// SCAN REPORT

Zoho Projects MCP Server

20 tools. 9 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

9 can modify or destroy data

11 read-only

20 tools total

Community server · catalogue entry verified 12/06/2026

How to control Zoho Projects MCP Server ↓

TOOL MAP

What Zoho Projects MCP Server exposes to your agents

Read (11) Write / Execute (7) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Zoho Projects MCP Server tools

Destructive · High delete_project Deletion of a project is an irreversible destructive action that cannot be undone by normal means (though it moves to trash rather than permanent deletion, it is still outside user recovery scope for practical purposes). Destructive · High delete_task Deletion of tasks cannot be undone and permanently removes project management data. Write · Medium create_issue Creating an issue is a Write operation—it creates new data that can be modified or deleted later. Write · Medium create_phase Creating a phase/milestone is a reversible write operation that modifies project structure by adding new organizational elements.

9 of Zoho Projects MCP Server's 20 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Zoho Projects MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Zoho Projects MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_project": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "create_issue": {
    "limits": [
      {
        "counter": "create_issue_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_issue": {
    "limits": [
      {
        "counter": "get_issue_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Zoho Projects MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ZOHO PROJECTS →

Free to start. No card required.

FULL CATALOGUE

All 20 Zoho Projects MCP Server tools

DESTRUCTIVE 2 tools

Destructive delete_project Delete a project (moves to trash) Destructive delete_task Delete a task

WRITE 7 tools

Write create_issue Create a new issue Write create_phase Create a new phase/milestone Write create_project Create a new project Write create_task Create a new task in a project Write update_issue Update an issue Write update_project Update an existing project Write update_task Update a task

READ 11 tools

Read get_issue Get details of a specific issue Read get_portal Get details of a specific portal Read get_project Get details of a specific project Read get_task Get details of a specific task Read list_issues List issues from a project or portal Read list_phases List phases/milestones from a project Read list_portals Retrieve all Zoho Projects portals Read list_projects List all projects in a portal Read list_tasks List tasks from a project or portal Read list_users List users in a portal or project Read search Search across portal or project

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Zoho Projects MCP Server

Can an AI agent delete data through the Zoho Projects MCP Server MCP server? +

Yes. The Zoho Projects MCP Server server exposes 2 destructive tools including delete_project, delete_task. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Zoho Projects MCP Server? +

The Zoho Projects MCP Server server has 7 write tools including create_issue, create_phase, create_project. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Zoho Projects MCP Server.

How many tools does the Zoho Projects MCP Server MCP server expose? +

20 tools across 3 categories: Destructive, Read, Write. 11 are read-only. 9 can modify, create, or delete data.

How do I enforce a policy on Zoho Projects MCP Server? +

Register the Zoho Projects MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Zoho Projects MCP Server tool call.

Deterministic rules across all 20 Zoho Projects MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ZOHO PROJECTS →

Free to start. No card required.

20 Zoho Projects MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.