// SCAN REPORT

Thingworx

8 tools. 2 can modify or destroy data without limits.

2 write tools that can modify data. Rate limits recommended.

Last updated: 2 Jul 2026

2 can modify or destroy data

6 read-only

8 tools total

Community server · catalogue entry verified 02/07/2026

How to control Thingworx ↓

TOOL MAP

What Thingworx exposes to your agents

Read (6) Write / Execute (2) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Thingworx tools

Execute · High invoke_service invoke_service runs code and external operations (PLC commands, scripted workflows, downstream calls) on an industrial control platform (ThingWorx IIoT). Write · High write_property This tool creates or modifies data on ThingWorx Things (industrial assets).

2 of Thingworx's 8 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Thingworx

PolicyLayer is an MCP gateway — it sits between your AI agents and Thingworx, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "write_property": {
    "limits": [
      {
        "counter": "write_property_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_thing": {
    "limits": [
      {
        "counter": "get_thing_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Thingworx — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON THINGWORX →

Instant setup, no code required.

FULL CATALOGUE

All 8 Thingworx tools

EXECUTE 1 tools

Execute invoke_service Invoke a named Service on a Thing. Gated by THINGWORX_ALLOW_INVOKE=true (separate from write) because services

WRITE 1 tools

Write write_property Write a new value to a Property on a Thing. Gated by THINGWORX_ALLOW_WRITE=true because property writes can ch

READ 6 tools

Read get_thing Get metadata for a specific Thing by name. Returns the Thing Read get_thing_template Get the full definition of a ThingTemplate by name, including property + service + event signatures, parent te Read list_thing_templates List all ThingTemplates available in the ThingWorx model. ThingTemplates are the type definitions Things insta Read list_things List all Things registered in the ThingWorx model. Returns Thing names, descriptions, and parent ThingTemplate Read read_property Read the current value of a single Property on a Thing. Returns the property value plus its data type. The sta Read search_things Search the ThingWorx model by free-text expression matched against Thing names + descriptions. Returns up to m

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Thingworx

How do I prevent bulk modifications through Thingworx? +

The Thingworx server has 1 write tools including write_property. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Thingworx.

How many tools does the Thingworx MCP server expose? +

8 tools across 3 categories: Execute, Read, Write. 6 are read-only. 2 can modify, create, or delete data.

How do I enforce a policy on Thingworx? +

Register the Thingworx MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Thingworx tool call.

Deterministic rules across all 8 Thingworx tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON THINGWORX →

Instant setup, no code required.

8 Thingworx tools catalogued and risk-classified — across an index of 43,000+ MCP servers.