// SCAN REPORT

0nmcp

407 tools. 221 can modify or destroy data without limits.

57 destructive tools with no built-in limits. Policy required.

Last updated: 6 Jun 2026

221 can modify or destroy data

186 read-only

407 tools total

Free to start. No card required.

TOOL MAP

Read (186) Write / Execute (164) Destructive / Financial (57)

WHAT CAN GO WRONG

Financial operations (crm_create_payment_config, crm_create_payment_integration, crm_marketplace_charge) can move real money. An agent caught in a loop could drain accounts before anyone notices.

Destructive tools (crm_bulk_delete_social_posts, crm_cancel_scheduled_message, crm_delete_agent) permanently delete resources. There is no undo. An agent calling these in a retry loop causes irreversible damage.

Write operations (ai_embed, ai_generate, ai_models) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

Execute tools (api_call, app_build, brain_build) trigger processes with side effects. Builds, notifications, workflows — all fired without throttling.

RECOMMENDED RULES

Block financial tools by default

{
  "crm_create_payment_config": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "crm_bulk_delete_social_posts": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "ai_embed": {
    "limits": [
      {
        "counter": "ai_embed_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ai_bench": {
    "limits": [
      {
        "counter": "ai_bench_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

ALL 407 0NMCP TOOLS

FINANCIAL 6 tools

Financial crm_create_payment_config Financial crm_create_payment_integration Financial crm_marketplace_charge Financial crm_marketplace_delete_charge Financial crm_send_invoice Financial vault_container_transfer

DESTRUCTIVE 51 tools

EXECUTE 14 tools

Execute api_call Execute app_build Execute brain_build Execute brain_compile Execute brain_train Execute crm_build_ai_workflow Execute crm_deploy_snapshot Execute crm_execute_agent Execute crm_run_ai_workflow Execute crm_start_social_oauth Execute execute Execute plugin_build Execute plugin_execute Execute run_workflow

WRITE 150 tools

Write ai_embed Write ai_generate Write ai_models Write app_open Write brain_create Write brain_import Write connect_service Write council_config Write crm_add_contact_followers Write crm_add_contact_tags Write crm_add_contact_to_workflow Write crm_add_opportunity_followers Write crm_auto_payment_schedule Write crm_bulk_disable_saas Write crm_bulk_enable_saas Write crm_connect_custom_provider Write crm_create_agent Write crm_create_appointment Write crm_create_association Write crm_create_blocked_slot Write crm_create_blog Write crm_create_blog_author Write crm_create_blog_category Write crm_create_blog_post Write crm_create_business Write crm_create_calendar Write crm_create_calendar_group Write crm_create_calendar_resource Write crm_create_contact Write crm_create_contact_note Write crm_create_contact_task Write crm_create_conversation Write crm_create_coupon Write crm_create_custom_field Write crm_create_custom_value Write crm_create_custom_values Write crm_create_email_template Write crm_create_event Write crm_create_invoice Write crm_create_invoice_schedule Write crm_create_invoice_template Write crm_create_knowledge_base Write crm_create_location_tag Write crm_create_object_record Write crm_create_object_schema Write crm_create_opportunity Write crm_create_pipeline Write crm_create_price Write crm_create_product Write crm_create_redirect Write crm_create_relation Write crm_create_snapshot_share_link Write crm_create_social_category Write crm_create_social_post Write crm_create_tags Write crm_create_trigger_link Write crm_create_user Write crm_create_voice_action Write crm_create_voice_agent Write crm_disconnect_custom_provider Write crm_enable_saas_location Write crm_form_upload_file Write crm_generate_course Write crm_generate_invoice_number Write crm_generate_warmup_schedule Write crm_import_courses Write crm_import_social_csv Write crm_media_create_folder Write crm_media_rename Write crm_media_upload Write crm_oauth_connect Write crm_oauth_resolve Write crm_promote_agent Write crm_saas_bulk_disable Write crm_saas_enable Write crm_saas_generate_payment_link Write crm_saas_update_location_rebilling Write crm_saas_update_rebilling Write crm_save_email Write crm_send_email Write crm_send_message Write crm_set_social_accounts Write crm_update_agent Write crm_update_agent_metadata Write crm_update_appointment Write crm_update_association Write crm_update_blocked_slot Write crm_update_blog Write crm_update_blog_author Write crm_update_blog_category Write crm_update_blog_post Write crm_update_business Write crm_update_calendar Write crm_update_calendar_group Write crm_update_calendar_resource Write crm_update_contact Write crm_update_contact_note Write crm_update_contact_task Write crm_update_conversation Write crm_update_coupon Write crm_update_custom_field Write crm_update_custom_value Write crm_update_email Write crm_update_event Write crm_update_invoice Write crm_update_invoice_schedule Write crm_update_invoice_template Write crm_update_knowledge_base Write crm_update_location Write crm_update_location_tag Write crm_update_message_status Write crm_update_object_record Write crm_update_object_schema Write crm_update_opportunity Write crm_update_opportunity_status Write crm_update_phone_number Write crm_update_pipeline Write crm_update_price Write crm_update_product Write crm_update_redirect Write crm_update_saas_rebilling Write crm_update_saas_subscription Write crm_update_social_category Write crm_update_social_post Write crm_update_trigger_link Write crm_update_user Write crm_update_voice_action Write crm_update_voice_agent Write crm_upload_form_custom_files Write crm_upload_media_file Write crm_upload_message_attachment Write crm_upsert_contact Write crm_upsert_opportunity Write deed_create Write deed_import Write deed_open Write disconnect_service Write engine_bundle Write engine_export Write engine_import Write engine_open Write plugin_create Write sxo_write Write training_dataset Write training_export Write training_feed Write training_generate Write vault_container_create Write vault_container_escrow_create Write vault_container_open

READ 186 tools

Read ai_bench Read ai_chat Read app_inspect Read app_list Read app_validate Read brain_list Read council_ask Read council_debate Read council_solve Read crm_auth_url Read crm_check_blog_slug Read crm_count_funnel_pages Read crm_decrypt_user_context Read crm_exchange_token Read crm_funnel_redirect_lookup_by_id Read crm_get_agent Read crm_get_appointment Read crm_get_association Read crm_get_blog Read crm_get_blog_post Read crm_get_business Read crm_get_calendar Read crm_get_calendar_resource Read crm_get_company Read crm_get_contact Read crm_get_contact_appointments Read crm_get_contact_by_business Read crm_get_contact_campaigns Read crm_get_contact_notes Read crm_get_contact_tasks Read crm_get_conversation Read crm_get_coupon Read crm_get_custom_field Read crm_get_custom_value Read crm_get_email Read crm_get_email_by_thread Read crm_get_event Read crm_get_form_submissions Read crm_get_free_slots Read crm_get_invoice Read crm_get_invoice_schedule Read crm_get_invoice_template Read crm_get_knowledge_base Read crm_get_location Read crm_get_location_snippet Read crm_get_location_tag Read crm_get_message Read crm_get_object_record Read crm_get_object_schema Read crm_get_opportunity Read crm_get_order Read crm_get_pipeline Read crm_get_price Read crm_get_product Read crm_get_saas_agency_plans Read crm_get_saas_locations_by_stripe Read crm_get_saas_plan Read crm_get_saas_subscription Read crm_get_snapshot_last_push Read crm_get_snapshot_push_status Read crm_get_social_csv Read crm_get_social_post Read crm_get_subscription Read crm_get_survey_submissions Read crm_get_template Read crm_get_template_preview_url Read crm_get_transaction Read crm_get_user Read crm_get_voice_action Read crm_get_voice_agent Read crm_get_voice_call_log Read crm_get_workflow Read crm_list_active_numbers Read crm_list_agents Read crm_list_ai_workflows Read crm_list_associations Read crm_list_blog_authors Read crm_list_blog_categories Read crm_list_blogs Read crm_list_businesses Read crm_list_calendar_groups Read crm_list_calendar_resources Read crm_list_calendars Read crm_list_campaigns Read crm_list_companies Read crm_list_conversations Read crm_list_coupons Read crm_list_courses Read crm_list_courses_exporters Read crm_list_custom_fields Read crm_list_custom_values Read crm_list_email_campaigns Read crm_list_email_templates Read crm_list_emails Read crm_list_events Read crm_list_form_submissions Read crm_list_forms Read crm_list_funnel_pages Read crm_list_funnels Read crm_list_invoice_schedules Read crm_list_invoice_templates Read crm_list_invoices Read crm_list_knowledge_bases Read crm_list_location_tags Read crm_list_location_timezones Read crm_list_media_files Read crm_list_messages Read crm_list_number_pools Read crm_list_object_records Read crm_list_object_schemas Read crm_list_order_fulfillments Read crm_list_orders Read crm_list_payment_integrations Read crm_list_pipelines Read crm_list_prices Read crm_list_products Read crm_list_redirects Read crm_list_relations Read crm_list_saas_locations Read crm_list_snapshots Read crm_list_social_accounts Read crm_list_social_categories Read crm_list_social_posts Read crm_list_social_tags Read crm_list_subscriptions Read crm_list_survey_submissions Read crm_list_surveys Read crm_list_templates Read crm_list_transactions Read crm_list_trigger_links Read crm_list_users Read crm_list_voice_agents Read crm_list_voice_call_logs Read crm_list_workflows Read crm_marketplace_get_charges Read crm_marketplace_has_funds Read crm_marketplace_installer_details Read crm_marketplace_rebilling_config Read crm_media_list Read crm_oauth_status Read crm_pause_saas_location Read crm_process_inbound_message Read crm_process_workflow Read crm_purchase_phone_number Read crm_record_payment Read crm_refresh_token Read crm_reply_social_review Read crm_report_billing Read crm_saas_get_company_info Read crm_saas_get_locations Read crm_saas_pause Read crm_sdk_form_submissions Read crm_sdk_survey_submissions Read crm_search_contacts Read crm_search_location_tasks Read crm_search_locations Read crm_search_opportunities Read crm_search_phone_numbers Read crm_validate_groups_slug Read crm_verify_email Read crm_void_invoice Read deed_accept Read deed_inspect Read deed_verify Read engine_platforms Read engine_verify Read get_service_info Read list_available_services Read list_connections Read list_workflows Read plugin_inspect Read plugin_list Read sxo_optimize Read sxo_score Read training_ingest Read training_review Read training_score Read training_search Read training_stats Read vault_container_escrow_unwrap Read vault_container_inspect Read vault_container_verify Read vault_fingerprint Read vault_seal Read vault_unseal Read vault_verify

FAQ

Can an AI agent move money through the 0n MCP server? +

Yes. The 0nmcp server exposes 6 financial tools including crm_create_payment_config, crm_create_payment_integration, crm_marketplace_charge. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the 0n MCP server? +

Yes. The 0nmcp server exposes 51 destructive tools including crm_bulk_delete_social_posts, crm_cancel_scheduled_message, crm_delete_agent. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through 0nmcp? +

The 0nmcp server has 150 write tools including ai_embed, ai_generate, ai_models. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach 0nmcp.

How many tools does the 0n MCP server expose? +

407 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 186 are read-only. 221 can modify, create, or delete data.

How do I enforce a policy on 0nmcp? +

Register the 0n MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies for each. Same risk classification, live on your fleet in minutes.

Enforce policy on every 0nmcp tool call.

Deterministic rules across all 407 0nmcp tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

SECURE 0NMCP →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

0nmcp

// TOOL MAP

// WHAT CAN GO WRONG

// RECOMMENDED RULES

// ALL 407 0NMCP TOOLS

// FAQ