// SCAN REPORT

Clio Manage MCP

40 tools. 15 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

15 can modify or destroy data

25 read-only

40 tools total

Community server · catalogue entry verified 02/07/2026

How to control Clio Manage MCP ↓

TOOL MAP

What Clio Manage MCP exposes to your agents

Read (25) Write / Execute (12) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Clio Manage MCP tools

Destructive · High clio_delete_contact Deleting a contact permanently removes data that cannot be recovered through normal means. Destructive · Critical clio_delete_matter Even though described as a 'soft-delete' rather than permanent destruction, the operation irreversibly removes a matter from active use in a law firm's matter management system. Destructive · Medium clio_logout The tool explicitly deletes the encrypted token file, which is an irreversible action. Write · Medium clio_create_calendar_entry This tool creates calendar entries in a law firm management system (Clio Manage).

15 of Clio Manage MCP's 40 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Clio Manage MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and Clio Manage MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "clio_delete_contact": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "clio_create_calendar_entry": {
    "limits": [
      {
        "counter": "clio_create_calendar_entry_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "clio_auth_status": {
    "limits": [
      {
        "counter": "clio_auth_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Clio Manage MCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON CLIO MANAGE →

Instant setup, no code required.

FULL CATALOGUE

All 40 Clio Manage MCP tools

DESTRUCTIVE 3 tools

Destructive clio_delete_contact Deletes a contact. Disabled unless CLIO_ALLOW_DESTRUCTIVE=true. Returns 409 if the contact has Destructive clio_delete_matter Soft-deletes a matter. Disabled unless CLIO_ALLOW_DESTRUCTIVE=true. Returns 204 on success, Destructive clio_logout Deletes the encrypted token file for the shared account (local stdio / static HTTP mode).

WRITE 12 tools

Write clio_create_calendar_entry Creates a calendar entry. All-day events should set all_day=true and use date-only timestamps. Write clio_create_company_contact Creates a company (entity) contact in Clio — Inc., LLC, Ltd., etc. Write clio_create_expense_entry Creates an ExpenseEntry. Use this for flat-fee line items as well — total = quantity × price Write clio_create_matter Creates a new matter. Write clio_create_note Creates a note on a matter or contact. Notes appear in Clio Write clio_create_person_contact Creates a person (individual) contact in Clio. Write clio_create_task Creates a task. Optionally scoped to a matter and/or assignee. Write clio_create_time_entry Logs billable or non-billable time on a matter. TimeEntry.total = quantity_in_hours × rate. Write clio_open_new_matter End-to-end intake: creates the client contact (or uses an existing one), opens the matter, Write clio_update_contact PATCH a contact. Pass only the fields you want to change. Write clio_update_matter PATCH a matter. Pass only the fields you want to change. Write clio_update_task PATCH a task. Common use: mark complete by setting status=Complete.

READ 25 tools

Read clio_auth_status Reports whether valid Clio credentials are currently available, the Clio user id they were Read clio_authenticate Starts the OAuth 2.0 authorization-code flow with Clio in the user Read clio_get_activity Returns a single activity. You MUST request specific fields — Clio Read clio_get_bill Returns a single bill by id. Read clio_get_billing_summary Aggregates totals across all bills on a matter: total billed, total paid, outstanding balance, Read clio_get_contact Returns full detail for a contact, including all emails, phone numbers, and addresses. Read clio_get_document Returns document metadata. Read clio_get_document_download_url Resolves the GET /documents/{id}/download.json endpoint and returns the redirect target — Read clio_get_matter Returns full detail for a single matter by id. Read clio_get_task Returns a single task by id. Read clio_get_user Returns a single user by id. Read clio_list_activities Lists time entries and expenses. Filter by matter, user, date range, or type. Defaults to a Read clio_list_bills Lists bills with optional filtering by matter, client, state, or issued-date range. Read clio_list_calendar_entries Lists calendar entries within a date range. Use ISO dates (YYYY-MM-DD). Read clio_list_calendars Lists the calendars available to the current user. Read clio_list_documents Lists documents in a matter or folder. Read clio_list_folders Lists folders under a parent, or top-level if no parent_id given. Read clio_list_matter_contacts Returns related contacts for the given matter (the client plus any related parties). Read clio_list_matters Lists matters with optional filtering. Use Read clio_list_notes Lists notes attached to a matter or contact. Read clio_list_practice_areas Lists practice areas configured on the firm. Read clio_list_tasks Lists tasks with optional filters by matter, status, priority, due date range, and assignee. Read clio_list_users Lists firm users. Read clio_search_contacts Search contacts by free-text query (matches name, email, company). Use clio_get_contact for full detail. Read clio_who_am_i Calls GET /users/who_am_i.json to confirm credentials work and return the current user record.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Clio Manage MCP

Can an AI agent delete data through the Clio Manage MCP server? +

Yes. The Clio Manage MCP server exposes 3 destructive tools including clio_delete_contact, clio_delete_matter, clio_logout. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Clio Manage MCP? +

The Clio Manage MCP server has 12 write tools including clio_create_calendar_entry, clio_create_company_contact, clio_create_expense_entry. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Clio Manage MCP.

How many tools does the Clio Manage MCP server expose? +

40 tools across 3 categories: Destructive, Read, Write. 25 are read-only. 15 can modify, create, or delete data.

How do I enforce a policy on Clio Manage MCP? +

Register the Clio Manage MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Clio Manage MCP tool call.

Deterministic rules across all 40 Clio Manage MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON CLIO MANAGE →

Instant setup, no code required.

40 Clio Manage MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.