// SCAN REPORT

Mcp Sling

16 tools. 8 can modify or destroy data without limits.

8 write tools that can modify data. Rate limits recommended.

Last updated: 2 Jul 2026

8 can modify or destroy data

8 read-only

16 tools total

Community server · catalogue entry verified 02/07/2026

How to control Mcp Sling ↓

TOOL MAP

What Mcp Sling exposes to your agents

Read (8) Write / Execute (8) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Mcp Sling tools

Execute · Critical sling_api_call This tool allows arbitrary API calls to any endpoint on the Sling platform, meaning it could perform reads, writes, deletions, or financial operations depending on what endpoint is targeted. Write · Medium create_sales_record This tool creates new records in the system, which is a reversible write operation. Write · Medium create_shift This tool creates new workforce scheduling data (shifts) but does not permanently destroy data, execute arbitrary code, or move money. Write · High create_user The tool creates a new user account, which modifies organizational data in a reversible way (users can be deactivated or deleted).

8 of Mcp Sling's 16 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Mcp Sling

PolicyLayer is an MCP gateway — it sits between your AI agents and Mcp Sling, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "create_sales_record": {
    "limits": [
      {
        "counter": "create_sales_record_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_calendar": {
    "limits": [
      {
        "counter": "get_calendar_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Mcp Sling — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MCP SLING →

Instant setup, no code required.

FULL CATALOGUE

All 16 Mcp Sling tools

EXECUTE 1 tools

Execute sling_api_call Make a custom API call to any Sling endpoint. Use this for endpoints not covered by specific tools.

WRITE 7 tools

Write create_sales_record Create a sales record. Used for tracking sales data and labor analytics. Write create_shift Create a new shift for a user. Shifts represent scheduled work periods. Write create_user Create a new user in the organization. Write switch_organization Switch to a different organization context. Write update_settings Update organization or user settings. Write update_timesheet Update timesheet data for a user. Write update_user Update an existing user in the organization.

READ 8 tools

Read get_calendar Get calendar information for a specific user in an organization. Returns schedule and shift data for the speci Read get_groups Get list of groups in the organization. Groups are used to organize users. Read get_organization Get organization information. Returns details about your organization. Read get_organization_by_id Get organization information by specific organization ID. Read get_reports Get reports data. Reports provide analytics and insights about schedules, labor costs, etc. Read get_tags Get list of available tags. Tags are used to categorize and organize shifts, users, etc. Read get_timesheets Get timesheet data. Timesheets track actual hours worked. Read get_users Get list of users in the organization. Returns user information based on your access level.

FAQ

Questions about Mcp Sling

How do I prevent bulk modifications through Mcp Sling? +

The Mcp Sling server has 7 write tools including create_sales_record, create_shift, create_user. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Mcp Sling.

How many tools does the Mcp Sling MCP server expose? +

16 tools across 2 categories: Read, Write. 8 are read-only. 8 can modify, create, or delete data.

How do I enforce a policy on Mcp Sling? +

Register the Mcp Sling MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Mcp Sling tool call.

Deterministic rules across all 16 Mcp Sling tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MCP SLING →

Instant setup, no code required.

16 Mcp Sling tools catalogued and risk-classified — across an index of 43,000+ MCP servers.