// SCAN REPORT

Meridian

175 tools. 96 can modify or destroy data without limits.

15 destructive tools with no built-in limits. Policy required.

Last updated: 10 Aug 2026

96 can modify or destroy data

79 read-only

175 tools total

Community server · catalogue entry checked 10/08/2026 · full schemas captured for 171 of 175 tools

How to control Meridian ↓

TOOL MAP

What Meridian exposes to your agents

Read (79) Write / Execute (81) Destructive / Financial (15)

Running more than one server? Check your whole stack →

CONTEXT-WINDOW COST

What Meridian costs in tokens

67,711 tokens of tool definitions, loaded on every request

34% of a 200k context window

2,636 heaviest tool: generate_handoff

Full per-tool breakdown → Model it in the token calculator →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Meridian tools

Destructive · High clear_capability_profile This tool performs irreversible deletion of configuration state (a capability profile row). Destructive · High release_docx_region_claims This tool irreversibly releases resource claims (locks/state) across files and sessions without traditional undo capability. Destructive · High delete_custom_hook This tool deletes persistent data (user-defined hooks) from the system. Destructive · High delete_note This tool permanently removes data from Meridian's persistent memory system.

96 of Meridian's 175 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Meridian

PolicyLayer is an MCP gateway — it sits between your AI agents and Meridian, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "archive_decision": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "activate_profile_layer": {
    "limits": [
      {
        "counter": "activate_profile_layer_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "analyze_model_efficiency": {
    "limits": [
      {
        "counter": "analyze_model_efficiency_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Meridian — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MERIDIAN →

Instant setup, no code required.

FULL CATALOGUE

All 175 Meridian tools

DESTRUCTIVE 15 tools

Destructive archive_decision [SUPPORT] Archive a pinned decision by id. Soft-deletes to preserve the audit trail. Use when something was fi Destructive batch_mutate [SUPPORT] 133bfff6 — run a batch of TRANSACTIONAL mutation entries in ONE call, mixing entry kinds selected pe Destructive claim_sprint_item Claim a pending sprint item: sets status to in_progress and records claimed_at + actor. Read-only: false. Reje Destructive clear_capability_profile [SUPPORT] 02038afe — Delete a scope's ENTIRE capability profile row (both its capabilities and its disabled_ca Destructive clone_profile_layer [SUPPORT] 0bec79a7 (PROFILE-5) — Copy one layer's fields/reset_fields/provenance onto another scope, going thr Destructive delete_custom_hook [MAINTENANCE] 273287cb — delete a user-defined hook by id (the id returned by add_custom_hook / get_custom_hoo Destructive delete_note [MAINTENANCE] Hard-delete a project note by id. Persistent-state disclosure: on hosted Meridian, supplied text Destructive delete_sprint_item_pointer [MAINTENANCE] 2976e168 — delete ONE generic pointer from a sprint item by its pointer id (the id returned by a Destructive fan_out_sprint_items [SUPPORT] Bulk-insert sprint items from a single orchestrator call — decompose a goal into parallel work items Destructive purge_ai_log [MAINTENANCE] c0168425 — Project-scoped, cutoff-based retention sweep spanning BOTH ai_log_events (meridian.db Destructive record_handoff_correction [MAINTENANCE] 3af86d28 — record a corrective handoff when a blocked executor session reaches a wall after rece Destructive release_docx_region_claims [MAINTENANCE] f7ee1ba7 — Release scoped docx-region claims held by a session. Without element_id releases all Destructive request_hitl Surface a question to the human-in-the-loop queue. ALWAYS use this to ask the human a question — never just as Destructive reset_plugin_override [MAINTENANCE] Clear a tenant's stored command/config override for one plugin slot, resetting it back to the bu Destructive reset_profile_layer [SUPPORT] 0bec79a7 (PROFILE-5) — Delete a scope's ENTIRE profile-layer row so it reverts to purely inheriting

EXECUTE 5 tools

Execute complete_wave_gate [SUPPORT] d2430713 — EXECUTOR GATE: call this AFTER you have actually run a wave's gate action list (push, dep Execute execute_batch [SUPPORT] 627187b8 — run a HOMOGENEOUS batch of management writes (all entries the SAME operation) with real a Execute prospect_symbol [SUPPORT] 2ce5bc76 — ROBUST symbol prospecting with a three-rung fallback chain: tries codebase__search_graph Execute run_verification [SUPPORT] 0e973e52 — run the project's stored test_cmd on YOUR local machine via the tunnel and return a REAL, Execute start_session Register a session and return orientation. Compact by default (session_id, sprint focus + status counts, 3 rec

WRITE 76 tools

Write activate_profile_layer [SUPPORT] 0bec79a7 (PROFILE-5) — Advance a hosted_default layer's lifecycle to 'active' — the single 'publish' Write add_custom_hook [MAINTENANCE] 273287cb — define a user-creatable Claude Code hook (PreToolUse | PostToolUse | Stop), generaliz Write add_insight [SUPPORT] Record a durable STRATEGIC INSIGHT — accumulated understanding that generates future decisions. A fi Write add_note [SUPPORT] Add a per-project wiki note (setup, gotcha, howto, env, ...). Free-form title/body; comma-separated Write add_sprint_item ALWAYS call get_sprint_items first to check for existing pending items before adding. Append a todo item to th Write add_sprint_item_pointer [SUPPORT] 2976e168 — attach a GENERIC POINTER to a sprint item: a portable, composable reference to a thing-in Write add_sprint_note [SUPPORT] Add an ephemeral note to the current session's scratch pad. Use for constraints, blockers, working a Write add_subtask [SUPPORT] Add a child sprint item under an existing parent item. Inherits the parent's version. Status starts Write add_workspace_note [MAINTENANCE] Add a workspace-level wiki note that applies across ALL projects in this workspace (onboarding, Write add_workspace_proposal Capture a workspace-level flash of insight into the 'drawer of inspiration' — cross-project ideas that don't b Write add_workspace_sprint_item [MAINTENANCE] Add an item to the workspace-level personal backlog — a cross-project board NOT tied to any sing Write advance_proposal_status [SUPPORT] Transition a workspace proposal through its lifecycle. Enforced transitions: raw → investigating|rej Write annotate_outputs [SUPPORT] 9e02e448 — capture a human annotation for a path inside an outputs tree WITHOUT touching the filesys Write answer_hitl [SUPPORT] Answer a pending HITL request programmatically. Marks it answered so the waiting session can resume. Write assign_sprint_waves [MAINTENANCE] 58a45b92 — PERSIST the parallel grouping: writes the conflict-free batches get_parallelizable_gr Write capture_research_finding [SUPPORT] Inline capture for web/paper research during planning: save a finding from a URL as an addressable n Write checkpoint [SUPPORT] Save progress mid-session. Runs auto_capture (buckets done tasks into a note), generates a delta han Write claim_docx_region [MAINTENANCE] f7ee1ba7 — Model B scoped-region claiming for .docx files. Claim a specific paragraph/element by Write claim_file [SUPPORT] Claim edit rights on a file for this session. Whole-file by default (auto-expires after 2 hours). Fo Write commit_proposal_promotion [SUPPORT] Commit a proposal's promotion through 'depth' (ce4883f3), cumulative over every shallower depth. Req Write complete_sprint_item Mark a sprint item done. Pass task_id to link the task that shipped it. Pass session_id to get a board_change Write complete_workspace_sprint_item [MAINTENANCE] Mark a workspace personal-backlog item done (stamps completed_at). Returns the updated item. Per Write configure_wave_gate [SUPPORT] 74a8f420 — PLANNING: configure (or on-the-fly reconfigure) a deterministic action pipeline attached Write create_project [MAINTENANCE] Create a new Meridian project. Persistent-state disclosure: on hosted Meridian, supplied text an Write dismiss_hitl [SUPPORT] Dismiss a HITL request (won't-answer / no longer relevant). Stays in audit trail. Use list_hitl_requ Write export_ai_log [MAINTENANCE] c0168425 — Read-only: project-scoped, receipted export of ai_log_events (meridian.db.ai_log — th Write export_ai_log_artifacts [MAINTENANCE] c0168425 — Read-only: project-scoped, receipted export of stored ai_log artifacts (meridian.arti Write finalize_wave_run [SUPPORT] 2a654cb0 — IDEMPOTENT FINALIZATION: close a wave run opened by start_wave_run. Safe to retry: if the Write generate_handoff EXECUTOR SESSIONS: MANDATORY - call at end of every session before disconnect. Never write markdown manually. Write index_equation [MAINTENANCE] 06df6ab3 — index ONE Word equation (OMML) against a document already stored in the doc-structure Write index_figure [MAINTENANCE] c623e648 — index ONE figure into the SEMANTIC figure index against a document already stored in Write index_table [MAINTENANCE] 2622182d — index ONE table into the SEMANTIC table index against a document already stored in th Write ingest_document [SUPPORT] Turn a Word/PDF/text document into a queryable kind='document' note with a source link — a report, t Write ingest_document_structure [MAINTENANCE] db42acce — persist pre-parsed structural data (headings/figures/tables) into the doc-structure s Write insert_equation [MAINTENANCE] 51a595e7 — write an OMML equation DIRECTLY into a stored document's source .docx (real OOXML wri Write link_figure_caption [MAINTENANCE] 0ff8b982 — DURABLY link an already-indexed figure (doc_figures row) to its caption paragraph (a Write link_flag_to_section [MAINTENANCE] 8ca89e8f — DURABLY link a docx section/paragraph/figure/table (any doc_elements id — the same id Write link_manual_github_issue [SUPPORT] 5dfe34b2 — attempt to link a manually-filed GitHub issue (one Meridian did NOT create) to a sprint i Write link_table_caption [MAINTENANCE] 42d398a5 — DURABLY link an already-indexed table (doc_tables row) to its caption paragraph (a do Write log_task [SUPPORT] Log a task this session completed or is working on. Valid statuses: pending, in_progress, done, fail Write merge_project [MAINTENANCE] d6bd60e0 — merge a phantom-duplicate project INTO another. Re-parents EVERY child row of the sou Write merge_sprint_items [SUPPORT] Merge multiple sprint items into one. Source items are closed (skipped, merged_into=survivor). Retur Write pin_decision [SUPPORT] Create a pinned decision (editable constitution row). Use for the current authoritative truth that s Write pin_workspace_decision [MAINTENANCE] Pin a workspace-level decision that applies across ALL projects (shared architecture, org-wide s Write promote_proposal Promote a workspace proposal into a real sprint item, creating the link between them. The proposal must be in Write register_session [MAINTENANCE] Low-level: register this session without loading goal context. Use start_session instead for exe Write release_file [SUPPORT] Release a file lock (and any symbol claims this session holds on it). Persistent-state disclosure: o Write rename_project [MAINTENANCE] 7acb8563 — rename a project. Returns the updated project, or {error} if it does not exist. Persi Write request_manual_issue_screening_toggle [SUPPORT] 5dfe34b2 — request enabling/disabling the OFF-by-default opt-in extension that lets the automated Gi Write resolve_citations [MAINTENANCE] fefb596a — resolve this project's in-text citation markers to canonical Zotero items via Zotero' Write resolve_sprint_item_pointers [SUPPORT] 2976e168 — resolve EVERY generic pointer on a sprint item to its concrete location, dispatching by s Write save_blog_post [MAINTENANCE] Create or update a workspace-scoped blog post (draft|published|archived lifecycle). Posts belong Write save_finding [SUPPORT] Phase-agnostic capture primitive: turn a finding into a durable, addressable note with provenance — Write save_profile_layer [SUPPORT] 0bec79a7 (PROFILE-5) — Validate and persist ONE layer of the hosted_default -> workspace -> user -> Write send_message [MAINTENANCE] PARALLEL COORDINATION (d3a3a01d): enqueue an actor-model message to another session (session_mes Write set_active_repo [MAINTENANCE] Update the tunnel's active Serena repo at runtime. When a planning session switches to a differe Write set_agent_instructions [MAINTENANCE] Set or update the custom agent_instructions for a project. Instructions are injected into every Write set_capability_manifest [SUPPORT] 649e095f — Persist a project's structured capability manifest: a list of capability declarations, ea Write set_capability_profile [SUPPORT] 02038afe — Persist ONE layer of the capability-inheritance chain: workspace -> user -> project -> sp Write set_executor_config [MAINTENANCE] Store per-project executor defaults (repo_path, env_file, test_cmd, test_min, deploy_cmd, shell_ Write set_goal [MAINTENANCE] Set or update the goal state. Persistent-state disclosure: on hosted Meridian, supplied text and Write set_north_star [MAINTENANCE] Update only the north star — the long-lived product vision that rarely changes. Distinct from th Write set_parent_project [MAINTENANCE] 7acb8563 — set, change, or clear a project's parent AFTER creation (create_project only accepted Write set_sprint [MAINTENANCE] Update only the sprint — the short-term focus that changes each session or week. Any team member Write snapshot_graph_metrics [MAINTENANCE] Record a code-graph snapshot for a session (node count, edge count, hotspot count, file churn). Write split_sprint_item [SUPPORT] Split a sprint item into multiple smaller items. The original is closed (skipped) and N new items ar Write start_wave_run [SUPPORT] 2a654cb0 — DURABLE WAVE STATE: open a wave run before dispatching a parallel wave. Returns an immuta Write store_finding [MAINTENANCE] PARALLEL COORDINATION (c35370cc): persist a per-task intermediate result to the session_findings Write update_custom_hook [MAINTENANCE] b4f4627f — the previously-missing generic enable/disable/edit path for a user-defined hook (id r Write update_decision [SUPPORT] Patch a pinned decision. Pass new_title + new_body to atomically supersede (creates a new active row Write update_md_section [MAINTENANCE] Propose a replacement for an anchored section of an agent template doc (CLAUDE.md or AGENTS.md). Write update_paragraph [MAINTENANCE] f978e588 — ID-addressable docx WRITE (the write counterpart of the get_element_by_id / paraId re Write update_sprint_item [SUPPORT] Edit fields on an existing sprint item: title, version, notes, human_id (assignee), group, deferred_ Write update_workspace_settings [MAINTENANCE] Update workspace-global default settings. Pass only the fields you want to change. hitl_auto_ans Write update_workspace_sprint_item [MAINTENANCE] Edit a workspace personal-backlog item: title, status, group, or human_id (assignee). Only the f Write validate_assumption [SUPPORT] Confirm or invalidate the assumption a pinned decision rests on, in one call — no phase switching. S

READ 79 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Meridian

Can an AI agent delete data through the Meridian MCP server? +

Yes. The Meridian server exposes 15 destructive tools including archive_decision, batch_mutate, claim_sprint_item. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Meridian? +

The Meridian server has 76 write tools including activate_profile_layer, add_custom_hook, add_insight. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Meridian.

How many tools does the Meridian MCP server expose? +

175 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 79 are read-only. 96 can modify, create, or delete data.

How do I enforce a policy on Meridian? +

Register the Meridian MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.