Mcp Hands MCP Policy · 378 Tools

POLICY

How to control Mcp Hands

PolicyLayer is an MCP gateway — it sits between your AI agents and Mcp Hands, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "call_clear": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "base_convert": {
    "limits": [
      {
        "counter": "base_convert_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "arp_table": {
    "limits": [
      {
        "counter": "arp_table_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Mcp Hands — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MCP HANDS →

Instant setup, no code required.

FULL CATALOGUE

All 378 Mcp Hands tools

DESTRUCTIVE 23 tools

Destructive call_clear Empty the voice queue (use when starting a fresh call). Destructive dedupe_lines Drop duplicate lines, keeping the first (or last) occurrence. Destructive delete Delete a file, or a directory when recursive=true. Destructive empty_dirs List empty directories (deepest first); remove=true deletes them bottom-up. Destructive firewall_remove_rule Delete firewall rules by exact display name (netsh advfirewall firewall delete rule). Destructive hosts_remove Delete every hosts line that maps a hostname (needs an elevated shell). A hosts.bak.<stamp> copy is Destructive hosts_reset Restore the hosts file from the newest hosts.bak copy (the etc folder or %LOCALAPPDATA%\\mcp_netadv\\hosts). Destructive job_cancel Cancel a background job (a running job stops before its next step). Destructive memory_forget Delete one memory entry by id, or every entry whose text contains a phrase (confirm=True). Destructive note_delete Delete a note by id ( Destructive outbox_clean Delete expired items from the outbox now. Destructive pdf_delete_pages Write a copy of a PDF without the given pages, e.g. \ Destructive portproxy_remove Delete the v4tov4 portproxy rule for a listen port (listen address 0.0.0.0). Destructive power_action Power state control: cancel | poweroff | restart | logoff | hibernate (with a delay for the first three). Destructive prune_backups Report (dry_run=true) or delete the oldest zips, keeping the Destructive reg_delete_key Delete a key. recursive=False fails on a key that still has subkeys, recursive=True removes the whole tree. Destructive reg_delete_value Delete one named value from a key (the unnamed default value cannot be removed this way). Destructive remind_cancel Cancel a reminder created by remind_in / remind_at (by name, or Destructive sort_lines Sort lines (numeric=sort as numbers, unique=drop duplicates). Destructive task_delete DESTRUCTIVE: delete a scheduled task immediately (schtasks /delete /f). No confirmation prompt. Destructive todo_delete Delete a todo by id ( Destructive winget_installed Installed packages: winget list when winget works, otherwise the registry uninstall keys Destructive winget_uninstall Uninstall a package by exact winget id (600s budget, tail of the output).

EXECUTE 16 tools

Execute gif_from_images Build an animated GIF from images (duration_ms per frame, loop=0 means forever). Execute git_run Run git with a JSON list of extra arguments, e.g. [\ Execute image_scale_2x Upscale an image by a factor with LANCZOS resampling. Execute job_start Start a background job that keeps running after you answer. Either one tool call, Execute job_wait Wait up to N seconds for a job to finish, then report it (short jobs only). Execute pptx_from_outline Build a .pptx from Execute run_cmd Run a command through cmd.exe /c (Windows) or /bin/sh -c. Execute run_ps Run a PowerShell script and return its output. Execute run_python Run a short Python snippet in a temp file and return its stdout/stderr. Execute serve_dir Start a background threaded HTTP server over a folder (read-only listing plus the _share folder). Execute sqlite_execute Run one writing/DDL statement and report rows affected. Execute start_process Launch a program or document without waiting for it. Execute startup_items Programs that start with Windows (registry Run keys + the startup folder). Execute stop_server Stop one running file server by port, or every server when port=0. Execute task_details Full schtasks /query /v listing for one task: triggers, run-as user, action and state. Execute task_run DESTRUCTIVE: start a scheduled task right now, ignoring its schedule (schtasks /run).

WRITE 100 tools

Write base_convert Convert an integer between bases 2..36; 0x/0b/0o prefixes are understood. Write batch_copy Copy (or move) glob-matched files into dest, preserving relative paths. Write call_invite Hand the user a QR code for the voice page: they scan it with the phone, tap Write case_convert Convert case: upper, lower, title, sentence, swap, camel, snake, kebab, pascal. Write clipboard_set Put text on the Windows clipboard. Write close_window Post WM_CLOSE to the first visible window whose title contains Write copy Copy a file or a directory (recursive). Write csv_write Write rows to a CSV file (UTF-8, parents created). Write date_add Add or subtract an amount of days/weeks/months/years from a date. Write dedupe_move Move duplicate copies (keeping one per group) into dest\\duplicates. Write docx_add_table Append a table to a .docx. rows is Write docx_create Create a .docx with optional heading, paragraphs and a table. Write docx_merge Concatenate several .docx files into one, page break between files, keeping document order. Write docx_replace Replace a string in a .docx across paragraphs, tables and headers/footers Write encoding_convert Convert a text file between encodings (e.g. gbk -> utf-8), creating parent dirs. Write file_type Sniff the magic bytes of a file and compare the result with its extension. Write firewall_add_rule Create an inbound/outbound allow rule (netsh advfirewall firewall add rule). Needs an elevated shell. Write git_add Stage paths (default: everything in the repository). Write git_commit Commit staged work (add_all=true stages every change first). Write hibernate_enable Turn hibernation (and fast startup) support on or off: powercfg /hibernate on|off. Write hosts_add Append Write http_request Send an arbitrary HTTP request. headers_json is a JSON object string. Write image_add_text_box Wrap text into a translucent box drawn at the bottom of an image. Write image_border Add a solid border around an image. Write image_compress Re-save an image at a lower quality (JPEG/WebP friendly). Write image_convert Re-encode an image into another format, e.g. fmt= Write image_resize Resize an image; a 0 dimension is derived keeping aspect ratio. Write image_thumbnail Write a thumbnail whose longest edge is size pixels. Write lock_screen Lock the Windows session. Write make_dir Create a directory (recursive). Write media_key Send a media transport key to the current media player: play_pause | next | prev | stop. Write memory_add Store something worth remembering long-term (survives restarts, full-text searchable). Write mouse_click Click the real mouse at absolute (x, y); x=0,y=0 clicks wherever the cursor already is. Write mouse_move Move the real mouse cursor to absolute screen coordinates (x, y). Write move Move or rename a path. Write note_add Store a new note and return its id. Write note_update Edit a note; append=true appends the body instead of replacing it. Write notes_export Dump notes, todos and the journal to one Markdown file and return its path. Write office_convert_table_to_xlsx Convert a CSV table into an .xlsx sheet. Write open_path Open a file, folder or URL with the default Windows application. Write organize_by_type Sort files into images/ documents/ archives/ media/ code/ other/ folders. Write pdf_merge Merge several PDFs into one output file, in the given order. Write pdf_metadata_write Copy a PDF while setting title/author/subject metadata. Write pdf_set_password Copy a PDF and encrypt it with a user password (AES-256 when available). Write percent Percentage maths: of|change|diff|add|sub. Write pin_gen Generate numeric PIN codes (leading zeros allowed). Write plan_add_step Append a step discovered while working (plans are allowed to grow). Write plan_cancel Cancel a plan (keeps the record, stops it being Write plan_create Create a step-by-step plan for a multi-turn task. Steps are plain text, optionally with a Write plan_done Mark a plan step finished - pass the real tool output as evidence (no evidence, not done). Write plan_journal A readable log of a plan:每一步做到哪、证据是什么、验证过了没。 Write plan_list List plans (newest first), optionally filtered by status=active|done|cancelled. Write plan_next The next unfinished step of a plan (index, text, tool and args) - do this one now. Write plan_status Read one plan in full (steps, status, evidence). Write portproxy_add Add a netsh portproxy v4tov4/v6tov6 rule (listen -> connect). Needs an elevated shell. Write power_plan_list Every power scheme known to powercfg, the active one, and the balanced/high/saver alias map. Write power_plan_set Switch the active power plan; plan is balanced|high|saver or a raw scheme GUID. Write pptx_add_image Insert an image into an existing slide (slide=0 creates a blank slide); Write pptx_create Create a .pptx from slides: [{\ Write press_keys Press a key combination on the live desktop, e.g. Write reg_backup_key Dump a key into a hive file with reg save (needs the backup privilege: an elevated shell). Write reg_export Export a key to a .reg file with reg.exe (exact reg.exe output is returned). Write reg_write Create or overwrite one value. type is string|dword|qword|expandstring|multistring|binary Write regex_replace Regex substitute, reporting how many substitutions happened (count=0 means all). Write remind_at Set a reminder for a specific clock time today (HH:MM), popping a Windows notification. Write remind_in Set a reminder that pops a Windows notification (and optionally speaks) after N minutes. Write rename_batch Rename files in place with a regex or literal pattern (dry_run by default). Write replace_in_file Replace literal text inside a file (count=0 replaces all). Write restore_backup Extract a backup zip (or the newest zip in a folder), skipping absolute and Write send_file Send any file (document, archive, audio, video) to the user as a download link. Write send_image Send an image file on this PC to the user (returns a URL they can open). Write send_qr Turn a URL or some text into a QR image and send it (e.g. to hand a link to a phone). Write send_screen Send the user a screenshot right now (captures, uploads to the outbox, returns a URL). Write send_text Send a chunk of text to the user as a file (handy when the reply would be too long). Write send_voice Say something out loud as an audio file: renders text to speech and sends the link Write set_wallpaper Set the desktop wallpaper from an image file. Write sqlite_export_csv Write the rows of a query to a CSV file. Write sqlite_import_csv Create/fill a table from a CSV file (all columns TEXT). Write store_app_install Open a Microsoft Store page in the Store app (Start-Process ms-windows-store:). Accepts a store Write tar_create Create a tar archive; fmt is gz, bz2, xz or plain. Write task_create_at_logon Create a task that runs every time the user logs on (schtasks /sc ONLOGON). Write task_create_daily Create a recurring task. days is a comma list of MON..SUN: all seven days produce Write task_create_once Create a one-shot task for today at HH:MM (schtasks /sc ONCE). Returns the exact schtasks output. Write task_enable Enable or disable a scheduled task (schtasks /change /enable|/disable). Write todo_add Add a todo item and return its id. Write top_processes Top processes by working set (memory). Write type_text Type arbitrary Unicode text (Chinese works) into whatever window currently has keyboard focus, Write unit_convert Convert length/mass/area/volume/speed/data/temperature/time units. Write vision_probe Send a tiny test image to verify the vision endpoint and key really work. Write wifi_connect Connect to a saved profile (netsh wlan connect). The radio stays on; the current connection may drop. Write wifi_export_profile Export one profile to <out_dir> as a plain-text (unencrypted) WLAN XML file. Write winget_install Install a package by exact winget id. Long running: 600s budget, the tail of the output is returned. Write write_text Write (or append) text to a file, creating parent dirs. Write xlsx_add_sheet Add (or replace) a sheet in a workbook and fill it from row data. Write xlsx_chart Create a bar/line/pie chart from a data range and embed it in the workbook Write xlsx_create Create an .xlsx workbook from a list of rows. Write xlsx_set_cell Set one cell of an existing workbook, e.g. cell= Write xlsx_set_formulas Set formulas in a workbook. cells is Write zip_add Add files/directories to a zip, creating the archive when missing. Write zip_create Create a zip from files and/or directories (directories recurse).

READ 239 tools

Read arp_table Get-NetNeighbor output: IP, MAC, state and interface. Read audit_stats Summary of recent activity: call counts, failures, busiest tools, per-profile split. Read audit_tail The most recent tool calls from the audit log: tool, arguments, result, duration. Read b64_decode Base64-decode text back to a UTF-8 string. Read b64_encode Base64-encode text (UTF-8). Read backup_dir Zip a directory (or one file) into a timestamped archive and report its sha256. Read battery Battery / power status. Reports Read beep Play a console beep at freq Hz for duration_ms milliseconds through the hidden PowerShell console. Read calc Evaluate a safe arithmetic expression (+ - / // % parens and math functions). Read call_listen What the user said out loud on the voice page (the phone Read call_say Speak a line out loud on the user Read call_state Is the voice page connected, how many lines were spoken, anything unread. Read clipboard_get Read the Windows clipboard as text. Read code_stats Count files/lines/blank lines and list the 10 largest files under a root. Read compare_dirs Compare two trees: only-left, only-right, size and mtime mismatches. Read compare_images Show two images to the model and describe the differences. Read cpu_load Average CPU load percentage over a few samples (a short sleep between reads smooths the number). Read csv_aggregate Group a CSV by a column and aggregate a numeric column (sum|mean|min|max|count). Read csv_read Read a CSV file as Read csv_stats Per CSV column: count, blanks, unique values and numeric min/max/mean/sum. Read csv_to_json CSV (literal text or file) to a JSON array of row objects. Read cursor_pos Current mouse cursor position in screen pixels. Read-only. Read date_diff Difference between two dates; business_days=true counts working days only. Read date_info Weekday, ISO week number, day of year and days left for a date. Read db_stats Report file size, table count, per-table row counts and page usage. Read default_apps_list Default programs per file extension (HKCU FileExts UserChoice ProgIds) plus the http/https URL handlers. Read describe_ui Read the screen like an agent: open windows, focus, clickable controls, errors, next step. Read device_list Plug-and-play devices; entries with a non-OK status (problem codes) are highlighted. Read devices_list Devices that are allowed to use this PC (name, when added, last seen, call count). Read devices_pending Devices that tried to connect but are waiting for the user Read devices_stats Device summary: registered, pending, total calls, last activity. Read diff_text Unified diff of two strings (context = lines of context). Read dir_size Total size and file count of a directory, plus its largest files. Read disk_usage Free/total space and used percentage for each fixed drive, plus any mounted volumes. Read disk_usage_report Per path: file count, total bytes and the 5 largest files. Read dns_flush Flush the DNS resolver cache (ipconfig /flushdns). Read dns_lookup Resolve a hostname to IPv4/IPv6 addresses (getaddrinfo). Read dns_records Query A/AAAA/CNAME/MX/TXT/NS records via dnspython when present, otherwise via nslookup. Read docx_append Append paragraphs to an existing .docx. Read docx_read Read a .docx as text; headings and tables are marked. Read docx_to_markdown Export a .docx to Markdown: headings, bullets, bold runs and tables. Read download_file Download a URL to a local path. Read download_speed Download a URL (default: a small well-known file) and report throughput in Mbps; Read download_to_share Fetch a URL from the internet and hand the user a link the chat client Read empty_recycle_bin Empty the recycle bin (all drives). Read entropy_scan Shannon entropy per block; top 10 blocks and a packed/encrypted verdict. Read env_vars Show environment variables, optionally filtered by name substring. Read epoch_to_time Convert a unix epoch value to UTC and local time. Read event_log_tail Most recent Windows event log entries, newest first, each message trimmed to 300 chars. Read extract_emails Extract unique email addresses from text. Read extract_ipv4 Extract unique IPv4 addresses (private ones filtered when include_private=false). Read extract_phones Extract unique phone numbers (international and CN mobile/landline). Read extract_urls Extract unique http(s):// and www. URLs from text. Read fetch_url Fetch an http(s) URL and return readable text (HTML stripped). Read file_hashes MD5/SHA1/SHA256 plus size and mtime of one file. Read file_info Stat a path: size, mtime, type. Read file_url URL a running server exposes for a path inside its root (nothing is served outside the root). Read find_duplicates Find duplicate files by size then sha256 and report wasted bytes. Read find_secrets Regex-scan text files under a root for keys/tokens/passwords/IPs/emails; values are masked. Read firewall_list_rule Firewall rules by display name (substring match); an empty name lists the first 30 rules. Read focus_window Bring the first visible window whose title contains Read fs_roots Which folders this tool is allowed to touch (before trying to read somewhere). Read gif_frames Split an animated GIF into PNG frames named frame_01.png ... Read git_branches List local and remote branches with their upstream state. Read git_diff Show a diff of the worktree, or of the index when staged=true. Read git_log Show the most recent commits (one line each). Read git_show Show one object (commit, tag or tree) with its patch. Read git_status Show short branch + worktree status of a repository. Read glob_search Find files by glob pattern under a root, e.g. /.md. Read grep_text Regex search inside files under a root. Read hash_compare Compare text against an expected hash in constant time (hmac.compare_digest). Read hash_dir Hash files under a directory (first 2 MB of each); unreadable files are skipped. Read hash_file Hash one file (md5/sha1/sha256) and report its size. Read hash_text Hash a string, e.g. algo=sha256. Read hex_dump Classic offset/hex/ascii dump of a file region. Read hosts_read Contents of the Windows hosts file, with its exact path, line count and active entry count. Read html_to_markdown Convert basic HTML (h1-h6, bold, italic, links, lists, code) to Markdown. Read http_status Fetch a URL and report the HTTP status, final URL and body length (10s timeout). Read http_timing Time DNS/connect/TLS/TTFB/total for a URL over N runs and report the median of each phase Read image_collage Lay images out in a grid, each scaled into a cell. Read image_compare Compare two images: size/mode check, mean absolute difference and a diff image. Read image_compose Alpha-blend an overlay onto a base image at (x, y) with opacity 0-100. Read image_crop Crop an image to the box (left, top, right, bottom). Read image_exif_read Dump the EXIF tags of an image, plus GPS presence. Read image_exif_strip Rewrite an image without its EXIF/metadata blocks. Read image_gray Convert an image to 8-bit grayscale. Read image_info Report format, mode, pixel size and file size of an image. Read image_palette Most frequent colors of an image as hex values with pixel counts. Read image_rotate Rotate an image by degrees, expanding the canvas to fit. Read image_split_grid Cut an image into rows x cols tiles, written as tile_r1c1.png ... Read image_text Draw text onto an image at (x, y) with a font size and hex color. Read image_watermark_tile Tile a translucent text watermark across an image. Read images_to_pdf Combine images into a single multi-page PDF. Read installed_apps List installed programs from the registry (optional name filter). Read ip_config Readable Get-NetIPConfiguration output: adapters, IPv4/IPv6 addresses, gateways, DNS. Read ip_geo Look up country/region/city/ISP for an IP via a public API; empty ip means this machine Read job_list List background jobs (newest first). status filters: pending,running,done,failed,cancelled. Read job_stats How many jobs are queued, running, done or failed. Read job_status Status and result of one background job (result appears once it finishes). Read join_lines Join an array of lines with a separator (default newline). Read json_pretty Pretty-print a JSON string, or a file containing JSON. Read json_query Read one value by dotted path, e.g. a.b.0.c, from a JSON string or file. Read json_to_csv JSON array of objects (literal text or file) to CSV text. Read json_to_md_table JSON array of objects (literal text or file) to a Markdown table. Read keep_awake Ask Windows not to sleep or blank the display for the next N hours by holding Read kill_process Terminate a process by id or exact name. Read lan_hosts ARP/neighbor table as: ip, mac, state, interface. Read lan_scan Sweep <subnet>.1-254 for TCP 445/3389/80/22 with threads, an 8s total budget and a 254-host cap; Read large_files Biggest files under a root (sort=size), or the oldest ones (sort=age). Read list_backups List backup zips newest first, reading only the zip central directory. Read list_dir List entries of a directory (name/type/size). Read list_processes List running processes, optionally filtered by name substring. Read list_voices List the installed SAPI text-to-speech voices with their name, gender, age and culture. Read list_windows List this machine Read local_urls List every LAN URL for a port: all IPv4 addresses of this machine (URLs only, port must match serve_dir). Read markdown_to_html Render Markdown (headings, lists, bold, italic, links, code, hr) to HTML. Read md_table_to_json Markdown table to a JSON array of row objects. Read memory_get Read one memory entry in full by its id. Read memory_log Append one line to the permanent journal (long-term memory) and return its id. Read memory_recent The most recent memories, newest first. Read memory_search Search long-term memory by keywords (works for Chinese substrings and English). Read memory_stats How much is in long-term memory, plus the most used tags. Read memory_usage Physical memory: used MB, total MB, used percentage. Also reports the page file peak. Read mirror_dir Copy only changed files (same size+mtime => skipped) into dest. Read net_adapters Network adapters: name, status, IP addresses, link speed and bytes sent/received. Read net_connections TCP connections from Get-NetTCPConnection, joined with owning process names. Read note_get Read one full note by id ( Read note_list Compact table of notes: id, date, title, tags. Read note_search Case-insensitive search across note title, body and tags. Read now Current local date/time and timezone. Read office_info Report type, paragraph/sheet/slide counts, dimensions and embedded media for a docx/xlsx/pptx. Read organize_by_date Move files into YYYY\\MM folders derived from mtime (or ctime/atime/birth). Read outbox_list What is currently waiting in the outbox (files the user has not opened yet). Read page_links Extract absolute links from a page. Read passphrase_gen Generate a diceware-style passphrase from an embedded 200-word list. Read password_gen Generate random passwords with the secrets module and report their entropy. Read password_strength Score a password: length, classes, entropy, common-pattern penalties, verdict, advice. Read pdf_decrypt Copy an encrypted PDF to a new unencrypted file using its password. Read pdf_extract_pages Write a new PDF containing only the given pages, e.g. \ Read pdf_info Page count, metadata, encryption state and page box sizes of a PDF. Read pdf_rotate Rotate the given pages (empty string = all) by degrees (multiples of 90). Read pdf_split Split a PDF into files of Read pdf_text Extract text from the given pages (\ Read pe_info Parse DOS/PE headers with struct: machine, sections, timestamp, entry point, image base, flags. Read ping_host Ping a host with the OS ping tool and return the reply summary. Read ping_stats Ping a host and report min/avg/max latency and packet loss from the real ping output. Read play_sound Play a sound file without blocking. .wav files use System.Media.SoundPlayer synchronously in a hidden Read policy_status Which tools the current policy allows or blocks (and whether it is enforcing). Read port_report One line per port (open/closed/timeout) with the TCP connect latency in ms for a comma-separated list. Read port_scan Scan a comma-separated port list on one host with concurrent TCP connects (hard cap 256 ports). Read portproxy_list netsh interface portproxy rules (all families), plus the command that produced them. Read pptx_read Read slide titles and body text from a .pptx. Read public_ip Ask a public service for this machine Read qr_batch Render many QRs from \ Read qr_decode_help Explain how to decode a QR (external scanner needed) and echo the payload. Read qr_make Render text as a QR PNG (defaults to a file inside the sample dir). Read qr_make_svg Render text as a vector QR (SvgPathImage) at the given path. Read qr_make_url Render a URL QR, adding https:// when the scheme is missing. Read qr_make_vcard Render a vCard 3.0 contact QR. Read qr_make_wifi Render a WiFi join QR using the WIFI: URI scheme. Read random_int Random integers in a range, optionally unique. Read random_string Generate a cryptographically random alphanumeric string. Read read_image_base64 Read a local image file as base64 (for downstream use). Read read_screen_region Capture the screen rectangle (left, top, right, bottom) to a PNG and return the file path and pixel size. Read read_screen_text OCR the screen now: read whatever text is currently visible. Read read_text Read a UTF-8 text file. Read read_text_auto Read a text file, auto-detecting utf-8 / utf-8-sig / gbk / cp936 / latin-1. Read read_text_in_image OCR: read the text out of an image (screenshot/photo/scan) verbatim. Read reg_list_subkeys List the immediate subkey names of a key, up to limit. Read reg_read Read one value (name given) or list every value of a key (name empty): name, type and data. Read reg_search Walk a key tree and report value names and data containing keyword (substring, case-insensitive). Read regex_find List regex matches with their line/column/offset positions. Read remind_list List the reminders this assistant has scheduled (tasks created by remind_in / remind_at). Read reverse_dns Resolve an IP address back to a hostname (PTR). Read round_to Round a number to N digits (half_up, half_even, half_down, up, down, ceil, floor). Read route_table First 40 rows of Get-NetRoute (destination, next hop, interface, metric). Read route_trace Trace the route to a host with tracert and return hop / address / latency lines. Read screen_size Primary screen size plus the whole virtual desktop (multi-monitor) size. Read-only. Read screenshot Capture the primary screen to a PNG and return its path. Read screenshot_for_vision Save a screenshot to a file (for later see_image / comparisons). Read search_web Web search via DuckDuckGo, returns titles and URLs. Read secret_scan_text Flag likely secrets in text (keys, tokens, private keys, passwords); values are masked. Read see_clipboard Look at the image currently on the Windows clipboard (if any). Read see_image Look at an image file on this PC and answer a question about it. Read see_screen Look at the PC screen right now (the persona cannot see it otherwise). monitor: primary|all|0|1|2 Read see_window Look at one window (matched by part of its title) and describe what it shows. Read server_status List running file servers: port, root, uptime and served request count. Read service_list Windows services with name, display name, status and start mode (filtered by substring). Read share_file Hand the user a download link the chat client can actually open Read share_screenshot Capture the screen and hand the user a picture link that the chat client can actually Read snapshot One compact health block: CPU load %, memory used/total, top 3 processes by memory, free space per drive Read snapshot_file Copy one file with a timestamp suffix, then keep only the Read speak Speak text out loud through the Windows SAPI voice. Text is passed via stdin, so CJK and quotes are safe. Read split_text Split text on a literal marker and return the parts as lines. Read sqlite_query Run a read-only SELECT / WITH / PRAGMA query and render its rows. Read sqlite_schema Show DDL for one table, or for every object. Read sqlite_tables List user tables in a database file. Read statistics count/sum/mean/median/min/max/stdev/percentiles for a list of numbers. Read strings_extract Print printable ASCII runs of at least min_len characters, with file offsets. Read system_info Basic host facts: OS, CPU, memory, disks, current user. Read tail_lines Return the last N lines of a text file. Read tar_extract Extract a tar archive, skipping absolute and Read tar_list List tar members as Read task_list List scheduled tasks with name, state, next run time and last result. filter is a Read tcp_check Try one TCP connect and report open/closed/timeout plus latency in ms. Read timezone_now Current time in each requested zone (IANA names, fixed-offset fallback). Read tls_cert Read a TLS certificate: subject, issuer, SANs, validity dates, days until expiry Read toast Show a Windows balloon/toast notification. Read toast_speak Speak text out loud and show a balloon tip with the same text, then wait for the tip to expire. Read todo_done Mark a todo as done ( Read todo_list List todos: open, done or all. Read totp_now RFC 6238 TOTP for a base32 secret: current code plus seconds remaining. Read tree Print a directory tree up to Read uptime How long the machine has been up, plus the last boot time. Read url_encode Percent-encode a string (utility). Read uuid_gen Generate one or more random UUID4 values. Read uuid_v4 Generate random version-4 UUIDs. Read verify_backup Decompress every member of a zip (or the newest zip in a folder) to test its CRC. Read vision_ask_many Ask one question about several images at once (paths separated by commas or newlines). Read vision_sight_check Check whether I can really see right now (call before claiming anything about the screen). Read vision_status Show the configured vision endpoint/model and whether a key is available. Read volume_step Change the system volume or mute it: up | down | mute. Each step sends VK 175/174/173 Read which Locate an executable on PATH. Read wifi_info Current Wi-Fi interface: SSID, signal, band, receive/transmit rate. Read wifi_profile_details Full netsh wlan show profile listing for one profile, including the stored key when the shell is elevated. Read wifi_profiles Saved WLAN profiles (netsh wlan show profiles) with a parsed profile count. Read wifi_quality Read the Wi-Fi adapter state with netsh (SSID, signal, band, channel, rate) and give a short verdict. Read wifi_status Wireless interfaces: state, SSID, band, channel, rates and signal (netsh wlan show interfaces). Read window_rect Get the screen rectangle (left, top, right, bottom, width, height) of the first window matching Read winget_available Is winget installed, where does it live and which version is it. Read winget_search Search the configured winget sources and return the raw table (limit caps the rows). Read winget_upgrade_list Packages with an available upgrade, straight from winget upgrade. Read word_count Count characters, words (CJK per character), lines and paragraphs. Read xlsx_read Read a sheet as Read xlsx_sheets List sheet names with their dimensions. Read xlsx_to_markdown Export a sheet to a Markdown table. Read zip_extract Extract a zip, skipping absolute and Read zip_extract_member Extract one zip member by exact name. Read zip_list List zip entries as

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Mcp Hands

Can an AI agent delete data through the Mcp Hands MCP server? +

Yes. The Mcp Hands server exposes 23 destructive tools including call_clear, dedupe_lines, delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Mcp Hands? +

The Mcp Hands server has 100 write tools including base_convert, batch_copy, call_invite. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Mcp Hands.

How many tools does the Mcp Hands MCP server expose? +

378 tools across 4 categories: Destructive, Execute, Read, Write. 239 are read-only. 139 can modify, create, or delete data.

How do I enforce a policy on Mcp Hands? +

Register the Mcp Hands MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Mcp Hands

What Mcp Hands exposes to your agents

The most dangerous Mcp Hands tools

How to control Mcp Hands

All 378 Mcp Hands tools

Related servers

Questions about Mcp Hands

Enforce policy on every Mcp Hands tool call.