// SCAN REPORT

Ncp

276 tools. 179 can modify or destroy data without limits.

13 destructive tools with no built-in limits. Policy required.

Last updated: 27 Jun 2026

179 can modify or destroy data

97 read-only

276 tools total

Community server · catalogue entry checked 27/06/2026

How to control Ncp ↓

TOOL MAP

What Ncp exposes to your agents

Read (97) Write / Execute (165) Destructive / Financial (13)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Ncp tools

Financial · Critical create_charge This tool directly processes payments through Stripe, moving money and committing financial obligations. Financial · High create_refund This tool directly commits a financial obligation by issuing refunds through Stripe, which moves money. Financial · Critical create_subscription Creating a recurring subscription involves financial commitments that repeat over time (e.g., monthly/annual billing). Destructive · High bulk_delete Bulk deletion operations are inherently destructive as they irreversibly remove data at scale.

179 of Ncp's 276 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Ncp

PolicyLayer is an MCP gateway — it sits between your AI agents and Ncp, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "create_charge": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "backup": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add": {
    "limits": [
      {
        "counter": "add_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "cache_get": {
    "limits": [
      {
        "counter": "cache_get_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Ncp — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON NCP →

Instant setup, no code required.

FULL CATALOGUE

All 276 Ncp tools

FINANCIAL 3 tools

Financial create_charge Process a payment charge using Stripe Financial create_refund Process a refund for a Stripe charge Financial create_subscription Create a recurring subscription

DESTRUCTIVE 10 tools

Destructive backup Backup mysql-api database Destructive bulk_delete Bulk delete documents Destructive delete Delete scheduled job. Destructive delete_event Delete calendar event Destructive delete_key Delete Redis key Destructive delete_memory Delete a memory entry Destructive purge_cache Purge Cloudflare cache Destructive remove Remove an MCP server from NCP configuration. First use Destructive remove_container Remove a Docker container Destructive write_query Execute an INSERT, UPDATE, or DELETE query

EXECUTE 62 tools

Execute apply Execute Terraform apply Execute apply_manifest Apply Kubernetes manifest to cluster Execute build_image Build Docker image from Dockerfile Execute build_job Trigger Jenkins job build Execute bulk_operations Perform bulk operations on Elasticsearch Execute click_element Click on a web element Execute clone Clone Git repository Execute connect Connect to mysql-api database Execute consume Consume messages from Kafka topic Execute create_completion Create OpenAI completion Execute create_context Create a new browser context Execute create_image Generate image with DALL-E Execute create_prediction Create model prediction Execute create_video Create Loom video Execute deploy Deploy using aws-ec2-api Execute deploy_project Deploy project to Vercel Execute deploy_server Deploy Vultr server instance Execute deploy_site Deploy site to Netlify Execute exec Execute shell command Execute exec_async Execute shell command asynchronously Execute execute Execute gitlab-api-v4 command Execute execute_cql Execute CQL query Execute execute_query Execute SQL query on PlanetScale database Execute find_element Find web element using various strategies Execute generate_image Generate image with Stable Diffusion Execute generate_rendition Generate image rendition using Adobe APIs Execute inference Run inference on Hugging Face model Execute install Install npm packages Execute lambda_invoke Invoke a Lambda function Execute navigate_page Navigate to a web page Execute pause Pause job (stops future executions). Execute plan Execute Terraform plan Execute produce Produce message to Kafka topic Execute publish Publish message to RabbitMQ exchange Execute push Push changes to remote repository Execute query Execute a SQL query on the SQLite database Execute query_nrql Execute NRQL query Execute query_range Execute range PromQL query Execute query_soql Execute SOQL query Execute read_query Execute a SELECT query on the PostgreSQL database Execute resume Resume paused job. Execute run Execute MCP tool (format: mcp:tool). Provides suggestions if not found. Execute run_command Execute Ansible ad-hoc command Execute run_container Run Docker container Execute run_cypher Execute Cypher query on Neo4j database Execute run_plan Execute Terraform plan Execute run_playbook Execute Ansible playbook Execute run_script Run npm script Execute scale Scale aws-ec2-api resources Execute scale_deployment Scale a deployment Execute scale_dyno Scale Heroku dyno Execute send_keys Send keystrokes to an element Execute start_ec2_instance Start an EC2 instance Execute start_session Start BrowserStack testing session Execute stop_container Stop a running Docker container Execute stop_ec2_instance Stop an EC2 instance Execute submit_job Submit job to Nomad cluster Execute take_screenshot Take a screenshot of the page Execute trigger Trigger an immediate execution of a scheduled job (manual run). Execute trigger_pipeline Trigger CircleCI pipeline Execute trigger_workflow Trigger GitHub Actions workflow Execute up Deploy Pulumi stack

WRITE 103 tools

Write add Add MCP server(s) to NCP with smart auto-detection of input type. Supports multiple modes: (1) SINGLE: Add one Write add_document Add document to Firestore Write add_member Add member to Trello board Write add_step Add a step to the thinking process Write add_subscriber Add subscriber to ConvertKit Write authenticate Authenticate with twitter-api-v2 API Write backup_database Create backup of MySQL database Write bulk_index Bulk index documents Write cache_set Store data in Memcached Write commit Create Git commit Write configure Configure gitlab-api-v4 settings Write create Create scheduled job with cron/natural language timing. Write create_alert Create New Relic alert condition Write create_app Create Heroku application Write create_automation Create ActiveCampaign automation Write create_board Create new Trello board Write create_branch Create database branch Write create_broadcast Create ConvertKit broadcast Write create_bucket Create Google Cloud Storage bucket Write create_campaign Create Mailchimp campaign Write create_card Create new card in Trello board Write create_channel Create a new Slack channel Write create_clip Create Twitch clip Write create_contact Create HubSpot contact Write create_conversation Create Intercom conversation Write create_customer Create a new Stripe customer Write create_dashboard Create Grafana dashboard Write create_database_item Create a new item in a Notion database Write create_deal Create Pipedrive deal Write create_design Create Canva design Write create_directory Create a new directory or ensure a directory exists Write create_dns_record Create DNS record in Cloudflare zone Write create_draft Create email draft Write create_droplet Create DigitalOcean droplet Write create_event Create new calendar event Write create_file Create a new file in Google Drive Write create_hypertable Create TimescaleDB hypertable Write create_index Create new Elasticsearch index Write create_instance Create Linode instance Write create_issue Create a new issue in a GitHub repository Write create_item Create Monday.com item Write create_keyspace Create Cassandra keyspace Write create_lead Create Salesforce lead Write create_meeting Create Teams meeting Write create_memory Create a new memory entry Write create_message Create message with Claude Write create_metric Submit metric to DataDog Write create_node Create node in Neo4j graph Write create_opportunity Create Close opportunity Write create_or_update_file Create or update a file in a GitHub repository Write create_page Create a new page in Notion workspace Write create_person Create Pipedrive person Write create_playlist Create Spotify playlist Write create_product Create new product in Shopify store Write create_project Create GitLab project Write create_pull_request Create a pull request in a GitHub repository Write create_record Create record in Airtable Write create_release Create Sentry release Write create_repository Create a new GitHub repository Write create_request Create service desk request Write create_site Create Netlify site Write create_spreadsheet Create new Google Spreadsheet Write create_storage_account Create Azure storage account Write create_table Create a new table in the database Write create_task Create Asana task Write create_thinking Create a new thinking process Write create_ticket Create Zendesk support ticket Write create_user Create Auth0 user Write create_widget Create widget on Miro board Write create_workspace Create Terraform Cloud workspace Write fork_repository Fork a GitHub repository Write format_cells Format cells in Google Sheets Write index_document Index document in Elasticsearch Write insert Insert data into Supabase table Write manage_roles Manage user roles in Discord server Write mark_read Mark emails as read Write move_file Move or rename files and directories Write open_file Open file in VS Code Write post_data Send data to twitter-api-v2 Write preview Preview Pulumi deployment Write register_service Register service with Consul Write s3_upload_file Upload file to S3 bucket Write save-as-photon Convert a successful code execution into a reusable Photon (.photon.ts file) Write send_email Send email via Gmail Write send_message Send a message to a Slack channel or user Write send_photo Send photo via Telegram bot Write send_template Send WhatsApp template message Write set_key Set Redis key-value pair Write share_file Share a file or folder with others Write sync_base Synchronize Airtable base with external data Write update Update job timing, parameters, or active state. Write update_event Update existing calendar event Write update_file Update an existing file in Google Drive Write update_inventory Update product inventory levels Write update_memory Update an existing memory Write update_page Update an existing Notion page Write upload_file Upload a file to Slack Write upload_video Upload video to YouTube Write webhook_create Create Airtable webhook Write write_file Create a new file or completely overwrite an existing file Write write_points Write time series data points Write write_secret Write secret to Vault Write write_sheet Write data to Google Sheets

READ 97 tools

Read cache_get Retrieve data from Memcached Read describe_resource Describe a Kubernetes resource Read describe_table Get detailed information about a specific table Read doctor Run diagnostics on NCP system health and MCP configurations. Read-only - reports issues without making changes Read executions View execution history. Read export Export current NCP configuration. Use clipboard for security (no chat history), response for transparency. Read export_design Export Canva design Read export_images Export images from Figma file Read find Search and discover installed Anthropic Agent Skills with progressive detail levels. Use depth parameter for p Read get Get job details. Read get_analytics Get YouTube channel analytics Read get_boards Get Monday.com boards Read get_build_info Get Jenkins build information Read get_channel_history Get message history from a channel Read get_data Retrieve data from twitter-api-v2 Read get_deals Get HubSpot deals Read get_file Get the contents of a file from a GitHub repository Read get_file_info Get detailed metadata about a file or directory Read get_folder_items Get items in Box folder Read get_info Get information from newrelic-api Read get_key Get value by Redis key Read get_logs Get logs from a pod Read get_orders Get BigCommerce orders Read get_page Retrieve a page from Notion Read get_pipeline Get CircleCI pipeline details Read get_pods List pods in namespace Read get_prediction Get prediction status Read get_requests Get customer requests Read get_services List services in namespace Read get_status Get gitlab-api-v4 status Read get_streams Get live Twitch streams Read get_tasks Get Asana tasks Read get_thinking Retrieve a thinking process Read get_users List Auth0 users Read get_videos Get Loom videos Read get-run Get details of a specific code execution run including full JSONL log Read lambda_list_functions List Lambda functions Read list List all configured skill marketplaces Read list_applications List Okta applications Read list_boards List all Trello boards Read list_channels List all channels in the workspace Read list_containers List Docker containers Read list_databases List all MySQL databases Read list_deployments List Vercel deployments Read list_directory Get a detailed listing of all files and directories in a specified path Read list_droplets List all droplets Read list_ec2_instances List EC2 instances Read list_emails List emails in Gmail inbox Read list_events List calendar events Read list_files List files and folders in Google Drive Read list_folder List contents of Dropbox folder Read list_images List Docker images Read list_instances List GCP Compute Engine instances Read list_issues List issues in a GitHub repository Read list_meetings List user meetings Read list_models List available models Read list_orders List orders from Shopify store Read list_payments List payment history Read list_recordings List meeting recordings Read list_records List records from Airtable base Read list_resources List newrelic-api resources Read list_tables List all tables in the current database Read list_tickets List Freshdesk tickets Read list_vms List Azure virtual machines Read list_workflow_runs List GitHub Actions workflow runs Read list_zones List Cloudflare zones (domains) Read list-runs List recent code execution runs for potential save-as-photon conversion Read monitor Monitor aws-ec2-api resources Read overview Visual analytics dashboard with ASCII charts showing usage stats, token savings, performance metrics, and tren Read performance Visual performance report with gauges and charts showing fastest MCPs, reliability metrics, and response times Read query_collection Query Firestore collection Read query_data Query time series data Read query_database Query a Notion database Read read_file Read the complete contents of a file from the file system Read read_multiple_files Read the contents of multiple files simultaneously Read read_resource Read additional files from an installed skill (resources/, scripts/, templates/, etc.). Use after skills:find Read read_secret Read secret from Vault Read read_sheet Read data from Google Sheets Read retrieve Get jobs and/or executions with search and filtering. Read s3_download_file Download file from S3 bucket Read s3_list_buckets List S3 buckets Read s3_list_objects List objects in S3 bucket Read scrape_page Scrape web page content Read search Search all skill marketplaces for available skills to install Read search_content Search Confluence content Read search_files Recursively search for files and directories matching a pattern Read search_issues Search Jira issues using JQL Read search_memories Search through stored memories Read search_products Search Magento products Read search_tickets Search Zendesk tickets Read search_tracks Search Spotify tracks Read search_videos Search YouTube videos Read select Select data from Supabase table Read tokens Token usage and savings from Code-Mode vs find+run. Shows efficiency gains. Read usage Detailed usage statistics with properly spaced markdown tables: most used MCPs, tool counts, hourly patterns, Read validate Validate tool parameters before scheduling (dry-run). REFERENCE IMPLEMENTATION for MCP validation protocol. Read web_search Search the web using Brave Search

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Ncp

Can an AI agent move money through the Ncp MCP server? +

Yes. The Ncp server exposes 3 financial tools including create_charge, create_refund, create_subscription. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Ncp MCP server? +

Yes. The Ncp server exposes 10 destructive tools including backup, bulk_delete, delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Ncp? +

The Ncp server has 103 write tools including add, add_document, add_member. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Ncp.

How many tools does the Ncp MCP server expose? +

276 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 97 are read-only. 179 can modify, create, or delete data.

How do I enforce a policy on Ncp? +

Register the Ncp MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Ncp tool call.

Deterministic rules across all 276 Ncp tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON NCP →

Instant setup, no code required.

276 Ncp tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Ncp's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →