// SCAN REPORT

Spaceship

48 tools. 33 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated:

33 can modify or destroy data
15 read-only
48 tools total

Community server · catalogue entry verified 29/06/2026

How to control Spaceship ↓

TOOL MAP

What Spaceship exposes to your agents

Read (15) Write / Execute (26) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Spaceship tools

Financial · Critical transfer_domain This tool initiates a domain transfer that results in a direct financial charge to the account and commits the organization to a 1-year renewal obligation. Financial · Critical register_domain Registering a domain name directly incurs a financial charge to the account. Financial · Critical renew_domain The tool explicitly warns it is a financial operation that charges money to the account. Financial · Critical restore_domain The tool explicitly commits a financial obligation by initiating a domain restore, which incurs significant fees during the redemption grace period.

33 of Spaceship's 48 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Spaceship

PolicyLayer is an MCP gateway — it sits between your AI agents and Spaceship, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "register_domain": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "delete_dns_records": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "create_a_record": {
    "limits": [
      {
        "counter": "create_a_record_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "check_dns_alignment": {
    "limits": [
      {
        "counter": "check_dns_alignment_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Spaceship — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON SPACESHIP →

Instant setup, no code required.

FULL CATALOGUE

All 48 Spaceship tools

FINANCIAL 4 tools
Financial register_domain Register a new domain name. WARNING: This is a FINANCIAL operation that will charge money to the Spaceship acc Financial renew_domain Renew an existing domain registration. WARNING: This is a FINANCIAL operation that will charge money to the Sp Financial restore_domain Restore a domain that is in the redemption grace period after expiration or deletion. WARNING: This is a FINAN Financial transfer_domain Transfer a domain TO Spaceship from another registrar. WARNING: This is a FINANCIAL operation that will charge
DESTRUCTIVE 3 tools
Destructive delete_dns_records Delete specific DNS records from a domain by name and type. Only records matching both the name AND type will Destructive delete_personal_nameserver Delete a personal nameserver host from a domain. This removes the glue record at the registry. Destructive delete_sellerhub_domain Remove a domain from the SellerHub marketplace. This deletes the listing permanently — any existing checkout l
WRITE 26 tools
Write create_a_record Create an A record (IPv4 address) for a domain. Write create_aaaa_record Create an AAAA record (IPv6 address) for a domain. Write create_alias_record Create an ALIAS record (CNAME flattening at zone apex) for a domain. Write create_caa_record Create a CAA record (Certificate Authority Authorization) for a domain. Controls which CAs can issue certifica Write create_checkout_link Generate a shareable checkout/purchase link for a SellerHub domain listing. Write create_cname_record Create a CNAME record (canonical name/alias) for a domain. Write create_https_record Create an HTTPS record (SVCB-compatible for HTTPS) for a domain. Used for HTTPS service binding and ECH. Write create_mx_record Create an MX record (mail exchange) for a domain. Write create_ns_record Create an NS record (nameserver delegation) for a domain. Write create_ptr_record Create a PTR record (reverse DNS pointer) for a domain. Write create_sellerhub_domain List a domain for sale on the SellerHub marketplace. Write create_srv_record Create an SRV record (service locator) for a domain. Write create_svcb_record Create an SVCB record (general service binding) for a domain. Write create_tlsa_record Create a TLSA record (TLS certificate association / DANE) for a domain. Write create_txt_record Create a TXT record (text data) for a domain. Useful for SPF, DKIM, DMARC, verification, etc. Write save_contact Create or update a reusable contact profile. Saved contacts can be referenced when registering domains or upda Write save_contact_attributes Save TLD-specific contact attributes required for certain domain registrations. Write save_dns_records Save (upsert) DNS records for a domain using PUT with force overwrite. Write set_auto_renew Enable or disable auto-renewal for a domain. Write set_email_protection Toggle the contact form display for a domain Write set_privacy_level Set the WHOIS privacy level for a domain. Write set_transfer_lock Enable or disable transfer lock for a domain. Write update_domain_contacts Update the contacts (registrant, admin, tech, billing) for a specific domain using contact IDs. Write update_nameservers Update the nameservers for a domain. This replaces ALL current nameservers with the provided list. Write update_personal_nameserver Create or update a personal nameserver host with its IP addresses. These are glue records that map a nameserve Write update_sellerhub_domain Update settings for a SellerHub domain listing. You can update description, pricing, and price toggles.
READ 15 tools
Read check_dns_alignment Compare a list of expected DNS records against the actual records configured in Spaceship. Returns which expec Read check_domain_availability Check if one or more domains are available for registration and show pricing. Provide up to 20 domains to chec Read get_async_operation Poll the status of an asynchronous operation by its operation ID. Read get_auth_code Retrieve the authorization/EPP code for domain transfer. Read get_contact Retrieve a saved contact profile by its unique identifier. Read get_contact_attributes Retrieve stored contact attributes for a specific contact (TLD-specific extra fields like tax IDs and company Read get_domain Get detailed information about a specific domain including registration/expiration dates, auto-renewal status, Read get_personal_nameserver Get details of a single personal (vanity) nameserver by hostname, including its IP addresses. Read get_sellerhub_domain Get details of a SellerHub listing by domain name. Read get_transfer_status Check the current status of a domain transfer to Spaceship. Use this after initiating a transfer with transfer Read get_verification_records Get the DNS verification records needed to verify ownership of SellerHub domain listings. Read list_dns_records List all DNS records for a domain. Uses pagination and can fetch all pages automatically. Read list_domains List all domains in the Spaceship account. Read list_personal_nameservers List personal (vanity) nameservers configured for a domain (e.g. ns1.yourdomain.com, ns2.yourdomain.com). Read list_sellerhub_domains List domains listed for sale on SellerHub, Spaceship
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
paymentsadmin
Binance MCP Server 734 tools
paymentsadmin
GoHighLevel MCP Server 566 tools
paymentsadmin
GoCreative Agent API 546 tools
paymentsadmin
Claude Flow 454 tools
paymentsadmin
ServiceTitan MCP Server 454 tools
paymentsadmin
CloudStack MCP Server 442 tools
paymentsadmin
Integrations MCP 420 tools
paymentsadmin
FAQ

Questions about Spaceship

Can an AI agent move money through the Spaceship MCP server? +

Yes. The Spaceship server exposes 4 financial tools including register_domain, renew_domain, restore_domain. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Spaceship MCP server? +

Yes. The Spaceship server exposes 3 destructive tools including delete_dns_records, delete_personal_nameserver, delete_sellerhub_domain. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Spaceship? +

The Spaceship server has 26 write tools including create_a_record, create_aaaa_record, create_alias_record. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Spaceship.

How many tools does the Spaceship MCP server expose? +

48 tools across 4 categories: Destructive, Financial, Read, Write. 15 are read-only. 33 can modify, create, or delete data.

How do I enforce a policy on Spaceship? +

Register the Spaceship MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Spaceship tool call.

Deterministic rules across all 48 Spaceship tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SPACESHIP →

Instant setup, no code required.

48 Spaceship tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.