// SCAN REPORT

Lichess MCP

28 tools. 8 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 3 Jul 2026

8 can modify or destroy data

20 read-only

28 tools total

Community server · catalogue entry verified 03/07/2026

How to control Lichess MCP ↓

TOOL MAP

What Lichess MCP exposes to your agents

Read (20) Write / Execute (7) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Lichess MCP tools

Destructive · Low lichess_cancel_challenge Canceling a challenge irreversibly withdraws the outgoing invitation — the challenged party can no longer accept it. Execute · Medium lichess_accept_challenge This tool executes an action with external effects: accepting a challenge initiates a binding game on Lichess that involves time commitment, rating changes, and game records. Execute · Medium lichess_auth_start This tool executes an external operation (opening a browser and initiating an OAuth flow) rather than simply reading or writing data directly. Execute · Medium lichess_make_move This tool triggers an external operation on the Lichess platform by submitting a move in a live game.

8 of Lichess MCP's 28 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Lichess MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and Lichess MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "lichess_cancel_challenge": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "lichess_create_challenge": {
    "limits": [
      {
        "counter": "lichess_create_challenge_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "lichess_abort": {
    "limits": [
      {
        "counter": "lichess_abort_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Lichess MCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON LICHESS →

Instant setup, no code required.

FULL CATALOGUE

All 28 Lichess MCP tools

DESTRUCTIVE 1 tools

Destructive lichess_cancel_challenge Cancel an outgoing chess challenge you sent on Lichess.

EXECUTE 3 tools

Execute lichess_accept_challenge Accept an incoming chess challenge on Lichess. Start the game with the challenger. Execute lichess_auth_start Start the Lichess OAuth login flow. Opens a browser for authorization. Use this to connect, sign in, or authen Execute lichess_make_move Play a chess move in an active Lichess game using UCI notation (e.g. e2e4, d7d5, e7e8q for promotion). Submit

WRITE 4 tools

Write lichess_create_challenge Challenge a Lichess player to a chess game. Send a game invite with custom time control (bullet, blitz, rapid, Write lichess_decline_challenge Decline an incoming chess challenge on Lichess. Optionally provide a reason. Write lichess_resign Resign and forfeit an active Lichess chess game. Concedes the game to your opponent. Write lichess_send_chat Send a chat message in an active Lichess chess game, to the player or spectator chat room.

READ 20 tools

Read lichess_abort Abort an active Lichess chess game before it has started properly. Only works in the first few moves. Read lichess_auth_status Check if you are authenticated with Lichess and return account info. Use this to verify login status or confir Read lichess_challenge_ai Challenge the Lichess AI (Stockfish) to a chess game. Choose difficulty level 1–8, time control, color, and va Read lichess_cloud_eval Get Lichess cloud engine evaluation for a chess position in FEN notation. Returns the best move, score, and to Read lichess_get_crosstable Get the head-to-head record between two Lichess players. Shows total games and score for each player. Read lichess_get_daily_puzzle Get today Read lichess_get_leaderboard Get the Lichess leaderboard — top players by rating for a specific time control (bullet, blitz, rapid, classic Read lichess_get_my_games Fetch your recent chess games from Lichess. Returns game history including moves, result, opponent, time contr Read lichess_get_my_profile Get your Lichess account profile, ratings, and stats. Returns your chess rating, username, and performance acr Read lichess_get_next_puzzle Get your next recommended Lichess chess puzzle based on your puzzle rating and history. Read lichess_get_ongoing_games Get your currently active or in-progress chess games on Lichess. Lists all games you are currently playing, in Read lichess_get_puzzle Get a specific Lichess chess puzzle by ID. Returns the board position, moves, theme, and difficulty rating for Read lichess_get_puzzle_activity Get your Lichess puzzle activity history — recent puzzles you attempted, results, ratings, and themes. Read lichess_get_rating_history Get the chess rating history over time for a Lichess player across all time controls (bullet, blitz, rapid, cl Read lichess_get_user Get a Lichess user Read lichess_list_challenges List your incoming and outgoing chess challenges on Lichess. See pending game invites you have received or sen Read lichess_offer_draw Offer, accept, or decline a draw in an active Lichess chess game. Propose a draw to your opponent or respond t Read lichess_stream_events Stream incoming Lichess events such as game starts, incoming challenges, and correspondence game moves. Read lichess_stream_game Stream the live board state, moves, and game events for an ongoing Lichess chess game. Get real-time updates i Read lichess_takeback Request, accept, or decline a takeback (undo last move) in an active Lichess chess game.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Lichess MCP

Can an AI agent delete data through the Lichess MCP server? +

Yes. The Lichess MCP server exposes 1 destructive tools including lichess_cancel_challenge. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Lichess MCP? +

The Lichess MCP server has 4 write tools including lichess_create_challenge, lichess_decline_challenge, lichess_resign. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Lichess MCP.

How many tools does the Lichess MCP server expose? +

28 tools across 4 categories: Destructive, Execute, Read, Write. 20 are read-only. 8 can modify, create, or delete data.

How do I enforce a policy on Lichess MCP? +

Register the Lichess MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Lichess MCP tool call.

Deterministic rules across all 28 Lichess MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON LICHESS →

Instant setup, no code required.

28 Lichess MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.