// SCAN REPORT

Stable Baseline

196 tools. 120 can modify or destroy data without limits.

31 destructive tools with no built-in limits. Policy required.

Last updated: 19 Jul 2026

120 can modify or destroy data

76 read-only

196 tools total

Community server · catalogue entry checked 19/07/2026 · full schemas captured for 191 of 196 tools

How to control Stable Baseline ↓

TOOL MAP

What Stable Baseline exposes to your agents

Read (76) Write / Execute (88) Destructive / Financial (31)

Running more than one server? Check your whole stack →

CONTEXT-WINDOW COST

What Stable Baseline costs in tokens

46,634 tokens of tool definitions, loaded on every request

23% of a 200k context window

4,631 heaviest tool: addWhiteboardElements

Full per-tool breakdown → Model it in the token calculator →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Stable Baseline tools

Financial · Critical cancelSubscription This tool commits a financial action by cancelling a subscription, directly affecting billing and service obligations. Financial · High previewSubscriptionCancellation This tool initiates the subscription cancellation workflow by generating a confirmation_token used to complete the cancellation. Financial · High reactivateSubscription This tool modifies a subscription's billing status by reversing a cancellation, which directly commits the user to ongoing financial obligations. Financial · Critical purchaseCreditPackage This tool initiates a real financial transaction via Stripe Checkout, committing the user to a monetary payment for a credit package.

120 of Stable Baseline's 196 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Stable Baseline

PolicyLayer is an MCP gateway — it sits between your AI agents and Stable Baseline, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "applySubscriptionChange": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "cancelAllKgInScope": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "acceptTaskDependencyReview": {
    "limits": [
      {
        "counter": "accepttaskdependencyreview_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "exportFromWhiteboard": {
    "limits": [
      {
        "counter": "exportfromwhiteboard_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Stable Baseline — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON STABLE BASELINE →

Instant setup, no code required.

FULL CATALOGUE

All 196 Stable Baseline tools

FINANCIAL 9 tools

Financial applySubscriptionChange Apply a previously previewed subscription change. Same-tier seat changes update Stripe in place; cross-tier up Financial cancelSubscription Apply a previewed soft cancellation (cancel_at_period_end=true). Customer keeps full access until period end. Financial getCustomerPortalLink Mint a single-use Stripe Customer Portal URL for self-serve billing changes. return_url defaults to https://ap Financial previewSubscriptionCancellation Preview the consequences of cancelling. Returns confirmation_token plus summary {remaining_credits, prepaid_da Financial previewSubscriptionChange Preview a subscription tier or seat change. Returns confirmation_token (10-min TTL) plus proration and next-in Financial purchaseCreditPackage Apply a credit-package quote by creating a hosted Stripe Checkout session. Returns checkout_url + session_id. Financial quoteCreditPackage Quote a credit-package purchase (first half of the human-in-the-loop ritual). Returns quote_token (10-min TTL) Financial reactivateSubscription Reactivate a subscription that was scheduled to cancel at period end (clears cancel_at_period_end). Rate limit Financial updateBillingEmail Update the org's billing email. Validates format, writes private.organizations.billing_email, syncs to Stripe

DESTRUCTIVE 22 tools

Destructive cancelAllKgInScope Emergency stop for KG ingestion: cancels queued/running build runs, queued/running rebuild batches, demotes st Destructive cancelKgBuildBatch Cancel a single KG rebuild batch. Queued runs flip to 'cancelled' immediately; running runs finish naturally. Destructive deleteDiagramInDocument Delete a diagram: removes the database record AND every reference to it in the document body — the current mar Destructive deleteDocument Delete a document. Destructive deleteFolder Delete a folder recursively, including all nested folders and documents. Destructive deleteImageInDocument Delete an image from a document and storage. Destructive deleteImprovement Delete an improvement and all associated evidence and activity. Destructive deleteImprovementCategory Delete an improvement category. Cannot delete system categories. Destructive deleteImprovementComment Delete a comment from an improvement. Destructive deletePlan Delete a plan, all its phases, and all tasks/improvements within it. This is a destructive operation that cann Destructive deletePlanComment Delete a comment from a plan. Destructive deletePlanPhase Delete a plan phase and all tasks/improvements within it. This is a destructive operation that cannot be undon Destructive deleteResourcePermission Delete a resource_permissions row. Refuses if the row is the LAST admin grant on the resource. Rate limit 30/m Destructive deleteTaskDependency Remove a task-dependency edge. Neither item's dates are changed. Destructive deleteTeam Delete a team. Cascades: team members and team-granted resource permissions are removed automatically. Destruc Destructive deleteVegaDataFile Delete a data file attachment from a document. Destructive deleteWhiteboard Delete a whiteboard (the host document and its canvas). Destructive removeMember Hard-remove a member from an organisation, cascading to workspace and team memberships and resource permission Destructive removeTeamMember Remove a user from a team. Idempotent — returns removed=false if not on the team. Destructive removeWorkspaceMember Remove a member from a workspace. Caller must be a workspace owner or admin. Refuses to remove the last remain Destructive resetDocumentInBrain Wipe + re-ingest a single document in the KG. Drops chunks/mentions/entities, clears pending lazy-extraction, Destructive revokeTeamWorkspaceAccess Revoke a team's workspace access. Idempotent — returns revoked=false if no grant exists.

EXECUTE 5 tools

Execute autoDesignWhiteboard Auto-design a complete, visually polished whiteboard from a natural-language goal using the PREMIUM multi-agen Execute renderDiagram Generate a diagram from its DSL/code and get the IMAGE back — WITHOUT inserting it into any document or whiteb Execute startMeetingScribe Invite the Stable Baseline Meeting Scribe bot to a LIVE meeting (Zoom, Google Meet, Microsoft Teams, or Webex) Execute stopMeetingScribe Stop a running meeting scribe: the bot leaves the meeting and the board is finalised (tidy pass plus a summary Execute triggerKgRebuild Apply a previously previewed KG rebuild. Dispatches the build batch via kg-rebuild and returns batch_id. Rate

WRITE 83 tools

Write acceptTaskDependencyReview Per-item: apply a successor's suggested_start_date/suggested_end_date to its real dates and clear needs_depend Write addImprovementActivity Add a comment or activity entry to an improvement. Write addImprovementEvidence Add evidence to an improvement. Types: document_section, diagram_node, incident_note, feedback, free_text. Write addPlanActivity Add a comment or activity entry to a plan. Write addTeamMember Add a user to a team as a regular member. Idempotent — returns already_member=true if already on the team. Use Write addWhiteboardElements Author shapes onto a whiteboard from high-level specs (you do NOT need the full Excalidraw element schema). Ap Write addWorkspaceMember Add an existing organisation member to a workspace with a workspace-level role. Idempotent — returns the exist Write applyKgScopeChange Apply a previously previewed KG scope change. Atomically writes kg_scope rows and dispatches a re-ingest batch Write applyTaskDependencyCascade Auto-schedule every item in a plan so all FS/SS/FF task-dependencies are respected (topological pass, duration Write cancelInvitation Cancel a pending invitation by id. Sets status='revoked'. Server resolves the organisation_id from the invitat Write createBrandKit Create a per-org BRAND KIT so Stable Baseline outputs come out fully on-brand. Upload your branding and it is Write createDocument Create a document from CDMD markdown (standard Markdown plus SB extensions — call getCdmdLanguageGuide if unfa Write createDocumentFromUpload Step 2 of file ingest. After the file is uploaded via the PUT URL from createDocumentIngestSession, call this Write createDocumentIngestSession Step 1 of file ingest. Mint a single-use PUT upload URL for a large file (PDF, DOCX, plain text, or markdown — Write createFolder Create a folder in a project. Supports nesting via parentId. Write createImageUploadSession Create a PUT upload URL for a document image (max 10MB). Use the returned assetUrl with insertImageInDocument. Write createImprovement Create an improvement item in a project. Requires projectId and title. Auto-assigns friendly ID. Write createImprovementCategory Create an improvement category or sub-category. Max two levels. Write createOrganisation Create a new organisation owned by the calling credential's user. Auth: server-side eligibility gate via can_u Write createPlan Create a plan in a project. Requires projectId and title. Write createPlanPhase Create a phase in a plan. Position and wbs_code are auto-computed. Write createProject Create a new project inside a workspace. Mirrors the UI Create Project dialog. Auth: write on workspace + cred Write createTask Create a task in a plan. Requires planId and title. Write createTaskDependency Create an FS/SS/FF scheduling edge with lag/lead between two items in the same plan (rendered as a Gantt arrow Write createTeam Create a new team inside an organisation. Caller is added as the team's lead. Subject to plan team limit. Rate Write createVegaDataUploadSession Create a PUT upload URL for a Vega/Vega-Lite data file. Use returned assetUrl in your Vega spec. Write createWhiteboard Create a whiteboard — an infinite Excalidraw canvas. A whiteboard is a hidden document (it won't appear in lis Write createWorkspace Create a new workspace inside the organisation. Auth: ceiling — credential must hold can_lifecycle AND user mu Write dataToTable Render tabular data as an aligned grid of labelled cells on a whiteboard, deterministically. Pass rows (an arr Write designComponent Design ONE reusable, on-brand SLIDE COMPONENT and add it to the org's component library so every future brande Write designDeckInWhiteboard Create or refine a slide deck INSIDE an existing whiteboard by conversing with the AI design agent. Send a bri Write designIllustrationInWhiteboard Create or refine a standalone ILLUSTRATION INSIDE an existing whiteboard by conversing with the AI design agen Write dismissTaskDependencyReview Per-item: clear needs_dependency_review without changing dates — keeps the edge, ignores the suggestion. Use w Write duplicateWhiteboardElements Copy-paste existing whiteboard elements — the MCP equivalent of selecting a group and pressing Ctrl/Cmd+D. Clo Write editDocument Edit a document: the PREFERRED tool for small targeted changes. Two patch dialects — do NOT mix them in one ca Write editWhiteboardImageRegion Mask-edit (inpaint) one region of an image element on a whiteboard. Given the target image element id and a pa Write findAndReplaceTextInDocument Find and replace EXACT substrings in a document (NOT regex: wildcards and patterns are matched literally). Rep Write grantTeamWorkspaceAccess Grant a team read/write/admin access to a workspace. Idempotent. Team and workspace must be in the same organi Write insertDiagramInDocument Insert a new diagram into a document. Call listDiagramTypes to find your type, then getDiagramTypeGuide for DS Write insertImageInDocument Insert an image into a document (max 10MB). Provide imageBase64, imageBinary, or imageUrl. For large files, ca Write insertWhiteboardDiagram Insert (or re-render in place) a real DIAGRAM (BPMN, Diagrams-as-Code / any DSL: mermaid, d2, plantuml, graphv Write insertWhiteboardImage Insert a real IMAGE (photo, screenshot, logo, picture) into a whiteboard — the storage-backed equivalent of in Write inviteMember Invite a person by email to the credential's organisation. Auth: org id must match the credential AND credenti Write rebuildPlatformCatalogEmbeddings Internal maintenance (requires write). Syncs gte-small (384-dim) vector embeddings for every platform catalog Write reorderDocuments Batch-reorder documents within a folder (or project root) by setting sibling positions. Pass [{documentId, pos Write reorderFolders Batch-reorder folders within a parent (or project root) by setting sibling positions. Pass [{folderId, positio Write reorderImprovementCategories Reorder improvement categories by setting sort_order values. Write reorderPlanPhases Reorder plan phases by setting position values. WBS codes are recalculated. Write resendInvitation Resend a pending invitation: extends expires_at by 7 days and re-triggers the invitation email. Server resolve Write setDefaultBrandKit Set or clear the default BRAND KIT at a scope: organization, workspace, or project. Defaults cascade most-spec Write setKgDocumentScope Toggle KG-scope override for a single document (on/off/inherit). Documents default to inheriting their folder/ Write setKgFolderScope Toggle KG-scope override for a folder (on/off/inherit). Folders default to inheriting their project's scope. R Write setKgProjectVisibility Set the KG visibility mode for a project: 'strict' (multi-source rows hidden unless user can read every source Write setKgWorkspaceScope Toggle whether a workspace is in the Knowledge Graph (on/off/inherit). 'on' enables the workspace as a gate fo Write setMemberActive Soft-deactivate or reactivate an organisation member. Refuses self-deactivation, last-admin/owner deactivation Write setPlanItemParent Set or clear the WBS parent-child nesting of a task/improvement (outline hierarchy, no scheduling effect). Sam Write setResourcePermissionOverride Set a single 3-state override on a permission row: null=inherit, true=allow, false=deny. Per-axis (read/write/ Write traceImage Turn a raster image into hand-drawn freedraw strokes on a whiteboard, deterministically. Pass an image (imageU Write updateDiagramInDocument Update a diagram's code, description, or properties. Call getDiagramTypeGuide for DSL syntax. New diagramCode Write updateFolder Update a folder (rename/move/reorder). Supports nesting changes via parentId. Write updateImageInDocument Update image metadata (alt, caption, dimensions, alignment). Requires the document's versionTimestamp (from ge Write updateImprovement Update an improvement (or a task — tasks share this row, but prefer the symmetric updateTask alias when workin Write updateImprovementCategory Update an improvement category. Cannot modify system categories. Write updateImprovementComment Update a comment on an improvement. Requires the comment's updated_at as versionTimestamp. Write updateMemberRole Update an organisation member's role (admin or member). Owners cannot be changed via this tool. Refuses self-p Write updateOrganisation Update an organisation's name and/or description. Auth: ceiling — credential must hold can_admin_org capabilit Write updateOrgFeatureFlags Toggle feature flags on settings.enabledFeatures (plans, improvements, compliance, knowledge_graph, documents) Write updateOrgSettings Update an organisation's settings JSONB via deep merge. Auth: ceiling — credential must hold can_admin_org AND Write updatePlan Update a plan. Requires versionTimestamp from getPlan. Write updatePlanComment Update a comment on a plan. Requires the comment's updated_at as versionTimestamp. Write updatePlanPhase Update a plan phase. Requires versionTimestamp from getPlanPhase (not getPlan). Write updateProfile Update a user's profile name and/or display email. Self-updates do not require organisation_id; updates to oth Write updateProject Update a project's name, description, and/or icon. Mirrors the UI Project General Settings page. Auth: admin o Write updateResourcePermission Update the access level on an existing permission row. Override flags are NOT touched — use setResourcePermiss Write updateTask Update a task. Tasks share a row with improvements (improvement_items with is_task=true), so this is a thin al Write updateTaskDependency Change the type (FS/SS/FF) or lag/lead of an existing task-dependency. Doesn't move dates directly; flags the Write updateTeam Update a team's name, description, and/or colour. At least one field required. Slug is intentionally not edita Write updateTeamWorkspaceAccess Update an existing team's workspace access level. Refuses if no grant exists — call grantTeamWorkspaceAccess f Write updateUserPreferences Update the calling user's preferences. Self-only. Rate limit 60/min. Partial: only fields supplied are updated Write updateWhiteboardScene Edit elements on a whiteboard's canvas WITHOUT dropping the rest of the scene. A board may hold many diagrams/ Write updateWorkspace Update a workspace's name. Auth: standard workspace-write ladder + user must be workspace owner or admin. Slug Write updateWorkspaceMember Change an existing workspace member's role. Caller must be a workspace owner or admin. Cannot self-demote from Write upsertResourcePermission Insert or update a resource_permissions row for a user OR team on a workspace/project/folder/document/improvem

READ 76 tools

Read exportFromWhiteboard Export a design that lives in a whiteboard to an editable PowerPoint (PPTX), PDF, PNG images, or raw HTML. Giv Read getCdmdLanguageGuide Get the CDMD markdown language specification. Call before createDocument if unfamiliar with syntax. Read getCreditBalance Composite credit balance for an organisation: plan_credits (recurring monthly bucket), top_up_credits (purchas Read getCreditPackages List active credit packages available for purchase (name, credits, bonus_credits, price in cents AUD). Catalog Read getCurrentPlanEntitlements Read the plan entitlements (limits + capability flags) that apply to the caller's organisation. Returns { tier Read getCurrentUser Return the calling user's identity (user_id, display_name, full_name, email, avatar_url). Use this when the us Read getDeckReplyInWhiteboard Get the design agent's reply after calling designDeckInWhiteboard OR designIllustrationInWhiteboard: the statu Read getDiagramImage Render a diagram that ALREADY exists in a document to an IMAGE (svg/png/jpeg @1x/2x/3x) and return it — a temp Read getDiagramInDocument Get a diagram's full details including raw DSL source code. Use diagramId from DIAGRAM_OMITTED markers in getD Read getDiagramTypeGuide Get DSL writing instructions for a diagram type. Call before writing diagramCode. Read getDocument Read a document's content with line numbers. content.text lines are formatted NNNNN<TAB>content (cat -n style) Read getDocumentIngestJob Read the current status of an ingest job. Returns { status, stage, processedImages, totalImages, documentId, e Read getEffectivePermission Compute a user's effective permission level on a resource (taking team grants, inheritance, and 3-state overri Read getFolderHierarchy Get the folder and document tree starting from a specific folder. Alias for getProjectHierarchy with folderId. Read getImageInDocument Get image details including a fresh signed URL (expires after 1 hour). Use storagePath from IMAGE_OMITTED mark Read getImprovement Get full details for an improvement item including evidence, activity log, compliance context, and the checkli Read getKgScopeTree List every kg_scope row for the caller's organisation, optionally narrowed to a workspace or project subtree. Read getMeetingScribeStatus Get a meeting scribe's status after startMeetingScribe: the session state (joining, in the waiting room, live Read getMember Fetch a single organisation member by user_id, enriched with profile (email + display name). Auth: org id must Read getOrganisation Read a single organisation by id. Returns id, name, slug, description, settings (jsonb), created_at, member_co Read getOrgSettings Read an organisation's settings JSON and the derived enabled-features map (plans, documents, improvements, com Read getPlan Get full plan details including phases, items, and activity. Returns versionTimestamp — pass it to updatePlan Read getPlanHierarchy Get the complete plan hierarchy (phases, tasks, improvements) in one call. Recommended first call for plan nav Read getPlanPhase Get a plan phase by ID with full details. Returns versionTimestamp — pass it to updatePlanPhase for optimistic Read getPriceForTier Read the public catalog entry for a single subscription tier (free, pro, enterprise). Pro/Free pricing is publ Read getProject Read a single project by id. Auth via the standard project-access ladder. Returns the full v_projects row (id, Read getProjectHierarchy Get the complete folder and document tree for a project in one call. Recommended first call for navigation. Read getSubscription Read the subscription state for an organisation. Returns tier, status, current billing period, seat count, mem Read getTask Get a task by ID with full details, evidence, activity, and the checklist array (each item: id, text, due_date Read getTeam Get a single team by ID with profile-enriched member list (display_name, email, avatar_url, role, joined_at). Read getUserPreferences Read the calling user's preferences. Self-only — no params required. Returns { notifications, grids } where no Read getWhiteboard Read a whiteboard: its metadata plus a summary of the canvas (element count, element types, and text labels on Read getWhiteboardGuide Get the Stable Baseline whiteboarding guide (Markdown): when to use stencils vs architecture icons vs code/BPM Read getWhiteboardImage Render a whiteboard to a raster IMAGE so you can SEE it and confirm your edits look right, then iterate — like Read getWorkspace Read a single workspace by id. Auth via the standard workspace-access ladder (credential org match + workspace Read kg_backlinks Linked-mentions rail: every edge whose dst matches the named entity. Read kg_evaluate_retrieval Phase 5 / E3 — Provenance-aware assessor for a set of chunk_ids returned by kg_search. Returns per-chunk bucke Read kg_get_entity Fetch a KG entity by id or name, with 1-hop neighbours. Read kg_get_wiki_page Fetch a community wiki page (LLM-curated CDMD). Read kg_list_communities List Louvain communities for an org (optionally scoped by project). Read kg_related_documents Find other sources that share entities with the given source. Read kg_scope_status Check whether Knowledge Graph is in-scope for a given target. Read kg_search Unified Knowledge Graph KNOWLEDGE retrieval — facts, themes and relationships from INSIDE document CONTENT. Th Read kg_suggest_sample_questions 3 template + 3 LLM-generated sample questions for the knowledge-graph playground. Read listArchitectureIcons SOFTWARE & CLOUD architecture icons ONLY (AWS, Azure, GCP, Docker, Kubernetes, databases, message queues, dev Read listAssignablePrincipals Server-side searchable, paginated list of USERS and TEAMS that can be assigned as the owner of an improvement/ Read listBrandKits List an organisation's BRAND KITS (palette/fonts/logo), newest first. Use a returned id as brandKitId for a de Read listCreditPurchases List credit-purchase history for an organisation, newest first. Status, credits purchased, bonus, amount paid Read listDiagramTypes List supported diagram types. Pass query to search by name OR intent (keyword + semantic): e.g. 'circuit diagr Read listDocuments List AND grep documents in a project, workspace, or folder. query does a full-content search across each docum Read listDocumentVersions List version history for a document. Returns timestamps, creator, change summary, and content. Read listFolders List folders in a project. Use parentId for nested folders. For full tree, use getProjectHierarchy instead. Read listImprovementCategories List improvement categories for a project. Returns tree and flat list. Read listImprovements List AND grep improvements in a project. query searches the title, friendlyId and problem statement, not just Read listInvitations List organisation invitations. Auth: org id must match the credential's organisation AND the credential must h Read listInvoices List invoices for an organisation, newest first. Returns hosted Stripe invoice URLs and PDF links. Stripe IDs Read listMembers List members of an organisation, enriched with email + display name. Auth: org id must match the credential's Read listOrganisations List organisations you have access to. Supports query filtering by name/slug. Read listPaymentMethods List saved payment methods for an organisation. Returns masked card metadata only (brand, last4, exp month/yea Read listPlanPhases List phases for a plan ordered by position. Read listPlans List AND grep plans in a project. query searches the title, friendlyId and description, not just the title (su Read listProjects List projects in a workspace. Supports query filtering by project name. Read listResourcePermissions List explicit permission grants on a resource (workspace/project/folder/document/improvement/plan), including Read listTaskDependencies List FS/SS/FF task-dependency edges in a plan (the Gantt arrows). Scope by planId, projectId, or itemId. direc Read listTasks List AND grep tasks in a plan. query searches the title, friendlyId and description, not just the title (subst Read listTeams List teams in an organization, with optional search filter and an includeMembers flag that fans out to v_team_ Read listWhiteboards List the whiteboards in a project (hidden whiteboard-kind documents). Returns documentId, diagramId, title and Read listWhiteboardStencils Search the built-in library of structural whiteboard stencils — ready-made hand-drawn graphics: flowchart/UML/ Read listWorkspaces List workspaces you have access to. Supports query filtering by name/slug. Read pollSignupStatus Poll the status of a signup begun via startSignup. Anonymous-callable. Possible status values: pending (user h Read previewKgRebuild Preview the cost / coverage / ETA of a full KG rebuild for the org (optionally narrowed to a workspace or proj Read previewKgScopeChange Preview the credit cost, source counts, and ETA of including or excluding KG scope rows. Returns confirmation_ Read previewTaskDependencyCascade Dry-run of applyTaskDependencyCascade — returns the diff without writing. Empty items array means the plan is Read searchImprovements Locate any artefact (document / whiteboard / diagram / plan / task / improvement / compliance) by name or frie Read searchInfographicTemplates Semantic search over the 276 AntV Infographic templates — call this FIRST when building an infographic diagram Read searchTools Search available tools by keyword or category. Returns matching tool names and descriptions.

OTHER 1 tools

Other startSignup Begin an agent-driven sign-up to Stable Baseline. Anonymous-callable. Returns a verification_url and a 6-chara

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Stable Baseline

Can an AI agent move money through the Stable Baseline MCP server? +

Yes. The Stable Baseline server exposes 9 financial tools including applySubscriptionChange, cancelSubscription, getCustomerPortalLink. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Stable Baseline MCP server? +

Yes. The Stable Baseline server exposes 22 destructive tools including cancelAllKgInScope, cancelKgBuildBatch, deleteDiagramInDocument. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Stable Baseline? +

The Stable Baseline server has 83 write tools including acceptTaskDependencyReview, addImprovementActivity, addImprovementEvidence. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Stable Baseline.

How many tools does the Stable Baseline MCP server expose? +

196 tools across 4 categories: Destructive, Execute, Read, Write. 76 are read-only. 120 can modify, create, or delete data.

How do I enforce a policy on Stable Baseline? +

Register the Stable Baseline MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.