// SCAN REPORT

Iac

12 tools. 7 can modify or destroy data without limits.

7 write tools that can modify data. Rate limits recommended.

Last updated: 29 Jun 2026

7 can modify or destroy data

5 read-only

12 tools total

Community server · catalogue entry verified 29/06/2026

How to control Iac ↓

TOOL MAP

What Iac exposes to your agents

Read (5) Write / Execute (7) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Iac tools

Execute · High execute_app_command This tool executes arbitrary application commands on the user's system through AppleScript/JXA. Execute · Medium iac_mcp_activate_app Activating and bringing an application to the foreground is an external operation that triggers a system-level action (changing focus/frontmost app). Execute · High iac_mcp_click_element This tool performs UI automation by clicking elements in native macOS applications (Finder, Mail, Safari, etc.). Execute · High iac_mcp_click_menu Clicking menu items in macOS applications triggers arbitrary application actions — such as File > Delete, Edit > Format, or any other menu-driven command.

7 of Iac's 12 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Iac

PolicyLayer is an MCP gateway — it sits between your AI agents and Iac, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "iac_mcp_set_property": {
    "limits": [
      {
        "counter": "iac_mcp_set_property_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_app_tools": {
    "limits": [
      {
        "counter": "get_app_tools_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Iac — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON IAC →

Instant setup, no code required.

FULL CATALOGUE

All 12 Iac tools

EXECUTE 5 tools

Execute execute_app_command Execute an application command that was loaded via get_app_tools. Use this to invoke app-specific actions like Execute iac_mcp_activate_app Bring a macOS application to the front (activate it). Usage: Pass the application name. The app will become t Execute iac_mcp_click_element Click a UI element identified by a reference from ui_snapshot. Usage: 1. First call ui_snapshot to get elemen Execute iac_mcp_click_menu Click a menu item in an application by specifying the menu path. Usage: Provide the app name and menu path as Execute iac_mcp_send_keystroke Send a keystroke to an application with optional modifier keys. Usage: Specify the app, key to press, and opt

WRITE 2 tools

Write iac_mcp_set_property Set a property value on a referenced object. Usage: 1. First obtain a reference using query_object 2. Call se Write iac_mcp_set_value Set the value of a UI element identified by a reference from ui_snapshot. Works with text fields, text areas,

READ 5 tools

Read get_app_tools Get all available tools and object model for a specific macOS application. Use this to load tools on-demand fo Read iac_mcp_get_properties Get properties of a referenced object. Returns property names and their current values. Usage: 1. First obtai Read iac_mcp_get_properties_batch Get properties for multiple referenced objects in a single batch call. Reduces N separate get_properties calls Read iac_mcp_ui_snapshot Capture a snapshot of an application Read list_apps List all available macOS applications with their metadata

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Iac

How do I prevent bulk modifications through Iac? +

The Iac server has 2 write tools including iac_mcp_set_property, iac_mcp_set_value. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Iac.

How many tools does the Iac MCP server expose? +

12 tools across 3 categories: Execute, Read, Write. 5 are read-only. 7 can modify, create, or delete data.

How do I enforce a policy on Iac? +

Register the Iac MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Iac tool call.

Deterministic rules across all 12 Iac tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON IAC →

Instant setup, no code required.

12 Iac tools catalogued and risk-classified — across an index of 43,000+ MCP servers.