// SCAN REPORT

Fuul MCP Server

47 tools. 23 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

23 can modify or destroy data

24 read-only

47 tools total

Community server · catalogue entry verified 02/07/2026

How to control Fuul MCP Server ↓

TOOL MAP

What Fuul MCP Server exposes to your agents

Read (24) Write / Execute (17) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Fuul MCP Server tools

Financial · Critical approve_payouts The tool name strongly implies approving financial payouts to affiliates, which constitutes committing financial obligations. Financial · Critical update_payout_term The tool name strongly implies modification of payout terms (e.g., payment schedules, amounts, conditions) within a financial payout system. Destructive · High delete_incentive The tool name explicitly uses 'delete', which denotes permanent removal of data. Destructive · High delete_trigger The 'delete_' prefix indicates an irreversible data removal operation.

23 of Fuul MCP Server's 47 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Fuul MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Fuul MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "approve_payouts": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "delete_incentive": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "create_incentive": {
    "limits": [
      {
        "counter": "create_incentive_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "check_event_status": {
    "limits": [
      {
        "counter": "check_event_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Fuul MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON FUUL →

Instant setup, no code required.

FULL CATALOGUE

All 47 Fuul MCP Server tools

FINANCIAL 2 tools

Financial approve_payouts approve_payouts Financial update_payout_term update_payout_term

DESTRUCTIVE 4 tools

Destructive delete_incentive delete_incentive Destructive delete_trigger delete_trigger Destructive delete_user_referrer delete_user_referrer Destructive remove_user_from_referral_code remove_user_from_referral_code

EXECUTE 2 tools

Execute send_batch_events send_batch_events Execute send_event send_event

WRITE 15 tools

Write create_incentive create_incentive Write create_project_affiliate_public create_project_affiliate_public Write create_project_tier create_project_tier Write create_trigger create_trigger Write reject_payouts reject_payouts Write resolve_token_holder_price_reference resolve_token_holder_price_reference Write swap_user_referral_code swap_user_referral_code Write update_audience update_audience Write update_incentive_triggers update_incentive_triggers Write update_project_affiliate_public update_project_affiliate_public Write update_project_tier update_project_tier Write update_referral_code_max_uses update_referral_code_max_uses Write update_trigger update_trigger Write update_user_referrer update_user_referrer Write use_referral_code use_referral_code

READ 24 tools

Read check_event_status check_event_status Read get_affiliate_portal_stats get_affiliate_portal_stats Read get_incentive get_incentive Read get_incentive_history get_incentive_history Read get_incentive_stats get_incentive_stats Read get_project get_project Read get_project_affiliate_public get_project_affiliate_public Read get_project_affiliate_total_stats get_project_affiliate_total_stats Read get_project_affiliates_breakdown get_project_affiliates_breakdown Read get_project_incentives_breakdown get_project_incentives_breakdown Read get_trigger get_trigger Read get_user_referrer get_user_referrer Read list_audiences list_audiences Read list_chains list_chains Read list_incentives list_incentives Read list_payout_schemas list_payout_schemas Read list_payouts_pending_approval list_payouts_pending_approval Read list_price_references list_price_references Read list_project_tiers list_project_tiers Read list_projects list_projects Read list_rewards_payouts list_rewards_payouts Read list_trigger_types list_trigger_types Read ping ping Read whoami whoami

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Fuul MCP Server

Can an AI agent move money through the Fuul MCP Server MCP server? +

Yes. The Fuul MCP Server server exposes 2 financial tools including approve_payouts, update_payout_term. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Fuul MCP Server MCP server? +

Yes. The Fuul MCP Server server exposes 4 destructive tools including delete_incentive, delete_trigger, delete_user_referrer. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Fuul MCP Server? +

The Fuul MCP Server server has 15 write tools including create_incentive, create_project_affiliate_public, create_project_tier. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Fuul MCP Server.

How many tools does the Fuul MCP Server MCP server expose? +

47 tools across 3 categories: Destructive, Read, Write. 24 are read-only. 23 can modify, create, or delete data.

How do I enforce a policy on Fuul MCP Server? +

Register the Fuul MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Fuul MCP Server tool call.

Deterministic rules across all 47 Fuul MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON FUUL →

Instant setup, no code required.

47 Fuul MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.