// SCAN REPORT

Ontraport MCP Server

51 tools. 29 can modify or destroy data without limits.

9 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

29 can modify or destroy data

22 read-only

51 tools total

Community server · catalogue entry verified 02/07/2026

How to control Ontraport MCP Server ↓

TOOL MAP

What Ontraport MCP Server exposes to your agents

Read (22) Write / Execute (20) Destructive / Financial (9)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Ontraport MCP Server tools

Financial · Critical pay_invoice This tool directly initiates a financial transaction by charging a payment card on file. Financial · Critical refund_transaction This tool commits financial obligations by processing refunds through payment gateways. Financial · Critical cancel_subscription This tool directly terminates financial relationships by canceling subscriptions and stopping future charges. Financial · Critical write_off_transaction Writing off transactions is a financial action that permanently marks debts as uncollectable, affecting financial records and revenue recognition.

29 of Ontraport MCP Server's 51 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Ontraport MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Ontraport MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "cancel_subscription": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "delete_contact": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_tag_by_id": {
    "limits": [
      {
        "counter": "add_tag_by_id_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_collection_count": {
    "limits": [
      {
        "counter": "get_collection_count_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Ontraport MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ONTRAPORT →

Instant setup, no code required.

FULL CATALOGUE

All 51 Ontraport MCP Server tools

FINANCIAL 7 tools

Financial cancel_subscription Cancel one or more active subscriptions by deleting their order records. This removes the recurring payment sc Financial pay_invoice Pay an existing unpaid invoice using a card on file. This charges the contact Financial process_transaction Charge a contact Financial refund_transaction Refund one or more previously charged transactions. The refund is processed through the original payment gatew Financial rerun_transaction Retry a previously declined or failed transaction. The charge is re-attempted against the contact Financial void_transaction Void one or more previously charged transactions. Voiding differs from refunding — a void cancels a transactio Financial write_off_transaction Write off one or more unpaid transactions. Use this for transactions that will not be collected (e.g., bad deb

DESTRUCTIVE 2 tools

Destructive delete_contact Permanently delete a single contact record. This cannot be undone. The contact is removed from all sequences, Destructive delete_order Delete a single order record. This removes the future payment schedule (subscription or payment plan). The ori

EXECUTE 1 tools

Execute resend_invoice Resend an invoice email for a previously charged transaction.

WRITE 19 tools

Write add_tag_by_id Apply one or more tags to one or more contacts by tag ID. Use this only when you already have the tag ID. Write add_tag_by_name Apply one or more tags to one or more contacts by tag name. If a tag with that name doesn Write assign_task Create and assign a task to one or more contacts. Requires a task message ID (the template for the task) and s Write cancel_task Cancel one or more tasks. Cancelled tasks remain in the system with status 2 but are no longer actionable. Write complete_task Mark one or more tasks as completed. Optionally include a task outcome and followup task data. Write convert_to_collections Convert one or more transactions to collections status. Use this for overdue subscriptions or payment plans th Write create_contact Create a new contact record. This allows duplicate emails — if you want to avoid duplicates, use merge_or_crea Write create_invoice Create and optionally send an invoice (unpaid bill) to a contact. Unlike process_transaction, this does NOT ch Write create_note Create a note attached to a contact record. Notes are visible on the contact Write mark_transaction_paid Mark a transaction as manually paid. Use when payment was received outside of the payment gateway (e.g., check Write merge_or_create_contact Look up a contact by email (or unique_id). If one exists, update it with the supplied fields. If none exists, Write remove_tag_by_id Remove one or more tags from one or more contacts by tag ID. Write remove_tag_by_name Remove one or more tags from one or more contacts by tag name. If the tag name doesn Write reschedule_task Reschedule a task to a different date and time. Write subscribe_to_sequence Enroll one or more contacts in one or more sequences or campaigns (automations). Specify sub_type to indicate Write unsubscribe_from_sequence Remove one or more contacts from one or more sequences or campaigns. The contact will stop receiving steps fro Write update_contact Update one or more fields on an existing contact. You must know the contact Write update_order Update an existing order Write update_task Update a task

READ 22 tools

Read get_collection_count Count how many records exist in any object collection matching optional criteria. Returns only the count, not Read get_contact Retrieve a single contact record by ID or email address. Returns all standard and custom fields for the contac Read get_contact_count Count how many contacts match optional criteria. Returns only the count, not the contact records. This is the Read get_contacts_by_tag Retrieve all contacts that have a specific tag applied. Supports filtering by tag name or tag ID. Results are Read get_message Retrieve a single message by ID, including its full content, subject line, and metadata. Read get_messages Retrieve the list of available email, SMS, and task messages in the account. Use this to find a message ID bef Read get_notes Retrieve notes, optionally filtered by contact ID or other criteria. Read get_object_meta Retrieve field definitions for any object type. Returns field names, types, required/unique flags, and dropdow Read get_open_orders Retrieve open order (active subscription/recurring payment) records. Open orders represent individual future c Read get_order Retrieve details of a specific order (subscription or payment plan schedule). Returns: payment_next_date (Unix Read get_orders Retrieve order records. An order represents a future or recurring transaction (subscriptions, payment plans). Read get_product Retrieve a single product by ID, including price, description, SKU, and sales totals. Read get_purchase_logs Retrieve detailed purchase history logs showing the lifecycle of individual purchases (created, paid, refunded Read get_purchases Retrieve purchase records for a contact. Each completed product sale creates a purchase record. Use condition Read get_tasks Retrieve tasks, optionally filtered by criteria. Results are paginated. Read get_transactions Retrieve transaction (invoice) records. Transactions contain the financial details of a sale including totals, Read list_products Retrieve all products defined in the account. Products are used in transactions, offers, and order forms. Read log_transaction Record a transaction without processing any payment. Use this to log offline sales (cash, check, wire transfer Read pause_rules_and_sequences Pause all rules, sequences, and sequence subscribers for a contact. While paused, no automated actions will fi Read search_contacts Search for contacts and return their full records. Does NOT return a count — use get_contact_count for that. S Read unpause_rules_and_sequences Resume all previously paused rules, sequences, and sequence subscribers for a contact.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Ontraport MCP Server

Can an AI agent move money through the Ontraport MCP Server MCP server? +

Yes. The Ontraport MCP Server server exposes 7 financial tools including cancel_subscription, pay_invoice, process_transaction. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Ontraport MCP Server MCP server? +

Yes. The Ontraport MCP Server server exposes 2 destructive tools including delete_contact, delete_order. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Ontraport MCP Server? +

The Ontraport MCP Server server has 19 write tools including add_tag_by_id, add_tag_by_name, assign_task. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Ontraport MCP Server.

How many tools does the Ontraport MCP Server MCP server expose? +

51 tools across 4 categories: Destructive, Financial, Read, Write. 22 are read-only. 29 can modify, create, or delete data.

How do I enforce a policy on Ontraport MCP Server? +

Register the Ontraport MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Ontraport MCP Server tool call.

Deterministic rules across all 51 Ontraport MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ONTRAPORT →

Instant setup, no code required.

51 Ontraport MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.