// SCAN REPORT

Xiaoya Teacher

55 tools. 33 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

33 can modify or destroy data

22 read-only

55 tools total

Community server · catalogue entry verified 03/07/2026

How to control Xiaoya Teacher ↓

TOOL MAP

What Xiaoya Teacher exposes to your agents

Read (22) Write / Execute (30) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Xiaoya Teacher tools

Destructive · High delete_answer_item The 'delete' verb unambiguously indicates an irreversible data removal action. Destructive · High delete_course_resource The tool name unambiguously describes a deletion operation ('delete_course_resource'). Destructive · High delete_questions The tool deletes questions, which are educational content assets likely created by or managed by the teacher. Write · High batch_create_questions This tool creates (writes) question objects in bulk within an educational management system.

33 of Xiaoya Teacher's 55 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Xiaoya Teacher

PolicyLayer is an MCP gateway — it sits between your AI agents and Xiaoya Teacher, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_answer_item": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "batch_create_questions": {
    "limits": [
      {
        "counter": "batch_create_questions_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "auth_status": {
    "limits": [
      {
        "counter": "auth_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Xiaoya Teacher — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON XIAOYA TEACHER →

Instant setup, no code required.

FULL CATALOGUE

All 55 Xiaoya Teacher tools

DESTRUCTIVE 3 tools

Destructive delete_answer_item delete_answer_item Destructive delete_course_resource delete_course_resource Destructive delete_questions delete_questions

WRITE 30 tools

Write batch_create_questions batch_create_questions Write batch_update_resource_download batch_update_resource_download Write batch_update_resource_visibility batch_update_resource_visibility Write configure_paper_basics configure_paper_basics Write create_answer_item create_answer_item Write create_attachment_question create_attachment_question Write create_blank_answer_items create_blank_answer_items Write create_code_question create_code_question Write create_course_resource create_course_resource Write create_fill_blank_question create_fill_blank_question Write create_multiple_choice_question create_multiple_choice_question Write create_question create_question Write create_short_answer_question create_short_answer_question Write create_single_choice_question create_single_choice_question Write create_true_false_question create_true_false_question Write grade_student_question grade_student_question Write move_answer_item move_answer_item Write move_resource move_resource Write office_create_questions office_create_questions Write submit_student_mark submit_student_mark Write update_code_test_cases update_code_test_cases Write update_fill_blank_answer update_fill_blank_answer Write update_paper_question_order update_paper_question_order Write update_paper_randomization update_paper_randomization Write update_question update_question Write update_question_options update_question_options Write update_resource_name update_resource_name Write update_resource_sort update_resource_sort Write update_short_answer_answer update_short_answer_answer Write update_true_false_answer update_true_false_answer

READ 22 tools

Read auth_status 返回当前认证信息。 Read download_file download_file Read get_answer_file get_answer_file Read query_attendance_records 查询课程组的全部签到记录情况 Read query_course_resources query_course_resources Read query_course_resources_summary query_course_resources_summary Read query_group_classes 查询课程组的班级列表 Read query_group_discussion_task_detail query_group_discussion_task_detail Read query_group_order_setting 查询课程目录排序设置 Read query_group_snapshot 查询课程组总览快照 Read query_group_task_notices query_group_task_notices Read query_group_tasks query_group_tasks Read query_paper query_paper Read query_paper_summary query_paper_summary Read query_preview_student_paper query_preview_student_paper Read query_resource_attributes query_resource_attributes Read query_resource_folder_snapshot query_resource_folder_snapshot Read query_single_attendance_students query_single_attendance_students Read query_teacher_groups 查询教师的课程组 Read query_test_result query_test_result Read read_file_by_markdown read_file_by_markdown Read server_status 返回当前 MCP 服务器运行模式、URL 与端口信息。

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Xiaoya Teacher

Can an AI agent delete data through the Xiaoya Teacher MCP server? +

Yes. The Xiaoya Teacher server exposes 3 destructive tools including delete_answer_item, delete_course_resource, delete_questions. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Xiaoya Teacher? +

The Xiaoya Teacher server has 30 write tools including batch_create_questions, batch_update_resource_download, batch_update_resource_visibility. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Xiaoya Teacher.

How many tools does the Xiaoya Teacher MCP server expose? +

55 tools across 3 categories: Destructive, Read, Write. 22 are read-only. 33 can modify, create, or delete data.

How do I enforce a policy on Xiaoya Teacher? +

Register the Xiaoya Teacher MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Xiaoya Teacher tool call.

Deterministic rules across all 55 Xiaoya Teacher tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON XIAOYA TEACHER →

Instant setup, no code required.

55 Xiaoya Teacher tools catalogued and risk-classified — across an index of 43,000+ MCP servers.