// SCAN REPORT

Airtable User MCP

37 tools. 27 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated:

27 can modify or destroy data
10 read-only
37 tools total
// TOOL MAP
Read (10) Write / Execute (23) Destructive / Financial (4)
// WHAT CAN GO WRONG
✕

Destructive tools (delete_field, delete_table, delete_view) permanently delete resources. There is no undo. An agent calling these in a retry loop causes irreversible damage.

✕

Write operations (apply_view_sorts, create_extension, create_extension_dashboard) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

One command. Full control.

Intercept sits between your agent and Airtable User MCP. Every tool call checked against your policy before it executes — so your agent can do its job without breaking things.

npx -y @policylayer/intercept scan -- npx -y @airtable-user-mcp
Scans every tool. Generates a policy. Starts enforcing.
Works with Claude Code · Cursor · Claude Desktop · Windsurf · any MCP client
// RECOMMENDED RULES
Deny destructive operations
delete_field:
  rules:
    - action: deny

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
apply_view_sorts:
  rules:
    - rate_limit: 30/hour

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
duplicate_view:
  rules:
    - rate_limit: 60/minute

Controls API costs and prevents retry loops from exhausting upstream rate limits.

// ALL 37 AIRTABLE USER MCP TOOLS
DESTRUCTIVE 4 tools
Destructive delete_field Destructive delete_table Destructive delete_view Destructive remove_extension
WRITE 23 tools
Write apply_view_sorts Write create_extension Write create_extension_dashboard Write create_field Write create_formula_field Write create_table Write create_view Write duplicate_extension Write duplicate_field Write install_extension Write manage_tools Write rename_extension Write rename_field Write rename_table Write rename_view Write update_extension_state Write update_field_config Write update_field_description Write update_formula_field Write update_view_description Write update_view_filters Write update_view_group_levels Write update_view_row_height
READ 10 tools
Read duplicate_view Read get_base_schema Read get_table_schema Read get_view Read list_fields Read list_tables Read list_views Read reorder_view_fields Read show_or_hide_view_columns Read validate_formula
// FAQ
Can an AI agent delete data through the Airtable User MCP MCP server? +

Yes. The Airtable User MCP server exposes 4 destructive tools including delete_field, delete_table, delete_view. These permanently remove resources with no undo. Intercept blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Airtable User MCP? +

The Airtable User MCP server has 23 write tools including apply_view_sorts, create_extension, create_extension_dashboard. Set rate limits in your policy file -- for example, rate_limit: 10/hour prevents an agent from making more than 10 modifications per hour. Intercept enforces this at the transport layer.

How many tools does the Airtable User MCP MCP server expose? +

37 tools across 3 categories: Destructive, Read, Write. 10 are read-only. 27 can modify, create, or delete data.

How do I add Intercept to my Airtable User MCP setup? +

One line change. Instead of running the Airtable User MCP server directly, prefix it with Intercept: intercept -c airtable-user-mcp.yaml -- npx -y @airtable-user-mcp. Download a pre-built policy from policylayer.com/policies/airtable-user-mcp and adjust the limits to match your use case.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies available for each. Same risk classification, same one-command setup.

Mcp Api 310 tools
admin
Aibtc 288 tools
admin
Google Super 200 tools
admin
Trello 200 tools
admin
Propresenter 177 tools
admin
Leaper Vision Toolkit 169 tools
admin
Apiosk 160 tools
admin
Mcp Sitecore 153 tools
admin
policylayer/intercept

Control every MCP tool call
your agent makes.

Set budgets, approvals, and hard limits across MCP servers.

npx -y @policylayer/intercept init
Protect your agent in 30 seconds. Scans your MCP config and generates enforcement policies for every server.
// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.