// SCAN REPORT

ComfyUI Builder

60 tools. 24 can modify or destroy data without limits.

5 destructive tools with no built-in limits. Policy required.

Last updated: 6 Jun 2026

24 can modify or destroy data

36 read-only

60 tools total

Free to start. No card required.

TOOL MAP

Read (36) Write / Execute (19) Destructive / Financial (5)

WHAT CAN GO WRONG

Financial operations (finalize_workflow) can move real money. An agent caught in a loop could drain accounts before anyone notices.

Destructive tools (clear_queue, delete_queue_items, interrupt_execution) permanently delete resources. There is no undo. An agent calling these in a retry loop causes irreversible damage.

Write operations (add_node, apply_template, connect_nodes) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

Execute tools (build_workflow, execute_batch, execute_chain) trigger processes with side effects. Builds, notifications, workflows — all fired without throttling.

RECOMMENDED RULES

Block financial tools by default

{
  "finalize_workflow": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "clear_queue": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_node": {
    "limits": [
      {
        "counter": "add_node_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "check_compatibility": {
    "limits": [
      {
        "counter": "check_compatibility_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

ALL 60 COMFYUI BUILDER TOOLS

FINANCIAL 1 tools

Financial finalize_workflow

DESTRUCTIVE 4 tools

Destructive clear_queue Destructive delete_queue_items Destructive interrupt_execution Destructive remove_node

EXECUTE 7 tools

Execute build_workflow Execute execute_batch Execute execute_chain Execute execute_workflow Execute execute_workflow_stream Execute execute_workflow_sync Execute reload_comfyui

WRITE 12 tools

Write add_node Write apply_template Write connect_nodes Write create_template Write create_workflow Write insert_macro Write install_custom_node Write install_model Write prepare_image_for_workflow Write save_workflow Write set_node_input Write sync_nodes_to_knowledge

READ 36 tools

Read check_compatibility Read check_model_exists Read check_workflow_models Read discover_nodes_live Read download_all_outputs Read download_by_filename Read download_output Read get_error_details Read get_execution_progress Read get_execution_status Read get_generation_recommendations Read get_history Read get_last_output Read get_model_info Read get_node_info Read get_node_inputs Read get_node_outputs Read get_system_resources Read get_workflow_json Read get_workflow_models Read list_macros Read list_models Read list_node_categories Read list_node_types Read list_outputs Read list_plugins Read list_queue Read list_saved_workflows Read list_templates Read load_workflow Read reload_plugins Read search_nodes Read suggest_nodes Read suggest_template_for_checkpoint Read validate_template_params Read validate_workflow

FAQ

Can an AI agent move money through the ComfyUI Builder MCP server? +

Yes. The ComfyUI Builder server exposes 1 financial tools including finalize_workflow. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the ComfyUI Builder MCP server? +

Yes. The ComfyUI Builder server exposes 4 destructive tools including clear_queue, delete_queue_items, interrupt_execution. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through ComfyUI Builder? +

The ComfyUI Builder server has 12 write tools including add_node, apply_template, connect_nodes. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach ComfyUI Builder.

How many tools does the ComfyUI Builder MCP server expose? +

60 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 36 are read-only. 24 can modify, create, or delete data.

How do I enforce a policy on ComfyUI Builder? +

Register the ComfyUI Builder MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies for each. Same risk classification, live on your fleet in minutes.

Enforce policy on every ComfyUI Builder tool call.

Deterministic rules across all 60 ComfyUI Builder tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

SECURE COMFYUI BUILDER →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

ComfyUI Builder

// TOOL MAP

// WHAT CAN GO WRONG

// RECOMMENDED RULES

// ALL 60 COMFYUI BUILDER TOOLS

// FAQ