← Back to search

io.github.devhelmhq/mcp-server

devhelmhq Scanned 26d ago

Monitor uptime, manage incidents, configure alerting, and query dependency status via DevHelm

D
57.2 / 100

Versions

1.0.1latest
first seen Jun 5, 2026
1.0.2
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 121

list_resource_groups
annotations: none low

List all resource groups in the workspace.

api_token string
get_resource_group
annotations: none low

Get a resource group by ID.

group_id str api_token string
create_resource_group
annotations: none low

Create a resource group. Required fields: name. Optional: description.

body CreateResourceGroupRequest api_token string
update_resource_group
annotations: none low

Update a resource group.

body UpdateResourceGroupRequest group_id str api_token string
delete_resource_group
annotations: none low

Delete a resource group.

group_id str api_token string
add_resource_group_member
annotations: none low

Add a monitor to a resource group. Required fields: monitorId.

body AddResourceGroupMemberRequest group_id str api_token string
remove_resource_group_member
annotations: none low

Remove a monitor from a resource group.

group_id str api_token string member_id str
list_webhooks
annotations: none low

List all webhook endpoints in the workspace.

api_token string
get_webhook
annotations: none low

Get a webhook endpoint by ID.

api_token string webhook_id str
create_webhook
annotations: none low

Create a webhook endpoint. Required fields: url, events (list of event types to subscribe to).

body CreateWebhookEndpointRequest api_token string
update_webhook
annotations: none low

Update a webhook endpoint.

body UpdateWebhookEndpointRequest api_token string webhook_id str
delete_webhook
annotations: none low

Delete a webhook endpoint.

api_token string webhook_id str
test_webhook
annotations: none low

Send a test event to a webhook endpoint to verify it works.

api_token string webhook_id str
list_status_pages
annotations: none low

List all status pages in the workspace.

api_token string
get_status_page
annotations: none low

Get a status page by ID, including branding and overall status.

page_id str api_token string
create_status_page
annotations: none low

Create a new status page. Required fields: name, slug. Optional: description, branding (brandColor, theme, headerStyle, etc.), visibility (PUBLIC/PASSWORD), enabled, incidentMode (MANUAL/REVIEW/AUTOMATIC).

body CreateStatusPageRequest api_token string
update_status_page
annotations: none low

Update a status page's name, slug, branding, visibility, or incident mode.

body UpdateStatusPageRequest page_id str api_token string
delete_status_page
annotations: none low

Delete a status page permanently.

page_id str api_token string
reorder_status_page_layout
annotations: none low

Batch-reorder a status page's full layout. Required: sections — top-level layout in their new order, where each entry is either {kind:"component", componentId} or {kind:"group", groupId}. Use ``groupOrders`` (optional) to also reorder components within specific groups; only include groups whose internal order changed. The full top-level set must be provided — partial reorders are rejected by the API. Use this for "drag-and-drop" layout edits that touch both groups and ungrouped components. To reorder components within a single group only, prefer ``reorder_status_page_components``.

body ReorderPageLayoutRequest page_id str api_token string
list_status_page_components
annotations: none low

List all components on a status page.

page_id str api_token string
create_status_page_component
annotations: none low

Add a component to a status page. Required fields: name, type (STATIC or MONITOR). Optional: groupId (nest under a group), monitorId (for MONITOR type).

body CreateStatusPageComponentRequest page_id str api_token string
delete_secret
annotations: none low

Delete a secret by key.

key str api_token string
update_status_page_component
annotations: none low

Update a status page component's name, group, or status.

body UpdateStatusPageComponentRequest page_id str api_token string component_id str
delete_status_page_component
annotations: none low

Remove a component from a status page.

page_id str api_token string component_id str
reorder_status_page_components
annotations: none low

Reorder components on a status page. Required: positions — list of {componentId, position} entries giving every component its new zero-based ordinal. The full set must be provided; partial reorders are rejected by the API.

body ReorderComponentsRequest page_id str api_token string
list_status_page_groups
annotations: none low

List component groups on a status page (with nested components).

page_id str api_token string
create_status_page_group
annotations: none low

Create a component group on a status page. Required fields: name.

body CreateStatusPageComponentGroupRequest page_id str api_token string
update_status_page_group
annotations: none low

Update a component group's name or display order.

body UpdateStatusPageComponentGroupRequest page_id str group_id str api_token string
delete_status_page_group
annotations: none low

Delete a component group from a status page.

page_id str group_id str api_token string
list_status_page_incidents
annotations: none low

List incidents on a status page (paginated).

page int size int page_id str api_token string
get_status_page_incident
annotations: none low

Get a status page incident with its full timeline of updates.

page_id str api_token string incident_id str
create_status_page_incident
annotations: none low

Create an incident on a status page. Required fields: title, impact (NONE/MINOR/MAJOR/CRITICAL). Optional: body, status (INVESTIGATING/IDENTIFIED/MONITORING/RESOLVED), affectedComponents (list of {componentId, status}).

body CreateStatusPageIncidentRequest page_id str api_token string
update_status_page_incident
annotations: none low

Update a status page incident's title, impact, or status.

body UpdateStatusPageIncidentRequest page_id str api_token string incident_id str
post_status_page_incident_update
annotations: none low

Post a timeline update on a status page incident. Required fields: body (message text), status. Optional: notifySubscribers (default true), affectedComponents (list of {componentId, status}).

body CreateStatusPageIncidentUpdateRequest page_id str api_token string incident_id str
publish_status_page_incident
annotations: none low

Publish a draft incident (sets it live, notifies subscribers). Use update_status_page_incident first if you need to change the draft's title, impact, status, body, or affected components before publishing.

page_id str api_token string incident_id str
dismiss_status_page_incident
annotations: none low

Dismiss a draft incident (deletes it without publishing).

page_id str api_token string incident_id str
delete_status_page_incident
annotations: none low

Delete a status page incident permanently.

page_id str api_token string incident_id str
list_status_page_subscribers
annotations: none low

List confirmed subscribers on a status page (paginated).

page int size int page_id str api_token string
add_status_page_subscriber
annotations: none low

Add a subscriber to a status page (admin). Required fields: email.

body AdminAddSubscriberRequest page_id str api_token string
remove_status_page_subscriber
annotations: none low

Remove a subscriber from a status page.

page_id str api_token string subscriber_id str
list_status_page_domains
annotations: none low

List custom domains on a status page.

page_id str api_token string
add_status_page_domain
annotations: none low

Add a custom domain to a status page. Required fields: hostname (e.g. "status.example.com"). Returns verification records (CNAME target and TXT token) that must be configured in your DNS before calling verify.

body AddCustomDomainRequest page_id str api_token string
verify_status_page_domain
annotations: none low

Trigger DNS verification for a custom domain. Returns the updated domain with current verification status.

page_id str api_token string domain_id str
remove_status_page_domain
annotations: none low

Remove a custom domain from a status page.

page_id str api_token string domain_id str
list_dependencies
annotations: none low

List all tracked service dependencies.

api_token string
get_dependency
annotations: none low

Get a tracked dependency by ID.

api_token string dependency_id str
track_dependency
annotations: none low

Start tracking a service dependency by its slug (e.g. 'github', 'aws'). Optionally track a single component via `component_id` (see list_service_components) and set `alert_sensitivity`: AWARENESS (silent tracking, default), INCIDENTS_ONLY, MAJOR_ONLY, or ALL.

slug str api_token string component_id string alert_sensitivity string
update_dependency_alert_sensitivity
annotations: none low

Change how loudly a tracked dependency alerts you. Levels: AWARENESS (silent tracking, default — status visible on the dashboard but no notifications), INCIDENTS_ONLY (notify on any incident), MAJOR_ONLY (notify only on major/critical incidents), and ALL (every status change, including maintenance).

api_token string subscription_id str alert_sensitivity str
delete_dependency
annotations: none low

Stop tracking a service dependency.

api_token string dependency_id str
list_monitors
annotations: none low

List all uptime monitors in the workspace.

api_token string
get_monitor
annotations: none low

Get a single monitor by ID, including its full configuration.

api_token string monitor_id str
create_monitor
annotations: none low

Create a new uptime monitor. Required fields: name, type (HTTP/DNS/TCP/ICMP/MCP/HEARTBEAT), config (type-specific), frequencySeconds (30-86400). ``managedBy`` is set automatically to ``MCP`` server-side; callers cannot override it. Use the SDK or CLI directly if you need a different attribution.

body _McpCreateMonitorRequest api_token string
update_monitor
annotations: none low

Update an existing monitor's configuration.

body UpdateMonitorRequest api_token string monitor_id str
delete_monitor
annotations: none low

Delete a monitor permanently.

api_token string monitor_id str
pause_monitor
annotations: none low

Pause a monitor (stops checking until resumed).

api_token string monitor_id str
resume_monitor
annotations: none low

Resume a paused monitor.

api_token string monitor_id str
test_monitor
annotations: none low

Trigger an ad-hoc test run for a monitor and return the result.

api_token string monitor_id str
list_monitor_results
annotations: none low

List recent check results for a monitor (cursor-paginated).

limit string cursor string api_token string monitor_id str
list_monitor_versions
annotations: none low

List version history for a monitor.

page int size int api_token string monitor_id str
list_secrets
annotations: none low

List all secrets (metadata only, values are never returned).

api_token string
create_secret
annotations: none low

Create an encrypted secret. Required fields: key, value. The value is encrypted at rest and can be referenced in monitor auth configs as {{secrets.KEY}}.

body CreateSecretRequest api_token string
update_secret
annotations: none low

Update a secret's value by key.

key str body UpdateSecretRequest api_token string
search_services
annotations: none low

Search the catalog of third-party services (Stripe, GitHub, AWS, ...) that can be tracked as dependencies. Use `query` for free-text search by name (e.g. 'stripe', 'cloudflare') and `category` to filter by catalog category (see list_service_categories). Results are paginated; raise `limit` (default 20) for broader sweeps.

limit int query string category string api_token string
get_service
annotations: none low

Get a catalog service's summary by slug (e.g. 'github'), including its current status, categories, and component overview.

slug str api_token string
get_service_live_status
annotations: none low

Get the live (real-time) operational status of a catalog service, fetched from its upstream status page. Use this when freshness matters more than latency — e.g. 'is Stripe down right now?'.

slug str api_token string
get_services_summary
annotations: none low

Get the global status summary across the entire service catalog — counts of operational / degraded / outage services. Use this for a quick 'is anything broken on the internet right now?' overview before drilling into a specific service.

api_token string
list_service_categories
annotations: none low

List all service catalog categories (e.g. cloud, payments, devtools) usable as the `category` filter in search_services.

api_token string
list_service_components
annotations: none low

List a catalog service's components (e.g. 'API', 'Dashboard', 'Webhooks') with their individual statuses. Component IDs can be used to track a single component via track_dependency.

slug str api_token string
get_service_uptime
annotations: none low

Get historical uptime stats for a catalog service over a period (e.g. '7d', '30d', '90d'; default '30d').

slug str period str api_token string
list_service_incidents
annotations: none low

List incidents for a catalog service, or across all services when `slug` is omitted. Filter by `status` (e.g. 'active', 'resolved') to answer questions like 'which of my dependencies have open incidents?'.

slug string status string api_token string
get_service_incident
annotations: none low

Get one vendor incident in full detail, including the vendor's timeline of status updates (investigating → identified → resolved). Get incident IDs from list_service_incidents.

slug str api_token string incident_id str
get_service_day_rollup
annotations: none low

Get a one-day rollup for a catalog service on a UTC calendar day (ISO YYYY-MM-DD): aggregated uptime, per-component impact windows, and the incidents that overlapped that day. Use this to answer 'what happened to Stripe on 2026-06-01?'.

date str slug str api_token string
get_component_uptime
annotations: none low

Get daily uptime history for a single component of a catalog service (e.g. just the 'API' component of Stripe) over a period ('7d', '30d', '90d', '1y'; default '30d'). Get component IDs from list_service_components.

slug str period str api_token string component_id str
get_all_components_uptime
annotations: none low

Get daily uptime history for every leaf component of a catalog service in one call, keyed by component ID, over a period ('7d', '30d', '90d', '1y'; default '30d'). Prefer this over repeated get_component_uptime calls when comparing components.

slug str period str api_token string
list_service_maintenances
annotations: none low

List scheduled and past maintenance windows announced by a catalog service (e.g. upcoming AWS maintenance that could affect you).

slug str api_token string
list_incidents
annotations: none low

List all incidents in the workspace.

api_token string
get_incident
annotations: none low

Get a single incident by ID with full details.

api_token string incident_id str
create_incident
annotations: none low

Create a manual incident. Required fields: title, severity (DOWN/DEGRADED/MAINTENANCE). Optional: monitorId (UUID), body (detailed description).

body CreateManualIncidentRequest api_token string
resolve_incident
annotations: none low

Resolve an active incident, optionally with a resolution message.

message string api_token string incident_id str
list_notification_policies
annotations: none low

List all notification policies in the workspace.

api_token string
get_notification_policy
annotations: none low

Get a notification policy by ID.

api_token string policy_id str
create_notification_policy
annotations: none low

Create a notification policy. Required: name, matchRules (list of {type, value?, monitorIds?, regions?}), escalation ({steps: [{delayMinutes, channelIds}], onResolve?, onReopen?}), enabled (bool), priority (int, higher = evaluated first).

body CreateNotificationPolicyRequest api_token string
update_notification_policy
annotations: none low

Update a notification policy.

body UpdateNotificationPolicyRequest api_token string policy_id str
delete_notification_policy
annotations: none low

Delete a notification policy.

api_token string policy_id str
test_notification_policy
annotations: none low

Send a test dispatch to verify a notification policy's routing.

api_token string policy_id str
list_maintenance_windows
annotations: none low

List maintenance windows for the workspace. Use this BEFORE creating a new window to check whether someone else (or an earlier agent run) already scheduled overlap, or AFTER a deploy to confirm the window you opened is still active. Filters (all optional; combine freely): - ``monitor_id``: UUID of a monitor — only windows attached to that single monitor (org-wide windows are excluded). - ``status``: ``"active"`` for windows currently in progress, or ``"upcoming"`` for windows scheduled in the future. Past / cancelled windows are not returned by the API today; omit ``status`` for the broadest result.

status string api_token string monitor_id string
get_maintenance_window
annotations: none low

Get a single maintenance window by ID with full details.

api_token string window_id str
create_maintenance_window
annotations: none low

Schedule a maintenance window to suppress alerts during planned work. Call this BEFORE running an operation that may legitimately cause monitors to fail — a deploy, a database migration, a third-party service's announced downtime — so the on-call rotation isn't paged for known-expected failures. Always pair every successful create with a follow-up ``cancel_maintenance_window`` once the operation finishes; if the operation runs long, call ``update_maintenance_window`` to push the end time back rather than letting the window lapse early. Time fields use ISO 8601 / RFC 3339 timestamps with explicit timezone — UTC strongly preferred. Example: ``"2026-05-15T14:00:00Z"``. Naive timestamps (no timezone) are rejected by the API. Body fields: - ``startsAt`` (required): when the window opens. - ``endsAt`` (required): when the window closes; must be strictly after ``startsAt``. - ``monitorId`` (optional): UUID of a single monitor to scope the window to. Omit (or set null) to make this an **org-wide window** that suppresses alerts on every monitor in the workspace — the right choice for a deploy or migration that touches the whole platform. - ``reason`` (optional): human-readable explanation ("v0.7.3 deploy", "Postgres major upgrade"). Surfaces in the dashboard and on-call channel; keep it specific. - ``repeatRule`` (optional): iCal RRULE string for recurring windows (max 100 chars), e.g. ``FREQ=WEEKLY;BYDAY=SU`` for weekly Sunday maintenance. Omit for one-time windows. - ``suppressAlerts`` (optional): whether the window actually silences alerts. Default ``true``; set ``false`` to record a maintenance window for audit without changing alerting behavior.

body CreateMaintenanceWindowRequest api_token string
update_maintenance_window
annotations: none low

Update an in-flight or scheduled maintenance window. The most common use is **extending** an active window when a deploy runs longer than expected — call this with the new ``endsAt`` to keep alerts suppressed past the original deadline. The endpoint is a full replacement (PUT, not PATCH): pass the complete intended state, not a delta. Any field omitted falls back to the underlying model's default rather than preserving the existing value. Time fields use ISO 8601 / RFC 3339 timestamps with explicit timezone (UTC preferred), e.g. ``"2026-05-15T16:30:00Z"``. Body fields (same schema as create): - ``startsAt`` (required) - ``endsAt`` (required) - ``monitorId`` (optional; null = org-wide) - ``reason`` (optional; null clears) - ``repeatRule`` (optional; null clears the recurrence) - ``suppressAlerts`` (optional)

body UpdateMaintenanceWindowRequest api_token string window_id str
cancel_maintenance_window
annotations: none low

Cancel a maintenance window — alerts resume immediately. Call this AFTER a deploy or maintenance operation completes successfully so any new monitor failures surface as real incidents instead of being silently absorbed. If the window was scheduled but not yet started, this prevents it from ever opening. The window record is removed; the audit log preserves the historical fact that the window existed. There is no "uncancel" — schedule a new window if you need to restore suppression.

api_token string window_id str
list_environments
annotations: none low

List all environments in the workspace.

api_token string
get_environment
annotations: none low

Get an environment by slug (e.g. 'production', 'staging').

slug str api_token string
create_environment
annotations: none low

Create an environment. Required fields: name, slug, color.

body CreateEnvironmentRequest api_token string
update_environment
annotations: none low

Update an environment by slug.

body UpdateEnvironmentRequest slug str api_token string
delete_environment
annotations: none low

Delete an environment by slug.

slug str api_token string
list_alert_channels
annotations: none low

List all alert channels configured in the workspace.

api_token string
get_alert_channel
annotations: none low

Get an alert channel by ID.

api_token string channel_id str
create_alert_channel
annotations: none low

Create a new alert channel. Required: name, type, config (type-specific). Types: EMAIL, WEBHOOK, SLACK, PAGERDUTY, OPSGENIE, TEAMS, DISCORD, TELEGRAM, GOOGLE_CHAT, PUSHOVER, MATTERMOST, SPLUNK_ONCALL, PUSHBULLET, LINEAR, INCIDENT_IO, ROOTLY, ZAPIER, DATADOG, JIRA, GITLAB.

body CreateAlertChannelRequest api_token string
update_alert_channel
annotations: none low

Update an existing alert channel. Updatable fields: name, type, config (type-specific). See create_alert_channel for supported types.

body UpdateAlertChannelRequest api_token string channel_id str
delete_alert_channel
annotations: none low

Delete an alert channel.

api_token string channel_id str
test_alert_channel
annotations: none low

Send a test notification to an alert channel to verify it works.

api_token string channel_id str
acquire_deploy_lock
annotations: none low

Acquire a deploy lock to prevent concurrent deployments. Required: lockedBy (identity of requester, e.g. hostname or CI job ID). Optional: ttlMinutes (default 30, max 60).

body AcquireDeployLockRequest api_token string
get_current_deploy_lock
annotations: none low

Get the currently active deploy lock, or null if unlocked.

api_token string
release_deploy_lock
annotations: none low

Release a deploy lock by ID.

lock_id str api_token string
force_release_deploy_lock
annotations: none low

Force-release any active deploy lock (admin action).

api_token string
list_api_keys
annotations: none low

List all API keys in the workspace.

api_token string
get_api_key
annotations: none low

Get a single API key's metadata by id. The secret value is never returned.

key_id str api_token string
create_api_key
annotations: none low

Create a new API key. The key value is returned only once. Required fields: name. Optional: expiresAt.

body CreateApiKeyRequest api_token string
revoke_api_key
annotations: none low

Revoke an API key (disables it without deleting).

key_id str api_token string
delete_api_key
annotations: none low

Delete an API key permanently.

key_id str api_token string
get_status_overview
annotations: none low

Get the dashboard overview with monitor counts, incident summary, and uptime stats.

api_token string
get_incident_timeline
annotations: none low

Full forensic timeline for an incident. Returns every recorded state transition for the incident, the rule evaluations that caused each triggering transition, and the policy snapshot in effect at the time. Use this to explain why an incident was declared/confirmed/resolved, or to audit a past detection decision.

api_token string incident_id str
get_check_trace
annotations: none low

Everything the detection engine recorded for a single check. Includes the rule evaluations produced for this check_id, the state transitions that fired (if any), and the policy snapshot active at evaluation time. Use when a user references a specific check execution ID (e.g. from a support ticket or webhook).

check_id str api_token string
get_policy_snapshot
annotations: none low

Fetch a policy snapshot by its content-addressed SHA-256 hash. Useful for inspecting the exact detection policy that was active when a specific evaluation or transition happened — the hash is stable, so historical data keeps pointing at the right policy even if the monitor has been edited since.

hash_hex str api_token string
list_monitor_rule_evaluations
annotations: none low

List rule evaluations produced for a monitor (paginated). Filters: - rule_type: e.g. "consecutive_failures", "latency_threshold" - region: probe region, e.g. "us-east" - only_matched: if True, return only evaluations that fired - from_/to: ISO-8601 datetime bounds Use to answer "which rules fired on monitor X in the last hour?".

to string page int size int from_ string region string api_token string rule_type string monitor_id str only_matched string
list_monitor_transitions
annotations: none low

List state transitions recorded for a monitor (paginated). A transition captures every WATCHING→TRIGGERED→CONFIRMED→RESOLVED edge the detection engine walked. Includes transitions that occurred before an incident was declared (incident_id = null). Use to reconstruct the full reliability history of a monitor.

to string page int size int from_ string api_token string monitor_id str
list_tags
annotations: none low

List all tags in the workspace.

api_token string
get_tag
annotations: none low

Get a tag by ID.

tag_id str api_token string
create_tag
annotations: none low

Create a tag. Required fields: name. Optional: color.

body CreateTagRequest api_token string
update_tag
annotations: none low

Update a tag.

body UpdateTagRequest tag_id str api_token string
delete_tag
annotations: none low

Delete a tag.

tag_id str api_token string

Permissions 3

network medium
Server uses network capabilities via: httpx
filesystem low
Server uses filesystem capabilities via: open(), os
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 268

low
Tool 'list_resource_groups' has no annotations annotation_checker · 100%
low
Tool 'get_resource_group' has no annotations annotation_checker · 100%
low
Tool 'create_resource_group' has no annotations annotation_checker · 100%
low
Tool 'update_resource_group' has no annotations annotation_checker · 100%
low
Tool 'delete_resource_group' has no annotations annotation_checker · 100%
low
Tool 'add_resource_group_member' has no annotations annotation_checker · 100%
low
Tool 'remove_resource_group_member' has no annotations annotation_checker · 100%
low
Tool 'list_webhooks' has no annotations annotation_checker · 100%
low
Tool 'get_webhook' has no annotations annotation_checker · 100%
low
Tool 'create_webhook' has no annotations annotation_checker · 100%
low
Tool 'update_webhook' has no annotations annotation_checker · 100%
low
Tool 'delete_webhook' has no annotations annotation_checker · 100%
low
Tool 'test_webhook' has no annotations annotation_checker · 100%
low
Tool 'list_status_pages' has no annotations annotation_checker · 100%
low
Tool 'get_status_page' has no annotations annotation_checker · 100%
low
Tool 'create_status_page' has no annotations annotation_checker · 100%
low
Tool 'update_status_page' has no annotations annotation_checker · 100%
low
Tool 'delete_status_page' has no annotations annotation_checker · 100%
low
Tool 'reorder_status_page_layout' has no annotations annotation_checker · 100%
low
Tool 'list_status_page_components' has no annotations annotation_checker · 100%
low
Tool 'create_status_page_component' has no annotations annotation_checker · 100%
low
Tool 'update_status_page_component' has no annotations annotation_checker · 100%
low
Tool 'delete_status_page_component' has no annotations annotation_checker · 100%
low
Tool 'reorder_status_page_components' has no annotations annotation_checker · 100%
low
Tool 'list_status_page_groups' has no annotations annotation_checker · 100%
low
Tool 'create_status_page_group' has no annotations annotation_checker · 100%
low
Tool 'update_status_page_group' has no annotations annotation_checker · 100%
low
Tool 'delete_status_page_group' has no annotations annotation_checker · 100%
low
Tool 'list_status_page_incidents' has no annotations annotation_checker · 100%
low
Tool 'get_status_page_incident' has no annotations annotation_checker · 100%
low
Tool 'create_status_page_incident' has no annotations annotation_checker · 100%
low
Tool 'update_status_page_incident' has no annotations annotation_checker · 100%
low
Tool 'post_status_page_incident_update' has no annotations annotation_checker · 100%
low
Tool 'publish_status_page_incident' has no annotations annotation_checker · 100%
low
Tool 'dismiss_status_page_incident' has no annotations annotation_checker · 100%
low
Tool 'delete_status_page_incident' has no annotations annotation_checker · 100%
low
Tool 'list_status_page_subscribers' has no annotations annotation_checker · 100%
low
Tool 'add_status_page_subscriber' has no annotations annotation_checker · 100%
low
Tool 'remove_status_page_subscriber' has no annotations annotation_checker · 100%
low
Tool 'list_status_page_domains' has no annotations annotation_checker · 100%
low
Tool 'add_status_page_domain' has no annotations annotation_checker · 100%
low
Tool 'verify_status_page_domain' has no annotations annotation_checker · 100%
low
Tool 'remove_status_page_domain' has no annotations annotation_checker · 100%
low
Tool 'list_dependencies' has no annotations annotation_checker · 100%
low
Tool 'get_dependency' has no annotations annotation_checker · 100%
low
Tool 'track_dependency' has no annotations annotation_checker · 100%
low
Tool 'update_dependency_alert_sensitivity' has no annotations annotation_checker · 100%
low
Tool 'delete_dependency' has no annotations annotation_checker · 100%
low
Tool 'list_monitors' has no annotations annotation_checker · 100%
low
Tool 'get_monitor' has no annotations annotation_checker · 100%
low
Tool 'create_monitor' has no annotations annotation_checker · 100%
low
Tool 'update_monitor' has no annotations annotation_checker · 100%
low
Tool 'delete_monitor' has no annotations annotation_checker · 100%
low
Tool 'pause_monitor' has no annotations annotation_checker · 100%
low
Tool 'resume_monitor' has no annotations annotation_checker · 100%
low
Tool 'test_monitor' has no annotations annotation_checker · 100%
low
Tool 'list_monitor_results' has no annotations annotation_checker · 100%
low
Tool 'list_monitor_versions' has no annotations annotation_checker · 100%
low
Tool 'list_secrets' has no annotations annotation_checker · 100%
low
Tool 'create_secret' has no annotations annotation_checker · 100%
low
Tool 'update_secret' has no annotations annotation_checker · 100%
low
Tool 'delete_secret' has no annotations annotation_checker · 100%
low
Tool 'search_services' has no annotations annotation_checker · 100%
low
Tool 'get_service' has no annotations annotation_checker · 100%
low
Tool 'get_service_live_status' has no annotations annotation_checker · 100%
low
Tool 'get_services_summary' has no annotations annotation_checker · 100%
low
Tool 'list_service_categories' has no annotations annotation_checker · 100%
low
Tool 'list_service_components' has no annotations annotation_checker · 100%
low
Tool 'get_service_uptime' has no annotations annotation_checker · 100%
low
Tool 'list_service_incidents' has no annotations annotation_checker · 100%
low
Tool 'get_service_incident' has no annotations annotation_checker · 100%
low
Tool 'get_service_day_rollup' has no annotations annotation_checker · 100%
low
Tool 'get_component_uptime' has no annotations annotation_checker · 100%
low
Tool 'get_all_components_uptime' has no annotations annotation_checker · 100%
low
Tool 'list_service_maintenances' has no annotations annotation_checker · 100%
low
Tool 'list_incidents' has no annotations annotation_checker · 100%
low
Tool 'get_incident' has no annotations annotation_checker · 100%
low
Tool 'create_incident' has no annotations annotation_checker · 100%
low
Tool 'resolve_incident' has no annotations annotation_checker · 100%
low
Tool 'list_notification_policies' has no annotations annotation_checker · 100%
low
Tool 'get_notification_policy' has no annotations annotation_checker · 100%
low
Tool 'delete_tag' has no annotations annotation_checker · 100%
low
Tool 'create_notification_policy' has no annotations annotation_checker · 100%
low
Tool 'update_notification_policy' has no annotations annotation_checker · 100%
low
Tool 'delete_notification_policy' has no annotations annotation_checker · 100%
low
Tool 'test_notification_policy' has no annotations annotation_checker · 100%
low
Tool 'list_maintenance_windows' has no annotations annotation_checker · 100%
low
Tool 'get_maintenance_window' has no annotations annotation_checker · 100%
low
Tool 'create_maintenance_window' has no annotations annotation_checker · 100%
low
Tool 'update_maintenance_window' has no annotations annotation_checker · 100%
low
Tool 'cancel_maintenance_window' has no annotations annotation_checker · 100%
low
Tool 'list_environments' has no annotations annotation_checker · 100%
low
Tool 'get_environment' has no annotations annotation_checker · 100%
low
Tool 'create_environment' has no annotations annotation_checker · 100%
low
Tool 'update_environment' has no annotations annotation_checker · 100%
low
Tool 'delete_environment' has no annotations annotation_checker · 100%
low
Tool 'list_alert_channels' has no annotations annotation_checker · 100%
low
Tool 'get_alert_channel' has no annotations annotation_checker · 100%
low
Tool 'create_alert_channel' has no annotations annotation_checker · 100%
low
Tool 'update_alert_channel' has no annotations annotation_checker · 100%
low
Tool 'delete_alert_channel' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
low
Tool 'test_alert_channel' has no annotations annotation_checker · 100%
low
Tool 'acquire_deploy_lock' has no annotations annotation_checker · 100%
low
Tool 'get_current_deploy_lock' has no annotations annotation_checker · 100%
low
Tool 'release_deploy_lock' has no annotations annotation_checker · 100%
low
Tool 'force_release_deploy_lock' has no annotations annotation_checker · 100%
low
Tool 'list_api_keys' has no annotations annotation_checker · 100%
low
Tool 'get_api_key' has no annotations annotation_checker · 100%
low
Tool 'create_api_key' has no annotations annotation_checker · 100%
low
Tool 'revoke_api_key' has no annotations annotation_checker · 100%
low
Tool 'delete_api_key' has no annotations annotation_checker · 100%
low
Tool 'get_status_overview' has no annotations annotation_checker · 100%
low
Tool 'get_incident_timeline' has no annotations annotation_checker · 100%
low
Tool 'get_check_trace' has no annotations annotation_checker · 100%
low
Tool 'get_policy_snapshot' has no annotations annotation_checker · 100%
low
Tool 'list_monitor_rule_evaluations' has no annotations annotation_checker · 100%
low
Tool 'list_monitor_transitions' has no annotations annotation_checker · 100%
low
Tool 'list_tags' has no annotations annotation_checker · 100%
low
Tool 'get_tag' has no annotations annotation_checker · 100%
low
Tool 'create_tag' has no annotations annotation_checker · 100%
low
Tool 'update_tag' has no annotations annotation_checker · 100%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (GHSA-5h2m-4q8j-pqpj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (GHSA-c2jp-c369-7pvx) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (GHSA-mxxr-jv3v-6pgc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (GHSA-rcfx-77hg-w2wv) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (GHSA-rj5c-58rq-j5g5) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (PYSEC-2026-1364) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (PYSEC-2026-1365) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (PYSEC-2026-2474) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2.3,<4 (PYSEC-2026-338) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: list_resource_groups manifest_parser · 90%
info
Tool: get_resource_group manifest_parser · 90%
info
Tool: create_resource_group manifest_parser · 90%
info
Tool: update_resource_group manifest_parser · 90%
info
Tool: delete_resource_group manifest_parser · 90%
info
Tool: add_resource_group_member manifest_parser · 90%
info
Tool: remove_resource_group_member manifest_parser · 90%
info
Tool: list_webhooks manifest_parser · 90%
info
Tool: get_webhook manifest_parser · 90%
info
Tool: create_webhook manifest_parser · 90%
info
Tool: update_webhook manifest_parser · 90%
info
Tool: delete_webhook manifest_parser · 90%
info
Tool: test_webhook manifest_parser · 90%
info
Tool: list_status_pages manifest_parser · 90%
info
Tool: get_status_page manifest_parser · 90%
info
Tool: create_status_page manifest_parser · 90%
info
Tool: update_status_page manifest_parser · 90%
info
Tool: delete_status_page manifest_parser · 90%
info
Tool: remove_status_page_domain manifest_parser · 90%
info
Tool: reorder_status_page_layout manifest_parser · 90%
info
Tool: list_status_page_components manifest_parser · 90%
info
Tool: create_status_page_component manifest_parser · 90%
info
Tool: update_status_page_component manifest_parser · 90%
info
Tool: delete_status_page_component manifest_parser · 90%
info
Tool: reorder_status_page_components manifest_parser · 90%
info
Tool: list_status_page_groups manifest_parser · 90%
info
Tool: create_status_page_group manifest_parser · 90%
info
Tool: update_status_page_group manifest_parser · 90%
info
Tool: delete_status_page_group manifest_parser · 90%
info
Tool: list_status_page_incidents manifest_parser · 90%
info
Tool: get_status_page_incident manifest_parser · 90%
info
Tool: create_status_page_incident manifest_parser · 90%
info
Tool: update_status_page_incident manifest_parser · 90%
info
Tool: post_status_page_incident_update manifest_parser · 90%
info
Tool: publish_status_page_incident manifest_parser · 90%
info
Tool: dismiss_status_page_incident manifest_parser · 90%
info
Tool: delete_status_page_incident manifest_parser · 90%
info
Tool: list_status_page_subscribers manifest_parser · 90%
info
Tool: add_status_page_subscriber manifest_parser · 90%
info
Tool: remove_status_page_subscriber manifest_parser · 90%
info
Tool: list_status_page_domains manifest_parser · 90%
info
Tool: add_status_page_domain manifest_parser · 90%
info
Tool: verify_status_page_domain manifest_parser · 90%
info
Tool: list_dependencies manifest_parser · 90%
info
Tool: get_dependency manifest_parser · 90%
info
Tool: track_dependency manifest_parser · 90%
info
Tool: update_dependency_alert_sensitivity manifest_parser · 90%
info
Tool: delete_dependency manifest_parser · 90%
info
Tool: list_monitors manifest_parser · 90%
info
Tool: get_monitor manifest_parser · 90%
info
Tool: create_monitor manifest_parser · 90%
info
Tool: update_monitor manifest_parser · 90%
info
Tool: delete_monitor manifest_parser · 90%
info
Tool: pause_monitor manifest_parser · 90%
info
Tool: resume_monitor manifest_parser · 90%
info
Tool: test_monitor manifest_parser · 90%
info
Tool: list_monitor_results manifest_parser · 90%
info
Tool: list_monitor_versions manifest_parser · 90%
info
Tool: list_secrets manifest_parser · 90%
info
Tool: create_secret manifest_parser · 90%
info
Tool: update_secret manifest_parser · 90%
info
Tool: delete_secret manifest_parser · 90%
info
Tool: search_services manifest_parser · 90%
info
Tool: get_service manifest_parser · 90%
info
Tool: get_service_live_status manifest_parser · 90%
info
Tool: get_services_summary manifest_parser · 90%
info
Tool: list_service_categories manifest_parser · 90%
info
Tool: list_service_components manifest_parser · 90%
info
Tool: get_service_uptime manifest_parser · 90%
info
Tool: list_service_incidents manifest_parser · 90%
info
Tool: get_service_incident manifest_parser · 90%
info
Tool: get_service_day_rollup manifest_parser · 90%
info
Tool: get_component_uptime manifest_parser · 90%
info
Tool: get_all_components_uptime manifest_parser · 90%
info
Tool: list_service_maintenances manifest_parser · 90%
info
Tool: list_incidents manifest_parser · 90%
info
Tool: get_incident manifest_parser · 90%
info
Tool: create_incident manifest_parser · 90%
info
Tool: resolve_incident manifest_parser · 90%
info
Tool: list_notification_policies manifest_parser · 90%
info
Tool: get_notification_policy manifest_parser · 90%
info
Tool: create_notification_policy manifest_parser · 90%
info
Tool: update_notification_policy manifest_parser · 90%
info
Tool: delete_notification_policy manifest_parser · 90%
info
Tool: test_notification_policy manifest_parser · 90%
info
Tool: list_maintenance_windows manifest_parser · 90%
info
Tool: get_maintenance_window manifest_parser · 90%
info
Tool: create_maintenance_window manifest_parser · 90%
info
Tool: update_maintenance_window manifest_parser · 90%
info
Tool: cancel_maintenance_window manifest_parser · 90%
info
Tool: list_environments manifest_parser · 90%
info
Tool: get_environment manifest_parser · 90%
info
Tool: create_environment manifest_parser · 90%
info
Tool: update_environment manifest_parser · 90%
info
Tool: delete_environment manifest_parser · 90%
info
Tool: list_alert_channels manifest_parser · 90%
info
Tool: get_alert_channel manifest_parser · 90%
info
Tool: create_alert_channel manifest_parser · 90%
info
Tool: update_alert_channel manifest_parser · 90%
info
Tool: delete_alert_channel manifest_parser · 90%
info
Tool: test_alert_channel manifest_parser · 90%
info
Tool: acquire_deploy_lock manifest_parser · 90%
info
Tool: get_current_deploy_lock manifest_parser · 90%
info
Tool: release_deploy_lock manifest_parser · 90%
info
Tool: force_release_deploy_lock manifest_parser · 90%
info
Tool: list_api_keys manifest_parser · 90%
info
Tool: get_api_key manifest_parser · 90%
info
Tool: create_api_key manifest_parser · 90%
info
Tool: revoke_api_key manifest_parser · 90%
info
Tool: delete_api_key manifest_parser · 90%
info
Tool: get_status_overview manifest_parser · 90%
info
Tool: get_incident_timeline manifest_parser · 90%
info
Tool: get_check_trace manifest_parser · 90%
info
Tool: get_policy_snapshot manifest_parser · 90%
info
Tool: list_monitor_rule_evaluations manifest_parser · 90%
info
Tool: list_monitor_transitions manifest_parser · 90%
info
Tool: list_tags manifest_parser · 90%
info
Tool: get_tag manifest_parser · 90%
info
Tool: create_tag manifest_parser · 90%
info
Tool: update_tag manifest_parser · 90%
info
Tool: delete_tag manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (10) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'create_maintenance_window': Cross-tool sequencing directive poisoning · 85%
critical
Tool poisoning in 'cancel_maintenance_window': Cross-tool sequencing directive poisoning · 85%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%