// SCAN REPORT

Bluesky MCP Server

21 tools. 3 can modify or destroy data without limits.

3 write tools that can modify data. Rate limits recommended.

Last updated:

3 can modify or destroy data
18 read-only
21 tools total
// TOOL MAP
Read (18) Write / Execute (3) Destructive / Financial (0)
// WHAT CAN GO WRONG
✕

Write operations (convert-url-to-uri, create-post, like-post) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

One command. Full control.

Intercept sits between your agent and Bluesky MCP Server. Every tool call checked against your policy before it executes — so your agent can do its job without breaking things.

npx -y @policylayer/intercept scan -- npx -y @brianellin/bsky-mcp-server
Scans every tool. Generates a policy. Starts enforcing.
Works with Claude Code · Cursor · Claude Desktop · Windsurf · any MCP client
// RECOMMENDED RULES
Rate limit write operations
convert-url-to-uri:
  rules:
    - rate_limit: 30/hour

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
follow-user:
  rules:
    - rate_limit: 60/minute

Controls API costs and prevents retry loops from exhausting upstream rate limits.

// ALL 21 BLUESKY MCP SERVER TOOLS
WRITE 3 tools
Write convert-url-to-uri Write create-post Write like-post
READ 18 tools
Read follow-user Read get-feed-posts Read get-followers Read get-follows Read get-liked-posts Read get-list-posts Read get-my-handle-and-did Read get-pinned-feeds Read get-post-likes Read get-post-thread Read get-profile Read get-timeline-posts Read get-trends Read get-user-posts Read list-resources Read search-feeds Read search-people Read search-posts
// FAQ
How do I prevent bulk modifications through Bluesky MCP Server? +

The Bluesky MCP Server server has 3 write tools including convert-url-to-uri, create-post, like-post. Set rate limits in your policy file -- for example, rate_limit: 10/hour prevents an agent from making more than 10 modifications per hour. Intercept enforces this at the transport layer.

How many tools does the Bluesky MCP Server MCP server expose? +

21 tools across 2 categories: Read, Write. 18 are read-only. 3 can modify, create, or delete data.

How do I add Intercept to my Bluesky MCP Server setup? +

One line change. Instead of running the Bluesky MCP Server server directly, prefix it with Intercept: intercept -c brianellin-bsky-mcp-server.yaml -- npx -y @brianellin/bsky-mcp-server. Download a pre-built policy from policylayer.com/policies/brianellin-bsky-mcp-server and adjust the limits to match your use case.

policylayer/intercept

Control every MCP tool call
your agent makes.

Set budgets, approvals, and hard limits across MCP servers.

npx -y @policylayer/intercept init
Protect your agent in 30 seconds. Scans your MCP config and generates enforcement policies for every server.
// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.