// SCAN REPORT

Onyx Mcp

67 tools. 12 can modify or destroy data without limits.

12 write tools that can modify data. Rate limits recommended.

Last updated: 6 Jun 2026

12 can modify or destroy data

55 read-only

67 tools total

Free to start. No card required.

TOOL MAP

Read (55) Write / Execute (12) Destructive / Financial (0)

CONTEXT-WINDOW COST

12,920 tokens of tool definitions, loaded on every request

6.5% of a 200k context window

334 heaviest tool: onyx_base_bridge_quote

Full per-tool breakdown → Model it in the token calculator →

WHAT CAN GO WRONG

Write operations (onyx_bazaar_submit, onyx_browser_click, onyx_browser_type) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

Execute tools (onyx_agent_workflow, onyx_bazaar_blue_ocean, onyx_browser_navigate) trigger processes with side effects. Builds, notifications, workflows — all fired without throttling.

RECOMMENDED RULES

Rate limit write operations

{
  "onyx_bazaar_submit": {
    "limits": [
      {
        "counter": "onyx_bazaar_submit_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "onyx_agent_audit_trail": {
    "limits": [
      {
        "counter": "onyx_agent_audit_trail_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

ALL 67 ONYX MCP TOOLS

EXECUTE 7 tools

Execute onyx_agent_workflow Execute onyx_bazaar_blue_ocean Execute onyx_browser_navigate Execute onyx_html_meta Execute onyx_password_strength Execute onyx_url_parse Execute onyx_user_agent_parse

WRITE 5 tools

Write onyx_bazaar_submit Write onyx_browser_click Write onyx_browser_type Write onyx_ens_resolve Write onyx_fx_convert

READ 55 tools

Read onyx_agent_audit_trail Read onyx_agent_budget_tracker Read onyx_agent_id Read onyx_aml_screen Read onyx_base_bridge_quote Read onyx_base_contract_verify Read onyx_base_dex_pair_lookup Read onyx_base_event_logs Read onyx_base_swap_quote Read onyx_base_token_risk_scan Read onyx_base_tx_decode Read onyx_base_tx_explainer Read onyx_base_tx_simulator Read onyx_bazaar_compare Read onyx_browser_eval Read onyx_browser_extract Read onyx_browser_screenshot Read onyx_dns_lookup Read onyx_email_validate Read onyx_facilitator_health Read onyx_fact_check Read onyx_hash_compute Read onyx_ip_geolocate Read onyx_jwt_decode Read onyx_mcp_catalog_diff Read onyx_mcp_health Read onyx_mcp_meta_call Read onyx_mcp_oauth_audit Read onyx_mcp_registry_status Read onyx_mcp_router Read onyx_paper_synthesis Read onyx_partnership_check Read onyx_pm_settlement_watch Read onyx_research_intel Read onyx_robots_check Read onyx_skill_bundle Read onyx_solana_jupiter_quote Read onyx_solana_token_metadata Read onyx_solana_token_risk_scan Read onyx_solana_tx_explainer Read onyx_solana_wallet_activity Read onyx_solve_captcha Read onyx_token_metadata Read onyx_url_text Read onyx_url_unshorten Read onyx_verify_explain Read onyx_whois Read onyx_x402_chain_picker Read onyx_x402_demo_wallet Read onyx_x402_error_explain Read onyx_x402_facilitators Read onyx_x402_indexer_health Read onyx_x402_receipt_verify Read onyx_x402_simulate Read onyx_x402_spec_lookup

FAQ

How do I prevent bulk modifications through Onyx Mcp? +

The Onyx Mcp server has 5 write tools including onyx_bazaar_submit, onyx_browser_click, onyx_browser_type. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Onyx Mcp.

How many tools does the Onyx MCP server expose? +

67 tools across 3 categories: Execute, Read, Write. 55 are read-only. 12 can modify, create, or delete data.

How do I enforce a policy on Onyx Mcp? +

Register the Onyx MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies for each. Same risk classification, live on your fleet in minutes.

Enforce policy on every Onyx Mcp tool call.

Deterministic rules across all 67 Onyx Mcp tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

SECURE ONYX MCP →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

Onyx Mcp

// TOOL MAP

// CONTEXT-WINDOW COST

// WHAT CAN GO WRONG

// RECOMMENDED RULES

// ALL 67 ONYX MCP TOOLS

// FAQ