// SCAN REPORT

Basecamp MCP Server

47 tools. 18 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated:

18 can modify or destroy data
29 read-only
47 tools total

Community server · catalogue entry verified 29/06/2026

How to control Basecamp MCP Server ↓

TOOL MAP

What Basecamp MCP Server exposes to your agents

Read (29) Write / Execute (17) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Basecamp MCP Server tools

Destructive · High basecamp_logout Remove stored Basecamp credentials. Write · Medium basecamp_complete_todo Mark a todo as completed. Write · Medium basecamp_create_answer Create a new answer for a check-in question. Content must be HTML. Write · Medium basecamp_create_comment Add a comment to any Basecamp resource (message, todo, card, etc.).

18 of Basecamp MCP Server's 47 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Basecamp MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Basecamp MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "basecamp_logout": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "basecamp_complete_todo": {
    "limits": [
      {
        "counter": "basecamp_complete_todo_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "basecamp_download_blob": {
    "limits": [
      {
        "counter": "basecamp_download_blob_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Basecamp MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON BASECAMP →

Instant setup, no code required.

FULL CATALOGUE

All 47 Basecamp MCP Server tools

DESTRUCTIVE 1 tools
Destructive basecamp_logout Remove stored Basecamp credentials.
WRITE 17 tools
Write basecamp_complete_todo Mark a todo as completed. Write basecamp_create_answer Create a new answer for a check-in question. Content must be HTML. Write basecamp_create_comment Add a comment to any Basecamp resource (message, todo, card, etc.). Write basecamp_create_document Create a new document in a vault. ${htmlRules} Write basecamp_create_kanban_card Create a new card in a kanban column with optional checklist steps. ${htmlRules} Write basecamp_create_message Create a new message in a Basecamp message board. Write basecamp_create_todo Create a new todo item in a todo list. ${htmlRules} Write basecamp_create_vault Create a new vault (folder) under a parent vault. Write basecamp_login Authenticate with Basecamp via OAuth. Opens a browser window for authorization. Write basecamp_move_kanban_card Move a kanban card to a different column and/or position within that column. Write basecamp_uncomplete_todo Mark a todo as incomplete (undo completion). Write basecamp_update_comment Update a comment. Use partial content operations when possible to save on token usage. ${htmlRules} Write basecamp_update_document Update a document. Use partial content operations when possible to save on token usage. ${htmlRules} Write basecamp_update_kanban_card Update a kanban card including its steps. At least one field (title, content, partial content operations, or s Write basecamp_update_message Update a message. Use partial content operations when possible to save on token usage. ${htmlRules} Write basecamp_update_todo Update a todo item. Use partial content operations when possible to save on token usage. ${htmlRules} Write basecamp_update_vault Update the title of a vault (folder).
READ 29 tools
Read basecamp_download_blob Download an inline attachment from a <bc-attachment> tag found in document/message/comment HTML content. Extra Read basecamp_get_answer Get a single check-in answer by its ID. Read basecamp_get_document Retrieve a single document with its full content. Read basecamp_get_kanban_card Get all details of a specific kanban card. Read basecamp_get_me Get your full profile for the authenticated user (id, name, email, title, attachable_sgid). To simply check wh Read basecamp_get_message Retrieve a single message from a Basecamp message board. Read basecamp_get_person Get details about a specific person. Read basecamp_get_project Fetch detailed information about a specific Basecamp project. This tool retrieves complete project details inc Read basecamp_get_question Get a single automatic check-in question with its schedule and metadata. Read basecamp_get_questionnaire Get the questionnaire (check-ins container) for a project. Returns the number of questions and their URL. Read basecamp_get_todoset Get todo set container for a project. Returns todo lists and groups. Read basecamp_get_upload Get a file uploaded to a vault. For images, returns the image content that the LLM can see directly. For text- Read basecamp_get_vault Get details of a vault (folder) including document/upload/sub-vault counts. Read basecamp_list_answers List answers to a specific check-in question. Returns each answer Read basecamp_list_campfire_messages Browse chat messages from Basecamp Campfires. Campfires are real-time chat rooms within projects. Use this to Read basecamp_list_comments List comments on any Basecamp resource (message, todo, card, etc.). Works universally on all recording types. Read basecamp_list_documents List documents in a vault. Read basecamp_list_kanban_cards List cards in a kanban column. Read basecamp_list_kanban_columns List all columns in a kanban board. Read basecamp_list_message_types List available message types/categories for a Basecamp project Read basecamp_list_messages List messages in a Basecamp message board (a single project). For cross-project or time-based browsing across Read basecamp_list_people List all people in the Basecamp account. Read basecamp_list_projects List all projects visible to the authenticated user in a Basecamp account. This tool returns active projects w Read basecamp_list_questions List all automatic check-in questions in a questionnaire. Returns each question Read basecamp_list_recordings Browse recent activity across Basecamp by listing recordings. Recordings represent all content in Basecamp: to Read basecamp_list_todos List todos in a todo list. Filter by status: Read basecamp_list_uploads List files uploaded to a vault in the Docs & Files section. Read basecamp_list_vaults List sub-vaults (folders) under a parent vault in the Docs & Files section. Read basecamp_whoami Check login state: show whether you
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
admin
Nodebench 824 tools
admin
Binance MCP Server 734 tools
admin
AdButler 622 tools
admin
Fortimanager 584 tools
admin
Crow 573 tools
admin
GoHighLevel MCP Server 566 tools
admin
Huly 470 tools
admin
FAQ

Questions about Basecamp MCP Server

Can an AI agent delete data through the Basecamp MCP Server MCP server? +

Yes. The Basecamp MCP Server server exposes 1 destructive tools including basecamp_logout. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Basecamp MCP Server? +

The Basecamp MCP Server server has 17 write tools including basecamp_complete_todo, basecamp_create_answer, basecamp_create_comment. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Basecamp MCP Server.

How many tools does the Basecamp MCP Server MCP server expose? +

47 tools across 3 categories: Destructive, Read, Write. 29 are read-only. 18 can modify, create, or delete data.

How do I enforce a policy on Basecamp MCP Server? +

Register the Basecamp MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Basecamp MCP Server tool call.

Deterministic rules across all 47 Basecamp MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON BASECAMP →

Instant setup, no code required.

47 Basecamp MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.