// SCAN REPORT

BotUyo MCP Server

39 tools. 24 can modify or destroy data without limits.

5 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

24 can modify or destroy data

15 read-only

39 tools total

Community server · catalogue entry verified 03/07/2026

How to control BotUyo MCP Server ↓

TOOL MAP

What BotUyo MCP Server exposes to your agents

Read (15) Write / Execute (19) Destructive / Financial (5)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous BotUyo MCP Server tools

Destructive · High delete_agent This tool performs an irreversible deletion operation (even though implemented as a soft delete, it is deactivated and hidden permanently from the user's perspective). Destructive · High delete_agent_family This tool irreversibly deletes data (an agent family and all member agents) with no undo capability. Destructive · High delete_knowledge_document This tool permanently removes data (knowledge documents) without a reversible operation or recovery mechanism. Destructive · High remove_family_variant This tool performs a deletion operation on agent variants.

24 of BotUyo MCP Server's 39 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control BotUyo MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and BotUyo MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_agent": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_family_variant": {
    "limits": [
      {
        "counter": "add_family_variant_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "audit_agent_family": {
    "limits": [
      {
        "counter": "audit_agent_family_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register BotUyo MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON BOTUYO →

Instant setup, no code required.

FULL CATALOGUE

All 39 BotUyo MCP Server tools

DESTRUCTIVE 5 tools

Destructive delete_agent Delete an agent (soft delete). This action is IRREVERSIBLE — the agent will be deactivated and hidden.\n\n Destructive delete_agent_family Delete a family and soft-delete ALL of its member agents. This action is IRREVERSIBLE.\n\n Destructive delete_knowledge_document Deletes a knowledge base document and all its chunks from the current tenant. Destructive remove_family_variant Remove a variant from a family (soft-deletes its materialized agent). Cannot remove the entry Destructive remove_tool_config Elimina la configuración de un tool. Si es multi-instance, también la remueve de enabledTools automáticamente.

WRITE 19 tools

Write add_family_variant Add a new variant to a family (materialized into a real draft agent). Subject to the per-plan Write associate_knowledge_to_agent Associates (links) knowledge base document IDs to an agent. Replaces the current list of knowledgeDocumentIds Write configure_agent_tool Crea o actualiza la config de un tool para un agente. Si la tool no está en \ Write create_agent Create a new agent for the tenant. The agent is created in Write create_agent_family Create a new agent family with a shared base config and an initial set of variants. Write create_from_template Create a new agent from a pre-built template. Templates contain pre-configured stages, connections (graph flo Write import_agent_family Import/replace a family\ Write import_agent_json Import/replace an agent Write ingest_knowledge_url Add a URL to the knowledge base. BotUyo will scrape the page content and index it for intelligent search. The Write publish_agent Publish or unpublish an agent. Published agents are live and handle incoming conversations. Unpublished agents Write publish_agent_family Publish a family: marks the family and ALL of its member agents as published/active. Write restore_agent_version Restore an agent to a previous version (rollback). The current config is automatically saved as a new snapshot Write select_avatar Selecciona un avatar 3D para un agente. Puede ser del catálogo (por ID) o una URL custom (.glb/.vrm). Write switch_tenant Switch the active tenant for this MCP session. Write update_enabled_tools Set which tools are enabled for an agent. This REPLACES the current list of enabled tools. Use list_available Write update_family_base Replace the shared base config of a family. Re-materializes EVERY variant (the base is Write update_family_variant Update a single variant (label/overrides/handoffTargets/order) by its key. The variant key itself Write upload_agent_media Upload a local image file to the CDN and assign it to an agent as avatar or logo. Reads the file from the loc Write upsert_stage Create or update a named stage in an agent

READ 15 tools

Read audit_agent_family Read-only audit of agent families for config-quality issues (changes NOTHING). For each variant\ Read example_agent Returns a complete, documented example of an agent configuration JSON with ALL possible fields explained. Use Read get_agent Get the full configuration of a specific agent, including identity (tone, language, objective, customInstructi Read get_agent_family Get a single agent family (shared base + all variants) by id. Read get_agent_status Get the channel connection status of an agent (WhatsApp, Instagram, Telegram, Web). Shows which channels are c Read get_tool_config Ver el config completo de un tool específico de un agente (formato JSON). Read get_tools_catalog Lista el catálogo completo de tools disponibles con su metadata: configurable, allowMultiInstance, configSchem Read list_agent_families List all agent families (one logical agent = shared base config + variants) for the current tenant. Read list_agent_versions List version history for an agent. Returns all saved snapshots with version number, change source, and timesta Read list_agents Lists all agents for the authenticated tenant. Returns a name-first text summary (AgentFamily variants are tag Read list_available_tools List all tools available for this tenant. Returns both Read list_avatars Lista los avatares 3D gratuitos disponibles en el catálogo. Muestra nombre, formato y categoría. Read list_knowledge_documents Lists all knowledge base documents for the current tenant. Returns document id, name, type, status, chunks cou Read list_templates List all available agent templates for quick agent creation. Returns templates organized by industry vertical Read list_tool_configs Lista las configs de tools de un agente agrupadas: configuradas (single y multi-instance), habilitadas sin con

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about BotUyo MCP Server

Can an AI agent delete data through the BotUyo MCP Server MCP server? +

Yes. The BotUyo MCP Server server exposes 5 destructive tools including delete_agent, delete_agent_family, delete_knowledge_document. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through BotUyo MCP Server? +

The BotUyo MCP Server server has 19 write tools including add_family_variant, associate_knowledge_to_agent, configure_agent_tool. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach BotUyo MCP Server.

How many tools does the BotUyo MCP Server MCP server expose? +

39 tools across 3 categories: Destructive, Read, Write. 15 are read-only. 24 can modify, create, or delete data.

How do I enforce a policy on BotUyo MCP Server? +

Register the BotUyo MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every BotUyo MCP Server tool call.

Deterministic rules across all 39 BotUyo MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON BOTUYO →

Instant setup, no code required.

39 BotUyo MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.