// SCAN REPORT

Confd

28 tools. 22 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

22 can modify or destroy data

6 read-only

28 tools total

Community server · catalogue entry verified 03/07/2026

How to control Confd ↓

TOOL MAP

What Confd exposes to your agents

Read (6) Write / Execute (15) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Confd tools

Destructive · High delete_conference_cover_image The tool performs an irreversible deletion operation on a conference's cover image. Destructive · High delete_conference_logo This tool permanently deletes an asset (logo) from a conference record. Destructive · Medium delete_museum_cover_image This tool permanently deletes an asset (museum cover image) without the ability to undo the action through the tool itself. Destructive · High delete_museum_logo This tool permanently removes a museum's logo without reverting capability.

22 of Confd's 28 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Confd

PolicyLayer is an MCP gateway — it sits between your AI agents and Confd, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_conference_cover_image": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "create_conference": {
    "limits": [
      {
        "counter": "create_conference_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_conference": {
    "limits": [
      {
        "counter": "get_conference_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Confd — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON CONFD →

Instant setup, no code required.

FULL CATALOGUE

All 28 Confd tools

DESTRUCTIVE 7 tools

Destructive delete_conference_cover_image Remove the cover image from a conference. Destructive delete_conference_logo Remove the logo from a conference. Destructive delete_museum_cover_image Remove the cover image from a museum. Destructive delete_museum_logo Remove the logo from a museum. Destructive delete_organization_cover_image Remove the cover image from an organization. Destructive delete_organization_logo Remove the logo from an organization. Destructive merge_museum Merge a museum into another museum. The source museum (id) will have its merged_into_id set and be discarded.

WRITE 15 tools

Write create_conference Create a new conference. Name, start_date, and end_date are required. Can include venue, location, URLs, conta Write create_museum Create a new museum. Name is required. Can include contact info, address, social media, tags, opening hours, a Write create_organization Create a new organization. Name is required. Can include contact info, address, social media, tags, and more. Write merge_organization Merge an organization into another organization. The source organization (id) will have its merged_into_id set Write update_conference Update an existing conference by ID. Only include fields you want to change. Write update_museum Update an existing museum by ID. Only include fields you want to change. Works even if do_not_import is set. O Write update_organization Update an existing organization by ID. Only include fields you want to change. Works even if do_not_import is Write upload_conference_cover_image Upload a cover image for a conference. Displayed as the hero banner background. Provide exactly one of: url, b Write upload_conference_logo Upload a logo image for a conference. Provide exactly one of: url (fetch from URL), base64 (base64-encoded ima Write upload_museum_cover_image Upload a cover image for a museum. Displayed as the hero banner background. Provide exactly one of: url, base6 Write upload_museum_logo Upload a logo image for a museum. Provide exactly one of: url (fetch from URL), base64 (base64-encoded image d Write upload_organization_cover_image Upload a cover image for an organization. Displayed as the hero banner background. Provide exactly one of: url Write upload_organization_logo Upload a logo image for an organization. Provide exactly one of: url (fetch from URL), base64 (base64-encoded Write upsert_museum Create or update a museum by source identifier. If a museum with the given source exists, it is updated. If no Write upsert_organization Create or update an organization by source identifier. If an organization with the given source exists, it is

READ 6 tools

Read get_conference Get a single conference by ID. Returns 404 if the conference is discarded or does not exist. Read get_museum Get a single museum by ID. If the museum was merged into another record, returns the merged_into ID. Read get_organization Get a single organization by ID. If the organization was merged into another record, returns the merged_into I Read list_conferences Search and filter conferences. Supports name search, country code, organization, tag, and scope (upcoming/past Read list_museums Search and filter museums. Supports name search, country code, source identifier, tag, published status, and d Read list_organizations Search and filter organizations. Supports name search, country code, source identifier, tag, and discarded sta

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Confd

Can an AI agent delete data through the Confd MCP server? +

Yes. The Confd server exposes 7 destructive tools including delete_conference_cover_image, delete_conference_logo, delete_museum_cover_image. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Confd? +

The Confd server has 15 write tools including create_conference, create_museum, create_organization. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Confd.

How many tools does the Confd MCP server expose? +

28 tools across 3 categories: Destructive, Read, Write. 6 are read-only. 22 can modify, create, or delete data.

How do I enforce a policy on Confd? +

Register the Confd MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Confd tool call.

Deterministic rules across all 28 Confd tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON CONFD →

Instant setup, no code required.

28 Confd tools catalogued and risk-classified — across an index of 43,000+ MCP servers.