// SCAN REPORT

Story SDK MCP Server

25 tools. 13 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 11 Jun 2026

13 can modify or destroy data

12 read-only

25 tools total

Community server · catalogue entry verified 11/06/2026

How to control Story SDK MCP Server ↓

TOOL MAP

What Story SDK MCP Server exposes to your agents

Read (12) Write / Execute (7) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Story SDK MCP Server tools

Financial · Critical deposit_wip This tool converts intellectual property assets into WIP tokens and deposits them into a wallet, constituting a direct financial transaction that moves value. Financial · Critical pay_royalty_on_behalf This tool moves money (royalty payments) and commits financial obligations. Financial · High transfer_wip This tool moves cryptocurrency/tokens from one party to another, which constitutes a financial transaction that commits monetary value. Financial · Critical claim_all_revenue The tool name 'claim_all_revenue' strongly implies a financial operation that moves or collects accumulated revenue/funds.

13 of Story SDK MCP Server's 25 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Story SDK MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Story SDK MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "deposit_wip": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Rate limit write operations

{
  "attach_license_terms": {
    "limits": [
      {
        "counter": "attach_license_terms_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_address_overview": {
    "limits": [
      {
        "counter": "get_address_overview_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Story SDK MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON STORY SDK →

Free to start. No card required.

FULL CATALOGUE

All 25 Story SDK MCP Server tools

FINANCIAL 6 tools

Financial deposit_wip Wraps the selected amount of IP to WIP and deposits to the wallet. Financial pay_royalty_on_behalf pay_royalty_on_behalf Financial transfer_wip Transfers amount of WIP to a recipient to. Financial claim_all_revenue claim_all_revenue Financial mint_license_tokens mint_license_tokens Financial mint_test_erc20_tokens mint_test_erc20_tokens

EXECUTE 1 tools

Execute raise_dispute raise_dispute

WRITE 6 tools

Write attach_license_terms attach_license_terms Write create_ip_metadata create_ip_metadata Write create_spg_nft_collection create_spg_nft_collection Write mint_and_register_ip_with_terms mint_and_register_ip_with_terms Write register register Write upload_image_to_ipfs Upload an image to IPFS using Pinata API.

READ 12 tools

Read get_address_overview Get a comprehensive overview of an address including ETH balance, token info, Read get_erc20_token_balance get_erc20_token_balance Read get_license_minting_fee Get the minting fee for a specific license terms ID. Read get_license_revenue_share Get the commercial revenue share percentage for a specific license terms ID. Read get_license_terms Get the license terms for a specific ID. Read get_nft_holdings Get all NFT holdings for an address, including collection information and Read get_spg_nft_minting_token Get the minting fee required by an SPG NFT contract. Read get_stats Get current blockchain statistics. Remember its an EVM chain but the token is $IP Read get_token_holdings Get all ERC-20 token holdings for an address, including detailed token information Read get_transactions Get recent (last 5) transactions for an address. Remember its an EVM chain but the token is $IP Read interpret_transaction Get a human-readable interpretation of a blockchain transaction. Read predict_minting_license_fee predict_minting_license_fee

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Story SDK MCP Server

Can an AI agent move money through the Story SDK MCP Server MCP server? +

Yes. The Story SDK MCP Server server exposes 6 financial tools including deposit_wip, pay_royalty_on_behalf, transfer_wip. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

How do I prevent bulk modifications through Story SDK MCP Server? +

The Story SDK MCP Server server has 6 write tools including attach_license_terms, create_ip_metadata, create_spg_nft_collection. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Story SDK MCP Server.

How many tools does the Story SDK MCP Server MCP server expose? +

25 tools across 3 categories: Financial, Read, Write. 12 are read-only. 13 can modify, create, or delete data.

How do I enforce a policy on Story SDK MCP Server? +

Register the Story SDK MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Story SDK MCP Server tool call.

Deterministic rules across all 25 Story SDK MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON STORY SDK →

Free to start. No card required.

25 Story SDK MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.