// SCAN REPORT

Unipile

96 tools. 30 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 29 Jun 2026

30 can modify or destroy data

66 read-only

96 tools total

Community server · catalogue entry verified 29/06/2026

How to control Unipile ↓

TOOL MAP

What Unipile exposes to your agents

Read (66) Write / Execute (23) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Unipile tools

Destructive · High cancel_invitation Withdraw a sent LinkedIn connection request. Destructive · High delete_account Delete a connected account from Unipile. Destructive · High delete_chat Delete a chat conversation. Destructive · High delete_email Delete an email.

30 of Unipile's 96 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Unipile

PolicyLayer is an MCP gateway — it sits between your AI agents and Unipile, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "cancel_invitation": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_message_reaction": {
    "limits": [
      {
        "counter": "add_message_reaction_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "accept_invitation": {
    "limits": [
      {
        "counter": "accept_invitation_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Unipile — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON UNIPILE →

Instant setup, no code required.

FULL CATALOGUE

All 96 Unipile tools

DESTRUCTIVE 7 tools

Destructive cancel_invitation Withdraw a sent LinkedIn connection request. Destructive delete_account Delete a connected account from Unipile. Destructive delete_chat Delete a chat conversation. Destructive delete_email Delete an email. Destructive delete_event Delete a calendar event. Destructive delete_message Delete a specific message. Destructive delete_webhook Delete a webhook.

EXECUTE 2 tools

Execute restart_account Restart sync processes for an account. Execute start_chat start_chat

WRITE 21 tools

Write add_message_reaction Add a reaction to a message. Write close_job Close an active LinkedIn job posting. Write comment_on_post Comment on a LinkedIn post. Write connect_account connect_account Write create_email_draft create_email_draft Write create_event create_event Write create_job Create a new LinkedIn job posting. Write create_post Create a new LinkedIn post. Write create_webhook create_webhook Write edit_event edit_event Write edit_job Edit a LinkedIn job posting (partial update). Write edit_own_profile Edit your own LinkedIn profile fields. Write publish_job Publish a draft LinkedIn job posting. Write react_to_post React to a LinkedIn post. Write send_email send_email Write send_inmail Send InMail to non-connections (requires LinkedIn Premium/Sales Nav). Write send_invitation Send a LinkedIn connection request. Write send_message send_message Write update_account_proxy update_account_proxy Write update_chat Update chat settings (archive, mute, mark read/unread). Write update_email Update email properties (read status, star, move to folder).

READ 66 tools

Read accept_invitation Accept a received LinkedIn connection request. Read decline_invitation Decline a received LinkedIn connection request. Read endorse_skill Endorse a skill on someone's LinkedIn profile. Read forward_message Forward a message to another chat. Read get_account Get details of a single connected account. Read get_applicant_resume Download an applicant's resume (returns base64-encoded binary). Read get_attendee Get details of a single chat attendee. Read get_attendee_picture Get an attendee's profile picture (returns base64-encoded binary). Read get_calendar Get details for a specific calendar. Read get_chat Get details for a specific chat conversation. Read get_chat_messages Get messages from a specific chat (works for any platform). Read get_company_profile Get a company's LinkedIn profile/page details. Read get_email Get full details of a specific email. Read get_email_attachment Download an email attachment (returns base64-encoded binary). Read get_email_folder Get details of a specific email folder. Read get_event get_event Read get_hiring_project Get details of a single LinkedIn Recruiter hiring project. Read get_hiring_projects List LinkedIn Recruiter hiring projects. Read get_inmail_credits Check remaining LinkedIn InMail credits. Read get_job Get details of a specific LinkedIn job posting. Read get_job_applicant Get details of a single job applicant. Read get_job_applicants List applicants for a LinkedIn job posting. Read get_message Get a specific message by ID. Read get_message_attachment get_message_attachment Read get_my_profile Get the authenticated user's LinkedIn profile. Read get_post Get a specific LinkedIn post by ID. Read get_profile get_profile Read get_profile_visitors get_profile_visitors Read get_search_params Get valid parameter IDs for LinkedIn search filters. Read list_accounts List all connected accounts (LinkedIn, WhatsApp, Email, etc.). Read list_all_messages list_all_messages Read list_attendees List all known chat attendees (contacts) across connected platforms. Read list_calendars List all calendars from connected accounts (Google Calendar, Outlook). Read list_chat_attendees List participants in a specific chat. Read list_chats list_chats Read list_chats_by_attendee List all chats that a specific attendee is part of. Read list_email_contacts List email contacts from connected email accounts. Read list_email_folders List all email folders (inbox, sent, drafts, trash, spam, etc.). Read list_emails list_emails Read list_events List events from a calendar. Read list_followers List your LinkedIn followers. Read list_following List LinkedIn users/companies you are following. Read list_invitations_received List inbound LinkedIn connection requests. Read list_invitations_sent List pending outbound LinkedIn connection requests. Read list_jobs List LinkedIn job postings managed by your account. Read list_messages_by_attendee list_messages_by_attendee Read list_post_comments List comments on a LinkedIn post. Read list_post_reactions List reactions on a LinkedIn post. Read list_relations List your 1st degree LinkedIn connections. Read list_user_comments List comments made by a LinkedIn user. Read list_user_posts List posts by a specific LinkedIn user. Read list_user_reactions List reactions made by a LinkedIn user. Read list_webhooks List all configured webhooks. Read perform_linkedin_action perform_linkedin_action Read raw_linkedin_request Make a raw LinkedIn API request through Unipile (escape hatch). Read reconnect_account reconnect_account Read resend_checkpoint Resend a checkpoint/2FA verification code. Read resync_account Force a full resync of an account's data. Read search_companies search_companies Read search_jobs search_jobs Read search_people search_people Read search_people_sales_nav search_people_sales_nav Read search_posts search_posts Read solve_checkpoint Solve a 2FA/checkpoint challenge during account connection. Read solve_job_checkpoint Solve a checkpoint/verification during LinkedIn job publishing. Read sync_chat Sync a chat to get the latest messages and state.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Unipile

Can an AI agent delete data through the Unipile MCP server? +

Yes. The Unipile server exposes 7 destructive tools including cancel_invitation, delete_account, delete_chat. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Unipile? +

The Unipile server has 21 write tools including add_message_reaction, close_job, comment_on_post. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Unipile.

How many tools does the Unipile MCP server expose? +

96 tools across 4 categories: Destructive, Execute, Read, Write. 66 are read-only. 30 can modify, create, or delete data.

How do I enforce a policy on Unipile? +

Register the Unipile MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Unipile tool call.

Deterministic rules across all 96 Unipile tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON UNIPILE →

Instant setup, no code required.

96 Unipile tools catalogued and risk-classified — across an index of 43,000+ MCP servers.