// SCAN REPORT

Stackchan

12 tools. 8 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 11 Jun 2026

8 can modify or destroy data

4 read-only

12 tools total

Community server · catalogue entry verified 11/06/2026

How to control Stackchan ↓

TOOL MAP

What Stackchan exposes to your agents

Read (4) Write / Execute (4) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Stackchan tools

Destructive · Medium stackchan_voice_inbox_clear The name indicates deletion of voice inbox contents, which is irreversible data removal. Execute · Medium stackchan_move The tool name and server context strongly suggest this tool triggers physical movement of the Stack-chan robot. Execute · Medium stackchan_nod Based on the server context, this tool likely triggers a nodding motion on the Stack-chan robot, which constitutes executing a physical action on an external device. Execute · Medium stackchan_say Based on the server description mentioning speech capabilities and the tool name 'say', this tool likely triggers the Stack-chan robot to speak aloud.

8 of Stackchan's 12 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Stackchan

PolicyLayer is an MCP gateway — it sits between your AI agents and Stackchan, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "stackchan_voice_inbox_clear": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Cap read operations

{
  "stackchan_playback_status": {
    "limits": [
      {
        "counter": "stackchan_playback_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Stackchan — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON STACKCHAN →

Free to start. No card required.

FULL CATALOGUE

All 12 Stackchan tools

DESTRUCTIVE 1 tools

Destructive stackchan_voice_inbox_clear stackchan_voice_inbox_clear

EXECUTE 4 tools

Execute stackchan_nod stackchan_nod Execute stackchan_say stackchan_say Execute stackchan_shake stackchan_shake Execute stackchan_move stackchan_move

READ 4 tools

Read stackchan_playback_status stackchan_playback_status Read stackchan_see stackchan_see Read stackchan_status stackchan_status Read stackchan_voice_inbox stackchan_voice_inbox

OTHER 3 tools

Other stackchan_face stackchan_face Other stackchan_home stackchan_home Other stackchan_listen stackchan_listen

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Stackchan

Can an AI agent delete data through the Stackchan MCP server? +

Yes. The Stackchan server exposes 1 destructive tools including stackchan_voice_inbox_clear. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How many tools does the Stackchan MCP server expose? +

12 tools across 3 categories: Destructive, Read, Write. 4 are read-only. 8 can modify, create, or delete data.

How do I enforce a policy on Stackchan? +

Register the Stackchan MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Stackchan tool call.

Deterministic rules across all 12 Stackchan tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON STACKCHAN →

Free to start. No card required.

12 Stackchan tools catalogued and risk-classified — across an index of 43,000+ MCP servers.