",
|
|
"offline_access",
|
|
"accounting.settings",
|
|
"accounting.invoices.read",
|
|
"accounting.reports.aged.read",
|
|
"accounting.reports.balancesheet.read",
|
|
"accounting.reports.profitandloss.read"
|
|
],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Invoice/report reads and settings access only in the current MCP resource profile; no invoice writes are advertised.",
|
|
"evidence": [
|
|
"https://developer.xero.com/ai",
|
|
"https://mcp.xero.com/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "youcom",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"Tools",
|
|
"offline_access"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "None: search, contents and research tools (usage may be billed).",
|
|
"evidence": [
|
|
"https://you.com/docs/build-with-agents/mcp-server",
|
|
"https://api.you.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "youcom",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "None: search, contents and research tools (usage may be billed).",
|
|
"evidence": [
|
|
"https://you.com/docs/build-with-agents/mcp-server",
|
|
"https://api.you.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "None: search, contents and research tools (usage may be billed). A read-only key is sufficient."
|
|
},
|
|
{
|
|
"app": "youcom",
|
|
"method": "mcp-free",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "None: search, contents and research tools (usage may be billed).",
|
|
"evidence": [
|
|
"https://you.com/docs/build-with-agents/mcp-server",
|
|
"https://api.you.com/.well-known/oauth-protected-resource"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "zapier",
|
|
"method": "generated-url",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "provider-controlled",
|
|
"supportedActions": "Run only the actions configured by the user in the generated Zapier MCP endpoint; a URL cannot add actions or permissions.",
|
|
"evidence": [
|
|
"https://docs.zapier.com/mcp/quickstart"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "zep",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"graph:read",
|
|
"graph:write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Write memory graphs authorized for the signed-in identity.",
|
|
"evidence": [
|
|
"https://help.getzep.com/memory-mcp-server",
|
|
"https://api.getzep.com/.well-known/oauth-protected-resource/mcp"
|
|
],
|
|
"reviewedAt": "2026-09-30",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "tavily",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"openid",
|
|
"offline_access"
|
|
],
|
|
"capability": "read",
|
|
"supportedActions": "Run public web search and extract content from public pages using the account\u2019s Tavily API key and credit allowance. These are read/search operations; no provider business-record write action is exposed.",
|
|
"evidence": [
|
|
"https://docs.tavily.com/documentation/mcp",
|
|
"https://mcp.tavily.com/.well-known/oauth-protected-resource/mcp",
|
|
"https://mcp.tavily.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "2026-10-08: HTTPS OAuth connected. After the initialized-session fix, query-only public search returned five results in 1.7s. Refresh/reload retained five Read/zero Write actions. No grant expansion or writes.",
|
|
"evidenceLimit": "Two earlier searches returned HTTP 400; successful call after proactive initialization supports but does not prove cause. Provider writes, refresh-token expiry and actual agent runs unqualified. Any agent company installation in isolated test company; no actual agents ran."
|
|
},
|
|
{
|
|
"app": "calendly",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"mcp:scheduling:read",
|
|
"mcp:scheduling:write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read event types and scheduling availability and call supported scheduling write tools under the authorized account; the official MCP documents the same scheduling read/write scope family as the public API.",
|
|
"evidence": [
|
|
"https://developer.calendly.com/docs/mcp/calendly-mcp-server",
|
|
"https://mcp.calendly.com/.well-known/oauth-protected-resource",
|
|
"https://calendly.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "HTTPS DCR/S256 scheduling read/write grant succeeded on retry; provider profile verified the connected account. lookup_current_user passed in 2.5s. 36 actions (25 Read/11 Write); all 11 writes Off persisted after reload.",
|
|
"evidenceLimit": "Account read only; scheduling/provider writes, expiry refresh, and actual agent runtime unqualified. Any agent installation in isolated test company; no agents ran."
|
|
},
|
|
{
|
|
"app": "exa",
|
|
"method": "public-search",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "Public web search and webpage retrieval. Public MCP initialize and tools/list observed only web_search_exa and web_fetch_exa, both marked readOnly/idempotent; account-gated agent/advanced tools are excluded.",
|
|
"evidence": [
|
|
"https://exa.ai/docs/get-started/exa-mcp",
|
|
"https://exa.ai/mcp",
|
|
"https://mcp.exa.ai/mcp"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "2026-10-08: Paperclip browser Test dialog web_search_exa returned a public repository matching the query in 2.0s; connection persisted after reload and action refresh passed. Public read only; no writes or agent-adapter run."
|
|
},
|
|
{
|
|
"app": "firecrawl",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"firecrawl:global",
|
|
"offline_access"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Full account-authorized Firecrawl MCP surface; web reads plus provider jobs such as crawl/research, which may consume team credits.",
|
|
"evidence": [
|
|
"https://docs.firecrawl.dev/mcp-server",
|
|
"https://www.firecrawl.dev/.well-known/oauth-authorization-server",
|
|
"https://mcp.firecrawl.dev/.well-known/oauth-protected-resource/v2/mcp-oauth"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "firecrawl",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Bearer API key may expose full Firecrawl tool surface, including crawl/research jobs billed to the selected team.",
|
|
"evidence": [
|
|
"https://docs.firecrawl.dev/mcp-server"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Create an API key for the intended Firecrawl team with access to the search, scrape, parse, and any job tools you intend to use. Jobs can consume credits; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "firecrawl",
|
|
"method": "keyless",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "Keyless Firecrawl exposes firecrawl_search, firecrawl_scrape, and firecrawl_parse; public catalog initialization confirmed those three. These retrieve/search content and process supplied files; keyless usage is limited.",
|
|
"evidence": [
|
|
"https://docs.firecrawl.dev/mcp-server",
|
|
"https://mcp.firecrawl.dev/v2/mcp"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "2026-10-08: Paperclip browser Test dialog firecrawl_scrape returned public page metadata and HTTP 200 (0.6s); connection persisted after reload; action refresh passed. Public read only, no writes or agent-adapter run."
|
|
},
|
|
{
|
|
"app": "parallel-search",
|
|
"method": "public-search",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "Public Parallel Search MCP initialize and tools/list observed only web_search and web_fetch; both tool annotations marked read-only/idempotent. Task MCP is a separate endpoint/product.",
|
|
"evidence": [
|
|
"https://docs.parallel.ai/integrations/mcp/search-mcp",
|
|
"https://parallel.ai/articles/add-free-web-search-to-coding-agent",
|
|
"https://search.parallel.ai/mcp"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "2026-10-08: Paperclip browser Test dialog web_search returned 10 public results in 0.8s; connection persisted after reload and action refresh passed. Public read only; no writes or agent-adapter run."
|
|
},
|
|
{
|
|
"app": "windsor-ai",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"create",
|
|
"delete",
|
|
"offline_access"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "The MCP resource explicitly challenges for create and delete even to initialize/list tools. Read tools query selected connected sources; provider-level delete can expose destructive actions on supported sources. Keep write/destructive actions Off for read qualification. Search Console source authorization is separately read-only.",
|
|
"evidence": [
|
|
"https://mcp.windsor.ai/",
|
|
"https://mcp.windsor.ai/.well-known/oauth-protected-resource",
|
|
"https://mcp.windsor.ai/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "User-approved create/delete/offline_access MCP scopes; separately approved read-only Search Console source, the selected Search Console property only. 54 field definitions; bounded last_7d request returned 5 daily rows dated 2026-10-01 through 2026-10-05 in 1.5s; metric values omitted. Catalog refresh and reload retained 19 actions; all 5 write actions Off. No provider writes or actual agent runs.",
|
|
"evidenceLimit": "Browser tester account read only; provider writes, refresh-token expiry, and actual agent-adapter execution remain unqualified. Just agents I pick; no agents selected."
|
|
},
|
|
{
|
|
"app": "windsor-ai",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Bearer key accesses Windsor MCP; actions depend on source connector/account and may include advertising or commerce changes.",
|
|
"evidence": [
|
|
"https://mcp.windsor.ai/"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Use an account key for the intended Windsor.ai organization and connect only source accounts needed for the task. Review write tools and source-specific effects; Paperclip cannot increase key permissions."
|
|
},
|
|
{
|
|
"app": "gsc-wizard",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"mcp:read",
|
|
"mcp:write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read GSC/Bing Webmaster/GA4 and related property data, plus provider-advertised tools for URL submission and other write actions; exact property/action needs catalog review.",
|
|
"evidence": [
|
|
"https://www.gscwizard.com/claude-search-console-mcp.html",
|
|
"https://mcp.gscwizard.com/.well-known/oauth-protected-resource",
|
|
"https://tool.gscwizard.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "HTTPS MCP connection with 112 actions. Account metadata, property list and seven-day performance read for the selected Search Console property passed; all 32 writes Off persisted after reload.",
|
|
"evidenceLimit": "Google identity screen showed name/profile/email only. Worker resumed to already Connected; Google completion and underlying GSC API scopes not independently verified. Paid/trial metadata provenance unknown; no payment action. No writes or agents ran."
|
|
},
|
|
{
|
|
"app": "gsc-wizard",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Bearer key may be read-only or read/write depending on key creation; docs cite read analytics, URL inspection, and URL submission tools.",
|
|
"evidence": [
|
|
"https://www.gscwizard.com/claude-search-console-mcp.html",
|
|
"https://mcp.gscwizard.com/"
|
|
],
|
|
"reviewedAt": "2026-10-08",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "At key creation, choose read-only or read/write according to the approved task. Read/write keys can reach URL-submission and related provider actions; Paperclip cannot increase an existing key\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "airtable",
|
|
"method": "mcp-pat",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Read/update records; creation and editing in allowed bases; token scopes, base resources, roles, and organization allowlisting apply.",
|
|
"evidence": [
|
|
"https://support.airtable.com/articles/9897799762-using-the-airtable-mcp-server",
|
|
"https://support.airtable.com/articles/9934989703-creating-personal-access-tokens"
|
|
],
|
|
"keyPermissions": "Choose provider scopes and resource bases for intended actions; token and user/base role permissions both restrict access.",
|
|
"providerDefaultReason": "The exact required scope set depends on tools and selected base resources; do not infer a broader fixed scope list.",
|
|
"reviewedAt": "2026-10-08",
|
|
"evidenceLevel": "provider-documentation-reviewed",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "linear",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Create/update issues, projects, comments and other authorized workspace objects; key can be restricted to Read, Write, Admin, Create issues, Create comments and teams.",
|
|
"evidence": [
|
|
"https://linear.app/docs/mcp",
|
|
"https://linear.app/docs/api-and-webhooks"
|
|
],
|
|
"keyPermissions": "Choose intended permissions and teams when creating the personal API key. Read-only is supported with Read permission only.",
|
|
"reviewedAt": "2026-10-08",
|
|
"evidenceLevel": "provider-documentation-reviewed",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "make",
|
|
"method": "mcp-api-token",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Run selected scenarios as MCP tools; token scope and scenario access control determine availability.",
|
|
"evidence": [
|
|
"https://developers.make.com/mcp-server/connect-using-mcp-token",
|
|
"https://developers.make.com/mcp-server/connect-using-mcp-token/usage-with-cursor"
|
|
],
|
|
"keyPermissions": "Provider-issued Make token. Include documented mcp:use and only additional scopes required by selected scenarios; exact scopes are user selected.",
|
|
"reviewedAt": "2026-10-08",
|
|
"evidenceLevel": "provider-documentation-reviewed",
|
|
"liveProof": "not-run"
|
|
},
|
|
{
|
|
"app": "clickup",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"read",
|
|
"write"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Search workspace content and read tasks, lists, folders, docs, comments, members, and time entries; create or update tasks, lists, folders, docs, comments, tags, links, dependencies, time entries, and chat messages; start/stop time tracking; documented tool listing includes task deletion. Actions remain limited by the signed-in user's ClickUp permissions and authorized workspace(s).",
|
|
"evidence": [
|
|
"https://developer.clickup.com/docs/connect-an-ai-assistant-to-clickups-mcp-server",
|
|
"https://developer.clickup.com/docs/mcp-tools",
|
|
"https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp",
|
|
"https://mcp.clickup.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-09",
|
|
"liveProof": "blocked-at-provider-login: retained and fresh OAuth flows both returned to blank ClickUp login after Google account selection; Password required remained.",
|
|
"evidenceLimit": "Public OAuth discovery and browser login attempt only. No provider grant, authenticated catalog, or account read."
|
|
},
|
|
{
|
|
"app": "klaviyo",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Within the URL toolset filter, read campaign, metric, and segment context and use supported campaign write tools. The provider's campaigns:write toolset may include sending, scheduling, deletion, or other mutation tools; the authenticated catalog must be reviewed individually and Paperclip writes remain Off during qualification.",
|
|
"evidence": [
|
|
"https://developers.klaviyo.com/en/docs/connect_to_the_klaviyo_mcp_server",
|
|
"https://developers.klaviyo.com/en/docs/klaviyo_mcp_server_available_tools",
|
|
"https://developers.klaviyo.com/en/docs/authenticate_",
|
|
"https://mcp.klaviyo.com/.well-known/oauth-protected-resource/mcp",
|
|
"https://mcp.klaviyo.com/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-09",
|
|
"liveProof": "pending-client-approval: initial provider authorization screen reached with optional prompt-intent collection unchecked; no approval submitted.",
|
|
"providerDefaultReason": "Klaviyo's OAuth protected-resource and authorization-server metadata omit scopes_supported. The official MCP guide instead documents a toolsets URL parameter that limits exposed tools using API scope names. The source URL selects campaigns:read, campaigns:write, metrics:read, and segments:read; OAuth consent remains provider-controlled.",
|
|
"evidenceLimit": "Public discovery and initial client authorization screen only. Account/scope grant, authenticated catalog, and provider read remain unverified."
|
|
},
|
|
{
|
|
"app": "monday",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "provider-default",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Read and manage boards and items; create/update boards, groups, columns, items, docs, dashboards, views, forms, workflows, automations and platform agents; post item updates or send user notifications; run low-level GraphQL queries/mutations where exposed. All actions remain subject to the authorized user's permissions and account MCP limits. Verify the live catalog and keep destructive, notification, automation/workflow publication and agent lifecycle actions Off unless separately authorized.",
|
|
"evidence": [
|
|
"https://developer.monday.com/api-reference/docs/integrate-with-monday-mcp",
|
|
"https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration",
|
|
"https://developer.monday.com/api-reference/docs/mcp-dynamic-connectors",
|
|
"https://developer.monday.com/api-reference/docs/platform-mcp-tools",
|
|
"https://developer.monday.com/api-reference/docs/monday-mcp-security-overview"
|
|
],
|
|
"reviewedAt": "2026-10-09",
|
|
"liveProof": "blocked-before-consent: provider DCR HTTP 400 says redirect_uris are not allowed and asks to contact monday for callback allowlisting.",
|
|
"providerDefaultReason": "The official hosted-MCP DCR documentation describes OAuth authorization and account-admin approval for additional connectors; the hosted MCP runs as the authorizing user, inheriting that user's monday.com permissions and account MCP limits. The DCR guide does not document client-selected OAuth scope names for this route, so Paperclip sends no guessed scopes. Tool-level authority is bounded by the provider account and user's permissions; verify the live catalog before enabling actions.",
|
|
"evidenceLimit": "Public metadata and registration failure only. No client registered, consent accepted, authenticated catalog, or account read."
|
|
},
|
|
{
|
|
"app": "hugging-face",
|
|
"method": "public-mcp",
|
|
"auth": "none",
|
|
"policy": "endpoint",
|
|
"requestedScopes": [],
|
|
"capability": "read",
|
|
"supportedActions": "Anonymous public Hub lookups only: hf_whoami returns the current auth context without credential values; hub_repo_search searches public model, dataset, and Space repositories; hub_repo_details reads public repo overview, dataset structure, and bounded dataset preview; hf_fs exposes only ls, cat, attach, stat, find, and search against canonical hf:// URIs. No write, inference, dynamic Space, or job tool was advertised in the live anonymous tool catalog. Hugging Face documents that anonymous use is rate-limited.",
|
|
"evidence": [
|
|
"https://huggingface.co/docs/hub/agents-mcp",
|
|
"https://huggingface.co/blog/building-hf-mcp",
|
|
"https://github.com/huggingface/hf-mcp-server"
|
|
],
|
|
"reviewedAt": "2026-10-09",
|
|
"liveProof": "Paperclip Apps qualification passed: connected the public-mcp method from the natural Connectors catalog; initialization/discovery showed exactly 4 Read actions and 0 Write actions. Restricted agent access to Just agents I pick with 0 selected; the public method requires no identity. A bounded hf_fs search of hf://docs for MCP with limit 3 succeeded (3 public doc entries; UI preview reported one successful result row) in 0.7s. After reload, the page still showed Connected, 4 actions, Read 4, Write 0, and no agents can use this connection; the same query succeeded again in 0.8s. The Test dialog reported the direct call ran as Connector Tester; no heartbeat/agent execution or other provider tool call occurred.",
|
|
"evidenceLimit": "Qualification used only public documentation and did not use a Hugging Face account, OAuth, API key, private repo, write, inference, Space execution, or job. Anonymous endpoint was directly probed separately and returned 4 read tools, matching Paperclip discovery. The setup flow says no identity required; a one-member human audience was saved before reload, but human identity controls were not shown after reload. A root browser inspection confirmed four read actions and zero agents selected; a privacy-safe permissions screenshot was saved. Rate limits and later provider catalog changes remain outside this proof."
|
|
},
|
|
{
|
|
"app": "daytona",
|
|
"method": "workspace-diagnostics",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "All published Daytona HTTP API and Toolbox operations: account and organization resources, sandbox lifecycle, files, Git, commands, sessions, snapshots, volumes, computer use, and telemetry reads. Provider permissions still apply.",
|
|
"evidence": [
|
|
"https://www.daytona.io/docs/en/api-keys/",
|
|
"https://www.daytona.io/docs/openapi.json",
|
|
"https://www.daytona.io/docs/toolbox-openapi.json",
|
|
"https://github.com/daytona/clients/tree/main/cli/mcp"
|
|
],
|
|
"reviewedAt": "2026-10-15",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Create an organization key with the read, write, and delete permissions for the resources you intend to manage. Daytona toolbox access is available to every valid organization key, even without selected scopes. Some user or administration endpoints require provider user authentication and will reject an API key."
|
|
},
|
|
{
|
|
"app": "paperclip-notebook",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"notebook:read",
|
|
"notebook:write",
|
|
"notebook:share",
|
|
"notebook:delete"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read available pages; create and update owned pages; change sharing including public discovery; manage versions; delete and restore owned pages.",
|
|
"evidence": [
|
|
"doc/connections/PAPERCLIP-NOTEBOOK.md"
|
|
],
|
|
"reviewedAt": "2026-10-20",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "First-party implementation contract; canonical service availability and live OAuth qualification are deployment prerequisites. Uses the existing personal OAuth flow with default connection labels; automatic remote revocation and custom keyed refresh recovery are deferred."
|
|
},
|
|
{
|
|
"app": "braintrust",
|
|
"method": "mcp-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"mcp"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read logs, schemas, experiment summaries, datasets, projects, monitoring views, and documentation; create or update prompts, evaluators, datasets, patterns, charts, and automations; run evaluations and Topics jobs that may consume credits. Dataset row edits can permanently delete rows. Automation status can enable retention or delivery. Access remains bounded by the authenticated Braintrust account.",
|
|
"evidence": [
|
|
"https://www.braintrust.dev/docs/integrations/developer-tools/mcp",
|
|
"https://api.braintrust.dev/.well-known/oauth-protected-resource/mcp",
|
|
"https://api.braintrust.dev/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-21",
|
|
"liveProof": "2026-10-21 US OAuth: temporary personal connection authorized in an isolated instance; 49 tools discovered (17 reads, 32 non-reads). Real process-agent runs completed bounded retrieval and synthetic dataset insert/readback through run-scoped gateway sessions. Catalog refresh and OAuth reconnect retained the connection, region and quarantine; subsequent read passed. Synthetic row and dataset removed. Local removal revoked 2 secrets and 1 grant and denied further calls. Structural API/log redaction checked. Token expiry/refresh, provider-side revocation and native CLI capability delivery remain unqualified. See BRAINTRUST.md and braintrust-qualification-2026-10-21.json.",
|
|
"evidenceLimit": "Live proof covers a temporary personal US OAuth grant, bounded retrieval, one synthetic dataset insert/readback, real process-agent gateway calls, catalog refresh, OAuth reconnect, local removal and structural redaction. Live token expiry/refresh, remote OAuth revocation, native CLI automatic capability delivery and exact decrypted-token scanning remain unqualified. The other three methods need separate live accounts/keys."
|
|
},
|
|
{
|
|
"app": "braintrust",
|
|
"method": "mcp-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Read logs, schemas, experiment summaries, datasets, projects, monitoring views, and documentation; create or update prompts, evaluators, datasets, patterns, charts, and automations; run evaluations and Topics jobs that may consume credits. Dataset row edits can permanently delete rows. Automation status can enable retention or delivery. Access remains bounded by the authenticated Braintrust account.",
|
|
"evidence": [
|
|
"https://www.braintrust.dev/docs/integrations/developer-tools/mcp",
|
|
"https://api.braintrust.dev/.well-known/oauth-protected-resource/mcp",
|
|
"https://api.braintrust.dev/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-21",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "Public provider documentation and OAuth metadata only. Account-bound connect, discovery, read/write execution, run-scoped gateway, refresh/reconnect, removal, and secret handling remain to be qualified for this method.",
|
|
"keyPermissions": "Create a Braintrust API key in Settings \u2192 API keys for the account and organization whose data agents should access. The key must authorize the reads and writes you intend to allow; Paperclip cannot increase or narrow its provider permissions. Evaluations and Topics processing can incur costs. Dataset edits can permanently delete rows; automation activation can enable retention or delivery."
|
|
},
|
|
{
|
|
"app": "braintrust",
|
|
"method": "mcp-eu-oauth",
|
|
"auth": "oauth",
|
|
"policy": "explicit",
|
|
"requestedScopes": [
|
|
"mcp"
|
|
],
|
|
"capability": "write",
|
|
"supportedActions": "Read logs, schemas, experiment summaries, datasets, projects, monitoring views, and documentation; create or update prompts, evaluators, datasets, patterns, charts, and automations; run evaluations and Topics jobs that may consume credits. Dataset row edits can permanently delete rows. Automation status can enable retention or delivery. Access remains bounded by the authenticated Braintrust account.",
|
|
"evidence": [
|
|
"https://www.braintrust.dev/docs/integrations/developer-tools/mcp",
|
|
"https://api-eu.braintrust.dev/.well-known/oauth-protected-resource/mcp",
|
|
"https://api-eu.braintrust.dev/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-21",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "Public provider documentation and OAuth metadata only. Account-bound connect, discovery, read/write execution, run-scoped gateway, refresh/reconnect, removal, and secret handling remain to be qualified for this method."
|
|
},
|
|
{
|
|
"app": "braintrust",
|
|
"method": "mcp-eu-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Read logs, schemas, experiment summaries, datasets, projects, monitoring views, and documentation; create or update prompts, evaluators, datasets, patterns, charts, and automations; run evaluations and Topics jobs that may consume credits. Dataset row edits can permanently delete rows. Automation status can enable retention or delivery. Access remains bounded by the authenticated Braintrust account.",
|
|
"evidence": [
|
|
"https://www.braintrust.dev/docs/integrations/developer-tools/mcp",
|
|
"https://api-eu.braintrust.dev/.well-known/oauth-protected-resource/mcp",
|
|
"https://api-eu.braintrust.dev/.well-known/oauth-authorization-server"
|
|
],
|
|
"reviewedAt": "2026-10-21",
|
|
"liveProof": "not-run",
|
|
"evidenceLimit": "Public provider documentation and OAuth metadata only. Account-bound connect, discovery, read/write execution, run-scoped gateway, refresh/reconnect, removal, and secret handling remain to be qualified for this method.",
|
|
"keyPermissions": "Create a Braintrust API key in Settings \u2192 API keys for the account and organization whose data agents should access. The key must authorize the reads and writes you intend to allow; Paperclip cannot increase or narrow its provider permissions. Evaluations and Topics processing can incur costs. Dataset edits can permanently delete rows; automation activation can enable retention or delivery."
|
|
},
|
|
{
|
|
"app": "unikraft",
|
|
"method": "api-token",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "All published Unikraft Cloud platform API operations (instances, checkpoints, templates, service groups, autoscale, volumes, images, certificates, and quotas) and sandbox plugin operations (commands and files) in every published metro. The audit event stream is not exposed.",
|
|
"evidence": [
|
|
"https://unikraft.com/docs/sdks/overview#authentication",
|
|
"https://unikraft.com/docs/platform/metros",
|
|
"https://raw.githubusercontent.com/unikraft-cloud/openapi/5dd107ea1cd8716b83cb86a83ed2a6ee46f99b5b/platform.json",
|
|
"https://raw.githubusercontent.com/unikraft-cloud/openapi/5dd107ea1cd8716b83cb86a83ed2a6ee46f99b5b/plugins/sandbox.json"
|
|
],
|
|
"reviewedAt": "2026-10-15",
|
|
"liveProof": "not-run",
|
|
"keyPermissions": "Create an API token in the Unikraft Cloud console. A token acts for its whole organization in every metro, including running sandbox commands and deleting resources. Unikraft does not offer narrower token permissions, so choose trusted agents and use action permissions to limit what they can do."
|
|
},
|
|
{
|
|
"app": "supabase",
|
|
"method": "management-api",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Project-scoped project metadata, Edge Function list/get/deploy/delete, Edge Function secret name inventory and write-only secret upsert, selected non-secret Auth configuration and Data API configuration. No project creation, raw SQL, secret-value export, database credentials, OAuth client secrets or SMTP password actions. All requests use the saved project reference.",
|
|
"evidence": [
|
|
"https://supabase.com/docs/reference/api/v1-get-project",
|
|
"https://supabase.com/docs/reference/api/v1-deploy-a-function",
|
|
"https://supabase.com/docs/reference/api/v1-list-all-functions",
|
|
"https://supabase.com/docs/reference/api/v1-get-auth-service-config",
|
|
"https://supabase.com/docs/reference/api/v1-update-auth-service-config",
|
|
"https://supabase.com/docs/reference/api/v1-get-postgrest-service-config",
|
|
"https://supabase.com/docs/reference/api/v1-update-postgrest-service-config",
|
|
"https://supabase.com/docs/reference/api/v1-bulk-create-secrets",
|
|
"https://supabase.com/docs/reference/api/v1-list-all-secrets",
|
|
"https://supabase.com/docs/guides/platform/personal-access-tokens"
|
|
],
|
|
"reviewedAt": "2026-10-22",
|
|
"liveProof": "2026-10-22: Approved 24-hour project-scoped PAT connected through the real Apps UI and discovered 11 native actions. Actual process-agent gateway calls changed and read back Auth and Data API settings, wrote a synthetic function secret with redacted responses, deployed an ACTIVE Edge Function, and received HTTP200 with the expected marker and secretConfigured:true. A failed cleanup response was preserved; read-only reconciliation confirmed restored original settings, then a successful cleanup run deleted the function and confirmed absence. Dashboard project deletion removed its secret; the temporary PAT and local connections were removed. Forced refresh/reconnect were not live-tested.",
|
|
"keyPermissions": "Create a scoped Supabase personal access token for the selected project. Set Project Settings, Auth Config, Data API Config, Edge Functions, and Edge Function Secrets to Read-write. Leave API Key Secrets, Auth Signing Keys, and Data API JWT Secret at None. Use a short expiration. Project API keys are not supported; Paperclip cannot increase an issued token\u2019s permissions."
|
|
},
|
|
{
|
|
"app": "vercel",
|
|
"method": "rest-api-key",
|
|
"auth": "api_key",
|
|
"policy": "provider-key",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "Create and deploy projects from inline files, GitHub repositories or existing deployments; inspect status; configure build settings, environment variables and owned domains; governed project/deployment/environment/domain cleanup.",
|
|
"keyPermissions": "Create a Vercel access token scoped to the configured team. The token owner role must allow project/deployment reads and requested writes, environment variables and domain management; deletion requires matching provider rights. Paperclip cannot increase existing token permissions.",
|
|
"evidence": [
|
|
"https://vercel.com/docs/rest-api",
|
|
"https://vercel.com/docs/rest-api/deployments/create-a-new-deployment",
|
|
"https://vercel.com/docs/rest-api/projects/create-one-or-more-environment-variables",
|
|
"https://openapi.vercel.sh"
|
|
],
|
|
"reviewedAt": "2026-10-22",
|
|
"liveProof": "2026-10-22: Approved one-hour team token connected in an isolated Paperclip instance with 17 actions. Actual process-agent gateway runs listed and created disposable projects, wrote a synthetic preview environment secret, read metadata without its value, and deployed a preview that reached READY. The signed-in browser displayed the exact deployed marker; anonymous access retained the existing protection redirect. Gateway cleanup deleted both disposable projects and confirmed absence. The temporary provider token and local connection were removed; a fresh agent saw no tools and an old-name call returned404. Production, GitHub-source deployments, domains, forced refresh, and all account plans were not live-tested.",
|
|
"evidenceLimit": "Official documentation/OpenAPI plus local fixtures. No authenticated account-bound deployment/configuration/revocation proof; no disposable project credential supplied."
|
|
},
|
|
{
|
|
"app": "1password",
|
|
"method": "service-account",
|
|
"auth": "api_key",
|
|
"policy": "explicit",
|
|
"requestedScopes": [],
|
|
"capability": "write",
|
|
"supportedActions": "List authorized vaults and items; read items and op:// references; create, update, archive and delete items. No vault administration, sharing, file export, desktop authorization or arbitrary commands.",
|
|
"keyPermissions": "Create a service account with access only to the required vaults. Grant Read Items and Write Items for reading and managing items. Service-account vault access and permissions are fixed at creation; create a new token and reconnect to change them. Read-only tokens can connect, but writes will be denied by 1Password.",
|
|
"providerRestrictions": "Requires a 1Password subscription and permission to create service accounts. Built-in Personal, Private, Employee and default Shared vaults cannot be granted. The official SDK handles regional accounts. Token rotation requires reconnecting.",
|
|
"evidence": [
|
|
"https://www.1password.dev/service-accounts/get-started",
|
|
"https://www.1password.dev/sdks/manage-items",
|
|
"https://github.com/1Password/onepassword-sdk-js"
|
|
],
|
|
"reviewedAt": "2026-10-22",
|
|
"liveProof": "read-write-verified",
|
|
"evidenceLimit": "2026-10-23: a replacement token passed all eight actions through a real run-scoped gateway for personal and shared credentials, including create/list/read/update/secret resolution/archive/delete on synthetic items. Both test items were deleted and absent from subsequent listings. Catalog refresh, reconnect preserving identity, removal, retained-session denial and credential absence passed. The 2026-10-22 token denied creation; the first 2026-10-23 attempt stopped before provider calls due to host PostgreSQL semaphore exhaustion. A temporary ten-connection test profile allowed the complete live retry to pass without changing shared services."
|
|
}
|
|
]
|
|
}
|