// SCAN REPORT

Yuque Mcp Plus

35 tools. 15 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

15 can modify or destroy data

20 read-only

35 tools total

Community server · catalogue entry verified 03/07/2026

How to control Yuque Mcp Plus ↓

TOOL MAP

What Yuque Mcp Plus exposes to your agents

Read (20) Write / Execute (11) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Yuque Mcp Plus tools

Destructive · High yuque_delete_doc Deletion operations are irreversible and cannot be undone. Destructive · Critical yuque_delete_repo Deleting a repository is a destructive operation that cannot be undone and results in permanent loss of data. Destructive · High yuque_delete_toc_node The tool performs an irreversible deletion operation on repository structure (TOC nodes). Destructive · High yuque_remove_group_member Removing a group member is a destructive operation: the membership relationship is severed, potentially revoking access to shared resources.

15 of Yuque Mcp Plus's 35 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Yuque Mcp Plus

PolicyLayer is an MCP gateway — it sits between your AI agents and Yuque Mcp Plus, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "yuque_delete_doc": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "yuque_create_doc": {
    "limits": [
      {
        "counter": "yuque_create_doc_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "yuque_get_default_repository": {
    "limits": [
      {
        "counter": "yuque_get_default_repository_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Yuque Mcp Plus — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON YUQUE MCP PLUS →

Instant setup, no code required.

FULL CATALOGUE

All 35 Yuque Mcp Plus tools

DESTRUCTIVE 4 tools

Destructive yuque_delete_doc Delete a doc by ID. Destructive yuque_delete_repo Delete a repository. Destructive yuque_delete_toc_node Delete a TITLE or LINK node from the repository TOC tree. Destructive yuque_remove_group_member Remove a member from a group.

EXECUTE 1 tools

Execute yuque_request Generic Yuque OpenAPI request passthrough for endpoints not wrapped by dedicated tools.

WRITE 10 tools

Write yuque_create_doc Create a doc. If parentUuid is provided, the doc is attached under that TOC node. Write yuque_create_repo Create a repository. Write yuque_create_toc_node Create a TITLE or LINK node in the repository TOC tree. Write yuque_move_document Move a doc or TOC node to another parent by UUID. Write yuque_multipart_request Generic Yuque multipart request for upload-style endpoints such as attachment workflows. Write yuque_update_doc Update an existing doc. Write yuque_update_group_member Update a group member role. Write yuque_update_repo Update repository metadata. Write yuque_update_repository_toc Send a raw TOC update payload to the repository TOC API. Write yuque_update_toc Alias of yuque_update_repository_toc for compatibility with official naming.

READ 20 tools

Read yuque_get_default_repository Resolve the default Yuque repository using server config or a fallback heuristic. Read yuque_get_doc Get doc detail by doc ID. Read yuque_get_doc_version Get a specific document version. Read yuque_get_docs List docs in a repository. Read yuque_get_repo Get repository detail. Read yuque_get_repos List Yuque repositories for the current user or a specified user. Read yuque_get_repository_toc_tree Get the full repository TOC tree, including nested directories and docs. Read yuque_get_toc Alias of yuque_get_repository_toc_tree for compatibility with official naming. Read yuque_get_user Get the current Yuque user. Read yuque_group_book_stats Get repository statistics for a group. Read yuque_group_doc_stats Get document statistics for a group. Read yuque_group_member_stats Get member statistics for a group. Read yuque_group_stats Get overall statistics for a group. Read yuque_hello Call the Yuque hello endpoint. Read yuque_list_doc_versions List all versions of a document. Read yuque_list_docs Alias of yuque_get_docs for compatibility with official naming. Read yuque_list_group_members List all members of a group or team. Read yuque_list_groups List groups or teams for the current user or a specified user. Read yuque_list_repos Alias of yuque_get_repos for compatibility with official naming. Read yuque_search Search Yuque content.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Yuque Mcp Plus

Can an AI agent delete data through the Yuque Mcp Plus MCP server? +

Yes. The Yuque Mcp Plus server exposes 4 destructive tools including yuque_delete_doc, yuque_delete_repo, yuque_delete_toc_node. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Yuque Mcp Plus? +

The Yuque Mcp Plus server has 10 write tools including yuque_create_doc, yuque_create_repo, yuque_create_toc_node. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Yuque Mcp Plus.

How many tools does the Yuque Mcp Plus MCP server expose? +

35 tools across 3 categories: Destructive, Read, Write. 20 are read-only. 15 can modify, create, or delete data.

How do I enforce a policy on Yuque Mcp Plus? +

Register the Yuque Mcp Plus MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Yuque Mcp Plus tool call.

Deterministic rules across all 35 Yuque Mcp Plus tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON YUQUE MCP PLUS →

Instant setup, no code required.

35 Yuque Mcp Plus tools catalogued and risk-classified — across an index of 43,000+ MCP servers.