// SCAN REPORT

Huly

218 tools. 127 can modify or destroy data without limits.

33 destructive tools with no built-in limits. Policy required.

Last updated:

127 can modify or destroy data
91 read-only
218 tools total

Community server · catalogue entry checked 03/07/2026

How to control Huly ↓

TOOL MAP

What Huly exposes to your agents

Read (91) Write / Execute (94) Destructive / Financial (33)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Huly tools

Destructive · High delete_attachment This tool irreversibly deletes data (an attachment) with no undo capability. Destructive · High delete_card Deleting a card in a project management system permanently removes data that cannot be recovered. Destructive · High delete_channel This tool irreversibly removes a channel and all associated data/communication history. Destructive · High delete_channel_message This tool irreversibly deletes data (a channel message) with no undo capability.

127 of Huly's 218 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Huly

PolicyLayer is an MCP gateway — it sits between your AI agents and Huly, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "dedup_planner_todos": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "add_attachment": {
    "limits": [
      {
        "counter": "add_attachment_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "download_attachment": {
    "limits": [
      {
        "counter": "download_attachment_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Huly — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON HULY →

Instant setup, no code required.

FULL CATALOGUE

All 218 Huly tools

DESTRUCTIVE 33 tools
Destructive dedup_planner_todos Remove duplicate Planner ToDo items that the Huly server sometimes creates more than once per issue Destructive delete_attachment Permanently delete an attachment. This action cannot be undone. Destructive delete_card Permanently delete a Huly card. This action cannot be undone. Destructive delete_channel Permanently delete a Huly channel. This action cannot be undone. Destructive delete_channel_message Permanently delete a channel message. This action cannot be undone. Destructive delete_comment Delete a comment from a Huly issue. This action cannot be undone. Destructive delete_component Permanently delete a Huly component. This action cannot be undone. Destructive delete_dm_message Permanently delete a direct-message message. The Destructive delete_document Permanently delete a Huly document. This action cannot be undone. Destructive delete_event Permanently delete a calendar event. This action cannot be undone. Destructive delete_issue Permanently delete a Huly issue. This action cannot be undone. Destructive delete_issue_template Permanently delete a Huly issue template. This action cannot be undone. Destructive delete_label Permanently delete a label/tag definition. Accepts label ID or title. This action cannot be undone. Destructive delete_milestone Permanently delete a Huly milestone. This action cannot be undone. Destructive delete_notification Permanently delete a notification. This action cannot be undone. Destructive delete_organization Permanently delete an organization identified by ID or exact name when that name is unique. Use with care - th Destructive delete_person Permanently delete a person from Huly. This action cannot be undone. Destructive delete_project Permanently delete a Huly project. All issues, milestones, and components in this project will be orphaned. Th Destructive delete_relation Remove a Relation between two documents. Idempotent: returns deleted=false if the relation no longer exists. Destructive delete_tag_category Permanently delete a tag/label category. Accepts category ID or label name. Labels in this category will be or Destructive delete_teamspace Permanently delete a Huly document teamspace. This action cannot be undone. Destructive delete_test_case Permanently delete a test case. Accepts test case ID or name. This action cannot be undone. Destructive delete_test_plan Permanently delete a test plan. This does not delete associated test runs. Cannot be undone. Destructive delete_test_result Permanently delete a test result. Cannot be undone. Destructive delete_test_run Permanently delete a test run. This does not delete associated test results. Cannot be undone. Destructive delete_test_suite Permanently delete a test suite. Accepts suite ID or name. This action cannot be undone. Destructive delete_thread_reply Permanently delete a thread reply. This action cannot be undone. Destructive delete_workspace Permanently delete the current workspace. This action cannot be undone. Use with extreme caution. Destructive remove_issue_relation Remove a relation between two issues. Mirrors add_issue_relation: Destructive remove_organization_member Unlink a person from an organization Destructive remove_reaction Remove an emoji reaction from an activity message. Destructive remove_template_child Remove a child (sub-task) template from an issue template by its child ID. Get child IDs from get_issue_templa Destructive remove_test_plan_item Remove a test case from a test plan by item ID. Get item IDs from get_test_plan.
EXECUTE 3 tools
Execute cancel_execution Cancel an in-flight Process execution by setting its status to Execute run_test_plan Execute a test plan: creates a test run and one test result per plan item. Returns the run ID and count of res Execute start_process Start a new Process execution against a card. Resolves the process by ID or display name and creates an active
WRITE 91 tools
Write add_attachment Add an attachment to a Huly object. Provide ONE of: filePath (local file - preferred), fileUrl (fetch from URL Write add_comment Add a comment to a Huly issue. Comment body supports markdown formatting. Write add_document_attachment Add an attachment to a Huly document. Convenience method that finds the document by teamspace and title/ID. Pr Write add_issue_attachment Add an attachment to a Huly issue. Convenience method that finds the issue by project and identifier. Provide Write add_issue_label Add a tag/label to a Huly issue. Creates the tag if it doesn Write add_issue_relation Add a relation between two issues. Relation types: Write add_organization_channel Add a contact channel (phone, email, website/homepage, LinkedIn, Twitter, GitHub, Facebook, Telegram) to an or Write add_organization_member Link a person as a member of an organization. The person appears under the org Write add_reaction Add an emoji reaction to an activity message. Write add_template_child Add a child (sub-task) template to an issue template. The child defines default values for sub-issues created Write add_test_plan_item Add a test case to a test plan. Resolves test case by ID or name. Optionally assign a person by email or name. Write add_thread_reply Add a reply to a message thread. Reply body supports markdown formatting. Write archive_all_notifications Archive all notifications. Returns the count of notifications archived. Write archive_notification Archive a notification. Archived notifications are hidden from the main inbox view. Write create_access_link Create a Huly workspace access link. Defaults to role GUEST. Supports anonymous reusable guest links by settin Write create_association Create a new Huly Association between two document classes. Idempotent: returns existing association if one al Write create_card Create a new card in a Huly card space. Requires a master tag (card type). Content supports markdown formattin Write create_channel Create a new channel in Huly. Returns the created channel ID and name. Write create_component Create a new component in a Huly project. Components help organize issues by area/feature. Returns the created Write create_direct_message Open a one-to-one direct-message conversation with a workspace member. The Write create_document Create a new document in a Huly teamspace. Content supports full markdown including native Mermaid diagrams ( Write create_event Create a new calendar event. Description supports markdown formatting. Optional calendarId targets a specific Write create_issue Create a new issue in a Huly project. Optionally create as a sub-issue by specifying parentIssue. Description Write create_issue_from_template Create a new issue from a template. Applies template defaults, allowing overrides for specific fields. If the Write create_issue_status Add a Huly issue workflow status idempotently by normalized name within a project type and task type scope. Ac Write create_issue_template Create a new issue template in a Huly project. Templates define default values for new issues. Optionally incl Write create_label Create a new label/tag definition in the workspace. Labels are global and can be attached to any issue. Return Write create_milestone Create a new milestone in a Huly project. Returns the created milestone ID and label. Write create_organization Create a new organization in Huly. Optionally add members by person ID or email. Fails if any requested member Write create_person Create a new person in Huly. Returns the created person ID. Write create_project Create a new Huly tracker project. Idempotent: returns existing project if one with the same identifier alread Write create_recurring_event Create a new recurring calendar event with RFC5545 RRULE rules. Description supports markdown. Optional calend Write create_relation Link two documents through an existing Association. Idempotent: returns existing relation if one already conne Write create_tag_category Create a new tag/label category. Idempotent: returns existing category if one with the same label and targetCl Write create_task_type Add a Huly issue/task type to a project type idempotently by normalized name. Copies required workflow configu Write create_teamspace Create a new Huly document teamspace. Idempotent: returns existing teamspace if one with the same name exists. Write create_test_case Create a test case attached to a suite. Requires project and suite. Defaults: type=functional, priority=medium Write create_test_plan Create a test plan in a project. Idempotent: returns existing plan if one with the same name exists (created=f Write create_test_result Create a test result in a run. Resolves test case by ID or name. Status defaults to Write create_test_run Create a test run in a project. For bulk creation from a plan, use run_test_plan instead. Write create_test_suite Create a test suite in a test project. Idempotent: returns existing suite if one with the same name exists (cr Write create_work_slot Create a scheduled work slot. Attaches a time block to a ToDo for planning purposes. Write create_workspace Create a new Huly workspace. Returns the workspace UUID and URL. Optionally specify a region. Write edit_document Edit an existing Huly document. Two content modes (mutually exclusive): (1) Write link_document_to_issue Link a Huly document to an issue. The link appears in the issue Write log_time Log time spent on a Huly issue. Records a time entry with optional description. Time value is in minutes. Write make_organization_customer Apply the Customer mixin to an organization so it appears in the Huly Leads > Customers view. Idempotent - saf Write mark_all_notifications_read Mark all unread notifications as read. Returns the count of notifications marked. Write mark_notification_read Mark a notification as read. Write move_issue Move an issue to a new parent (making it a sub-issue) or to top-level (null). Updates parent/child relationshi Write pin_attachment Pin or unpin an attachment. Write pin_notification_context Pin or unpin a notification context. Pinned contexts are highlighted in the inbox. Write remove_issue_label Remove a tag/label from a Huly issue. Detaches the label reference; does not delete the label definition. Write save_message Save/bookmark an activity message for later reference. Write send_channel_message Send a message to a Huly channel. Message body supports markdown formatting. Write send_dm_message Send a message to a direct-message conversation. The Write set_custom_field Set a custom field value on a document. Requires the document ID, class, field ID (from list_custom_fields), a Write set_issue_component Set or clear the component on a Huly issue. Pass null for component to clear it. Write set_issue_milestone Set or clear the milestone on a Huly issue. Pass null for milestone to clear it. Write start_timer Start a client-side timer on a Huly issue. Validates the issue exists and returns a start timestamp. Use log_t Write stop_timer Stop a client-side timer on a Huly issue. Returns the stop timestamp. Calculate elapsed time from start/stop t Write unlink_document_from_issue Remove a document link from an issue. Idempotent: no-op if the document is not linked. Write unsave_message Remove an activity message from saved/bookmarks. Write update_attachment Update attachment metadata (description, pinned status). Write update_card Update fields on an existing Huly card. Only provided fields are modified. Content updates support markdown. Write update_channel Update fields on an existing Huly channel. Only provided fields are modified. Write update_channel_message Update a channel message. Only the body can be modified. Write update_comment Update an existing comment on a Huly issue. Comment body supports markdown formatting. Write update_component Update fields on an existing Huly component. Only provided fields are modified. Write update_dm_message Update a direct-message message. The Write update_event Update fields on an existing calendar event. Only provided fields are modified. Description updates support ma Write update_guest_settings Update workspace guest settings. Control read-only guest access and guest sign-up permissions. Write update_issue Update fields on an existing Huly issue. Only provided fields are modified. Description updates support markdo Write update_issue_template Update fields on an existing Huly issue template. Only provided fields are modified. Write update_label Update a label/tag definition. Accepts label ID or title. Only provided fields are modified. Write update_member_role Update a workspace member Write update_milestone Update fields on an existing Huly milestone. Only provided fields are modified. Write update_notification_provider_setting Update notification provider setting. Enable or disable notifications for a specific provider. Write update_organization Update fields on an existing organization identified by ID or exact name when that name is unique. Only provid Write update_person Update fields on an existing person. Only provided fields are modified. Write update_project Update a Huly project. Only provided fields are modified. Set description to null to clear it. Write update_tag_category Update a tag/label category. Accepts category ID or label name. Only provided fields are modified. Write update_teamspace Update fields on an existing Huly document teamspace. Only provided fields are modified. Set description to nu Write update_test_case Update a test case. Accepts test case ID or name. Only provided fields are modified. Set assignee to null to u Write update_test_plan Update a test plan Write update_test_result Update a test result Write update_test_run Update a test run Write update_test_suite Update a test suite. Accepts suite ID or name. Only provided fields are modified. Write update_thread_reply Update a thread reply. Only the body can be modified. Write update_user_profile Update the current user Write upload_file Upload a file to Huly storage. Provide ONE of: filePath (local file - preferred), fileUrl (fetch from URL), or
READ 91 tools
Read download_attachment Get download URL for an attachment along with file metadata (name, type, size). Read fulltext_search Perform a global fulltext search across all Huly content. Searches issues, documents, messages, and other inde Read get_attachment Retrieve full details for a Huly attachment including download URL. Read get_card Retrieve full details for a Huly card including markdown content. Use this to view card content and metadata. Read get_channel Retrieve full details for a Huly channel including topic and member list. Read get_component Retrieve full details for a Huly component. Use this to view component content and metadata. Read get_custom_field_values Read custom field values from a document. Pass the document Read get_detailed_time_report Get detailed time breakdown for a project. Shows total time grouped by issue and by employee. Supports date ra Read get_document Retrieve full details for a Huly document including markdown content and a Read get_event Retrieve full details for a calendar event including description. Use this to view event content and metadata. Read get_issue Retrieve full details for a Huly issue including markdown description. Use this to view issue content, comment Read get_issue_template Retrieve full details for a Huly issue template including children (sub-task templates). Use this to view temp Read get_lead Retrieve full details for a Huly lead including markdown description, customer name, funnel ID and funnel name Read get_milestone Retrieve full details for a Huly milestone. Use this to view milestone content and metadata. Read get_notification Retrieve full details for a notification. Use this to view notification content and metadata. Read get_notification_context Get notification context for an entity. Returns tracking information for a specific object. Read get_organization Retrieve full details for an organization by ID or exact name when that name is unique - including city, descr Read get_person Retrieve full details for a person including contact channels. Use personId or email to identify the person. Read get_process Fetch a single Huly Process definition by ID or display name. Returns name, description, master tag, and start Read get_project Get full details of a Huly project including its statuses. Returns project name, description, archived flag, d Read get_project_type Inspect one Huly tracker project type in a single call. Accepts projectType as ID or display name; when omitte Read get_regions Get available regions for workspace creation. Returns region codes and display names. Read get_teamspace Get details for a Huly document teamspace including document count. Finds by name or ID, including archived te Read get_test_case Get a single test case by ID or name within a test project. Read get_test_plan Get test plan details including its items (test cases). Accepts plan ID or name within a project. Read get_test_result Get test result details. Accepts result ID or name. Read get_test_run Get test run details including all results. Accepts run ID or name within a project. Read get_test_suite Get a single test suite by ID or name within a test project. Returns suite details and test case count. Read get_time_report Get time tracking report for a specific Huly issue. Shows total time, estimation, remaining time, and all time Read get_unread_notification_count Get the count of unread notifications. Read get_user_profile Get the current user Read get_workspace_info Get information about the current workspace including name, URL, region, and settings. Read list_activity List activity messages for a Huly object. Returns activity sorted by date (newest first). Read list_associations List Huly Association definitions in the workspace. Each Association is a typed link between two document clas Read list_attachments List attachments on a Huly object (issue, document, etc.). Returns attachments sorted by modification date (ne Read list_calendars List writable, non-hidden calendars that can be used as create_event or create_recurring_event targets. Use th Read list_card_spaces List all Huly card spaces. Returns card spaces sorted by name. Card spaces are containers for cards. Read list_cards List cards in a Huly card space. Returns cards sorted by modification date (newest first). Supports filtering Read list_channel_messages List messages in a Huly channel. Returns messages sorted by date (newest first). Read list_channels List all Huly channels. Returns channels sorted by name. Supports filtering by archived status. Supports searc Read list_comments List comments on a Huly issue. Returns comments sorted by creation date (oldest first). Read list_components List components in a Huly project. Components organize issues by area/feature. Returns components sorted by mo Read list_custom_fields List custom field definitions in the workspace. Returns fields with their labels, types, and owner class info. Read list_direct_messages List direct message conversations in Huly. Returns conversations sorted by date (newest first). Read list_dm_messages List messages in a direct-message conversation, newest first. The Read list_documents List documents in a Huly teamspace. Returns documents sorted by modification date (newest first). Each result Read list_employees List employees (persons who are team members). Returns employees sorted by modification date (newest first). Read list_event_instances List instances of a recurring event. Returns instances sorted by date. Supports filtering by date range. Use i Read list_events List calendar events. Returns events sorted by date. Supports filtering by date range. Read list_executions List Process Executions — live or completed workflow runs against specific cards. Filter by Read list_funnels List all Huly sales funnels (lead pipelines). Returns each funnel Read list_inline_comments List inline comment threads from a Huly document. Extracts comments embedded in document content as ProseMirro Read list_issue_relations List all relations of an issue. Returns blockedBy (issues blocking this one), relations (bidirectional issue l Read list_issue_templates List issue templates in a Huly project. Templates define reusable issue configurations. Returns templates sort Read list_issues Query Huly issues with optional filters. Returns issues sorted by modification date (newest first). Supports f Read list_labels List label/tag definitions in the workspace. Labels are global (not project-scoped). Returns labels for tracke Read list_leads Query Huly leads in a funnel with optional filters. Pass the funnel ID returned by list_funnels, or a funnel n Read list_master_tags List master tags (card types) available in a Huly card space. Master tags define the type/schema of cards that Read list_mentions List @mentions of the current user in activity messages. Read list_milestones List milestones in a Huly project. Returns milestones sorted by modification date (newest first). Read list_notification_contexts List notification contexts. Returns contexts sorted by last update timestamp (newest first). Supports filterin Read list_notification_settings List notification provider settings. Returns current notification preferences. Read list_notifications List inbox notifications. Returns notifications sorted by modification date (newest first). Supports filtering Read list_organization_members List all persons who are members of an organization. Returns each member Read list_organizations List all organizations in the Huly workspace. Returns organizations sorted by modification date (newest first) Read list_person_organizations List all organizations that a person is a member of. Provide personId or email. Returns each organization Read list_persons List all persons in the Huly workspace. Returns persons sorted by modification date (newest first). Supports s Read list_processes List Huly Process definitions in the workspace. Each Process is a workflow attached to a card class (master ta Read list_project_types List Huly tracker project types/workflow templates. Returns ID, display name, descriptor, task type count, sta Read list_projects List all Huly projects. Returns projects sorted by name. Supports filtering by archived status. Read list_reactions List reactions on an activity message. Read list_recurring_events List recurring event definitions. Returns recurring events sorted by modification date (newest first). Read list_relations List Huly Relations — concrete links between documents. Filter by Read list_saved_messages List saved/bookmarked activity messages. Read list_statuses List all issue statuses for a Huly project with category info. Returns status name, isDone, isCanceled, and is Read list_tag_categories List tag/label categories in the workspace. Categories group labels (e.g., Read list_task_types List Huly issue/task types. Optionally filter by projectType ID or display name. Returns task type identity, p Read list_teamspaces List all Huly document teamspaces. Returns teamspaces sorted by name. Supports filtering by archived status. Read list_test_cases List test cases in a test project. Optional filters: suite (ID or name), assignee (name or email). Read list_test_plans List test plans in a test management project. Returns plan names and IDs. Requires project ID or name. Read list_test_projects List test management projects. Returns test projects sorted by name. These are separate from tracker projects. Read list_test_results List test results in a test run. Returns result names, statuses, and assignees. Read list_test_runs List test runs in a test management project. Returns run names, IDs, and due dates. Read list_test_suites List test suites in a test project. Accepts project ID or name. Optional parent filter for nested suites. Read list_thread_replies List replies in a message thread. Returns replies sorted by date (oldest first). Read list_time_spend_reports List all time entries across issues. Supports filtering by project and date range. Returns entries sorted by d Read list_user_statuses List Huly user presence records — who is currently online, with their account UUID and last status change time Read list_work_slots List scheduled work slots. Shows planned time blocks attached to ToDos. Supports filtering by employee and dat Read list_workspace_members List members in the current Huly workspace with their roles. Returns members with account IDs and roles. Read list_workspaces List all workspaces accessible to the current user. Returns workspace summaries sorted by last visit. Read preview_deletion Preview the impact of deleting a Huly entity before actually deleting it. Shows affected sub-entities, relatio
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1658 tools
adminautomation
Nodebench 824 tools
adminautomation
Yaver 811 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Crow 587 tools
adminautomation
Fortimanager 584 tools
adminautomation
TinyFn 572 tools
adminautomation
Mcp 571 tools
adminautomation
FAQ

Questions about Huly

Can an AI agent delete data through the Huly MCP server? +

Yes. The Huly server exposes 33 destructive tools including dedup_planner_todos, delete_attachment, delete_card. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Huly? +

The Huly server has 91 write tools including add_attachment, add_comment, add_document_attachment. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Huly.

How many tools does the Huly MCP server expose? +

218 tools across 4 categories: Destructive, Execute, Read, Write. 91 are read-only. 127 can modify, create, or delete data.

How do I enforce a policy on Huly? +

Register the Huly MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Huly tool call.

Deterministic rules across all 218 Huly tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON HULY →

Instant setup, no code required.

218 Huly tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Huly's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.