{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-13T23:52:59.204Z", "record_id": "VXI-EXT-TOOL-TRUST-ZAPIER-01-v1", "record_kind": "external_reference", "title": "Zapier MCP: Dynamic tool discovery and cross-app actions", "system": "Zapier MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "What should I check before a Zapier agent can discover tools and take actions across connected apps?", "near_questions": [ "Can Zapier MCP discover and enable tools during a conversation?", "Can I use a fixed Zapier MCP tool list?", "Which connected app account will a Zapier action use?", "Could a Zapier agent read CRM data and email it elsewhere?", "Does Zapier MCP require approval for each message in my client?", "Do successful Zapier MCP calls consume plan tasks?", "Are failed Zapier MCP calls charged as tasks?", "Can a repeated Zapier action create duplicate changes?", "What should I check before sharing a Zapier MCP server?", "Which client transport does Zapier MCP require?", "What evidence defines an approved Zapier destination?", "When should a Zapier cross-app workflow be reviewed again?" ], "supported_claims": [ { "claim": "Zapier MCP uses connected-app actions and can discover and enable tools during a conversation. A fixed tool list is an alternative. Review the discovery mode, app identities and authorization for each destination; successful calls also consume the existing Zapier task allowance.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "Zapier MCP uses connected-app actions and can discover and enable tools during a conversation. A fixed tool list is an alternative. Review the discovery mode, app identities and authorization for each destination; successful calls also consume the existing Zapier task allowance.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-POSTMAN-01-v1", "VXI-EXT-TOOL-TRUST-DOCKER-01-v1", "VXI-EXT-TOOL-TRUST-SHOPIFY-CART-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Zapier MCP tool selection and client connection", "source_url": "https://docs.zapier.com/mcp/home", "checked_on": "2026-10-14", "candidate_record_id": "VXI-EXT-TOOL-TRUST-ZAPIER-01-v1", "candidate_record_sha256": "cb26273e494fa55086be85c415d8565a6aba28f3515246682170ff6c0233c202", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Zapier MCP uses connected-app actions and can discover and enable tools during a conversation. A fixed tool list is an alternative. Review the discovery mode, app identities and authorization for each destination; successful calls also consume the existing Zapier task allowance.", "required_buyer_context": "MCP client server, tool-discovery mode, connected app accounts, workspace policy and task budget.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Zapier MCP", "variant": "Zapier hosted MCP with app connections; dynamic or manually fixed tool discovery" }, "review_status": "documentation_review_only", "checked_on": "2026-10-14", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Zapier operates the hosted MCP service.", "source_ids": [ "zapier-main", "zapier-billing" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "It connects agent requests to actions in configured applications.", "source_ids": [ "zapier-main", "zapier-billing" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Available actions can search or find application records.", "source_ids": [ "zapier-main", "zapier-billing" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Available actions can send messages and create or update records in connected apps.", "source_ids": [ "zapier-main", "zapier-billing" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "Most clients connect using OAuth; tools run through Zapier app connections.", "source_ids": [ "zapier-main", "zapier-billing" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Dynamic discovery can enable tools during use; manual selection supports a fixed tool set.", "source_ids": [ "zapier-main", "zapier-billing" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "A cross-app workflow can move information from one connected service through the client to another.", "source_ids": [ "zapier-main", "zapier-billing" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Discovery can expand a tool list, a wrong app connection can target another account, and retries may consume additional tasks.", "source_ids": [ "zapier-main", "zapier-billing" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Configured connections, effective workspace controls, budget and human approval behavior are unverified.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Resolve the app identity and permission for each write or external message before execution.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "zapier-main", "url": "https://docs.zapier.com/mcp/home", "final_url": "https://docs.zapier.com/mcp/home", "title": "Zapier MCP tool selection and client connection", "checked_on": "2026-10-14", "sha256": "508b142c3c5dde2d66d1ae43ff2fc89f5a9d7caf9e14ebcf3e81c3826f705b58", "bytes": 459441 }, { "source_id": "zapier-billing", "url": "https://help.zapier.com/hc/en-us/articles/45645738385805-How-Zapier-MCP-usage-works", "final_url": "https://docs.zapier.com/mcp/overview/usage", "title": "Zapier MCP task consumption", "checked_on": "2026-10-14", "sha256": "fa44af36241280d90f78f92a69d883533b77a39f881458d653285fae9e5efe80", "bytes": 435152 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Retain the approved destinations and discovery assumptions for a cross-app workflow.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck enabled discovery, app connections, shared-server access and task charging." }, "change_history": [ { "version": 1, "date": "2026-10-14", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#zapier-mcp-discovery-action-trust", "machine_readable_record": "/varexis-index/records/zapier-mcp-discovery-action-trust.json" }