// SCAN REPORT

Orchard

65 tools. 25 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

25 can modify or destroy data

40 read-only

65 tools total

Community server · catalogue entry verified 12/06/2026

How to control Orchard ↓

TOOL MAP

What Orchard exposes to your agents

Read (40) Write / Execute (19) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Orchard tools

Destructive · High files.trash Although technically reversible via Trash recovery, this tool irreversibly removes files from their current location and active filesystem state. Destructive · High keynote.remove_slide This tool permanently removes a slide from a presentation file without the ability to undo the action programmatically. Destructive · High numbers.remove_sheet Removing a sheet from a spreadsheet is a destructive action that cannot be easily undone. Destructive · High reminders.delete_reminder Deletion operations are irreversible and cannot be undone.

25 of Orchard's 65 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Orchard

PolicyLayer is an MCP gateway — it sits between your AI agents and Orchard, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "files.trash": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "files.copy": {
    "limits": [
      {
        "counter": "files.copy_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "system.doctor": {
    "limits": [
      {
        "counter": "system.doctor_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Orchard — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ORCHARD →

Free to start. No card required.

FULL CATALOGUE

All 65 Orchard tools

DESTRUCTIVE 6 tools

Destructive files.trash Move a file or folder to the Trash (reversible delete). Path must be under home directory. Destructive keynote.remove_slide Delete a slide from a Keynote presentation. Destructive numbers.remove_sheet Remove a sheet from a Numbers spreadsheet. Destructive reminders.delete_reminder Delete a reminder. Destructive files.move Move or rename files and folders. Supports batch operations for mass renaming. All paths must be under home di Destructive reminders.delete_list Delete a reminder list. Fails if the list has reminders unless force is true.

EXECUTE 1 tools

Execute keynote.export Export a Keynote presentation to PDF, PowerPoint, PNG, or JPEG.

WRITE 18 tools

Write files.copy Copy a file or folder to a new location. Both paths must be under home directory. Write keynote.reorder_slides Move a slide from one position to another in a Keynote presentation. Write pages.insert_table Insert a table into a Pages document from JSON data. Write reminders.complete_reminder Mark a reminder as completed. Write reminders.create_list Create a new reminder list. Write files.create_folder Create a new directory with intermediate directories. Path must be under home directory. Write keynote.add_slide Add a new slide to a Keynote presentation with optional layout, title, body, notes, and position. Write keynote.create Create a new Keynote presentation. Optionally specify a theme. Write keynote.edit_slide Edit an existing slide Write mail.create_draft Create a draft email in Mail.app. Opens a compose window for user review before sending. Requires Mail.app to Write mail.save_attachment Save an email attachment to disk. Use mail.read_message first to see available attachments and their indices. Write numbers.add_sheet Add a new sheet to a Numbers spreadsheet. Write numbers.create Create a new Numbers spreadsheet. Optionally provide initial data or a template. Write numbers.write Write data to a Numbers spreadsheet. Optionally specify sheet, table, and cell range. Write pages.create Create a new Pages document. Optionally provide initial text or a template. Write pages.find_replace Find and replace text in a Pages document. Write pages.write Set the body text of a Pages document. Write reminders.create_reminder Create a new reminder in a list.

READ 40 tools

Read system.doctor Check orchard-mcp permissions status, list accessible Calendar accounts, Mail accounts, and Reminders status. Read calendar.list_calendars List all Apple Calendar calendars with account name, type, color, and read-only status. Read calendar.list_events List calendar events in a date range. Recurring events are properly expanded. Optionally filter by calendar ID Read calendar.search Search calendar events by title, notes, or location within a date range. Read calendar.today Get all calendar events for today across all calendars. Read contacts.list_groups List all contact groups with member counts. Requires Contacts access. Read contacts.read_contact Read full details for a contact by ID (from contacts.search). Includes emails, phones, postal addresses, URLs, Read contacts.search Search contacts by name, email, or phone number. Phone queries (starting with + or a digit) match full numbers Read files.info Get detailed metadata for a file or folder, including Spotlight attributes (content type, dimensions, authors, Read files.list List directory contents with metadata (name, size, dates, type). Paths relative to home directory. Read files.read Read and extract text from a file. Handles plain text, PDF (via PDFKit), images (via OCR), and documents (.doc Read files.search Search files using macOS Spotlight. Searches file names and content across indexed volumes. Scoped to home dir Read keynote.info Get metadata about a Keynote presentation (name, slide count, theme). Read keynote.list_slides List all slides in a Keynote presentation with their content and metadata. Read keynote.list_themes List all available Keynote themes. Read keynote.read Read slide content from a Keynote presentation (title, body, notes, layout, skipped status). Read keynote.search Search for Keynote presentation files by name. Read mail.flagged List flagged (starred) email messages across all accounts. Returns message headers. Requires Mail.app to be ru Read mail.list_accounts List all Apple Mail accounts with their mailboxes and unread counts. Requires Mail.app to be running. Read mail.read_message Get the full content of an email message by its message ID (from mail.search or mail.unread_summary). Returns Read mail.search Search email messages by subject, sender, body, or all fields (default: all). Returns headers only (no body). Read mail.unread_summary Get unread email summary across all accounts: unread count per account and recent unread message subjects/send Read notes.list_folders List all Notes folders grouped by account with note counts. Requires Notes.app to be running and Automation pe Read notes.list_notes List notes, optionally filtered by folder/account. Returns headers only (id, title, modified, folder). Require Read notes.read_note Read a note Read notes.search Search notes by title, body, or both. Returns headers only. Requires Notes.app to be running. Read numbers.export Export a Numbers spreadsheet to another format (CSV, PDF, or XLSX). Read numbers.get_formulas Get formulas from cells in a Numbers spreadsheet. Optionally specify sheet, table, and range. Read numbers.info Get metadata and summary information about a Numbers spreadsheet. Read numbers.list_sheets List all sheets in a Numbers spreadsheet. Read numbers.read Read data from a Numbers spreadsheet. Optionally specify sheet, table, and cell range. Read numbers.search Search for Numbers spreadsheet files by name or content. Read pages.export Export a Pages document to another format (PDF, Word, TXT, or EPUB). Read pages.info Get metadata about a Pages document (name, word count, page count). Read pages.list_sections List sections in a Pages document with preview text and word counts. Read pages.read Read the body text from a Pages document. Read pages.search Search for Pages document files by name or content. Read reminders.list_lists List all Apple Reminders lists with account name, color, and modification status. Read reminders.list_reminders List reminders from a specific list or all lists. Supports filters: incomplete (default), completed, overdue, Read reminders.today Get incomplete reminders due today plus any overdue reminders across all lists.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Orchard

Can an AI agent delete data through the Orchard MCP server? +

Yes. The Orchard server exposes 6 destructive tools including files.trash, keynote.remove_slide, numbers.remove_sheet. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Orchard? +

The Orchard server has 18 write tools including files.copy, keynote.reorder_slides, pages.insert_table. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Orchard.

How many tools does the Orchard MCP server expose? +

65 tools across 4 categories: Destructive, Execute, Read, Write. 40 are read-only. 25 can modify, create, or delete data.

How do I enforce a policy on Orchard? +

Register the Orchard MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Orchard tool call.

Deterministic rules across all 65 Orchard tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ORCHARD →

Free to start. No card required.

65 Orchard tools catalogued and risk-classified — across an index of 43,000+ MCP servers.