// SCAN REPORT

Retell AI MCP Server

52 tools. 32 can modify or destroy data without limits.

8 destructive tools with no built-in limits. Policy required.

Last updated: 4 Jul 2026

32 can modify or destroy data

20 read-only

52 tools total

Community server · catalogue entry verified 04/07/2026

How to control Retell AI MCP Server ↓

TOOL MAP

What Retell AI MCP Server exposes to your agents

Read (20) Write / Execute (24) Destructive / Financial (8)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Retell AI MCP Server tools

Destructive · High retell_delete_agent Deletion of an agent is an irreversible destructive action that cannot be undone. Destructive · High retell_delete_call This tool irreversibly deletes data that cannot be recovered or undone. Destructive · High retell_delete_chat_agent Deleting a chat agent is an irreversible operation that removes a configured AI agent from the Retell platform. Destructive · High retell_delete_conversation_flow This tool permanently removes a conversation flow, an irreversible operation.

32 of Retell AI MCP Server's 52 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Retell AI MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Retell AI MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "retell_delete_agent": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "retell_add_knowledge_base_sources": {
    "limits": [
      {
        "counter": "retell_add_knowledge_base_sources_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "retell_get_agent": {
    "limits": [
      {
        "counter": "retell_get_agent_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Retell AI MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON RETELL AI →

Instant setup, no code required.

FULL CATALOGUE

All 52 Retell AI MCP Server tools

DESTRUCTIVE 8 tools

Destructive retell_delete_agent Delete a voice agent from your account. Destructive retell_delete_call Delete a call and all associated data including recordings and transcripts. Destructive retell_delete_chat_agent Delete a chat agent. Destructive retell_delete_conversation_flow Delete a conversation flow. Destructive retell_delete_knowledge_base Delete a knowledge base. Destructive retell_delete_knowledge_base_source Remove a source from a knowledge base. Destructive retell_delete_llm Delete a Retell LLM configuration. Destructive retell_delete_phone_number Delete/release a phone number from your account.

EXECUTE 9 tools

Execute retell_create_batch_call Schedule bulk outbound phone calls. Execute retell_create_batch_test Run automated test scenarios against an agent. Execute retell_create_chat_completion Send a message in an existing chat session and get the agent Execute retell_create_phone_call Create a new outbound phone call using Retell AI. Initiates a call from a registered phone number to a target Execute retell_create_sms_chat Start an outbound SMS conversation using a specified chat agent. Execute retell_create_web_call Create a new web call session. Returns a call ID and access token for establishing a WebRTC connection. Execute retell_end_chat End an active chat session. Execute retell_publish_agent Publish/deploy the current agent configuration as a new version. Execute retell_register_phone_call Register an inbound call from a custom telephony provider.

WRITE 15 tools

Write retell_add_knowledge_base_sources Add documentation sources (URLs or text) to a knowledge base. Write retell_create_agent Create a new voice agent with specified configuration including voice, LLM engine, and behavior settings. Write retell_create_chat Create a new chat session with a chat agent. Write retell_create_chat_agent Create a new chat agent for text-based conversations. Write retell_create_conversation_flow Create a new conversation flow for structured, node-based conversation design. Write retell_create_knowledge_base Create a new knowledge base for providing context to agents. Write retell_create_llm Create a new Retell LLM configuration with custom prompts and settings. Write retell_create_phone_number Register/purchase a new phone number for use with Retell AI agents. Write retell_import_phone_number Import an existing phone number from an external provider via SIP. Write retell_update_agent Update configuration for an existing voice agent. Write retell_update_call Update call metadata or data storage settings for a specific call. Write retell_update_chat_agent Update a chat agent Write retell_update_conversation_flow Update a conversation flow. Write retell_update_llm Update a Retell LLM configuration. Write retell_update_phone_number Update settings for a phone number including assigned agents.

READ 20 tools

Read retell_get_agent Retrieve the configuration and details of a specific voice agent. Read retell_get_agent_versions Retrieve the version history of an agent. Read retell_get_call Retrieve details of a specific call including transcript, recording URL, duration, and analysis. Read retell_get_chat Retrieve details of a specific chat session. Read retell_get_chat_agent Retrieve details of a specific chat agent. Read retell_get_concurrency Check the current concurrent call limits and usage for your account. Read retell_get_conversation_flow Retrieve a conversation flow configuration. Read retell_get_knowledge_base Retrieve a knowledge base configuration. Read retell_get_llm Retrieve a Retell LLM configuration. Read retell_get_phone_number Retrieve details of a specific phone number. Read retell_get_voice Retrieve details of a specific voice. Read retell_list_agents List all voice agents in your Retell account. Read retell_list_calls List and filter calls with pagination support. Can filter by agent, status, time range, and more. Read retell_list_chat_agents List all chat agents in your account. Read retell_list_chats List all chat sessions with optional filtering. Read retell_list_conversation_flows List all conversation flows. Read retell_list_knowledge_bases List all knowledge bases. Read retell_list_llms List all Retell LLM configurations. Read retell_list_phone_numbers List all phone numbers registered with your Retell account. Read retell_list_voices List all available voices for use with agents.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Retell AI MCP Server

Can an AI agent delete data through the Retell AI MCP Server MCP server? +

Yes. The Retell AI MCP Server server exposes 8 destructive tools including retell_delete_agent, retell_delete_call, retell_delete_chat_agent. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Retell AI MCP Server? +

The Retell AI MCP Server server has 15 write tools including retell_add_knowledge_base_sources, retell_create_agent, retell_create_chat. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Retell AI MCP Server.

How many tools does the Retell AI MCP Server MCP server expose? +

52 tools across 3 categories: Destructive, Read, Write. 20 are read-only. 32 can modify, create, or delete data.

How do I enforce a policy on Retell AI MCP Server? +

Register the Retell AI MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Retell AI MCP Server tool call.

Deterministic rules across all 52 Retell AI MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON RETELL AI →

Instant setup, no code required.

52 Retell AI MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.