// SCAN REPORT

Qontinui Web MCP Server

44 tools. 28 can modify or destroy data without limits.

8 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

28 can modify or destroy data

16 read-only

44 tools total

Community server · catalogue entry verified 03/07/2026

How to control Qontinui Web MCP Server ↓

TOOL MAP

What Qontinui Web MCP Server exposes to your agents

Read (16) Write / Execute (20) Destructive / Financial (8)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Qontinui Web MCP Server tools

Destructive · Medium auth_logout Logging out clears stored credentials/session tokens irreversibly (the session is destroyed and cannot be restored without re-authentication). Destructive · High cancel_execution Cancelling a running execution is an irreversible action — the in-progress automation is terminated and cannot be resumed. Destructive · High delete_image This tool permanently removes image data from a project without reversibility. Destructive · High delete_project The tool permanently removes data (a project and all associated contents) without the possibility of recovery or undo.

28 of Qontinui Web MCP Server's 44 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Qontinui Web MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Qontinui Web MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "auth_logout": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_capture_action": {
    "limits": [
      {
        "counter": "add_capture_action_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "auth_status": {
    "limits": [
      {
        "counter": "auth_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Qontinui Web MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON QONTINUI WEB →

Instant setup, no code required.

FULL CATALOGUE

All 44 Qontinui Web MCP Server tools

DESTRUCTIVE 8 tools

Destructive auth_logout Clear stored authentication. Requires re-authentication to use API. Destructive cancel_execution Cancel a running automation execution. Destructive delete_image Delete a pattern image from a project. Destructive delete_project Delete a project and all its contents. This action is irreversible. Destructive delete_state Delete a UI state from a project. Destructive delete_transition Delete a state transition. Destructive delete_variable Delete a workflow variable. Destructive delete_workflow Delete a workflow from a project.

EXECUTE 2 tools

Execute auth_login Authenticate with the Qontinui API using email and password. Execute execute_workflow Execute a workflow on a connected desktop runner.

WRITE 18 tools

Write add_capture_action Add a user action to a capture session. Write add_image Add a pattern image to a project. Write approve_learned_workflow Approve a learned workflow and optionally publish it to the project. Write complete_capture_session Mark a capture session as complete and ready for analysis. Write create_capture_session Create a new capture session to record user actions. Write create_project Create a new Qontinui project. Write create_state Create a UI state definition. Write create_transition Create a state transition. Write create_variable Create a workflow variable. Write create_workflow Create a new workflow in a project. Write generate_workflow_from_capture Generate a workflow from a completed capture session. Write import_configuration Import configuration into a project. Write update_project Update a project Write update_state Update a UI state definition. Write update_transition Update a state transition. Write update_variable Update a workflow variable Write update_workflow Update an existing workflow. Write upload_capture_screenshot Upload a screenshot to a capture session.

READ 16 tools

Read auth_status Check current authentication status. Read export_configuration Export a project Read get_capture_session Get details of a capture session including screenshots and actions. Read get_execution_status Get the status of an automation execution. Read get_project Get detailed information about a project including its full configuration. Read get_variable Get a workflow variable by ID. Read get_variable_history Get the change history for a variable. Read list_capture_sessions List capture sessions for a project. Read list_images List all pattern images in a project. Read list_learned_workflows List workflows learned from capture sessions. Read list_projects List all projects accessible to the authenticated user. Read list_states List all UI states defined in a project. Read list_transitions List all state transitions in a project. Read list_variables List workflow variables in a project. Read list_workflows List all workflows in a project. Read validate_configuration Validate a configuration without importing.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Qontinui Web MCP Server

Can an AI agent delete data through the Qontinui Web MCP Server MCP server? +

Yes. The Qontinui Web MCP Server server exposes 8 destructive tools including auth_logout, cancel_execution, delete_image. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Qontinui Web MCP Server? +

The Qontinui Web MCP Server server has 18 write tools including add_capture_action, add_image, approve_learned_workflow. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Qontinui Web MCP Server.

How many tools does the Qontinui Web MCP Server MCP server expose? +

44 tools across 4 categories: Destructive, Execute, Read, Write. 16 are read-only. 28 can modify, create, or delete data.

How do I enforce a policy on Qontinui Web MCP Server? +

Register the Qontinui Web MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Qontinui Web MCP Server tool call.

Deterministic rules across all 44 Qontinui Web MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON QONTINUI WEB →

Instant setup, no code required.

44 Qontinui Web MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.