// SCAN REPORT

JoeMCP

31 tools. 6 can modify or destroy data without limits.

6 write tools that can modify data. Rate limits recommended.

Last updated: 1 Jul 2026

6 can modify or destroy data

25 read-only

31 tools total

Community server · catalogue entry verified 01/07/2026

How to control JoeMCP ↓

TOOL MAP

What JoeMCP exposes to your agents

Read (25) Write / Execute (6) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous JoeMCP tools

Execute · Critical async This tool triggers execution of arbitrary multi-step workflows via an agent system. Write · Low add_action_item_comment Adding a comment modifies an action item by appending text, which is a reversible write operation. Write · Medium assign_action_item_supervisor The tool creates or modifies data (assigning a supervisor to an action item) without permanently deleting or destroying information. Write · Medium create_action_item This tool creates new records (action items) in the JoeAPI system, which is a reversible write operation.

6 of JoeMCP's 31 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control JoeMCP

PolicyLayer is an MCP gateway — it sits between your AI agents and JoeMCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "add_action_item_comment": {
    "limits": [
      {
        "counter": "add_action_item_comment_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "discover": {
    "limits": [
      {
        "counter": "discover_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register JoeMCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON JOEMCP →

Instant setup, no code required.

FULL CATALOGUE

All 31 JoeMCP tools

EXECUTE 1 tools

Execute async Delegate complex multi-step workflows to the async-agent system with real-time progress updates. Use this for

WRITE 5 tools

Write add_action_item_comment Add a comment to an action item Write assign_action_item_supervisor Assign a supervisor to an action item Write create_action_item Create a new Action Item. Can be Generic (ActionTypeId=3), Cost Change (ActionTypeId=1), or Schedule Change (A Write create_client Create a new client record Write create_contact Create a new contact

READ 25 tools

Read discover Discover comprehensive project data by searching for a project and retrieving all related information includin Read find_action_items Search for action items by title or description. Can optionally filter by project. Read find_estimate Search for estimates and estimate categories. Can search across all estimates or within a specific project. Read find_project Search for projects by name, client name, or other attributes. Returns matching projects with basic info. Read find_proposal Search for proposals by proposal number, title, or description. Can optionally filter by project. Read find_schedule Search for schedules and construction tasks. Can search across all schedules or within a specific project. Read get_action_item Get full details for a specific action item by ID Read get_estimates Get full estimate data for a specific project Read get_financial_summary Get transaction summary grouped by timeframe Read get_financials Get comprehensive financial data for a project including job balances and cost variance Read get_project Get full project details by project ID Read get_project_details Get full details of a project Read get_project_finances Get financial overview for a specific project (Job Balances and Cost Variance) Read get_proposal_details Get specific proposal details including lines Read get_schedule Get full schedule data for a specific project Read get_transactions Get transaction list for a project with optional date range filtering Read list_action_items Get a minimal list of action items with optional project filtering. Returns only name (title), id, and project Read list_clients Retrieve a paginated list of clients Read list_contacts Retrieve a list of contacts Read list_estimates Get a minimal list of estimates with optional project filtering. Returns only name, id, and projectId for each Read list_project_schedules List project schedules Read list_projects Get a minimal list of all projects. Returns only name, id, and projectId for each project. Use get_project to Read list_proposals Get a minimal list of proposals with optional project filtering. Returns only name, id, and projectId for each Read list_schedules Get a minimal list of schedules with optional project filtering. Returns only name, id, and projectId for each Read search Generic search tool that can search across multiple entity types with optional filtering by project.

FAQ

Questions about JoeMCP

How do I prevent bulk modifications through JoeMCP? +

The JoeMCP server has 5 write tools including add_action_item_comment, assign_action_item_supervisor, create_action_item. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach JoeMCP.

How many tools does the Joe MCP server expose? +

31 tools across 2 categories: Read, Write. 25 are read-only. 6 can modify, create, or delete data.

How do I enforce a policy on JoeMCP? +

Register the Joe MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every JoeMCP tool call.

Deterministic rules across all 31 JoeMCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON JOEMCP →

Instant setup, no code required.

31 JoeMCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.