UnClick MCP Policy · 451 Tools

POLICY

How to control UnClick

PolicyLayer is an MCP gateway — it sits between your AI agents and UnClick, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "wise_create_quote": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "email_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "abuseipdb_report_ip": {
    "limits": [
      {
        "counter": "abuseipdb_report_ip_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "abn_lookup": {
    "limits": [
      {
        "counter": "abn_lookup_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register UnClick — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON UNCLICK →

Instant setup, no code required.

FULL CATALOGUE

All 451 UnClick tools

FINANCIAL 1 tools

Financial wise_create_quote Create a Wise money transfer quote.

DESTRUCTIVE 5 tools

Destructive email_delete Delete an email by UID. Destructive instapaper_action Perform an Instapaper action: get_instapaper_bookmarks, add_instapaper_bookmark, archive_bookmark, delete_book Destructive raindrop_action Perform a Raindrop.io action: search_raindrops, get_collection_raindrops, get_raindrop_collections, create_rai Destructive telegram_manage_chat Manage a Telegram chat (get info, ban, kick, etc.). Destructive vault_action Perform a vault action: vault_init, vault_store, vault_retrieve, vault_list, vault_delete, vault_rotate, vault

EXECUTE 11 tools

Execute csuite_analyze Run a C-Suite multi-perspective analysis on a business scenario. Execute mastodon_action Perform a Mastodon action: mastodon_post, mastodon_read_timeline, mastodon_reply, mastodon_boost, mastodon_fav Execute slack_action Perform a Slack action: slack_send, slack_read, slack_search, slack_thread_reply, slack_channels, slack_react, Execute text_transform Transform text (uppercase, lowercase, title case, slug, etc.). Execute unclick_call Call any UnClick tool endpoint. Specify the endpoint ID and parameters. Use unclick_search or unclick_tool_inf Execute unclick_generate_qr Generate a QR code from text or a URL. Returns base64-encoded PNG or SVG. Execute unclick_hash Compute a cryptographic hash (MD5, SHA1, SHA256, SHA512) of text. Execute unclick_parse_csv Parse a CSV string into a JSON array of rows. Execute unclick_transform_text Transform text case: upper, lower, title, sentence, camelCase, snake_case, kebab-case, PascalCase. Execute urlscan_scan Submit a URL for scanning on urlscan.io. Execute virustotal_scan_url Submit a URL for scanning on VirusTotal.

WRITE 27 tools

Write abuseipdb_report_ip Report an abusive IP address to AbuseIPDB. Write bluesky_action Perform a Bluesky action: bluesky_post, bluesky_read_feed, bluesky_reply, bluesky_like, bluesky_repost, bluesk Write clockify_action Perform a Clockify action: get_clockify_workspaces, get_time_entries, create_time_entry, get_clockify_projects Write discord_react Add a reaction to a Discord message. Write discord_send Send a message to a Discord channel. Write discord_thread Create a Discord thread. Write email_mark_read Mark an email as read. Write email_send Send an email via Gmail/IMAP. Write eventbrite_create_event Create an event on Eventbrite. Write feedly_action Perform a Feedly action: get_feedly_feeds, get_feedly_streams, search_feedly, get_feedly_categories, mark_as_r Write monica_action Perform a Monica CRM action: get_contacts, search_contacts, get_contact, create_contact, get_contact_reminders Write notion_action Perform a Notion action: search_notion, get_notion_page, get_notion_database, query_notion_database, create_no Write readwise_action Perform a Readwise action: get_readwise_highlights, get_readwise_books, get_daily_review, search_highlights, c Write reddit_comment Post a comment on Reddit. Write reddit_post Create a Reddit post. Write reddit_subscribe Subscribe to or unsubscribe from a Reddit subreddit. Write reddit_vote Vote on a Reddit post or comment. Write report_bug Report a bug or unexpected behavior encountered while using an UnClick tool. Call this whenever a tool returns Write resend_send_email Send an email using Resend. Write sendle_create_order Create a Sendle shipping order. Write splitwise_action Perform a Splitwise action: get_groups, get_expenses, get_balances, create_expense, get_friends. Write telegram_send Send a Telegram message. Write telegram_send_media Send media (photo/document/video) via Telegram. Write toggl_create_time_entry Create a new Toggl time entry. Write unclick_kv_set Store a value in the UnClick key-value store with optional TTL. Write unclick_resize_image Resize an image (provided as base64) to specified dimensions. Write unclick_shorten_url Shorten a URL using UnClick. Returns a short URL and its code.

READ 390 tools

OTHER 17 tools

Other calc_compound_interest Calculate compound interest growth. Other color_convert Convert a color between HEX, RGB, HSL, and other formats. Other convert_area Convert between area units. Other convert_data_storage Convert between data storage units. Other convert_length Convert between length units. Other convert_speed Convert between speed units. Other convert_temperature Convert between temperature units (C, F, K). Other convert_volume Convert between volume units. Other convert_weight Convert between weight/mass units. Other datetime_add_to_date Add a duration to a date. Other datetime_convert_timezone Convert a datetime from one timezone to another. Other random_flip_coin Flip a coin. Other random_roll_dice Roll dice. Other text_truncate Truncate text to a maximum length. Other unclick_color_convert Convert a color between hex, RGB, HSL, and HSV formats. Other unclick_generate_uuid Generate one or more random UUIDs (v4). Other unclick_timestamp_convert Convert a timestamp (ISO, Unix seconds, or Unix ms) to all common formats.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about UnClick

Can an AI agent move money through the UnClick MCP server? +

Yes. The UnClick server exposes 1 financial tools including wise_create_quote. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the UnClick MCP server? +

Yes. The UnClick server exposes 5 destructive tools including email_delete, instapaper_action, raindrop_action. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through UnClick? +

The UnClick server has 27 write tools including abuseipdb_report_ip, bluesky_action, clockify_action. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach UnClick.

How many tools does the UnClick MCP server expose? +

451 tools across 4 categories: Destructive, Execute, Read, Write. 390 are read-only. 61 can modify, create, or delete data.

How do I enforce a policy on UnClick? +

Register the UnClick MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

UnClick

What UnClick exposes to your agents

The most dangerous UnClick tools

How to control UnClick

All 451 UnClick tools

Related servers

Questions about UnClick

Enforce policy on every UnClick tool call.