// SCAN REPORT

Konsulto

22 tools. 10 can modify or destroy data without limits.

10 write tools that can modify data. Rate limits recommended.

Last updated: 30 Jun 2026

10 can modify or destroy data

12 read-only

22 tools total

Community server · catalogue entry verified 30/06/2026

How to control Konsulto ↓

TOOL MAP

What Konsulto exposes to your agents

Read (12) Write / Execute (10) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Konsulto tools

Write · Medium konsulto_replace_section The tool creates or modifies data reversibly by replacing section content in audit findings. Write · Medium konsulto_add_evidence_to_finding This tool modifies existing audit findings by attaching evidence to them. Write · Medium konsulto_append_to_section This tool modifies findings by appending content to sections, which is a Write operation. Write · Medium konsulto_attach_evidence The tool creates or adds attachments to an audit system, which is a reversible modification of data.

10 of Konsulto's 22 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Konsulto

PolicyLayer is an MCP gateway — it sits between your AI agents and Konsulto, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "konsulto_add_evidence_to_finding": {
    "limits": [
      {
        "counter": "konsulto_add_evidence_to_finding_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "konsulto_audit_summary": {
    "limits": [
      {
        "counter": "konsulto_audit_summary_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Konsulto — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON KONSULTO →

Instant setup, no code required.

FULL CATALOGUE

All 22 Konsulto tools

WRITE 10 tools

Write konsulto_add_evidence_to_finding Graft an already-uploaded attachment into an existing finding\ Write konsulto_append_to_section Append markdown prose to a named section of a finding. Use this to add Write konsulto_attach_evidence Upload a file (or inline content) as an attachment in the active audit. Write konsulto_bulk_update_status Change the status of many findings at once. Use for Write konsulto_compose_finding Create a brand-new finding with a fully-formatted body. Author each Write konsulto_create_asset Create a new asset in the active audit. Use when a scan or evidence Write konsulto_link_asset Attach an asset to a finding. Tries to match an existing asset by name Write konsulto_replace_section Replace the entire prose under a named section. The previous content Write konsulto_set_active_audit Pin one audit as the session\ Write konsulto_update_finding Update scalar fields on an existing finding. Use this for changing

READ 12 tools

Read konsulto_audit_summary Aggregate finding counts for an audit: total, breakdown by severity Read konsulto_get_audit_context One-shot orientation tool — returns the active audit\ Read konsulto_get_finding Read a single finding by ID, including its body rendered as markdown Read konsulto_get_finding_format Return the section structure + markdown authoring rules for composing a Read konsulto_list_assets List assets in the audit (or tenant-wide if no audit filter). Returns Read konsulto_list_finding_statuses List this tenant\ Read konsulto_list_my_audits List audits to find the audit ID you want to work in. By default (scope Read konsulto_list_scope List the scope elements for an audit — what\ Read konsulto_read_section Read just one section of a finding\ Read konsulto_search_findings Search findings within an audit. Defaults to the active audit when set. Read konsulto_search_templates Search the finding-template catalog. Returns a slim shape (id, title, Read konsulto_whoami Show who the MCP is acting as, their permissions, the active audit, and

FAQ

Questions about Konsulto

How do I prevent bulk modifications through Konsulto? +

The Konsulto server has 10 write tools including konsulto_add_evidence_to_finding, konsulto_append_to_section, konsulto_attach_evidence. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Konsulto.

How many tools does the Konsulto MCP server expose? +

22 tools across 2 categories: Read, Write. 12 are read-only. 10 can modify, create, or delete data.

How do I enforce a policy on Konsulto? +

Register the Konsulto MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Konsulto tool call.

Deterministic rules across all 22 Konsulto tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON KONSULTO →

Instant setup, no code required.

22 Konsulto tools catalogued and risk-classified — across an index of 43,000+ MCP servers.