ai-platform-engineering
CAIPE is an open-source AI platform for building, governing, and operating AI agents and agentic workflows for platform engineering and beyond.
Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
caipe-io
Source: github_repo_search
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
account_service__can_iChecks if the current account has permission to perform a specified action on a resource.
account_service__get_accountGetAccount returns an account.
account_service__list_accountsListAccounts returns the list of accounts.
application_service__list_resource_eventsListResourceEvents returns a list of event resources.
application_service__list_linksListLinks returns the list of all application deep links.
application_service__pod_logsStream log entries for a specified pod in an ArgoCD application.
list_applicationsList applications in ArgoCD with filtering and pagination options
get_application_detailsGet details for a specific application
create_applicationConstruct dependencies and register the Slack request boundary.
update_applicationUpdate an existing application in ArgoCD
delete_applicationDelete an application from ArgoCD
sync_applicationSync an application in ArgoCD
version_service__versionFetches version information of the API server.
project_listList returns a paginated list of projects.
project_createCreate a new ArgoCD project.
project_deleteDelete a project.
project_getGet a project.
project_updateUpdate a project.
application_set_service__generateGenerate an application set service.
applicationset_listList returns a paginated list of applicationsets.
applicationset_createCreate an application set.
applicationset_service__getGet an applicationset by name.
applicationset_service__deleteDelete an application set.
certificate_service__list_certificatesList all available repository certificates.
cluster_service__getGet a cluster by server address.
cluster_service__listList returns a paginated list of clusters.
search_argocd_resourcesSearch across ArgoCD resources using two-tier search strategy.
gpg_key_service__getGet information about a specified GPG public key from the server.
gpg_key_service__listList all available repository certificates.
gpg_key_service__createCreate one or more GPG public keys in the server's configuration.
gpg_key_service__deleteDelete specified GPG public key from the server's configuration.
aws_cli_executeExecute an AWS CLI read-only command against a specific AWS account.
eks_kubectl_executeExecute a kubectl command against an Amazon EKS cluster.
get_entities_by_querySearch for entities by a given query.
get_techdocs_metadataRetrieves TechDocs metadata for a specific entity to check if documentation exists and get its build status.
get_techdocs_entity_metadataRetrieves entity-specific TechDocs metadata, including the documentation reference and build information.
get_techdocs_pageRetrieves a specific TechDocs page content for an entity.
get_techdocs_mkdocs_ymlRetrieves the mkdocs.yml configuration for an entity's TechDocs, which contains the documentation structure and navigation.
search_techdocsSearches across all TechDocs content for the given query.
get_techdocs_indexRetrieves the documentation index/table of contents for an entity's TechDocs.
list_entities_with_techdocsLists all entities that have TechDocs documentation available.
get_attachmentsget_blog_postscreate_blog_postget_content_labelsadd_labels_to_contentget_pagescreate_pageget_spacescreate_spaceget_available_space_permissionsget_footer_commentscreate_footer_commentget_inline_commentscreate_inline_commentget_admin_keyenable_admin_keydisable_admin_keyget_attachment_by_iddelete_attachmentget_attachment_labelsget_attachment_operationsget_attachment_content_propertiescreate_attachment_propertyget_attachment_content_properties_by_idupdate_attachment_property_by_iddelete_attachment_property_by_idget_attachment_versionsget_attachment_version_detailsget_attachment_commentsget_blog_post_by_idupdate_blog_postdelete_blog_postget_blogpost_attachmentsget_custom_content_by_type_in_blog_postget_blog_post_labelsget_blog_post_like_countget_blog_post_like_usersget_blogpost_content_propertiescreate_blogpost_propertyget_blogpost_content_properties_by_idupdate_blogpost_property_by_iddelete_blogpost_property_by_idget_blog_post_operationsget_blog_post_versionsget_blog_post_version_detailsconvert_content_ids_to_content_typesget_custom_content_by_typecreate_custom_contentget_custom_content_by_idupdate_custom_contentdelete_custom_contentget_custom_content_attachmentsget_custom_content_commentsget_custom_content_labelsget_custom_content_operationsget_custom_content_content_propertiescreate_custom_content_propertyget_custom_content_content_properties_by_idupdate_custom_content_property_by_id543 further tools are not listed here. The complete surface is in the source.
MCP_MODEMCP_HOSTMCP_PORTSERVER_NAMEAWS_CLI_MAX_EXECUTION_TIMEKUBECTL_MAX_EXECUTION_TIMERESTRICT_KUBECTL_SECRETSRESTRICT_KUBECTL_PROXYRESTRICT_KUBECTL_EXECRESTRICT_KUBECTL_ATTACHRESTRICT_KUBECTL_CPRESTRICT_KUBECTL_PORT_FORWARDAWS_CLI_MAX_OUTPUT_SIZEMAX_CONCURRENT_AWS_CALLSMAX_CONCURRENT_KUBECTL_CALLSAWS_ACCOUNT_LISTCROSS_ACCOUNT_ROLE_NAMEAWS_REGIONAWS_DEFAULT_REGIONMCP_JIRA_LOG_LEVELAGENT_NAMEENABLE_SPLUNK_LOGSSCHEDULER_URLSCHEDULER_SERVICE_TOKENHTTP_TIMEOUTWEBEX_INTEGRATION_APP_NAMEAPP_NAMEWEBEX_WORKSPACE_ALIASWEBEX_WORKSPACE_IDWEBEX_ADMIN_API_ENABLEDLOG_LEVELHOSTEXT_AUTHZ_GRPC_BINDJWT_JWKS_URLJWT_ISSUERJWT_AUDIENCESJWT_ALGORITHMSOPENFGA_BYPASS_SUBSCAIPE_AGENT_CONTEXT_HMAC_SECRETCAIPE_AGENT_CONTEXT_MAX_AGE_SECONDSCAIPE_AGENT_CONTEXT_LOCAL_MAX_AGE_SECONDSCAIPE_ORG_KEYCAIPE_RESTRICTED_MCP_SERVERSOPENFGA_RELATIONOPENFGA_OBJECTDEV_HOT_RELOADCUSTOM_CA_BUNDLEREQUESTS_CA_BUNDLESSL_CERT_FILESSL_VERIFYUSE_IMPERSONATION_TOKENSMCP_SERVICE_OIDC_CLIENT_IDINGESTOR_OIDC_CLIENT_IDMCP_SERVICE_OIDC_CLIENT_SECRETMCP_SERVICE_OIDC_TOKEN_URLKEYCLOAK_URLKEYCLOAK_REALMRAG_MCP_SERVER_IDSARGOCD_API_URLARGOCD_URLMAX_SEARCH_RESULTSWARN_SEARCH_RESULTSPORTTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
643/643 tools missing one or more hints — account_service__can_i (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); account_service__get_account (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); account_service__list_accounts (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +640 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool test coverage
Only 51/643 tools referenced in tests (8%)
Write tests that reference each tool by name so every tool has at least one test.
No access to sensitive paths
Reads sensitive paths: ~/.aws
Remove reads of sensitive system paths. If you genuinely need them, document why in the README.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/caipe-io/ai-platform-engineering)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check