// SCAN REPORT

Inkwell MCP Server

43 tools. 21 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

21 can modify or destroy data

22 read-only

43 tools total

Community server · catalogue entry verified 30/06/2026

How to control Inkwell MCP Server ↓

TOOL MAP

What Inkwell MCP Server exposes to your agents

Read (22) Write / Execute (19) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Inkwell MCP Server tools

Financial · Critical create_checkout This tool initiates a financial transaction by creating a Stripe checkout session tied to a subscription plan, which commits financial obligations. Destructive · High prune_content The tool analyzes content and can optionally archive pages en masse. Execute · High run_outreach This tool executes external operations (email, SMS, LinkedIn messaging campaigns and n8n workflows) rather than merely reading or writing data. Execute · Medium trigger_survey Triggering a survey executes a workflow that initiates data collection and user engagement operations.

21 of Inkwell MCP Server's 43 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Inkwell MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Inkwell MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "create_checkout": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "prune_content": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "auto_tag_content": {
    "limits": [
      {
        "counter": "auto_tag_content_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "browse_marketplace": {
    "limits": [
      {
        "counter": "browse_marketplace_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Inkwell MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON INKWELL →

Instant setup, no code required.

FULL CATALOGUE

All 43 Inkwell MCP Server tools

FINANCIAL 1 tools

Financial create_checkout Create a Stripe checkout session for a subscription plan

DESTRUCTIVE 1 tools

Destructive prune_content Analyze content_index for underperforming pages (thin or stale) and optionally archive them. Use action

EXECUTE 3 tools

Execute run_outreach Create and trigger an outreach sequence for selected contacts. Supports email, SMS, and LinkedIn channels. Opt Execute trigger_survey Trigger a survey for a specific path or context. Returns the survey definition for the client to display. Execute trigger_workflow Trigger a workflow execution. Auto-detects provider: CF Workflows (native edge), ToRivers (marketplace), n8n (

WRITE 16 tools

Write auto_tag_content Use Workers AI to analyze content and suggest relevant topic tags. Provide a slug (looks up from KV) or raw te Write business_intake Gather business intelligence and build a structured wiki about a customer. This is the first tool to call when Write create_bounty Create a new bounty task with a reward. Requires manager role. Write create_contact Create a new CRM contact. Requires at least email or phone. Write create_task [Network] Create a task in the squad service for this site. Requires network connection. Write generate_image Generate an image from a text prompt using AI (Flux model). Stores result as a media asset with full metadata. Write log_activity Log an activity (call, email, meeting, note, task, sms) against a CRM contact. Write manage_pipeline Manage pipeline stages and deals. Actions: create_stage, list_stages, create_deal, update_deal, list_deals. Write manage_redirects Add, list, or delete redirect rules. Supports 301 (permanent) and 302 (temporary) redirects. Write post_social Post content to social media channels. Sends a structured payload to a webhook (Make.com, Zapier, n8n, or dire Write publish_content Publish or draft content to Inkwell. Creates a markdown entry stored in KV and indexed in D1. Write remember [Network] Store a memory engram for this site. Requires network connection. Returns engram ID. Write send_telegram Send a message via Telegram bot Write submit_bounty Submit proof of completion for a claimed bounty. Only the claimant can call this. Write update_contact Update an existing CRM contact by ID. Write upload_media Upload an image or video from a URL. Stores in R2, runs AI analysis (alt text, tags, NSFW), creates knowledge

READ 22 tools

Read browse_marketplace [Network] Browse the skill marketplace — available agent skills, integrations, and add-ons. Requires network c Read claim_bounty Claim an open bounty by ID. The authenticated user becomes the claimant. Read content_strategy Analyze a business wiki (created by business_intake) and generate a prioritized marketing strategy. Returns co Read describe_image Run AI vision analysis on an uploaded image. Returns alt text, description, tags, and NSFW score. Read find_leads Search for leads in the CRM by name, email, company, industry, location, or source. Optionally enrich results Read get_churn_signals Get churn risk signals — declining engagement, negative sentiment trends, at-risk tenants. Returns actionable Read get_dashboard Return marketing KPI summary from DB_MARKETING: clicks, impressions, leads, spend, CPL. Read get_feedback_summary Get feedback insights — NPS score, top issues, category breakdown, sentiment trends. Tells you what users are Read get_leads Return recent lead events from DB_CORE. Read get_seo_data Return Google Search Console snapshot data from DB_MARKETING. Read list_bounties List open bounties for the current tenant. Returns title, reward, status, and description for each bounty. Read list_contacts List or search CRM contacts with optional filters. Read list_workflows List available workflows/automations. Supports CF Workflows (native), ToRivers, and n8n. Zapier has no public Read marketing_report Generate a marketing performance report covering leads, deals, activities, content, and outreach for a given t Read my_bounty_earnings Get total reward earnings for the current user — sum of all paid bounties. Read recall [Network] Search memories stored for this site. Requires network connection. Returns matching engrams. Read recall_content Search Mirror memory for previously published content. Use before drafting to detect duplicates or find relate Read search_media Search media assets by text query. Matches against alt text, description, tags, and transcripts. Read seo_audit Quick SEO health check — missing meta tags, broken redirects, crawl errors. Returns actionable issues. Read seo_crawl_stats Get crawl analytics — bot visits, top pages, status codes. Returns aggregated data for the specified time wind Read site_info Return Inkwell site configuration: name, domain, enabled features and connectors. Read subscription_status Check the current subscription status

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Inkwell MCP Server

Can an AI agent move money through the Inkwell MCP Server MCP server? +

Yes. The Inkwell MCP Server server exposes 1 financial tools including create_checkout. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Inkwell MCP Server MCP server? +

Yes. The Inkwell MCP Server server exposes 1 destructive tools including prune_content. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Inkwell MCP Server? +

The Inkwell MCP Server server has 16 write tools including auto_tag_content, business_intake, create_bounty. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Inkwell MCP Server.

How many tools does the Inkwell MCP Server MCP server expose? +

43 tools across 3 categories: Execute, Read, Write. 22 are read-only. 21 can modify, create, or delete data.

How do I enforce a policy on Inkwell MCP Server? +

Register the Inkwell MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Inkwell MCP Server tool call.

Deterministic rules across all 43 Inkwell MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON INKWELL →

Instant setup, no code required.

43 Inkwell MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.