// SCAN REPORT

Keitaro MCP Server

37 tools. 16 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

16 can modify or destroy data

21 read-only

37 tools total

Community server · catalogue entry verified 30/06/2026

How to control Keitaro MCP Server ↓

TOOL MAP

What Keitaro MCP Server exposes to your agents

Read (21) Write / Execute (12) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Keitaro MCP Server tools

Destructive · High keitaro_delete_campaign This tool performs an irreversible action on campaign data by archiving/deleting it. Destructive · High keitaro_delete_landing_page This tool removes or disables a landing page from active use. Destructive · High keitaro_delete_offer Although the description specifies 'soft delete' and notes the offer 'can be restored,' the tool's primary function is to delete/archive data irreversibly from the user's operational view. Destructive · High keitaro_delete_stream This tool permanently deletes data (a stream) with no undo capability.

16 of Keitaro MCP Server's 37 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Keitaro MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Keitaro MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "keitaro_delete_campaign": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "keitaro_clone_campaign": {
    "limits": [
      {
        "counter": "keitaro_clone_campaign_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "keitaro_build_report": {
    "limits": [
      {
        "counter": "keitaro_build_report_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Keitaro MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON KEITARO →

Instant setup, no code required.

FULL CATALOGUE

All 37 Keitaro MCP Server tools

DESTRUCTIVE 4 tools

Destructive keitaro_delete_campaign Archive a campaign (soft delete). Campaign can be restored later with Destructive keitaro_delete_landing_page Archive a landing page. Destructive keitaro_delete_offer Archive an offer (soft delete, can be restored). Destructive keitaro_delete_stream Delete a stream from a campaign. This removes the stream permanently.

WRITE 12 tools

Write keitaro_clone_campaign Duplicate a campaign including its streams. Write keitaro_create_affiliate_network Create an affiliate network. Write keitaro_create_campaign Create a new campaign. Required: name. Write keitaro_create_landing_page Create a landing page. Required: name, action_type, action_payload (URL). Write keitaro_create_offer Create a new offer. Required: name. Write keitaro_create_stream Create a new stream (flow) in a campaign. Required: campaign_id, type, name. Write keitaro_create_traffic_source Create a traffic source. Write keitaro_toggle_stream Enable or disable a stream. Write keitaro_update_campaign Update campaign fields. Only provided fields are changed (partial update). Write keitaro_update_landing_page Update landing page fields. Write keitaro_update_offer Update offer fields (partial update). Write keitaro_update_stream Update stream fields (partial update).

READ 21 tools

Read keitaro_build_report Build aggregated analytics report with custom dimensions, measures, Read keitaro_check_domain Check domain DNS/SSL status. Returns updated domain info. Read keitaro_get_affiliate_network Get affiliate network details by ID. Read keitaro_get_campaign Get campaign details by ID. Returns full config including alias, name, Read keitaro_get_clicks Query raw click records via POST /clicks/log. Returns individual click Read keitaro_get_conversions Query raw conversion records via POST /conversions/log. Returns Read keitaro_get_domain Get domain details by ID including SSL and DNS status. Read keitaro_get_landing_page Get landing page details by ID. Read keitaro_get_offer Get offer details by ID. Returns full config including payout settings, Read keitaro_get_stream Get stream details by ID. Returns full config including filters, Read keitaro_get_traffic_source Get traffic source details by ID. Read keitaro_list_affiliate_networks List all affiliate networks. Returns id, name, postback_url, Read keitaro_list_campaigns List all campaigns. Returns id, name, alias, state, type, group_id, Read keitaro_list_domains List all domains. Returns id, name, is_ssl, network_status, Read keitaro_list_groups List groups by type. Types: campaigns, offers, landings, domains. Read keitaro_list_instances List all registered Keitaro tracker instances with URLs and descriptions. Read keitaro_list_landing_pages List all landing pages. Returns id, name, group_id, action_type, Read keitaro_list_offers List all offers. Returns id, name, group_id, offer_type, action_type, Read keitaro_list_streams List streams (flows) for a campaign. Returns id, name, type, position, Read keitaro_list_traffic_sources List all traffic sources. Returns id, name, postback_url, template params. Read keitaro_toggle_campaign Enable or disable a campaign.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Keitaro MCP Server

Can an AI agent delete data through the Keitaro MCP Server MCP server? +

Yes. The Keitaro MCP Server server exposes 4 destructive tools including keitaro_delete_campaign, keitaro_delete_landing_page, keitaro_delete_offer. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Keitaro MCP Server? +

The Keitaro MCP Server server has 12 write tools including keitaro_clone_campaign, keitaro_create_affiliate_network, keitaro_create_campaign. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Keitaro MCP Server.

How many tools does the Keitaro MCP Server MCP server expose? +

37 tools across 4 categories: Destructive, Execute, Read, Write. 21 are read-only. 16 can modify, create, or delete data.

How do I enforce a policy on Keitaro MCP Server? +

Register the Keitaro MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Keitaro MCP Server tool call.

Deterministic rules across all 37 Keitaro MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON KEITARO →

Instant setup, no code required.

37 Keitaro MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.