// SCAN REPORT

Access

67 tools. 15 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

15 can modify or destroy data

52 read-only

67 tools total

Community server · catalogue entry verified 03/07/2026

How to control Access ↓

TOOL MAP

What Access exposes to your agents

Read (52) Write / Execute (13) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Access tools

Destructive · High cal_cancel_booking While the tool involves Write-like operations (modifying calendar state), the combination of irreversibility ('cannot be undone'), data destruction (removing a booking), and inability to restore the original state places Destructive · High gmail_batch_trash Trashing up to 50 emails in one operation is a high-blast-radius destructive action. Execute · High gmail_send Sending an email is an external operation with immediate real-world side effects — the message is delivered to recipients the moment the tool succeeds. Execute · Medium search_console_submit_sitemap This tool triggers an external operation (Google crawling/indexing) with lasting side effects that depend on the submitted URL.

15 of Access's 67 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Access

PolicyLayer is an MCP gateway — it sits between your AI agents and Access, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "cal_cancel_booking": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "cf_create_dns": {
    "limits": [
      {
        "counter": "cf_create_dns_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "analytics_properties": {
    "limits": [
      {
        "counter": "analytics_properties_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Access — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ACCESS →

Instant setup, no code required.

FULL CATALOGUE

All 67 Access tools

DESTRUCTIVE 2 tools

Destructive cal_cancel_booking Cancel a Cal.com booking and notify the attendee. Side effect: sends a cancellation email to all participants. Destructive gmail_batch_trash Move multiple Gmail messages to trash in a single call (up to 50). Use after gmail_search to bulk-clean spam o

EXECUTE 2 tools

Execute gmail_send Send an email from a configured Google account. Supports new messages and replies. Side effect: delivers the e Execute search_console_submit_sitemap Submit a sitemap URL to Google Search Console for crawling and indexing. Side effect: Google will begin proces

WRITE 11 tools

Write cf_create_dns Create a new DNS record in a Cloudflare zone. Side effect: the record goes live immediately and can affect tra Write gmail_draft Create a Gmail draft without sending it. Use this when a message needs review before sending, or to stage a re Write gmail_modify_labels Add or remove Gmail labels on a message. Use this to mark messages as read (remove Write hubspot_create_contact Create a new contact in HubSpot CRM. Side effect: the contact is immediately created and may trigger workflows Write hubspot_create_deal Create a new deal in HubSpot CRM. Side effect: the deal is immediately created in the specified pipeline. Use Write hubspot_create_note Create a note engagement on a HubSpot contact or deal. Side effect: the note is immediately visible on the con Write hubspot_log_call Log a completed phone call as an engagement on a HubSpot contact. Side effect: the call record appears on the Write hubspot_update_contact Update one or more properties on an existing HubSpot contact. Side effect: changes are saved immediately and m Write porkbun_create_dns Create a new DNS record on a Porkbun-managed domain. Side effect: the record is live immediately after creatio Write sheets_append Append one or more rows to the bottom of a Google Sheets spreadsheet. New rows are added after the last row wi Write slack_send Send a Slack message to a channel, DM, or thread. Side effect: delivers the message immediately and it is visi

READ 52 tools

Read analytics_properties List all Google Analytics 4 properties accessible by a Google account. Returns property IDs and names needed b Read analytics_realtime Get real-time active user data from Google Analytics 4. Shows currently active users on the site, optionally b Read analytics_report Run a Google Analytics 4 report for a date range with configurable metrics and dimensions. Use this for traffi Read cal_event_types List all Cal.com event types with their slugs, durations, and scheduling URLs. Use this to see which booking p Read cal_get_booking Retrieve full details of a single Cal.com booking including attendees, notes, responses, and meeting link. Use Read cal_list_bookings List Cal.com bookings filtered by status. Use this to see scheduled meetings, check past calls, or find cancel Read calendar_list_events List upcoming Google Calendar events for a configured account, ordered by start time. Use this to check schedu Read cf_accounts List all Cloudflare accounts accessible with the configured API token. Use this first to get account IDs neede Read cf_dns List all DNS records for a Cloudflare zone including type, name, content, TTL, and proxy status. Use this to a Read cf_tunnel_config Retrieve the ingress routing configuration for a specific Cloudflare Tunnel, showing which hostnames map to wh Read cf_tunnels List all Cloudflare Tunnels in an account with their IDs, names, and connection status. Use this to find tunne Read cf_workers List all Cloudflare Workers scripts deployed in an account, including their names and last-modified timestamps Read cf_zones List all Cloudflare zones (domains) with their IDs, status, and name servers. Use this to get zone IDs needed Read contacts_search Search Google Contacts by name, email address, or phone number. Returns matching contacts with their full name Read docs_read Read the full text content of a Google Doc. Returns the document body as plain text. Use this for quick conten Read drive_list List files and subfolders inside a specific Google Drive folder. Defaults to the root folder. Use drive_search Read drive_read_doc Export a Google Drive file (Doc, Sheet, Slide, etc.) to a specified format and return its content. Defaults to Read drive_search Search Google Drive files using the Drive API query syntax. Use this to find documents, spreadsheets, or any f Read gmail_search Search Gmail messages using Gmail query syntax. Use this to find emails by sender, subject, label, date, or re Read gmail_thread Retrieve all messages in a Gmail conversation thread. Use this after gmail_search to read the full email chain Read gmail_trash Move a single Gmail message to trash. The message can be recovered from trash for 30 days. Use gmail_batch_tra Read google_admin_login_activity Query Google Workspace Admin Reports API for activity events such as logins, admin actions, or OAuth token gra Read google_admin_usage_report Fetch Google Workspace daily usage statistics (storage, app usage, account activity) for a specific user or al Read google_profile_all List all configured Google accounts with their email addresses, display names, and OAuth scope status. Use thi Read gtm_accounts List all Google Tag Manager accounts accessible by the specified Google account. Use this first to get account Read gtm_containers List all GTM containers within a specific Tag Manager account. Returns container IDs, names, and website URLs. Read gtm_tags List all tags configured in a GTM container workspace, including their type, firing triggers, and status. Use Read hubspot_get_contact Retrieve all properties and associations for a single HubSpot contact. Returns full profile data including cus Read hubspot_owners List all HubSpot owners (team members) with their IDs, names, and email addresses. Use this to get owner IDs n Read hubspot_pipelines List all HubSpot deal pipelines with their stages, stage IDs, and display order. Use this to get valid pipelin Read hubspot_search_contacts Search HubSpot CRM contacts by name, email, or company. Returns contact IDs, names, emails, and company associ Read hubspot_search_deals Search HubSpot CRM deals by name, stage, or pipeline. Returns deal IDs, names, amounts, stages, and close date Read porkbun_check_domain Check domain name availability and registration price on Porkbun. Returns whether the domain is available and Read porkbun_dns List all DNS records (A, AAAA, CNAME, MX, TXT, NS) for a domain managed in Porkbun. Use this to audit DNS conf Read porkbun_domains List all domains registered in the Porkbun account with their expiration dates and auto-renew status. Use this Read search_console_query Query Google Search Console performance data including clicks, impressions, CTR, and average position. Use thi Read search_console_sitemaps List all submitted sitemaps for a Google Search Console property, including their status and error counts. Use Read search_console_sites List all verified Google Search Console properties (websites) for a Google account. Returns site URLs needed b Read sheets_read Read cell values from a Google Sheets spreadsheet using A1 notation. Returns a 2D array of values. Use this to Read slack_channel_history Read recent messages from a Slack channel in reverse chronological order. Returns message text, author, timest Read slack_dm_history Read recent messages from a Slack direct message or group DM conversation. Returns message text, author, and t Read slack_find_user Look up a Slack user by their email address. Returns user ID, display name, and profile info. Use this when yo Read slack_list_channels List all Slack channels (public and private) in the workspace with their IDs, names, topics, and member counts Read slack_list_dms List all direct message and group DM conversations visible to the bot. Returns channel IDs and participant inf Read slack_search Search Slack messages across all channels and DMs using Slack search syntax. Use this to find specific convers Read slack_thread Read all replies in a Slack thread including the parent message. Use this after slack_channel_history when a m Read slack_users List all members of the Slack workspace with their user IDs, display names, emails, and online status. Use thi Read vercel_build_logs Retrieve build output logs for a specific Vercel deployment. Use this to diagnose build failures or verify suc Read vercel_deployments List recent Vercel deployments with their status, URL, branch, and creation time. Optionally filter by project Read vercel_domains List all custom domains configured across Vercel projects, including their DNS verification status and associa Read vercel_env List all environment variables configured for a Vercel project, grouped by target environment (production, pre Read vercel_projects List all Vercel projects in the account with their names, frameworks, and latest deployment status. Use this t

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Access

Can an AI agent delete data through the Access MCP server? +

Yes. The Access server exposes 2 destructive tools including cal_cancel_booking, gmail_batch_trash. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Access? +

The Access server has 11 write tools including cf_create_dns, gmail_draft, gmail_modify_labels. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Access.

How many tools does the Access MCP server expose? +

67 tools across 4 categories: Destructive, Execute, Read, Write. 52 are read-only. 15 can modify, create, or delete data.

How do I enforce a policy on Access? +

Register the Access MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Access tool call.

Deterministic rules across all 67 Access tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ACCESS →

Instant setup, no code required.

67 Access tools catalogued and risk-classified — across an index of 43,000+ MCP servers.