// SCAN REPORT

TAPD MCP Server

40 tools. 16 can modify or destroy data without limits.

16 write tools that can modify data. Rate limits recommended.

Last updated:

16 can modify or destroy data
24 read-only
40 tools total

Community server · catalogue entry verified 03/07/2026

How to control TAPD MCP Server ↓

TOOL MAP

What TAPD MCP Server exposes to your agents

Read (24) Write / Execute (16) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
High Risk

The most dangerous TAPD MCP Server tools

Write · Medium add_timesheets Timesheets typically record work hours and project time allocation—reversible data that can be edited or deleted later. Write · Medium create_bug This tool creates new data (bug records) in a project management system, which is reversible through updates or deletion. Write · Medium create_comments Creating comments is a reversible Write operation that adds new data to the system without destructive effects. Write · Medium create_iteration Tool creates or initializes iterations in an agile project management system.

16 of TAPD MCP Server's 40 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control TAPD MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and TAPD MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations
{
  "add_timesheets": {
    "limits": [
      {
        "counter": "add_timesheets_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "get_bug": {
    "limits": [
      {
        "counter": "get_bug_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register TAPD MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON TAPD →

Instant setup, no code required.

FULL CATALOGUE

All 40 TAPD MCP Server tools

WRITE 16 tools
Write add_timesheets add_timesheets Write create_bug create_bug Write create_comments create_comments Write create_iteration create_iteration Write create_or_update_tcases create_or_update_tcases Write create_story_or_task create_story_or_task Write create_tcases_batch create_tcases_batch Write create_wiki create_wiki Write entity_relations 创建需求与缺陷关联关系 Write send_qiwei_message 发送信息到企业微信群 Write update_bug update_bug Write update_comments 更新评论，返回更新评论的数据 Write update_iteration update_iteration Write update_story_or_task update_story_or_task Write update_timesheets 更新花费工时，返回花费工时更新后的数据，每次只允许更新一条数据 Write update_wiki update_wiki
READ 24 tools
Read get_bug get_bug Read get_bug_count get_bug_count Read get_comments get_comments Read get_commit_msg 获取需求/缺陷/任务的源码提交关键字，将 commit 和需求/缺陷/任务关联 Read get_entity_attachments get_entity_attachments Read get_entity_custom_fields 获取 TAPD 需求或任务或迭代或测试用例的自定义字段配置 Read get_image get_image Read get_iterations get_iterations Read get_related_bugs 获取符合查询条件的所有需求关联的缺陷ID Read get_release_info get_release_info Read get_stories_fields_info 获取需求所有字段及候选值，返回符合查询条件的所有需求字段及候选值。 部分字段为静态候选值，建议参考下方 "可选值说明"部分。其余动态字段（如：status(状态)/iteration_id(迭代)/categories( Read get_stories_fields_lable 获取需求所有字段的中英文 Read get_stories_or_tasks get_stories_or_tasks Read get_story_or_task_count get_story_or_task_count Read get_tcases get_tcases Read get_timesheets get_timesheets Read get_todo 获取用户的待办，返回给用户的时候需要说明这是待办 Read get_user_participant_projects nick 非必填，如果传入，则使用传入的参数，否则使用client.nick，最后使用环境变量CURRENT_USER_NICK Read get_wiki get_wiki Read get_workflows_all_transitions 获取项目下的工作流流转细则，例如要流转到"实现中"，则需要调用这个工具查看当前状态能流转到的状态 Read get_workflows_last_steps get_workflows_last_steps Read get_workflows_status_map 获取工作流状态中英文名对应关系，例如想要获取所有"实现中"的需求/缺陷等，可以调用这个接口先获取状态的英文名，再根据这个英文名作为 status 字段的值去查询 Read get_workitem_types get_workitem_types Read get_workspace_info 根据项目ID（workspace_id）获取项目信息，包含项目ID,项目名称,状态,创建时间,创建人等信息
FAQ

Questions about TAPD MCP Server

How do I prevent bulk modifications through TAPD MCP Server? +

The TAPD MCP Server server has 16 write tools including add_timesheets, create_bug, create_comments. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach TAPD MCP Server.

How many tools does the TAPD MCP Server MCP server expose? +

40 tools across 2 categories: Read, Write. 24 are read-only. 16 can modify, create, or delete data.

How do I enforce a policy on TAPD MCP Server? +

Register the TAPD MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every TAPD MCP Server tool call.

Deterministic rules across all 40 TAPD MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON TAPD →

Instant setup, no code required.

40 TAPD MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.