// SCAN REPORT

Delimit

207 tools. 57 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 28 Jun 2026

57 can modify or destroy data

150 read-only

207 tools total

Community server · catalogue entry checked 28/06/2026

How to control Delimit ↓

TOOL MAP

What Delimit exposes to your agents

Read (150) Write / Execute (38) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Delimit tools

Destructive · High delimit_ledger_auto_cancel_stale The name implies automatically cancelling stale ledger entries, which is likely an irreversible destructive operation. Destructive · Critical delimit_secret_revoke Revoking a secret (API key, token, credential) is an irreversible destructive action — once revoked, dependent services or agents relying on that secret will lose access and the secret cannot be 'un-revoked'. Destructive · High delimit_intel_dataset_freeze The name implies a destructive or locking operation on a dataset ('freeze'), which could be irreversible. Destructive · High delimit_release_rollback A release rollback typically overwrites or reverts a currently deployed release to a prior version, which is generally not easily undone and can affect running systems.

57 of Delimit's 207 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Delimit

PolicyLayer is an MCP gateway — it sits between your AI agents and Delimit, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delimit_intel_dataset_freeze": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "delimit_activate": {
    "limits": [
      {
        "counter": "delimit_activate_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "delimit_agent_check": {
    "limits": [
      {
        "counter": "delimit_agent_check_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Delimit — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON DELIMIT →

Instant setup, no code required.

FULL CATALOGUE

All 207 Delimit tools

DESTRUCTIVE 4 tools

Destructive delimit_intel_dataset_freeze delimit_intel_dataset_freeze Destructive delimit_ledger_auto_cancel_stale delimit_ledger_auto_cancel_stale Destructive delimit_release_rollback delimit_release_rollback Destructive delimit_secret_revoke delimit_secret_revoke

EXECUTE 13 tools

Execute delimit_build_loop delimit_build_loop Execute delimit_build_loop_daemon delimit_build_loop_daemon Execute delimit_daemon_run delimit_daemon_run Execute delimit_deploy_build delimit_deploy_build Execute delimit_deploy_npm delimit_deploy_npm Execute delimit_deploy_plan delimit_deploy_plan Execute delimit_deploy_publish delimit_deploy_publish Execute delimit_deploy_rollback delimit_deploy_rollback Execute delimit_deploy_site delimit_deploy_site Execute delimit_deploy_verify delimit_deploy_verify Execute delimit_executor delimit_executor Execute delimit_gov_run delimit_gov_run Execute delimit_story_build delimit_story_build

WRITE 25 tools

Write delimit_activate delimit_activate Write delimit_agent_complete delimit_agent_complete Write delimit_config_import delimit_config_import Write delimit_content_publish delimit_content_publish Write delimit_content_schedule delimit_content_schedule Write delimit_context_write delimit_context_write Write delimit_design_generate_component delimit_design_generate_component Write delimit_design_generate_tailwind delimit_design_generate_tailwind Write delimit_generate_scaffold delimit_generate_scaffold Write delimit_generate_template delimit_generate_template Write delimit_gov_new_task delimit_gov_new_task Write delimit_handoff_create delimit_handoff_create Write delimit_intel_dataset_register delimit_intel_dataset_register Write delimit_intel_snapshot_ingest delimit_intel_snapshot_ingest Write delimit_ledger_add delimit_ledger_add Write delimit_ledger_update delimit_ledger_update Write delimit_memory_store delimit_memory_store Write delimit_os_plan delimit_os_plan Write delimit_release_plan delimit_release_plan Write delimit_sensor_github_issue delimit_sensor_github_issue Write delimit_social_approve delimit_social_approve Write delimit_social_generate delimit_social_generate Write delimit_social_post delimit_social_post Write delimit_story_generate delimit_story_generate Write delimit_task_complete delimit_task_complete

READ 150 tools

Read delimit_agent_check delimit_agent_check Read delimit_agent_dashboard delimit_agent_dashboard Read delimit_agent_dispatch delimit_agent_dispatch Read delimit_agent_handoff delimit_agent_handoff Read delimit_agent_link delimit_agent_link Read delimit_agent_policy delimit_agent_policy Read delimit_agent_status delimit_agent_status Read delimit_audit delimit_audit Read delimit_changelog delimit_changelog Read delimit_collision_check delimit_collision_check Read delimit_config_export delimit_config_export Read delimit_content_intel_daily delimit_content_intel_daily Read delimit_content_intel_topic delimit_content_intel_topic Read delimit_content_intel_weekly delimit_content_intel_weekly Read delimit_context_branch delimit_context_branch Read delimit_context_init delimit_context_init Read delimit_context_list delimit_context_list Read delimit_context_read delimit_context_read Read delimit_context_snapshot delimit_context_snapshot Read delimit_corp_dashboard delimit_corp_dashboard Read delimit_cost_analyze delimit_cost_analyze Read delimit_cost_controls delimit_cost_controls Read delimit_cost_optimize delimit_cost_optimize Read delimit_daemon_classify delimit_daemon_classify Read delimit_daemon_status delimit_daemon_status Read delimit_data_backup delimit_data_backup Read delimit_data_migrate delimit_data_migrate Read delimit_data_validate delimit_data_validate Read delimit_deliberate delimit_deliberate Read delimit_deliberation_status delimit_deliberation_status Read delimit_deploy_status delimit_deploy_status Read delimit_design_extract_tokens delimit_design_extract_tokens Read delimit_design_validate_responsive delimit_design_validate_responsive Read delimit_diagnose delimit_diagnose Read delimit_diff delimit_diff Read delimit_diff_report delimit_diff_report Read delimit_digest delimit_digest Read delimit_docs_generate delimit_docs_generate Read delimit_docs_validate delimit_docs_validate Read delimit_drift_check delimit_drift_check Read delimit_drift_history delimit_drift_history Read delimit_evidence_collect delimit_evidence_collect Read delimit_evidence_verify delimit_evidence_verify Read delimit_explain delimit_explain Read delimit_external_pr_check delimit_external_pr_check Read delimit_github_scan delimit_github_scan Read delimit_gov_evaluate delimit_gov_evaluate Read delimit_gov_health delimit_gov_health Read delimit_gov_policy delimit_gov_policy Read delimit_gov_status delimit_gov_status Read delimit_gov_verify delimit_gov_verify Read delimit_handoff_acknowledge delimit_handoff_acknowledge Read delimit_handoff_list delimit_handoff_list Read delimit_handoff_preflight delimit_handoff_preflight Read delimit_heartbeat_check delimit_heartbeat_check Read delimit_help delimit_help Read delimit_hot_reload delimit_hot_reload Read delimit_impact delimit_impact Read delimit_inbox_daemon delimit_inbox_daemon Read delimit_init delimit_init Read delimit_intel_dataset_list delimit_intel_dataset_list Read delimit_intel_query delimit_intel_query Read delimit_ledger delimit_ledger Read delimit_ledger_bulk delimit_ledger_bulk Read delimit_ledger_context delimit_ledger_context Read delimit_ledger_done delimit_ledger_done Read delimit_ledger_health delimit_ledger_health Read delimit_ledger_link delimit_ledger_link Read delimit_ledger_links delimit_ledger_links Read delimit_ledger_list delimit_ledger_list Read delimit_ledger_propose delimit_ledger_propose Read delimit_ledger_query delimit_ledger_query Read delimit_license_status delimit_license_status Read delimit_lint delimit_lint Read delimit_loop_config delimit_loop_config Read delimit_loop_status delimit_loop_status Read delimit_memory_index delimit_memory_index Read delimit_memory_recent delimit_memory_recent Read delimit_memory_search delimit_memory_search Read delimit_models delimit_models Read delimit_next_task delimit_next_task Read delimit_notify delimit_notify Read delimit_notify_inbox delimit_notify_inbox Read delimit_notify_routing delimit_notify_routing Read delimit_obs_alerts delimit_obs_alerts Read delimit_obs_logs delimit_obs_logs Read delimit_obs_metrics delimit_obs_metrics Read delimit_obs_status delimit_obs_status Read delimit_os_gates delimit_os_gates Read delimit_os_status delimit_os_status Read delimit_outreach_loop_tick delimit_outreach_loop_tick Read delimit_playbook delimit_playbook Read delimit_policy delimit_policy Read delimit_project_config delimit_project_config Read delimit_prompt_drift delimit_prompt_drift Read delimit_redact delimit_redact Read delimit_reddit_fetch_thread delimit_reddit_fetch_thread Read delimit_reddit_scan delimit_reddit_scan Read delimit_release_history delimit_release_history Read delimit_release_status delimit_release_status Read delimit_release_sync delimit_release_sync Read delimit_repo_analyze delimit_repo_analyze Read delimit_repo_config_audit delimit_repo_config_audit Read delimit_repo_config_validate delimit_repo_config_validate Read delimit_repo_diagnose delimit_repo_diagnose Read delimit_resource_get delimit_resource_get Read delimit_resource_list delimit_resource_list Read delimit_review delimit_review Read delimit_revive delimit_revive Read delimit_scan delimit_scan Read delimit_screen_record delimit_screen_record Read delimit_screenshot delimit_screenshot Read delimit_seal_verify delimit_seal_verify Read delimit_secret_access_log delimit_secret_access_log Read delimit_secret_get delimit_secret_get Read delimit_secret_list delimit_secret_list Read delimit_secret_store delimit_secret_store Read delimit_security_audit delimit_security_audit Read delimit_security_deliberate delimit_security_deliberate Read delimit_security_ingest delimit_security_ingest Read delimit_security_scan delimit_security_scan Read delimit_self_repair_daemon delimit_self_repair_daemon Read delimit_sense delimit_sense Read delimit_sensor_github_migrations delimit_sensor_github_migrations Read delimit_session_handoff delimit_session_handoff Read delimit_session_history delimit_session_history Read delimit_siem delimit_siem Read delimit_social_history delimit_social_history Read delimit_social_target_config delimit_social_target_config Read delimit_soul_capture delimit_soul_capture Read delimit_spec_health delimit_spec_health Read delimit_story_accessibility delimit_story_accessibility Read delimit_story_visual_test delimit_story_visual_test Read delimit_substantive_content_check delimit_substantive_content_check Read delimit_swarm delimit_swarm Read delimit_tdqs_lint delimit_tdqs_lint Read delimit_test_coverage delimit_test_coverage Read delimit_test_generate delimit_test_generate Read delimit_test_smoke delimit_test_smoke Read delimit_toolcard_cache delimit_toolcard_cache Read delimit_tracker_sync delimit_tracker_sync Read delimit_vault_health delimit_vault_health Read delimit_vault_search delimit_vault_search Read delimit_vault_snapshot delimit_vault_snapshot Read delimit_vendor_news_draft delimit_vendor_news_draft Read delimit_vendor_news_health delimit_vendor_news_health Read delimit_vendor_news_scan delimit_vendor_news_scan Read delimit_version delimit_version Read delimit_work_orders delimit_work_orders Read delimit_x_fetch delimit_x_fetch

OTHER 15 tools

Other delimit_content_queue delimit_content_queue Other delimit_control delimit_control Other delimit_cost_alert delimit_cost_alert Other delimit_design_component_library delimit_design_component_library Other delimit_ledger_auto_close_external delimit_ledger_auto_close_external Other delimit_ledger_groom delimit_ledger_groom Other delimit_quickstart delimit_quickstart Other delimit_resource_drivers delimit_resource_drivers Other delimit_semver delimit_semver Other delimit_social_accounts delimit_social_accounts Other delimit_social_daemon delimit_social_daemon Other delimit_social_target delimit_social_target Other delimit_ventures delimit_ventures Other delimit_webhook_manage delimit_webhook_manage Other delimit_zero_spec delimit_zero_spec

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Delimit

Can an AI agent delete data through the Delimit MCP server? +

Yes. The Delimit server exposes 4 destructive tools including delimit_intel_dataset_freeze, delimit_ledger_auto_cancel_stale, delimit_release_rollback. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Delimit? +

The Delimit server has 25 write tools including delimit_activate, delimit_agent_complete, delimit_config_import. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Delimit.

How many tools does the Delimit MCP server expose? +

207 tools across 4 categories: Destructive, Execute, Read, Write. 150 are read-only. 57 can modify, create, or delete data.

How do I enforce a policy on Delimit? +

Register the Delimit MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Delimit tool call.

Deterministic rules across all 207 Delimit tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON DELIMIT →

Instant setup, no code required.

207 Delimit tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Delimit's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →