// SCAN REPORT

Tlaplus

9 tools. 7 can modify or destroy data without limits.

7 write tools that can modify data. Rate limits recommended.

Last updated: 30 Jun 2026

7 can modify or destroy data

2 read-only

9 tools total

Community server · catalogue entry verified 30/06/2026

How to control Tlaplus ↓

TOOL MAP

What Tlaplus exposes to your agents

Read (2) Write / Execute (7) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Tlaplus tools

Execute · Medium tla_parse This tool runs the SANY parser/analyzer tool against TLA+ source code. Execute · Medium tlc_coverage This tool triggers execution of the TLA+ model checker against a specification. Execute · Medium tlc_simulate This tool executes code (TLC simulator) against user-provided specifications. Execute · Medium tlc_generate_trace_spec The tool runs an external process (TLC model checker) and writes output files to disk.

7 of Tlaplus's 9 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Tlaplus

PolicyLayer is an MCP gateway — it sits between your AI agents and Tlaplus, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "pcal_translate": {
    "limits": [
      {
        "counter": "pcal_translate_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "tla_state_graph": {
    "limits": [
      {
        "counter": "tla_state_graph_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Tlaplus — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON TLAPLUS →

Instant setup, no code required.

FULL CATALOGUE

All 9 Tlaplus tools

EXECUTE 6 tools

Execute tla_evaluate Evaluate a constant TLA+ expression using TLC. Creates a temporary spec that prints the result of the expressi Execute tla_parse Parse and syntax-check a TLA+ module using SANY (Syntactic Analyzer). Returns parse errors and the list of mod Execute tlc_check Run TLC model checker in exhaustive breadth-first mode to verify a TLA+ specification. Checks all reachable st Execute tlc_coverage Run TLC model checker with action coverage reporting. Shows how many times each action was taken and how many Execute tlc_generate_trace_spec Run TLC model-checking on a TLA+ spec with -generateSpecTE to produce a Trace Explorer spec (SpecTE.tla / Spec Execute tlc_simulate Run TLC in simulation mode to randomly explore execution traces. Faster than exhaustive checking but not compl

WRITE 1 tools

Write pcal_translate Translate PlusCal algorithm embedded in a TLA+ file to TLA+. Modifies the .tla file in-place by inserting/upda

READ 2 tools

Read tla_state_graph Load a TLC-generated DOT state graph file and return it in a structured format for exploration. Supports raw D Read tla_tex Typeset a TLA+ specification into a PDF or DVI file using TLATeX. Requires a LaTeX installation (pdflatex or l

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Tlaplus

How do I prevent bulk modifications through Tlaplus? +

The Tlaplus server has 1 write tools including pcal_translate. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Tlaplus.

How many tools does the Tlaplus MCP server expose? +

9 tools across 3 categories: Execute, Read, Write. 2 are read-only. 7 can modify, create, or delete data.

How do I enforce a policy on Tlaplus? +

Register the Tlaplus MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Tlaplus tool call.

Deterministic rules across all 9 Tlaplus tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON TLAPLUS →

Instant setup, no code required.

9 Tlaplus tools catalogued and risk-classified — across an index of 43,000+ MCP servers.