New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice

0nmcp

218 tools. 109 can modify or destroy data without limits.

13 destructive tools with no built-in limits. Policy required.

Last updated:

109 can modify or destroy data
109 read-only
218 tools total

Community server · catalogue entry checked 17/08/2026

How to control 0nmcp ↓

What 0nmcp exposes to your agents

Read (109) Write / Execute (96) Destructive / Financial (13)
Critical Risk

The most dangerous 0nmcp tools

109 of 0nmcp's 218 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control 0nmcp

PolicyLayer is an MCP gateway — it sits between your AI agents and 0nmcp, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "ai_bench": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "crm_marketplace_delete_charge": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "brain_build": {
    "limits": [
      {
        "counter": "brain_build_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "ai_models": {
    "limits": [
      {
        "counter": "ai_models_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register 0nmcp — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON 0NMCP →

Instant setup, no code required.

All 218 0nmcp tools

EXECUTE 25 tools
Execute ai_chat Chat with your local Llama model. Zero cost, fully private. Supports multi-turn conversation, system prompts, Execute ai_embed Create text embeddings locally using Ollama. Free, private. Useful for: semantic search, similarity matching, Execute ai_generate One-shot text generation with local Llama. No conversation context. Good for: summarization, code generation, Execute api_call Make a direct API call to any connected service. For advanced use when you need fine-grained control beyond th Execute app_build Build a .0n application bundle — a portable encrypted file containing endpoints, workflows, operations, automa Execute app_open Open a .0n application bundle file. Decrypts and extracts the application for local use. Example: app_open({ Execute brain_compile Compile a trained brain into a portable .brain file. The .brain file can be imported into any app on any LLM. Execute brain_import Import a .brain file and extract its system prompt for use in any LLM. Can import from file path or raw JSON. Execute brain_train Run scenario-based training on a brain. Executes each scenario against the brain Execute council_debate Have AI providers critique each other Execute council_solve Full multi-AI problem-solving pipeline: 1. Ask all AIs the question (parallel) 2. Have them critique each othe Execute crm_build_ai_workflow Build and deploy a complete AI Workflow (Agent Studio agent) from a natural language description. Creates the Execute crm_deploy_snapshot Deploy a full snapshot — pipeline, tags, custom values, and workflow definitions — in a single operation. Execute crm_run_ai_workflow Execute an AI Workflow (Agent Studio agent). Send a message and get a response. Maintains conversation context Execute execute Execute any task using connected services. The AI orchestrator automatically: 1. Parses your intent from natur Execute flow_run_now Fire one action immediately — no flow, no enrollment, no schedule. Useful for one-shot sends ( Execute landing_pages_deploy POST the rendered HTML to Vercel as a single-file static deployment. Returns the live URL. Requires VERCEL_TOK Execute plugin_build Build a plugin from a service key or custom spec. If building from catalog, returns the plugin Execute plugin_execute Execute a plugin endpoint with automatic .0n field resolution. Accepts canonical .0n fields (email.0n, fullnam Execute rc_sequence_to_user_workflow Mirror an rc_sequence into user_workflows so the customer can edit / run / schedule it from the onork-app /das Execute run_workflow Execute a pre-defined .0n workflow file. Workflows are deterministic, step-by-step automations stored in ~/.0n Execute site_run Execute a plan that a human has approved. Runs only the legs carried in the signed plan. A plan can be run on Execute training_feed Manage the 0nAI training feed — continuous data ingestion from verified public sources. Fetches from ${FEED_SO Execute vault_container_escrow_unwrap Unwrap a 0nVault container using an escrow party Execute vault_unseal Decrypt a service
WRITE 71 tools
Write brain_build Add knowledge, reasoning patterns, behavior rules, or skills to a brain. Layers: knowledge — concepts, fac Write brain_create Create a new brain project. A brain is a portable AI behavior package with knowledge, reasoning patterns, beha Write connect_service Connect a service so the orchestrator can use it. Each service requires specific credentials. Examples: - Str Write crm_create_custom_values Create custom values in a CRM sub-account. Write crm_create_email_template Create a new email template. Returns a redirect URL to the CRM email builder where the template can be visuall Write crm_create_pipeline Create a pipeline with stages in a CRM sub-account. Write crm_create_tags Bulk create tags in a CRM sub-account. Write crm_exchange_token Exchange an OAuth authorization code for access and refresh tokens. Write crm_form_upload_file Upload a file to a contact Write crm_generate_course Generate a full AI course and import it into a CRM location. Provide the topic, audience, and desired structur Write crm_media_create_folder Create a new folder in the CRM media library. Write crm_media_rename Rename a file or folder in the CRM media library. Write crm_media_upload Upload a file to the CRM media library. Provide a hosted URL or file data. Max 25MB. Write crm_oauth_connect Store OAuth tokens for a CRM location after OAuth callback. This enables auto-auth for all CRM tools on that l Write crm_process_workflow Process a workflow JSON definition. Creates tags and custom values, returns workflow JSON ready for builder in Write crm_refresh_token Refresh an expired CRM access token. Write crm_saas_update_location_rebilling Update rebilling/pricing configuration for a specific sub-account location via SDK. Write crm_send_email Send an email to a contact. Supports HTML body, templates, attachments, CC/BCC, threading, and scheduling. Write deed_accept Accept a Business Deed transfer — buyer signs acceptance with chain of custody. Creates a new deed container w Write deed_create Create a Business Deed — package an entire business Write deed_import Import a Business Deed — decrypt and write credentials to live system config. Writes .0n connection files, .en Write disconnect_service Disconnect a connected service. Removes stored credentials. Write dispatch_import Verify a pasted .0n file and return its parsed body so the host can mount the contained capabilities. The payl Write dr_account_create Provision a Detect & Refine tenant. Returns the account_id (acct_<hex>) to bake into the embed snippet, plus t Write dr_account_update Update mutable fields on an account: status, tier, quota, allowed_origins, sheet_id, sheet OAuth refresh token Write dr_export_to_sheet Append graded sessions to a Google Sheet. Customer creates a sheet, shares it with the OAuth account, and past Write dr_grade Score a session via rule-based engine + Groq refinement. Two modes: pass session_id to load metrics from DB an Write dr_send_google_ads_conversion Send an offline conversion to Google Ads (OCI v17). Required creds: customer_id, conversion_action_resource ( Write dr_send_linkedin_conversion Send a LinkedIn Conversions API event. Required: access_token, conversion_id (or conversion_urn). LinkedIn CAP Write dr_send_meta_conversion Send a Meta CAPI event (Facebook/Instagram). Required creds: pixel_id, access_token. Recommended: hashed user_ Write dr_send_tiktok_event Send a TikTok Events API event. Required creds: pixel_code, access_token. Optional test_event_code for sandbox Write dr_send_x_event Send an X (Twitter) Conversion API event. Required creds: event_id (X Ads conversion event id), access_token. Write engine_bundle Full pipeline: import credentials from file → map to services → create encrypted .0n bundle. Combines engine_i Write engine_export Export connected services as a portable .0n bundle file. The bundle is encrypted with a passphrase (portable — Write engine_import Import and map credentials from a .env, CSV, or JSON file. Auto-detects which of 26 supported services each cr Write engine_open Open a .0n bundle file and extract connections to this machine. Decrypts credentials and saves as individual . Write engine_platforms Generate MCP server configuration for AI platforms. Supports: Claude Desktop, Cursor, Windsurf, Gemini, Contin Write factory_archive Archive a spawned app — flips status to Write factory_spawn Spawn a new sub-app at https://www.0ncore.com/apps/<slug> by composing one or more capabilities from the brain Write flow_create Create or upsert a 0nFlow — a reusable scheduled workflow that runs across time. Each flow is a sequence of st Write knowledge_base The knowledge base that grounds the AI surfaces — read it, or add a document. Adding is a WRITE, and it chang Write landing_pages_generate AI-fill the sections of a theme using the user\ Write plugin_create Generate a new custom plugin spec for a service not in the catalog. Auto-infers capabilities from endpoints an Write pwd_install Generate the exact shadcn-CLI install command for one or more 0n components. Supports npm, pnpm, yarn, and bun Write rc_form_create Generate a new form from a goal description. Pass Write rc_form_publish Flip the form to published — required before it will render via the embed. Write rc_form_submit Record a form submission and (when sequence_id is bound) enroll the email into the follow-up sequence. Honeypo Write rc_form_update Patch a form. Use to tweak headline, subheadline, fields, colors, or sequence binding. Pass only fields you wa Write rc_form_variants_generate Use Groq to generate N alternative variants of a form Write rc_page_create AI-generate a landing page from a goal. Returns the page id (rcp_) plus a spec with hero / value_props / featu Write rc_page_publish Flip a landing page to published. Required before /p/<slug> renders it. Write rc_page_update Patch a landing page — spec, name, slug, form_id binding, status. Pass only the fields you want to change. Write rc_page_variants_generate Use Groq to generate N alternative variants of the page Write rc_sequence_create Create an email follow-up sequence. Steps are an array of { delay_seconds, subject, body, type } where type de Write reddit_bulk_post Queue multiple posts for delayed submission. Even in auto mode, posts are spaced 10+ minutes apart. This is th Write reddit_confirm_comment Confirm and submit a comment that was previewed in manual mode. Write reddit_confirm_post Confirm and submit a post that was previewed in manual mode. Requires the confirmToken from reddit_submit_post Write reddit_post_comment Post a comment or reply on Reddit. In MANUAL mode: Returns preview for confirmation. In AUTO mode: Posts with Write reddit_set_mode Set Reddit posting mode. MANUAL is default and recommended. AUTO mode requires double confirmation — you must Write reddit_submit_post Submit a text or link post to a Reddit subreddit. In MANUAL mode: Returns a preview with confirmation token. C Write shadcn_install_command Generate the exact shell command to install a shadcn component. Supports npm, pnpm, yarn, and bun. Pass multip Write site_plan Plan a publish. Returns a signed plan and a preview — it does NOT write anything. Use for: - publishing a gen Write sxo_optimize Rewrite a published post to improve its SXO score. Analyzes the current content, identifies weaknesses, and re Write sxo_write Write an SXO-optimized blog post using the self-improving content engine. Each post learns from the performanc Write training_dataset Create or manage training datasets — named collections of pairs. Example: training_dataset({ action: Write training_ingest Ingest raw training material from files, memory, code, or text. Stores in training_sources table for later pai Write training_review Review and approve/reject training pairs. Example: training_review({ pair_id: Write ucp_checkout Start a Stripe checkout session for a UCP product. Returns the hosted checkout URL the buyer needs to visit. Write vault_container_create Create a new 0nVault container with semantically-layered encryption. 7 available layers: workflows, credential Write vault_container_escrow_create Generate escrow keypairs for multi-party vault access. Creates X25519 keypairs for each party. Each party gets Write vault_seal Encrypt a service
READ 109 tools
Read ai_models Manage local AI models. List installed, pull new ones, get model info. Example: ai_models({ action: Read app_inspect Inspect a .0n application bundle without passphrase. Shows metadata, endpoints, workflows, and automations. E Read app_list List installed .0n applications from ~/.0n/apps/. Example: app_list({}) Read app_validate Validate a .0n application bundle Read brain_list List all brain projects with their status and training scores. Example: brain_list({}) Example: brain_list({ Read brand_defender Brand-defence status: impersonation, misuse and lookalike signals across the web. Read-only by default. Pass Read content_pipeline The content pipeline: what is drafted, scheduled and published, plus the topic queue. Read-only. Publishing g Read council_ask Ask multiple AI providers the same question simultaneously. Sends the prompt to all available AIs (GPT-4o, Gem Read council_config Check which AI providers are available for the Multi-AI Council. Shows which API keys are set and which provid Read crm_auth_url Generate the OAuth authorization URL for connecting a CRM sub-account. Read crm_decrypt_user_context Decrypt encrypted user session data from a CRM marketplace app embed. Returns userId, companyId, locationId, e Read crm_generate_warmup_schedule Generate an IP warm-up schedule for a new email sending domain. Returns a day-by-day plan with volume targets, Read crm_get_template_preview_url Get the preview URL for a CRM email template. This URL can be loaded in an iframe to show the template visuall Read crm_list_ai_workflows List all AI Workflows (Agent Studio agents) for a location with their status, version, and execution stats. Read crm_list_courses List all courses/products in a CRM location. Read crm_list_email_campaigns List email campaigns for a location with optional stats. Shows campaign name, status, open/click rates. Read crm_list_email_templates List all email templates for a location. Returns template names, preview URLs, and IDs for selection in campai Read crm_list_pipelines List all pipelines and their stages in a CRM sub-account. Read crm_list_workflows List all workflows in a CRM sub-account. Read crm_marketplace_get_charges List all marketplace charges for a location. Shows charge history, amounts, and status. Read crm_marketplace_has_funds Check if a location has sufficient funds for a marketplace charge. Use before attempting to charge. Read crm_marketplace_installer_details Get installer details for a marketplace app — which locations have it installed, installation status, and conf Read crm_marketplace_rebilling_config Get the rebilling/subscription config for an app at a specific location. Shows pricing plans, usage limits, an Read crm_media_list List files and folders from the CRM media library. Supports pagination, search, and folder browsing. Read crm_oauth_resolve Resolve a working access token for a location. Auto-refreshes if expired, falls back to PIT if no OAuth. Use t Read crm_oauth_status Show OAuth connection status for all CRM locations. Shows which have OAuth tokens and which are using PIT fall Read crm_saas_get_company_info Get agency company details — name, settings, billing configuration. Read crm_sdk_form_submissions Get form submissions with search, pagination, and date filtering. Returns field values, contact info, and even Read crm_sdk_survey_submissions Get survey submissions with search, pagination, and date filtering. Returns respondent data, answers, and meta Read deed_inspect Inspect a Business Deed without decrypting. Shows business name, services, layer info, seal verification, and Read deed_open Open and decrypt a Business Deed (.0nv file). Verifies Ed25519 signature and Seal of Truth, then decrypts all Read deed_verify Verify a Business Deed Read dispatch_ecosystem Fetch the current ecosystem map (repos, Supabase projects, Vercel projects) from https://www.0ncore.com/api/di Read dispatch_pull Pull the full signed .0n bundle from https://www.0ncore.com/api/dispatch, verify each section Read dispatch_rules Fetch the current rule list from https://www.0ncore.com/api/dispatch/rules. Returns numbered, categorized rule Read dispatch_verify Verify an inline .0n file payload against the live dispatch pubkey. Returns { valid, type, source_sha, key_id, Read dispatch_version Return the current dispatch SHA + last commit metadata. Read dr_account_get Fetch a single account by id. Returns null if not found. Sensitive credential blob is masked unless include_cr Read dr_account_list List Detect & Refine accounts. Filter by status or owner_email. Returns up to limit (default 100, max 1000). S Read dr_fanout_grade Take a graded session and fan the offline-conversion signal to whichever ad network the click came from. Looks Read dr_get_grade Fetch the latest grade for a session_id, click_id, or click_id_value (e.g. a specific gclid). Returns null if Read dr_get_rollup Aggregate stats: counts by grade (A+/A/B/C/D/F/X), by network, and by routed action. Defaults to last 500 rows Read dr_track Ingest a Detect & Refine behavioral beacon. Validates account_id (when provided), checks origin allowlist, con Read engine_verify Verify API credentials by making lightweight test calls to each service. All verification calls are read-only Read factory_capabilities Return the canonical list of capabilities a factory app can compose (brain registry slugs). Read factory_get Fetch a single spawned app by slug. Read factory_list List spawned apps. Defaults to live apps for mike@rocketopp.com unless specified. Returns each row with its p Read flow_enroll Enroll a contact into a 0nFlow. Materializes every step in the flow as a scheduled flow_step; the cron at /api Read get_service_info Get detailed information about a specific service — capabilities, endpoints, and required credentials. Read landing_pages_list_themes Return the curated registry of shadcn-based themes, with names, source, fonts, and section blueprints. Read landing_pages_render Take a theme + filled content and produce a single, deployable HTML file with Tailwind classes inlined and sha Read list_available_services List all services that can be connected, grouped by category. Read list_connections List all connected services, their types, and capability counts. Read list_workflows List all .0n workflow files deployed to ~/.0n/workflows/. Read patent_alerts Open patent alerts — findings escalated as worth a human look. Read-only. Read patent_findings List patent-intelligence findings — prior art and filings that may bear on the 0n patents. Read-only. Use bef Read patent_scan Run a patent-intelligence scan. THIS PERFORMS WORK — external searches, and it writes findings. Not free and Read plugin_inspect Inspect a plugin Read plugin_list List all available plugins — catalog services + custom plugins from ~/.0n/plugins/. Shows connection status, e Read pwd_categories List the categories in the 0n registry with item counts. Use this to discover what Read pwd_get Fetch the full registry schema for one 0n component — including the source code that the shadcn CLI will write Read pwd_list List every Programmatic Website Design Component published on the 0n registry at 0nmcp.com/r. Returns name, ti Read pwd_search Search the 0n component registry by free-text query. Matches against name, title, description, and use cases. Read rc_form_get Fetch a single form by id. Includes all variants. Read rc_form_list List forms for an account. Filter by status; default returns all but draft if status omitted. Read rc_form_render Server-side render spec for a form. Returns the merged variant (control + bandit pick), the JSON shape the emb Read rc_form_variant_pick Pick a variant for an impression using Thompson sampling over the bandit posteriors. Returns the variant id + Read rc_page_get Fetch a single landing page with all variants. Read rc_page_list List landing pages for an account. Read rc_page_render Server-side render spec for a landing page. Picks a variant via Thompson sampling and returns the merged spec Read rc_sequence_enroll Enroll an email into a sequence. Records the enrollment locally; if the sequence is bound to a CRM workflow + Read rc_sequence_get Fetch a sequence by id. Read reddit_engine_status Reddit Growth Engine dashboard: queued posts, monitored subreddits and performance. Read-only status. The pos Read reddit_get_mode Get the current Reddit posting mode and safety status. Returns: current mode (manual/auto), rate limit status, Read reddit_get_posts Get hot, new, or top posts from a subreddit. Read reddit_get_profile Get the authenticated Reddit user Read reddit_get_subreddit_rules Get the rules for a subreddit. ALWAYS check rules before posting. Read reddit_monitor_keywords Search Reddit for keyword mentions. Useful for brand monitoring, competitor tracking, and finding relevant con Read reddit_search Search Reddit posts and comments by keyword, subreddit, or topic. Read search_indexing Search-indexing status across the family sites, and optionally submit URLs for indexing. Submitting is a WRIT Read service_catalog The service catalogue behind 0nMCP — every service, and whether it is enabled. Read-only. Read shadcn_get_component Fetch the live JSON schema for a shadcn component from ui.shadcn.com. Returns files, registry dependencies, np Read shadcn_init Return the exact shell commands to bootstrap shadcn/ui in a fresh Next.js project. Includes init, theme setup, Read shadcn_list_blocks List curated block patterns — common UI sections built from multiple shadcn primitives. Each block lists the p Read shadcn_list_components List every shadcn/ui component in the official registry, grouped by purpose. Returns name, group (action/input Read shadcn_recommend Given a free-text description of what you Read shadcn_registry_browse Browse all items in one shadcn.io registry category, paginated. Best when you know which category to look in ( Read shadcn_registry_categories List every category in the live shadcn.io community registry, with item counts. The community registry is much Read shadcn_registry_get Fetch the full schema of one shadcn.io registry item — including files, dependencies, registry deps, and sourc Read shadcn_registry_search Search the full shadcn.io community registry by keyword across all 7,732 items. Returns ranked matches with ti Read shadcn_search Search shadcn components by name or description keyword. Returns ranked matches with a relevance score. Read site_render Turn a page design into finished HTML. Three targets, and the difference is not cosmetic: - Read site_targets Check what a client account can actually receive, before promising anything. Reports whether the location has Read sitemap_stats Sitemap coverage: how many pages exist, are indexable, and are actually indexed. Read-only. Read sxo_score Score any content against SXO criteria. Returns: BLUF compliance, Table Trap, Information Gain, heading archit Read training_export Export a training dataset as a fine-tuning JSONL file. Supports Anthropic, OpenAI, Alpaca, and ShareGPT format Read training_generate Generate training pairs (system/user/assistant) from ingested sources. Creates high-quality Q&A pairs formatte Read training_score Score training pairs against rubrics for quality assessment. Example: training_score({ pair_id: Read training_search Search training sources and pairs by keyword or domain. Example: training_search({ query: Read training_stats Get analytics for the 0nAI Training Center. Example: training_stats({}) Read ucp_catalog Browse a merchant Read ucp_discover Fetch a merchant Read ucp_orders List orders. Defaults to all orders for the calling key (server-side). Pass customer_email to scope to one buy Read vault_container_inspect Inspect a 0nVault container without decrypting. Shows metadata, layer names, seal verification, signature stat Read vault_container_open Open and decrypt a 0nVault container (.0nv file). Verifies Ed25519 signature and Seal of Truth before decrypti Read vault_container_verify Verify a 0nVault container Read vault_fingerprint Show your machine Read vault_verify Check a sealed connection Read vendor_registry Vendors and the integrations behind them. Read-only.

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about 0nmcp

Can an AI agent move money through the 0n MCP server? +

Yes. The 0nmcp server exposes 6 financial tools including ai_bench, crm_create_payment_config, crm_marketplace_charge. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the 0n MCP server? +

Yes. The 0nmcp server exposes 7 destructive tools including crm_marketplace_delete_charge, crm_marketplace_uninstall, crm_media_bulk_delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through 0nmcp? +

The 0nmcp server has 71 write tools including brain_build, brain_create, connect_service. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach 0nmcp.

How many tools does the 0n MCP server expose? +

218 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 109 are read-only. 109 can modify, create, or delete data.

How do I enforce a policy on 0nmcp? +

Register the 0n MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every 0nmcp tool call.

Deterministic rules across all 218 0nmcp tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

218 0nmcp tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from 0n's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.