Registry · Capabilities · zapier.com
Capability registry
What zapier.com declares an agent can do
Measured 2026-10-04 04:52 UTC from the declarations the site publishes (record eaot1qptgm). Each capability is shown as declared, under the policy class that decides whether anything may call it, beside what a call observed.
39declared
0public read-only
0called and verified
0declared ≠ observed
agent_skill, api, mcpprotocols
Declared versus observed
| Capability | Policy class | Declared | Observed |
|---|---|---|---|
| Zapier MCP api · https://mcp.zapier.com/mcp | Metadata never called automatically | an API the catalog lists; its operations are in its own description auth: unknown | not attempted on another origin (mcp.zapier.com): only the scanned origin is called |
| Actions API api · https://api.zapier.com/actions/v1 | Metadata never called automatically | an API the catalog lists; its operations are in its own description auth: unknown | not attempted on another origin (api.zapier.com): only the scanned origin is called |
| Connections API api · https://api.zapier.com/connections/v1 | Metadata never called automatically | an API the catalog lists; its operations are in its own description auth: unknown | not attempted on another origin (api.zapier.com): only the scanned origin is called |
| Trigger Inbox API api · https://api.zapier.com/trigger-inbox/v1 | Metadata never called automatically | an API the catalog lists; its operations are in its own description auth: unknown | not attempted on another origin (api.zapier.com): only the scanned origin is called |
| server mcp · https://mcp.zapier.com/api/v1/connect | Metadata never called automatically | a server declaration; its tools are listed only by the server itself (tools/list), which is not called auth: oauth2 | not attempted requires oauth2: never called without the operator's own credentials |
| zapier-mcp agent_skill · https://zapier.com/.well-known/agent-skills/zapier-mcp/SKILL.md | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted metadata: describes a surface, is not itself an action |
| zapier-sdk agent_skill · https://zapier.com/.well-known/agent-skills/zapier-sdk/SKILL.md | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted metadata: describes a surface, is not itself an action |
| zapier-embed-mcp agent_skill · https://zapier.com/.well-known/agent-skills/zapier-embed-mcp/SKILL.md | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted metadata: describes a surface, is not itself an action |
| zapier-platform-cli agent_skill · https://zapier.com/.well-known/agent-skills/zapier-platform-cli/SKILL.md | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted metadata: describes a surface, is not itself an action |
| algolia agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/algolia.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| alpaca agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/alpaca.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| clay agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/clay.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| dataforseo agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/dataforseo.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| discord agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/discord.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| dropbox agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/dropbox.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| elevenlabs agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/elevenlabs.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| firecrawl agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/firecrawl.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| gitlab agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/gitlab.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| google-ads agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/google-ads.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| google-analytics agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/google-analytics.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| google-calendar agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/google-calendar.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| google-contacts agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/google-contacts.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| google-docs agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/google-docs.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| google-sheets agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/google-sheets.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| google-tasks agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/google-tasks.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| harvest agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/harvest.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| heygen agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/heygen.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| linear agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/linear.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| microsoft-onedrive agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/microsoft-onedrive.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| microsoft-outlook agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/microsoft-outlook.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| microsoft-sharepoint agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/microsoft-sharepoint.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| microsoft-todo agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/microsoft-todo.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| notion agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/notion.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| perplexity agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/perplexity.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| resend agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/resend.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| runway agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/runway.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| telegram agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/telegram.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| trello agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/trello.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
| youtube agent_skill · https://connectors-skills.zapier.com/.well-known/agent-skills/youtube.tar.gz | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted on another origin (connectors-skills.zapier.com): only the scanned origin is called |
Where the declaration and the call disagree
None: every capability that was called answered as declared.
Signed certificate
This page’s rows, signed by the observer’s Ed25519 key: every capability’s id, endpoint, safety class, policy class and observed state, the declaration hashes and the record’s sealed manifest. The certificate is derived from the record alone, so the same record always yields the same id.
certificate_id ccap1:86d0442d0e4109d4cf6b40e7d25ba94e3c64e0c0df8333a0eeb82545852f8b5a
alg Ed25519 · kid hcIAczGf-8EFBnkunmZlvFWnD2nHHeHeC9cM4BTiBVo
sig 0j2Ph6aX5We4xmTzAz1n2VUvt8NOU-WLI0op0PQVyZ-XBuk2CdlZa0vN7F1V7oFMVZHfPVqReCbOuGOhMCIpCQ
alg Ed25519 · kid hcIAczGf-8EFBnkunmZlvFWnD2nHHeHeC9cM4BTiBVo
sig 0j2Ph6aX5We4xmTzAz1n2VUvt8NOU-WLI0op0PQVyZ-XBuk2CdlZa0vN7F1V7oFMVZHfPVqReCbOuGOhMCIpCQ
The certificate as JSON · verify it now · the key directory · machine-readability certificate
To verify it yourself: SHA-256 the certificate object as canonical JSON (keys sorted, no whitespace); the hex digest must equal certificate_sha256 and the id; then check the Ed25519 signature over "crawlcheck-capability-certificate-v1\n" followed by that hex digest, with the key in the directory whose RFC 7638 thumbprint is the kid.
Policy classes
| Policy class | Called automatically? | Rule |
|---|---|---|
| Public read-only public_read_only | yes, to verify | May be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin. |
| Authenticated read-only authenticated_read_only | never | Never called by CrawlCheck. An agent needs the user's own credentials and consent. |
| Reversible write reversible_write | never | Never invoked automatically. Needs the owner's written authorisation and a test account. |
| Irreversible write irreversible_write | never | Never invoked automatically. Deletes or changes something that cannot be undone. |
| Financial financial | never | Never invoked automatically. Moves money or creates a charge. |
| External communication external_communication | never | Never invoked automatically. Sends a message, email or notification to someone. |
| Identity and accounts identity | never | Never invoked automatically. Creates, signs in to or changes an account or credential. |
| Unknown unknown | never | Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case. |
| Metadata metadata | never | Nothing to invoke: a listing, a server card or a skill file, not an operation. |