// SCAN REPORT

DM20 Protocol

97 tools. 48 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 29 Jun 2026

48 can modify or destroy data

49 read-only

97 tools total

Community server · catalogue entry verified 29/06/2026

How to control DM20 Protocol ↓

TOOL MAP

What DM20 Protocol exposes to your agents

Read (49) Write / Execute (41) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous DM20 Protocol tools

Destructive · High delete_campaign This tool irreversibly deletes data (a campaign) with no recovery mechanism. Destructive · High delete_character This tool irreversibly deletes data (a campaign character). Destructive · Medium remove_effect The name suggests irreversibly removing an effect from a character or entity. Destructive · Medium remove_item The name 'remove_item' strongly suggests irreversible removal of an item (likely from a character's inventory or the world state).

48 of DM20 Protocol's 97 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control DM20 Protocol

PolicyLayer is an MCP gateway — it sits between your AI agents and DM20 Protocol, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_campaign": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_death_save": {
    "limits": [
      {
        "counter": "add_death_save_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ask_books": {
    "limits": [
      {
        "counter": "ask_books_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register DM20 Protocol — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON DM20 PROTOCOL →

Instant setup, no code required.

FULL CATALOGUE

All 97 DM20 Protocol tools

DESTRUCTIVE 6 tools

Destructive delete_campaign Delete a campaign permanently. This cannot be undone. Destructive delete_character Delete a character from the current campaign. Accepts character name, ID, or player name. Destructive remove_effect remove_effect Destructive remove_item remove_item Destructive remove_spell remove_spell Destructive unload_rulebook Remove a rulebook from the current campaign.

EXECUTE 7 tools

Execute build_encounter_tool build_encounter_tool Execute combat_action combat_action Execute roll_dice roll_dice Execute start_claudmaster_session start_claudmaster_session Execute start_combat Start a combat encounter. Execute start_party_mode start_party_mode Execute stop_party_mode Stop the Party Mode web server and disconnect all players.

WRITE 34 tools

Write add_death_save add_death_save Write add_event add_event Write add_item_to_character add_item_to_character Write add_session_note add_session_note Write add_spell add_spell Write apply_effect apply_effect Write approve_sheet_change approve_sheet_change Write bulk_update_characters bulk_update_characters Write configure_claudmaster configure_claudmaster Write create_campaign create_campaign Write create_character create_character Write create_location create_location Write create_npc create_npc Write create_quest create_quest Write disable_library_source Disable a library source for the current campaign. Write enable_library_source enable_library_source Write end_combat End the current combat encounter. Write equip_item equip_item Write export_pack export_pack Write import_character_file import_character_file Write import_from_dndbeyond import_from_dndbeyond Write import_pack import_pack Write level_up_character level_up_character Write long_rest long_rest Write open_library_folder open_library_folder Write party_resolve_action party_resolve_action Write send_private_message send_private_message Write short_rest short_rest Write sync_all_sheets Regenerate all character sheets for the current campaign. Write unequip_item unequip_item Write update_character update_character Write update_game_state update_game_state Write update_quest update_quest Write use_spell_slot use_spell_slot

READ 49 tools

Read ask_books ask_books Read calculate_experience calculate_experience Read check_for_updates Check if a newer version of dm20-protocol is available. Read check_sheet_changes List pending player edits from character sheet files. Read discover_adventures discover_adventures Read end_claudmaster_session end_claudmaster_session Read export_character_sheet export_character_sheet Read extract_content extract_content Read get_campaign_info Get information about the current campaign. Read get_character Get detailed character information. Accepts character name, ID, or player name. Read get_class_info get_class_info Read get_claudmaster_session_state get_claudmaster_session_state Read get_events get_events Read get_game_state Get the current game state. Read get_library_toc Get the table of contents for a specific library source. Read get_location get_location Read get_monster_info Get monster stat block from loaded rulebooks. Read get_npc get_npc Read get_party_status Get the current status of the Party Mode server. Read get_race_info Get full race definition from loaded rulebooks. Read get_release_notes Fetch the latest release notes from the CHANGELOG. Read get_sessions Get all session notes. Read get_spell_info Get spell details from loaded rulebooks. Read list_campaigns List all available campaigns. Read list_characters List all characters in the current campaign. Read list_enabled_library List all library sources enabled for the current campaign. Read list_library List all sources in the library with their content summaries. Read list_locations List all locations in the current campaign. Read list_npcs List all NPCs in the current campaign. Read list_packs List all available compendium packs in the packs directory. Read list_quests List quests, optionally filtered by status. Read list_rulebooks List all active rulebooks in the current campaign. Read load_adventure load_adventure Read load_campaign Load a specific campaign. Read load_rulebook load_rulebook Read next_turn Advance to the next turn in combat. Read party_get_prefetch party_get_prefetch Read party_kick_player Kick a player from the Party Mode session. Read party_knowledge party_knowledge Read party_pop_action Pop the next pending player action from the Party Mode queue. Read party_refresh_token Generate a new token and QR code for a player, invalidating their old token. Read player_action player_action Read scan_library Scan the library folder for new PDF/Markdown files and index them. Read search_library search_library Read search_rules search_rules Read show_map Render the current tactical map as ASCII art. Read summarize_session summarize_session Read validate_character_rules Validate a character against loaded rulebooks. Read validate_pack Validate a compendium pack file without importing it.

OTHER 1 tools

Other party_thinking party_thinking

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about DM20 Protocol

Can an AI agent delete data through the DM20 Protocol MCP server? +

Yes. The DM20 Protocol server exposes 6 destructive tools including delete_campaign, delete_character, remove_effect. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through DM20 Protocol? +

The DM20 Protocol server has 34 write tools including add_death_save, add_event, add_item_to_character. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach DM20 Protocol.

How many tools does the DM20 Protocol MCP server expose? +

97 tools across 4 categories: Destructive, Execute, Read, Write. 49 are read-only. 48 can modify, create, or delete data.

How do I enforce a policy on DM20 Protocol? +

Register the DM20 Protocol MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every DM20 Protocol tool call.

Deterministic rules across all 97 DM20 Protocol tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON DM20 PROTOCOL →

Instant setup, no code required.

97 DM20 Protocol tools catalogued and risk-classified — across an index of 43,000+ MCP servers.