// SCAN REPORT

MLB Stats Server

46 tools. 4 can modify or destroy data without limits.

4 write tools that can modify data. Rate limits recommended.

Last updated:

4 can modify or destroy data
42 read-only
46 tools total
// TOOL MAP
Read (42) Write / Execute (4) Destructive / Financial (0)
// WHAT CAN GO WRONG
✕

Write operations (create_bb_profile_plot, create_spraychart_plot, create_strike_zone_plot) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

One command. Full control.

Intercept sits between your agent and MLB Stats Server. Every tool call checked against your policy before it executes — so your agent can do its job without breaking things.

npx -y @policylayer/intercept scan -- npx -y @etweisberg/mlb-mcp
Scans every tool. Generates a policy. Starts enforcing.
Works with Claude Code · Cursor · Claude Desktop · Windsurf · any MCP client
// RECOMMENDED RULES
Rate limit write operations
create_bb_profile_plot:
  rules:
    - rate_limit: 30/hour

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
get_available_endpoints:
  rules:
    - rate_limit: 60/minute

Controls API costs and prevents retry loops from exhausting upstream rate limits.

// ALL 46 MLB STATS SERVER TOOLS
WRITE 4 tools
Write create_bb_profile_plot Write create_spraychart_plot Write create_strike_zone_plot Write create_teams_plot
READ 42 tools
Read get_available_endpoints Read get_boxscore Read get_game_highlight_data Read get_game_pace Read get_game_scoring_play_data Read get_last_game Read get_league_leader_data Read get_linescore Read get_meta Read get_next_game Read get_notes Read get_pitching_stats Read get_pitching_stats_bref Read get_pitching_stats_range Read get_player_splits Read get_player_stats Read get_playerid_lookup Read get_pybaseball_standings Read get_schedule Read get_schedule_and_record Read get_standings Read get_statcast_batter_data Read get_statcast_batter_exitvelo_barrels Read get_statcast_batter_expected_stats Read get_statcast_batter_percentile_ranks Read get_statcast_batter_pitch_arsenal Read get_statcast_data Read get_statcast_pitcher_data Read get_statcast_pitcher_exitvelo_barrels Read get_statcast_pitcher_expected_stats Read get_statcast_pitcher_percentile_ranks Read get_statcast_pitcher_pitch_arsenal Read get_statcast_single_game Read get_stats Read get_team_batting Read get_team_fielding Read get_team_leaders Read get_team_pitching Read get_team_roster Read get_top_prospects Read lookup_player Read reverse_lookup_player
// FAQ
How do I prevent bulk modifications through MLB Stats Server? +

The MLB Stats Server server has 4 write tools including create_bb_profile_plot, create_spraychart_plot, create_strike_zone_plot. Set rate limits in your policy file -- for example, rate_limit: 10/hour prevents an agent from making more than 10 modifications per hour. Intercept enforces this at the transport layer.

How many tools does the MLB Stats Server MCP server expose? +

46 tools across 2 categories: Read, Write. 42 are read-only. 4 can modify, create, or delete data.

How do I add Intercept to my MLB Stats Server setup? +

One line change. Instead of running the MLB Stats Server server directly, prefix it with Intercept: intercept -c etweisberg-mlb-mcp.yaml -- npx -y @etweisberg/mlb-mcp. Download a pre-built policy from policylayer.com/policies/etweisberg-mlb-mcp and adjust the limits to match your use case.

policylayer/intercept

Control every MCP tool call
your agent makes.

Set budgets, approvals, and hard limits across MCP servers.

npx -y @policylayer/intercept init
Protect your agent in 30 seconds. Scans your MCP config and generates enforcement policies for every server.
// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.