// SCAN REPORT

DUAL MCP Server

115 tools. 52 can modify or destroy data without limits.

10 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

52 can modify or destroy data

63 read-only

115 tools total

Community server · catalogue entry verified 03/07/2026

How to control DUAL MCP Server ↓

TOOL MAP

What DUAL MCP Server exposes to your agents

Read (63) Write / Execute (42) Destructive / Financial (10)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous DUAL MCP Server tools

Destructive · Medium dual_logout Logging out irreversibly destroys the current session's authentication state. Destructive · High dual_compliance_rule_delete This tool performs an irreversible deletion operation on compliance rules. Destructive · High dual_creative_design_delete This tool permanently removes a token design from the blockchain or system. Destructive · High dual_delete_api_key Deleting an API key is an irreversible action that removes authentication credentials.

52 of DUAL MCP Server's 115 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control DUAL MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and DUAL MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "dual_compliance_rule_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "dual_add_org_member": {
    "limits": [
      {
        "counter": "dual_add_org_member_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "dual_ai_agent_get": {
    "limits": [
      {
        "counter": "dual_ai_agent_get_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register DUAL MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON DUAL →

Instant setup, no code required.

FULL CATALOGUE

All 115 DUAL MCP Server tools

DESTRUCTIVE 10 tools

Destructive dual_compliance_rule_delete Delete a compliance rule by ID. Destructive dual_creative_design_delete Delete a token design by ID. Destructive dual_delete_api_key Permanently revoke and delete an API key. Destructive dual_delete_face Delete a face definition. Destructive dual_delete_file Delete a file from DUAL storage. Destructive dual_delete_message_template Delete a message template. Destructive dual_delete_template Permanently delete a template. This cannot be undone. Destructive dual_delete_webhook Delete a webhook subscription. Destructive dual_logout Clear all authentication state for this session. You will need to log in again or set credentials to make auth Destructive dual_remove_org_member Remove a member from an organization.

EXECUTE 5 tools

Execute dual_ai_agent_execute Execute an agent, evaluating its rules against the provided context. Supports dry-run mode. Execute dual_batch_actions Execute multiple actions atomically in a single batch. All actions succeed or all fail. Useful for complex ope Execute dual_execute_action Execute an action on a tokenized object via the Event Bus. Actions are the primary way to change object state. Execute dual_policy_parse Parse a natural language policy description into structured compliance rules. Execute dual_test_webhook Send a test payload to a webhook endpoint to verify it

WRITE 37 tools

Write dual_add_org_member Add a wallet as a member to an organization with a specific role. Write dual_ai_agent_create Create a new autonomous agent with condition/action rules for the DUAL Intelligence Service. Write dual_ai_graph_ingest Ingest template or token metadata into the knowledge graph. Write dual_ai_history_ingest Bulk ingest action history records for lifecycle prediction analysis. Write dual_compliance_rule_create Create a new compliance rule (AML threshold, transfer limit, restricted wallet, or geographic). Write dual_compliance_rule_update Update a compliance rule by ID. Write dual_create_action_type Register a new action type with an optional JSON schema for payload validation. Write dual_create_api_key Create a new API key for server-to-server integration. The key value is only shown once — save it immediately. Write dual_create_face Create a visual face for a template. Types: image, image_progress, image_policy, image_layered, 3d, web. Write dual_create_message_template Create a notification template with subject, body (with placeholders), and delivery channels. Write dual_create_org_role Create a new role with specific permissions for an organization. Write dual_create_organization Create a new organization (multi-tenant workspace). Returns the org with its ID and FQDN. Write dual_create_template Create a new token template that defines the structure of tokenized objects. Specify the property schema, allo Write dual_create_template_variation Create a variation of an existing template with overridden properties. Write dual_create_webhook Register a webhook to receive real-time notifications when events occur on the platform. Write dual_creative_design_generate Generate a complete token template design from a natural language description. Write dual_creative_design_refine Refine an existing token design — add/remove fields, adjust properties. Write dual_creative_face_create Create a face template with SVG base and data bindings for dynamic token rendering. Write dual_login Authenticate with email/phone and password. Returns JWT tokens for subsequent API calls. Sets auth automatical Write dual_login_guest Create a guest session with limited permissions. No credentials required. Write dual_provenance_badge Generate a verification badge (certificate, seal, or QR) for a provenance record. Write dual_provenance_create Record the provenance of AI-generated content with SHA-256 hashing. Write dual_register Create a new wallet account. A verification code will be sent to the email/phone provided. Write dual_register_verify Complete registration by submitting the verification code sent to your email/phone. Write dual_request_access Request access to a gated platform feature. Write dual_reset_password Send a password reset code to the wallet Write dual_reset_password_verify Submit reset code and set a new password. Write dual_send_notification Send a notification message to one or more wallets using a message template. Write dual_send_support_message Send a support message to the DUAL team. Write dual_update_action_type Update an action type Write dual_update_face Update a face Write dual_update_me Update the authenticated wallet Write dual_update_object Update the properties of a tokenized object. Only mutable properties can be changed. Write dual_update_organization Update an organization Write dual_update_template Update a template Write dual_update_webhook Update a webhook Write dual_upload_file Upload a file to DUAL storage. Returns a public URL. Useful for template assets, face images, and attachments.

READ 63 tools

Read dual_ai_agent_get Get details of a specific autonomous agent by ID. Read dual_ai_agent_list List all autonomous agents in the DUAL Intelligence Service. Read dual_ai_anomalies Detect anomalous activity patterns across all tracked objects. Read dual_ai_graph_analytics Get ecosystem-wide analytics: topology, concentration, velocity, top hubs. Read dual_ai_graph_connected Find all nodes connected to a given node within N hops using BFS. Read dual_ai_graph_similar Find nodes similar to a given node using metadata overlap, Jaccard, or cosine similarity. Read dual_ai_predict Get transfer likelihood, abandonment risk, and spike probability predictions for a specific object. Read dual_ai_trending List objects ranked by recent activity score. Read dual_compliance_audit Retrieve compliance audit log entries. Read dual_compliance_evaluate Evaluate a token action against all enabled compliance rules. Returns pass/fail with violation details. Read dual_compliance_rule_list List all compliance rules with optional filters. Read dual_compliance_stats Get compliance statistics: evaluations, pass rate, violations by type. Read dual_count_objects Count objects matching filter criteria without returning the full objects. Read dual_creative_design_get Get a specific token design by ID with full template specification. Read dual_creative_design_list List all generated token designs with optional use case filter. Read dual_creative_face_list List all face templates. Read dual_creative_face_render Render a face template with token data, producing HTML output. Read dual_get_action Get full details of a specific executed action. Read dual_get_batch Get details of a sequencer batch including all contained transactions. Read dual_get_checkpoint Get a specific ZK-rollup checkpoint with its proof data and state roots. Read dual_get_face Get details of a specific face. Read dual_get_file Get a file Read dual_get_me Get the authenticated wallet Read dual_get_object Get full details of a tokenized object — its properties, ownership, faces, actions, and metadata. Read dual_get_object_activity Get the full activity/audit log for an object — all state changes, transfers, and action executions. Read dual_get_object_children Get child objects in a hierarchical object tree. Read dual_get_object_parents Get parent objects in a hierarchical object tree. Read dual_get_org_balance Get the current balance and currency for an organization. Read dual_get_organization Get organization details including members, roles, and account info. Read dual_get_payment_config Get the platform Read dual_get_template Get full details of a template including its property schema, actions, and factory config. Read dual_get_template_assets List all storage assets associated with a template. Read dual_get_template_faces Get all faces associated with a specific template. Read dual_get_wallet Retrieve a wallet Read dual_get_webhook Get details of a specific webhook. Read dual_list_action_types List all registered action types. Action types define what operations can be performed on objects. Read dual_list_actions List executed actions. Filter by action ID or template. Read dual_list_api_keys List all API keys for the authenticated wallet. Read dual_list_batches List sequencer batches. Batches group multiple transactions for efficient on-chain anchoring via ZK-rollup. Read dual_list_checkpoints List ZK-rollup checkpoints. Each checkpoint contains a state root and proof that anchors batches to L1. Read dual_list_deposits List deposit transactions. Filter by transaction hash, token, or token address. Read dual_list_faces List face definitions. Faces are visual representations (images, 3D models, web views) attached to templates. Read dual_list_message_templates List all notification message templates. Read dual_list_messages List notification messages sent through the platform. Read dual_list_objects List tokenized objects (asset instances). Objects are created from templates and owned by wallets. Filter by t Read dual_list_org_members List all members of an organization with their roles. Read dual_list_org_roles List all roles defined for an organization. Read dual_list_organizations List all organizations the authenticated wallet belongs to. Supports pagination and role filtering. Read dual_list_support_messages List support messages. Read dual_list_template_variations List all variations of a template. Variations are alternative configurations of the same template. Read dual_list_templates List token templates. Templates define the structure, properties, and actions of tokenized objects. Filter by Read dual_list_webhooks List all registered webhooks. Filter by type, template, action, or active status. Read dual_policy_get Get a parsed policy document by ID. Read dual_policy_validate Validate a parsed policy for internal consistency. Read dual_provenance_get Retrieve a provenance record by ID. Read dual_provenance_verify Verify AI-generated content by re-hashing and comparing to the stored provenance record. Read dual_public_get_object Get a public object Read dual_public_get_stats Get public platform statistics — total objects, templates, and wallets. No authentication required. Read dual_public_get_template Get a public template Read dual_public_list_templates List publicly accessible templates. No authentication required. Read dual_public_search_objects Search publicly accessible objects. No authentication required. Read dual_refresh_token Exchange a refresh token for a new access token. Read dual_search_objects Search tokenized objects with filter criteria. Supports complex queries across all object properties. Example

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about DUAL MCP Server

Can an AI agent delete data through the DUAL MCP Server MCP server? +

Yes. The DUAL MCP Server server exposes 10 destructive tools including dual_compliance_rule_delete, dual_creative_design_delete, dual_delete_api_key. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through DUAL MCP Server? +

The DUAL MCP Server server has 37 write tools including dual_add_org_member, dual_ai_agent_create, dual_ai_graph_ingest. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach DUAL MCP Server.

How many tools does the DUAL MCP Server MCP server expose? +

115 tools across 4 categories: Destructive, Execute, Read, Write. 63 are read-only. 52 can modify, create, or delete data.

How do I enforce a policy on DUAL MCP Server? +

Register the DUAL MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every DUAL MCP Server tool call.

Deterministic rules across all 115 DUAL MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON DUAL →

Instant setup, no code required.

115 DUAL MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.