# `io.usefulapi/cogmento` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/io.usefulapi/cogmento - JSON: https://anlyon.dev/api/v1/servers/io.usefulapi/cogmento - Version: 1.0.0 (active) - Publisher: io.usefulapi (domain proven to the MCP Registry) - Runs: remote (streamable-http) - Sign-in to list tools: none - Repository: https://github.com/m190/usefulapi-mcp - Metadata from the official MCP Registry, synced 2026-10-26T07:17:40.846Z Title and description, as the publisher wrote them: ```untrusted-server-text Cogmento MCP by usefulapi Read Cogmento CRM contacts, companies, deals, tasks and cases; create records and complete tasks. ``` Scanned 2026-10-26T07:18:00.220Z over streamable-http. **26 tools: 3 can delete or cancel things, 6 change things and 17 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 3 | deny | | Can't be undone | irreversible | 0 | ask | | Changes things | write | 6 | ask | | Only reads | read | 17 | allow | ## Exfil surface 468 private-data -> untrusted-input -> outbound paths in this server alone. Denying 2 outbound tools breaks every one: `mcp__cogmento__cogmento_create_company`, `mcp__cogmento__cogmento_create_contact`. | Tag | Meaning | Tools | | --- | --- | --- | | private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__cogmento__cogmento_get_company` `mcp__cogmento__cogmento_get_contact` `mcp__cogmento__cogmento_get_current_user` `mcp__cogmento__cogmento_get_deal` `mcp__cogmento__cogmento_get_templates` `mcp__cogmento__cogmento_list_companies` `mcp__cogmento__cogmento_list_contacts` `mcp__cogmento__cogmento_list_deal_stages` `mcp__cogmento__cogmento_list_tasks` | | untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__cogmento__cogmento_aggregate_deals` `mcp__cogmento__cogmento_complete_task` `mcp__cogmento__cogmento_create_case` `mcp__cogmento__cogmento_create_company` `mcp__cogmento__cogmento_create_contact` `mcp__cogmento__cogmento_create_deal` `mcp__cogmento__cogmento_create_task` `mcp__cogmento__cogmento_get_account` `mcp__cogmento__cogmento_get_case` `mcp__cogmento__cogmento_get_company` `mcp__cogmento__cogmento_get_contact` `mcp__cogmento__cogmento_get_current_user` `mcp__cogmento__cogmento_get_deal` `mcp__cogmento__cogmento_get_deal_pipeline_summary` `mcp__cogmento__cogmento_get_task` `mcp__cogmento__cogmento_get_templates` `mcp__cogmento__cogmento_list_calls` `mcp__cogmento__cogmento_list_cases` `mcp__cogmento__cogmento_list_companies` `mcp__cogmento__cogmento_list_contacts` `mcp__cogmento__cogmento_list_deal_stages` `mcp__cogmento__cogmento_list_deals` `mcp__cogmento__cogmento_list_products` `mcp__cogmento__cogmento_list_tasks` `mcp__cogmento__cogmento_set_deal_contact_stage` `mcp__cogmento__cogmento_update_record_field` | | outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | `mcp__cogmento__cogmento_create_company` `mcp__cogmento__cogmento_create_contact` | | Private data | Untrusted input | Outbound | | --- | --- | --- | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_aggregate_deals` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_aggregate_deals` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_complete_task` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_complete_task` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_case` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_case` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_company` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_company` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_contact` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_contact` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_deal` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_deal` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_task` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_task` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_account` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_account` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_case` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_case` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_contact` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_contact` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_current_user` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_current_user` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_deal` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_deal` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_deal_pipeline_summary` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_deal_pipeline_summary` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_task` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_task` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_templates` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_get_templates` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_calls` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_calls` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_cases` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_cases` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_companies` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_companies` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_contacts` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_contacts` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_deal_stages` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_deal_stages` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_deals` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_deals` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_products` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_products` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_tasks` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_list_tasks` | `mcp__cogmento__cogmento_create_contact` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_set_deal_contact_stage` | `mcp__cogmento__cogmento_create_company` | | `mcp__cogmento__cogmento_get_company` | `mcp__cogmento__cogmento_set_deal_contact_stage` | `mcp__cogmento__cogmento_create_contact` | And 418 more: every combination of one tool from each row of the table above. ## Findings No check matched anything in these tool definitions. ## Deletes or cancels (3) Removes, cancels or revokes something. Claude Code: deny. ### `cogmento_complete_task` - The description's first verb is "write": a word for a change. - The server marks it destructive (destructiveHint: true). - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text WRITE: mark a task complete, stamping who completed it and when. A recurring task also gets its next occurrence. POST /tasks/{id}/complete/. ``` ### `cogmento_set_deal_contact_stage` - The name "cogmento_set_deal_contact_stage" says "set": a word for a change. - The server marks it destructive (destructiveHint: true). - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text WRITE: record where a contact sits in a deal (a stage from cogmento_list_deal_stages). The contact is attached to the deal if it is not already. POST /deals/{id}/contact/{id}/stage/. ``` ### `cogmento_update_record_field` - The name "cogmento_update_record_field" says "update": a word for a change. - The server marks it destructive (destructiveHint: true). - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text WRITE: change a single field of a contact, company, deal, task or case, e.g. a deal's status or a contact's first_name. Custom field names come from cogmento_get_templates. System fields (id, acl, private, timestamps) are refused. PATCH //{id}/. ``` ## Changes things (6) Creates or changes something that can be changed back. Claude Code: ask. ### `cogmento_aggregate_deals` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Sums and counts deals grouped by a field (default grouping as Cogmento chooses; e.g. field=stage). GET /deals/aggregate/. ``` ### `cogmento_create_case` - The name "cogmento_create_case" says "create": a word for a change. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text WRITE: create a case. POST /cases/. ``` ### `cogmento_create_company` - The name "cogmento_create_company" says "create": a word for a change. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. - Tag outbound: The input takes a URL (input.url): a request to a URL can carry data to whoever runs it. Description, as the server wrote it: ```untrusted-server-text WRITE: create a company. POST /companies/. ``` ### `cogmento_create_contact` - The name "cogmento_create_contact" says "create": a word for a change. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. - Tag outbound: The input takes a destination (input.phone): what the tool writes goes there. Description, as the server wrote it: ```untrusted-server-text WRITE: create a contact. Needs first and last name; email and phone are optional. POST /contacts/. ``` ### `cogmento_create_deal` - The name "cogmento_create_deal" says "create": a word for a change. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text WRITE: create a deal. POST /deals/. ``` ### `cogmento_create_task` - The name "cogmento_create_task" says "create": a word for a change. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text WRITE: create a task. POST /tasks/. ``` ## Only reads (17) Looks things up and changes nothing. Claude Code: allow. ### `cogmento_get_account` - The name "cogmento_get_account" says "get": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text The Cogmento account: name, country, settings, billing plan, trial days left and number of users. GET /account/. ``` ### `cogmento_get_case` - The name "cogmento_get_case" says "get": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text One case record. GET /cases/{id}/. ``` ### `cogmento_get_company` - The name "cogmento_get_company" says "get": a word for reading. - Tag private-data: The description's first sentence says "contact": it reads contacts. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text One full company record with its contacts and related records. GET /companies/{id}/. ``` ### `cogmento_get_contact` - The name "cogmento_get_contact" says "get": a word for reading. - Tag private-data: The name "cogmento_get_contact" says "get" and "contact": it reads contacts. The description's first sentence says "contact": it reads contacts. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text One full contact record, including its related tasks, cases, calls, events and documents. GET /contacts/{id}/. ``` ### `cogmento_get_current_user` - The name "cogmento_get_current_user" says "get": a word for reading. - Tag private-data: The description's first sentence says "email": it reads mail. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. The description's first sentence says "email": it reads inbound email, which other people can write. Description, as the server wrote it: ```untrusted-server-text The Cogmento user this API token belongs to: id, name, email, timezone and account id. GET /auth/user/. ``` ### `cogmento_get_deal` - The name "cogmento_get_deal" says "get": a word for reading. - Tag private-data: The description's first sentence says "contact": it reads contacts. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text One full deal record with its contacts, products and related records. GET /deals/{id}/. ``` ### `cogmento_get_deal_pipeline_summary` - The name "cogmento_get_deal_pipeline_summary" says "get": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Totals by pipeline stage: how many deals sit at each stage and what they are worth. Optional filters narrow the deals counted. GET /deals/summary/. ``` ### `cogmento_get_task` - The name "cogmento_get_task" says "get": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text One task record. GET /tasks/{id}/. ``` ### `cogmento_get_templates` - The name "cogmento_get_templates" says "get": a word for reading. - Tag private-data: The description's first sentence says "contact": it reads contacts. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text The field definitions (names, labels, types, options) of the account's templates for each record type: contacts, companies, deals, cases, tasks. Use it to learn the custom field names for filters, creates and field updates. GET /templates/. ``` ### `cogmento_list_calls` - The name "cogmento_list_calls" says "list": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. The description's first sentence says "browser": it reads web pages, which anyone can write. Description, as the server wrote it: ```untrusted-server-text The account's call records, most recent first: logged manual calls and calls placed through the browser dialer. GET /calls/. ``` ### `cogmento_list_cases` - The name "cogmento_list_cases" says "list": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text List or search cases (support or project cases: title, close date, assigned users, deal, company). GET /cases/. ``` ### `cogmento_list_companies` - The name "cogmento_list_companies" says "list": a word for reading. - Tag private-data: The description's first sentence says "list" and "contact": it reads contacts. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. The description's first sentence says "list" and "website": it reads web pages, which anyone can write. Description, as the server wrote it: ```untrusted-server-text List or search companies (name, website, contacts). GET /companies/. ``` ### `cogmento_list_contacts` - The name "cogmento_list_contacts" says "list": a word for reading. - Tag private-data: The name "cogmento_list_contacts" says "list" and "contact": it reads contacts. The description's first sentence says "list" and "contact": it reads contacts. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. The description's first sentence says "list" and "email": it reads inbound email, which other people can write. Description, as the server wrote it: ```untrusted-server-text List or search contacts (name, email and phone channels, company). Filter on any field, e.g. first_name contains 'Eric'. GET /contacts/. ``` ### `cogmento_list_deal_stages` - The name "cogmento_list_deal_stages" says "list": a word for reading. - Tag private-data: The description's first sentence says "contact": it reads contacts. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text The account-wide stages a contact can be at within a deal (for example Champion or Decision maker). GET /deals/stages/. ``` ### `cogmento_list_deals` - The name "cogmento_list_deals" says "list": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text List or search deals (title, amount, close date, assigned users, products). GET /deals/. ``` ### `cogmento_list_products` - The name "cogmento_list_products" says "list": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text List the product catalogue (name, prices) that deals and invoices draw on. GET /products/. ``` ### `cogmento_list_tasks` - The name "cogmento_list_tasks" says "list": a word for reading. - Tag private-data: The description's first sentence says "list" and "contact": it reads contacts. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text List or search tasks (title, due date, completion date, assigned users, linked deal/contact/case). Filter e.g. on due_date. GET /tasks/. ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `cogmento`: ```json { "permissions": { "allow": [ "mcp__cogmento__cogmento_get_current_user", "mcp__cogmento__cogmento_get_account", "mcp__cogmento__cogmento_get_templates", "mcp__cogmento__cogmento_list_contacts", "mcp__cogmento__cogmento_get_contact", "mcp__cogmento__cogmento_list_companies", "mcp__cogmento__cogmento_get_company", "mcp__cogmento__cogmento_list_deals", "mcp__cogmento__cogmento_get_deal", "mcp__cogmento__cogmento_get_deal_pipeline_summary", "mcp__cogmento__cogmento_list_deal_stages", "mcp__cogmento__cogmento_list_tasks", "mcp__cogmento__cogmento_get_task", "mcp__cogmento__cogmento_list_cases", "mcp__cogmento__cogmento_get_case", "mcp__cogmento__cogmento_list_products", "mcp__cogmento__cogmento_list_calls" ], "ask": [ "mcp__cogmento__cogmento_create_contact", "mcp__cogmento__cogmento_create_company", "mcp__cogmento__cogmento_create_deal", "mcp__cogmento__cogmento_aggregate_deals", "mcp__cogmento__cogmento_create_task", "mcp__cogmento__cogmento_create_case" ], "deny": [ "mcp__cogmento__cogmento_set_deal_contact_stage", "mcp__cogmento__cogmento_complete_task", "mcp__cogmento__cogmento_update_record_field" ] } } ``` Capability tags behind the rules (a read tagged outbound is asked about): - `mcp__cogmento__cogmento_get_current_user`: private-data, untrusted-input - `mcp__cogmento__cogmento_get_account`: untrusted-input - `mcp__cogmento__cogmento_get_templates`: private-data, untrusted-input - `mcp__cogmento__cogmento_list_contacts`: private-data, untrusted-input - `mcp__cogmento__cogmento_get_contact`: private-data, untrusted-input - `mcp__cogmento__cogmento_create_contact`: untrusted-input, outbound - `mcp__cogmento__cogmento_list_companies`: private-data, untrusted-input - `mcp__cogmento__cogmento_get_company`: private-data, untrusted-input - `mcp__cogmento__cogmento_create_company`: untrusted-input, outbound - `mcp__cogmento__cogmento_list_deals`: untrusted-input - `mcp__cogmento__cogmento_get_deal`: private-data, untrusted-input - `mcp__cogmento__cogmento_create_deal`: untrusted-input - `mcp__cogmento__cogmento_get_deal_pipeline_summary`: untrusted-input - `mcp__cogmento__cogmento_aggregate_deals`: untrusted-input - `mcp__cogmento__cogmento_list_deal_stages`: private-data, untrusted-input - `mcp__cogmento__cogmento_set_deal_contact_stage`: untrusted-input - `mcp__cogmento__cogmento_list_tasks`: private-data, untrusted-input - `mcp__cogmento__cogmento_get_task`: untrusted-input - `mcp__cogmento__cogmento_create_task`: untrusted-input - `mcp__cogmento__cogmento_complete_task`: untrusted-input - `mcp__cogmento__cogmento_list_cases`: untrusted-input - `mcp__cogmento__cogmento_get_case`: untrusted-input - `mcp__cogmento__cogmento_create_case`: untrusted-input - `mcp__cogmento__cogmento_list_products`: untrusted-input - `mcp__cogmento__cogmento_list_calls`: untrusted-input - `mcp__cogmento__cogmento_update_record_field`: untrusted-input