VaultAssist

79 tools. 45 can modify or destroy data without limits.

10 destructive tools with no built-in limits. Policy required.

Last updated:

45 can modify or destroy data
34 read-only
79 tools total

Community server · catalogue entry verified 12/06/2026

How to control VaultAssist ↓

What VaultAssist exposes to your agents

Read (34) Write / Execute (33) Destructive / Financial (10)
Critical Risk

The most dangerous VaultAssist tools

45 of VaultAssist's 79 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control VaultAssist

PolicyLayer is an MCP gateway — it sits between your AI agents and VaultAssist, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "batch_delete_gmail_emails": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "find_and_replace_doc": {
    "limits": [
      {
        "counter": "find_and_replace_doc_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "about": {
    "limits": [
      {
        "counter": "about_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register VaultAssist — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON VAULTASSIST →

Free to start. No card required.

All 79 VaultAssist tools

WRITE 33 tools
Write find_and_replace_doc Find and replace text throughout a Google Doc Write get_or_create_gmail_label Get an existing label or create it if it doesn Write batch_modify_gmail_emails Modify multiple emails at once Write batch_update_doc Execute multiple document operations in a single atomic batch update Write batch_update_presentation Apply batch updates to a Google Slides presentation Write create_doc Create a new Google Doc and optionally insert initial content Write create_drive_file Create a new file in Google Drive, with content or from a URL Write create_event Create a new event in a Google Calendar Write create_form Create a new Google Form Write create_gmail_label Create a new Gmail label Write create_presentation Create a new Google Slides presentation Write create_sheet Create a new sheet within an existing spreadsheet Write create_spreadsheet Create a new Google Spreadsheet Write create_table_with_data Create a table and populate it with data in one reliable operation Write create_task Create a new task in a task list Write create_task_list Create a new task list Write draft_gmail_email Create a draft email using Gmail API Write insert_doc_elements Insert structural elements like tables, lists, or page breaks Write insert_doc_image Insert an image into a Google Doc from Drive or URL Write memory_add_observations Add new observations, details, or information to existing entities in the user Write memory_create_entities Create and store multiple new entities in the user Write memory_create_relations Create and store multiple new relationships between entities in the user Write modify_doc_text Modify text in a Google Doc - insert/replace text and/or apply formatting Write modify_event Modify an existing event in a Google Calendar Write modify_gmail_email Modify email labels Write modify_sheet_values Modify values in a specific range of a Google Sheet - can write, update, or clear values Write move_task Move a task to a different position or parent within the same list, or to a different list Write send_gmail_email Send an email using Gmail API with advanced options Write set_publish_settings Update the publish settings of a Google Form Write update_doc_headers_footers Update headers or footers in a Google Doc Write update_gmail_label Update an existing Gmail label Write update_task Update an existing task Write update_task_list Update an existing task list
READ 34 tools
Read about Get information about this MCP server Read debug_table_structure Essential debugging tool for table layout and cell positions Read echo Echo a message back to the user Read get_doc_content Retrieve content of a Google Doc or Drive file (.docx, etc.) Read get_drive_file_content Retrieve the content of a specific Google Drive file by ID Read get_event Get details of a single event by its ID from a Google Calendar Read get_events List events from a specified Google Calendar within a time range Read get_form Get details of a Google Form including questions and settings Read get_form_response Get a single response from a Google Form Read get_page Get details about a specific page (slide) in a presentation Read get_page_thumbnail Generate a thumbnail URL for a specific page (slide) in a presentation Read get_presentation Get details about a Google Slides presentation Read get_spreadsheet_info Get information about a specific spreadsheet including its sheets Read get_task Get details of a specific task Read get_task_list Get details of a specific task list Read get_user_info Get information about the authenticated user Read inspect_doc_structure Essential tool for finding safe insertion points and understanding document structure Read list_calendars List all calendars accessible to the authenticated user Read list_docs_in_folder List Google Docs within a specific Drive folder Read list_drive_items List files and folders in a specific Google Drive folder Read list_form_responses List all responses from a Google Form with pagination Read list_gmail_labels List all Gmail labels Read list_spreadsheets List spreadsheets from Google Drive that the user has access to Read list_task_lists List all task lists for the user Read list_tasks List all tasks in a specific task list Read memory_read_graph Read and retrieve the entire user Read memory_search_nodes Search and find nodes in the user Read read_gmail_email Read an email by its message ID Read read_sheet_values Read values from a specific range in a Google Sheet Read search_docs Search for Google Docs by name using Drive API Read search_drive_files Search files and folders in Google Drive using query syntax Read search_gmail_emails Search emails using Gmail query syntax Read validate Validate and format a phone number from environment variables Read memory_open_nodes Open and retrieve specific nodes in the user

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about VaultAssist

Can an AI agent delete data through the VaultAssist MCP server? +

Yes. The VaultAssist server exposes 10 destructive tools including batch_delete_gmail_emails, clear_completed_tasks, delete_event. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through VaultAssist? +

The VaultAssist server has 33 write tools including find_and_replace_doc, get_or_create_gmail_label, batch_modify_gmail_emails. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach VaultAssist.

How many tools does the VaultAssist MCP server expose? +

79 tools across 3 categories: Destructive, Read, Write. 34 are read-only. 45 can modify, create, or delete data.

How do I enforce a policy on VaultAssist? +

Register the VaultAssist MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every VaultAssist tool call.

Deterministic rules across all 79 VaultAssist tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Free to start. No card required.

79 VaultAssist tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.