// SCAN REPORT

Twenty MCP Server

219 tools. 124 can modify or destroy data without limits.

31 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

124 can modify or destroy data

95 read-only

219 tools total

Community server · catalogue entry verified 12/06/2026

How to control Twenty MCP Server ↓

TOOL MAP

What Twenty MCP Server exposes to your agents

Read (95) Write / Execute (93) Destructive / Financial (31)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Twenty MCP Server tools

Destructive · High deleteOneAttachment This tool permanently deletes an attachment from the Twenty CRM system. Destructive · High deleteOneBlocklist This tool performs an irreversible delete operation on a single blocklist entity. Destructive · High deleteOneCalendarChannel This tool permanently removes a calendar channel record, which is an irreversible deletion. Destructive · High deleteOneCalendarChannelEventAssociation The tool deletes data that cannot be undone.

124 of Twenty MCP Server's 219 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Twenty MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Twenty MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "deleteOneAttachment": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "createManyAttachments": {
    "limits": [
      {
        "counter": "createmanyattachments_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "findAttachmentDuplicates": {
    "limits": [
      {
        "counter": "findattachmentduplicates_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Twenty MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON TWENTY →

Free to start. No card required.

FULL CATALOGUE

All 219 Twenty MCP Server tools

DESTRUCTIVE 31 tools

WRITE 93 tools

Write createManyAttachments Create Many attachments Write createManyBlocklists Create Many blocklists Write createManyCalendarChannelEventAssociations Create Many calendarChannelEventAssociations Write createManyCalendarChannels Create Many calendarChannels Write createManyCalendarEventParticipants Create Many calendarEventParticipants Write createManyCalendarEvents Create Many calendarEvents Write createManyCompanies Create Many companies Write createManyConnectedAccounts Create Many connectedAccounts Write createManyFavoriteFolders Create Many favoriteFolders Write createManyFavorites Create Many favorites Write createManyMessageChannelMessageAssociations Create Many messageChannelMessageAssociations Write createManyMessageChannels Create Many messageChannels Write createManyMessageFolders Create Many messageFolders Write createManyMessageParticipants Create Many messageParticipants Write createManyMessages Create Many messages Write createManyMessageThreads Create Many messageThreads Write createManyNotes Create Many notes Write createManyNoteTargets Create Many noteTargets Write createManyOpportunities Create Many opportunities Write createManyPeople Create Many people Write createManyTasks Create Many tasks Write createManyTaskTargets Create Many taskTargets Write createManyTimelineActivities Create Many timelineActivities Write createManyViewFields Create Many viewFields Write createManyViewFilters Create Many viewFilters Write createManyViews Create Many views Write createManyWorkflowAutomatedTriggers Create Many workflowAutomatedTriggers Write createManyWorkflowRuns Create Many workflowRuns Write createManyWorkflows Create Many workflows Write createManyWorkflowVersions Create Many workflowVersions Write createManyWorkspaceMembers Create Many workspaceMembers Write createOneAttachment Create One attachment Write createOneBlocklist Create One blocklist Write createOneCalendarChannel Create One calendarChannel Write createOneCalendarChannelEventAssociation Create One calendarChannelEventAssociation Write createOneCalendarEvent Create One calendarEvent Write createOneCalendarEventParticipant Create One calendarEventParticipant Write createOneCompany Create One company Write createOneConnectedAccount Create One connectedAccount Write createOneFavorite Create One favorite Write createOneFavoriteFolder Create One favoriteFolder Write createOneMessage Create One message Write createOneMessageChannel Create One messageChannel Write createOneMessageChannelMessageAssociation Create One messageChannelMessageAssociation Write createOneMessageFolder Create One messageFolder Write createOneMessageParticipant Create One messageParticipant Write createOneMessageThread Create One messageThread Write createOneNote Create One note Write createOneNoteTarget Create One noteTarget Write createOneOpportunity Create One opportunity Write createOnePerson Create One person Write createOneTask Create One task Write createOneTaskTarget Create One taskTarget Write createOneTimelineActivity Create One timelineActivity Write createOneView Create One view Write createOneViewField Create One viewField Write createOneViewFilter Create One viewFilter Write createOneWorkflow Create One workflow Write createOneWorkflowAutomatedTrigger Create One workflowAutomatedTrigger Write createOneWorkflowRun Create One workflowRun Write createOneWorkflowVersion Create One workflowVersion Write createOneWorkspaceMember Create One workspaceMember Write UpdateOneAttachment Update One attachment Write UpdateOneBlocklist Update One blocklist Write UpdateOneCalendarChannel Update One calendarChannel Write UpdateOneCalendarChannelEventAssociation Update One calendarChannelEventAssociation Write UpdateOneCalendarEvent Update One calendarEvent Write UpdateOneCalendarEventParticipant Update One calendarEventParticipant Write UpdateOneCompany Update One company Write UpdateOneConnectedAccount Update One connectedAccount Write UpdateOneFavorite Update One favorite Write UpdateOneFavoriteFolder Update One favoriteFolder Write UpdateOneMessage Update One message Write UpdateOneMessageChannel Update One messageChannel Write UpdateOneMessageChannelMessageAssociation Update One messageChannelMessageAssociation Write UpdateOneMessageFolder Update One messageFolder Write UpdateOneMessageParticipant Update One messageParticipant Write UpdateOneMessageThread Update One messageThread Write UpdateOneNote Update One note Write UpdateOneNoteTarget Update One noteTarget Write UpdateOneOpportunity Update One opportunity Write UpdateOnePerson Update One person Write UpdateOneTask Update One task Write UpdateOneTaskTarget Update One taskTarget Write UpdateOneTimelineActivity Update One timelineActivity Write UpdateOneView Update One view Write UpdateOneViewField Update One viewField Write UpdateOneViewFilter Update One viewFilter Write UpdateOneWorkflow Update One workflow Write UpdateOneWorkflowAutomatedTrigger Update One workflowAutomatedTrigger Write UpdateOneWorkflowRun Update One workflowRun Write UpdateOneWorkflowVersion Update One workflowVersion Write UpdateOneWorkspaceMember Update One workspaceMember

READ 95 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Twenty MCP Server

Can an AI agent delete data through the Twenty MCP Server MCP server? +

Yes. The Twenty MCP Server server exposes 31 destructive tools including deleteOneAttachment, deleteOneBlocklist, deleteOneCalendarChannel. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Twenty MCP Server? +

The Twenty MCP Server server has 93 write tools including createManyAttachments, createManyBlocklists, createManyCalendarChannelEventAssociations. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Twenty MCP Server.

How many tools does the Twenty MCP Server MCP server expose? +

219 tools across 3 categories: Destructive, Read, Write. 95 are read-only. 124 can modify, create, or delete data.

How do I enforce a policy on Twenty MCP Server? +

Register the Twenty MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Twenty MCP Server tool call.

Deterministic rules across all 219 Twenty MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON TWENTY →

Free to start. No card required.

219 Twenty MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.