// SCAN REPORT

Mcp Server

160 tools. 88 can modify or destroy data without limits.

20 destructive tools with no built-in limits. Policy required.

Last updated: 6 Jun 2026

88 can modify or destroy data

72 read-only

160 tools total

Free to start. No card required.

TOOL MAP

Read (72) Write / Execute (68) Destructive / Financial (20)

WHAT CAN GO WRONG

Destructive tools (cancel_order, clear_app_cache, delete_attribute) permanently delete resources. There is no undo. An agent calling these in a retry loop causes irreversible damage.

Write operations (activate_license_key, add_cart_item, attach_customer_to_company) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

Execute tools (deploy_demo_catalog) trigger processes with side effects. Builds, notifications, workflows — all fired without throttling.

RECOMMENDED RULES

Deny destructive operations

{
  "cancel_order": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "activate_license_key": {
    "limits": [
      {
        "counter": "activate_license_key_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "calculate_tax": {
    "limits": [
      {
        "counter": "calculate_tax_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

ALL 160 MCP SERVER TOOLS

EXECUTE 1 tools

Execute deploy_demo_catalog

WRITE 67 tools

Write activate_license_key Write add_cart_item Write attach_customer_to_company Write attach_variation_attributes Write bulk_create_attribute_values Write bulk_create_attributes Write bulk_create_brands Write bulk_create_categories Write bulk_create_companies Write bulk_create_customers Write bulk_create_orders Write bulk_create_products Write bulk_update_stock Write bulk_upsert_prices Write checkout Write create_attribute Write create_attribute_group Write create_attribute_value Write create_automation_flow Write create_billing_address Write create_brand Write create_category Write create_company Write create_company_address Write create_coupon Write create_customer Write create_customer_full Write create_event_subscription Write create_notification Write create_order Write create_order_comment Write create_product Write create_product_tier_price Write create_shipping_address Write generate_license_keys Write generate_product_variations Write link_customer_to_company Write preview_checkout Write register Write resume_event_subscription Write send_notification Write set_company_attributes Write set_customer_attributes Write set_entity_attributes Write set_order_attributes Write set_primary_media Write set_product_attributes Write update_attribute Write update_attribute_group Write update_attribute_value Write update_billing_address Write update_brand Write update_cart_item Write update_category Write update_company Write update_coupon Write update_customer Write update_event_subscription Write update_order Write update_order_line_items Write update_order_status Write update_product Write update_shipping_address Write upload_media Write upsert_cart Write upsert_product

READ 72 tools

Read calculate_tax Read detach_customer_from_company Read get_attribute Read get_attribute_group Read get_attribute_value Read get_automation_flow Read get_brand Read get_cart Read get_cart_price_rule Read get_category Read get_company Read get_company_attributes Read get_coupon Read get_customer Read get_customer_attributes Read get_dashboard_layout Read get_entity_attributes Read get_event_delivery_log Read get_event_subscription Read get_flow_run Read get_license_key Read get_media Read get_notification Read get_notification_stats Read get_order Read get_order_attributes Read get_product Read get_product_attributes Read get_rule_condition_schema Read get_settings_config Read list_attribute_group_types Read list_attribute_groups Read list_attribute_values Read list_attributes Read list_automation_flows Read list_available_automation_actions Read list_available_automation_triggers Read list_available_events Read list_billing_methods Read list_brands Read list_cart_price_rules Read list_cart_validation_rules Read list_carts Read list_companies Read list_company_customers Read list_countries Read list_coupons Read list_currencies Read list_customer_addresses Read list_customers Read list_dashboard_widgets Read list_event_delivery_logs Read list_event_subscriptions Read list_flow_runs Read list_license_keys Read list_locales Read list_media Read list_notification_types Read list_notifications Read list_orders Read list_product_variations Read list_products Read list_roles Read list_settings_config Read list_shipping_methods Read pause_event_subscription Read search_companies Read search_customers Read search_products Read test_event_subscription Read validate_license_key

FAQ

Can an AI agent delete data through the Mcp Server MCP server? +

Yes. The Mcp Server server exposes 20 destructive tools including cancel_order, clear_app_cache, delete_attribute. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Mcp Server? +

The Mcp Server server has 67 write tools including activate_license_key, add_cart_item, attach_customer_to_company. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Mcp Server.

How many tools does the Mcp Server MCP server expose? +

160 tools across 4 categories: Destructive, Execute, Read, Write. 72 are read-only. 88 can modify, create, or delete data.

How do I enforce a policy on Mcp Server? +

Register the Mcp Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies for each. Same risk classification, live on your fleet in minutes.

Enforce policy on every Mcp Server tool call.

Deterministic rules across all 160 Mcp Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

SECURE MCP SERVER →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

Mcp Server

// TOOL MAP

// WHAT CAN GO WRONG

// RECOMMENDED RULES

// ALL 160 MCP SERVER TOOLS

// FAQ