// SCAN REPORT

Servicialo

111 tools. 55 can modify or destroy data without limits.

14 destructive tools with no built-in limits. Policy required.

Last updated: 16 Aug 2026

55 can modify or destroy data

56 read-only

111 tools total

Community server · catalogue entry checked 16/08/2026 · full schemas captured for 111 of 111 tools

How to control Servicialo ↓

TOOL MAP

What Servicialo exposes to your agents

Read (56) Write / Execute (41) Destructive / Financial (14)

Running more than one server? Check your whole stack →

CONTEXT-WINDOW COST

What Servicialo costs in tokens

18,603 tokens of tool definitions, loaded on every request

9.3% of a 200k context window

561 heaviest tool: reminders_update_config

Full per-tool breakdown → Model it in the token calculator →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Servicialo tools

Financial · Critical booking_cancel This tool cancels a booking and by default triggers a financial penalty transaction based on the cancellation policy. Financial · High cierre_crear_cliente This tool creates an immutable financial snapshot (monthly closing) for a client. Financial · Critical finance_create_cobro This tool directly creates a financial charge against a client, which constitutes a financial obligation. Financial · Critical finance_create_venta This tool creates a financial sale transaction and may automatically generate a charge (payment obligation) against a client.

55 of Servicialo's 111 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Servicialo

PolicyLayer is an MCP gateway — it sits between your AI agents and Servicialo, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "booking_cancel": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "agendas_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "admin_create_service": {
    "limits": [
      {
        "counter": "admin_create_service_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "admin_list_providers": {
    "limits": [
      {
        "counter": "admin_list_providers_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Servicialo — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SERVICIALO →

Instant setup, no code required.

FULL CATALOGUE

All 111 Servicialo tools

FINANCIAL 7 tools

Financial booking_cancel Cancel an existing session. By default applies the org cancellation policy: the charge is computed from the no Financial cierre_crear_cliente Create a client monthly closing (immutable financial snapshot). Requires historialCompleto=true on the client. Financial cierre_distribuir_utilidades Distribute profits for a closed period. Freezes the current period and all prior open periods. Requires the pe Financial finance_create_cobro Create a manual charge (cobro) for a client. Not linked to a sale/venta. Requires confirm: true. Financial finance_create_venta Create a service sale (venta) for a client. Optionally auto-creates a charge (cobro) depending on org configur Financial finance_register_payment Register a manual payment against an existing charge (cobro). Updates cobro status automatically. Requires con Financial finance_send_confirmations Send pending confirmation digest to clients. Groups all pending_confirmation charges by client and sends a sin

DESTRUCTIVE 7 tools

Destructive agendas_delete Delete a public agenda permanently. Cascades to related sessions booked through this agenda, comments, and ser Destructive cierre_cerrar_org Close the organizational period. Requires ALL active clients with historialCompleto=true to be closed first. F Destructive cierre_eliminar_cliente Delete (reopen) a client closing. Only allowed if the organizational period is not frozen. Requires confirm: t Destructive email_domain_delete Remove the configured email sending domain from the organization. This deletes it from both Resend and the dat Destructive portal_cancel_reschedule_request Cancel a pending reschedule request (SessionRequest) on behalf of the client who proposed it — the client-side Destructive portal_session_cancel Cancel a client's session on behalf of the client (client-initiated cancellation: cancelledBy=client). Allowed Destructive public_booking_cancel Cancel a public booking using the bookingToken. Only works for bookings in pending_confirmation, scheduled, or

EXECUTE 3 tools

Execute comms_send_campaign Execute a draft or scheduled campaign. Sends messages to all matching recipients asynchronously, skipping reci Execute email_domain_verify Trigger DNS verification for the configured email domain and return updated status. Call this after the organi Execute lifecycle_transition Execute a state transition on a session. Accepts either to_state (target state name per Servicialo spec: confi

WRITE 38 tools

Write admin_create_service Add a bookable service to an organization. Use after admin_create_organization. Auto-discoverable by default. Write admin_set_availability Replace the weekly availability schedule for a provider (not additive — overwrites all existing blocks). Get p Write admin_toggle_discoverable Toggle the LIFECYCLE flags isPublic and servicialoPublished. ⚠️ This tool does NOT grant public discovery cons Write agendas_create Create a public agenda — a shareable booking page where external clients can self-book appointments. Links to Write agendas_update Update a public agenda’s configuration. Partial update — only provided fields are changed. Supports modifying: Write booking_create Create a new session/appointment for a client. providerId is optional — if omitted, the system auto-assigns a Write booking_create_recurring Create recurring sessions (e.g. weekly therapy). Generates multiple individual sessions linked by a recurrence Write booking_reschedule Reschedule a session to a new time. Cancels the original and creates a new one. Requires confirm: true. Write booking_resolve_request Approve or reject a pending reschedule request (SessionRequest) that a client proposed from the portal — close Write booking_update_status Advance a session through the Servicialo lifecycle: confirm, start, complete, or mark as no-show. NOTE: the "d Write client_create Create a new client in the organization. If a Person with the same email exists, it will be linked (not duplic Write client_update Update an existing client's personal data. Email cannot be changed via MCP. Write comms_create_campaign Create a new email campaign with HTML body to send to a segmented audience. Supports variable substitution: {n Write comms_render_message Render a communication template as a visual image (PNG). Available templates: session-confirmation, session-re Write comms_send_message Send a single WhatsApp or email message to a specific client. Use templateKey for predefined templates or cust Write comms_update_preferences Enable or disable communication channels and features for an organization. Partial update — only provided fiel Write dunning_configure Update dunning (payment recovery) configuration for an organization. All fields except organizationSlug are op Write email_domain_register Register a custom email sending domain for an organization via Resend. Returns DNS records that must be config Write members_invite Invite a new member to the organization by email. Sends an invitation email. Requires confirm: true. Write org_update Update organization profile fields: name, description, logo URL, or vertical. Only provided fields are updated Write portal_propose_reschedule Propose a new time for a session on behalf of the client — opens the bilateral coordination loop by creating a Write portal_report_session Report, on behalf of the client, that the professional did not show up (reason=provider_no_show) or that the s Write portal_session_confirm Confirm a client's attendance to their session, on behalf of the client (e.g. the client called or messaged th Write provider_create Create a new provider in the organization. Links or creates a Person record by email. Write provider_update Update provider data: status, commission, coverage areas, permissions. Write public_booking_confirm Confirm a pending public booking using the confirmationToken returned by public_booking_create. Advances the b Write public_booking_create Create a public booking request. Does NOT require an API key, but DOES require: (1) requester identity — fullN Write public_booking_reschedule Reschedule a public booking using the bookingToken. Cancels the original and creates a new pending_confirmatio Write reminders_update_config Update reminder/notification configuration for an organization. Partial update — only provided sections are ch Write scheduling_book Book a session (Servicialo spec). Returns confirmation_credential (opaque token, valid 30 min) and booking_id. Write scheduling_cancel Cancel a session through the Servicialo protocol lane. Moves the session to cancelled and emits sc_service.can Write scheduling_confirm Confirm a booking (Servicialo spec). Dual-mode: (1) with credential — uses the confirmation token from schedul Write scheduling_reschedule Reschedule a session to a new time (Servicialo spec). Cancels the original session and creates a new one at th Write service_assign_provider Assign or unassign a provider to/from a service. Controls which providers can deliver which services. Write service_create Create a new bookable service in an existing organization. Use this for day-to-day service management (require Write service_update Update an existing service (price, duration, status, etc.). Creates a price history entry if price changes. De Write session_note_upsert Create or update the clinical note (ficha) of a session: evolution, treatmentPerformed, nextSessionPlan, type Write settings_update Update organization settings. Partial update — only provided keys are changed. Pass a settings object with key

READ 56 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Servicialo

Can an AI agent move money through the Servicialo MCP server? +

Yes. The Servicialo server exposes 7 financial tools including booking_cancel, cierre_crear_cliente, cierre_distribuir_utilidades. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Servicialo MCP server? +

Yes. The Servicialo server exposes 7 destructive tools including agendas_delete, cierre_cerrar_org, cierre_eliminar_cliente. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Servicialo? +

The Servicialo server has 38 write tools including admin_create_service, admin_set_availability, admin_toggle_discoverable. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Servicialo.

How many tools does the Servicialo MCP server expose? +

111 tools across 3 categories: Destructive, Read, Write. 56 are read-only. 55 can modify, create, or delete data.

How do I enforce a policy on Servicialo? +

Register the Servicialo MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Servicialo tool call.

Deterministic rules across all 111 Servicialo tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SERVICIALO →

Instant setup, no code required.

111 Servicialo tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Servicialo's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →