Harmonic Security

AGT-007 · formerly DIS-008

Map the actions available via each connector.

.md .json

Acceptance criteria

Show, per connector/MCP server, what actions are available and which are currently enabled.

Why it matters

Approving a connector without knowing which actions it exposes and which are enabled leaves the scope of available functionality unclear.

How to verify

For three connectors you name, the console lists the actions each exposes and shows which are currently enabled.

Framework mappings

  • An inventory of connector actions and their enabled status supports risk assessment and access-rights review. It provides review inputs; it does not demonstrate effective permissions or their enforcement.

  • Knowing which actions a connector exposes helps identify risks and control needs associated with third-party components.

  • Reviewing available and enabled actions helps identify unnecessarily broad functionality. Assessing identity and privilege abuse also requires evidence about agent identities, credentials and delegated permissions. These mappings concern action visibility and review, not reachable-file discovery or data-flow mapping.