// SCAN REPORT

8th Wall MCP Server

64 tools. 38 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

38 can modify or destroy data

26 read-only

64 tools total

Community server · catalogue entry verified 12/06/2026

How to control 8th Wall MCP Server ↓

TOOL MAP

What 8th Wall MCP Server exposes to your agents

Read (26) Write / Execute (36) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous 8th Wall MCP Server tools

Destructive · High desktop_remove_component The tool removes a component from the project, which is an irreversible deletion operation. Destructive · High project_delete_file This tool permanently deletes files from the project directory. Execute · Medium devserver_start This tool triggers an external operation (starting a server) whose effects depend on arguments and system state. Execute · Medium devserver_stop This tool executes an operation that triggers an external process termination.

38 of 8th Wall MCP Server's 64 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control 8th Wall MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and 8th Wall MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "desktop_remove_component": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "assets_download_url": {
    "limits": [
      {
        "counter": "assets_download_url_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "analyze_ar_description": {
    "limits": [
      {
        "counter": "analyze_ar_description_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register 8th Wall MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON 8TH WALL →

Free to start. No card required.

FULL CATALOGUE

All 64 8th Wall MCP Server tools

DESTRUCTIVE 2 tools

Destructive desktop_remove_component Remove a custom component from the project Destructive project_delete_file Delete a file under PROJECT_ROOT

EXECUTE 3 tools

Execute devserver_start Start a static file server for PROJECT_ROOT Execute devserver_stop Stop the static file server Execute generate_custom_javascript ⚠️ WEB PROJECTS ONLY - NOT FOR DESKTOP! Generate A-Frame components for web-based projects. For Desktop (.expa

WRITE 33 tools

Write assets_download_url Download a file by URL into project/assets/ Write apply_experience_template Apply a pre-configured AR experience template. This automatically sets up components, code, and configurations Write assets_unzip Unzip a .zip file into project assets directory Write create_ar_experience Create a complete AR experience from a natural language description. This tool automatically chains other tool Write desktop_add_custom_component ⚠️ WEB PROJECTS ONLY - NOT FOR DESKTOP! Add a custom A-Frame component for web-based 8th Wall projects (requir Write desktop_add_custom_script Add a custom JavaScript file to your project (for utilities, helpers, initialization code, etc.) Write desktop_add_image_target Add an image target container for AR image tracking Write desktop_add_model Add a 3D model (GLB/GLTF) from assets to the scene Write desktop_add_rotation_animation ⚠️ BROKEN - DO NOT USE! Adds unregistered attributes causing Write desktop_add_scale_animation ⚠️ BROKEN - DO NOT USE! Adds unregistered attributes causing Write desktop_add_shape Add a 3D shape to .expanse.json with proper 8th Wall validation Write desktop_add_threejs_script Add a working Three.js script with proper XR8 pipeline setup for 8th Wall Desktop Write desktop_add_video Add a video plane with custom JavaScript for video texture Write desktop_enable_face_tracking Enable face tracking in .expanse.json with optional debug mesh Write desktop_patch_json Patch .expanse.json using JSON Pointer (set/remove/push operations) Write desktop_set_model_animation Set animation clip playback for a GLB/GLTF model Write desktop_set_project Set PROJECT_ROOT to ~/Documents/8th-Wall/<name> (or EIGHTHWALL_DESKTOP_ROOT/<name>; also supports Write desktop_write_json Write entire .expanse.json (replaces file) Write project_export_zip Export the project directory to a zip archive in the workspace Write project_move_file Move/rename a file within PROJECT_ROOT Write project_scaffold Create a minimal web XR app structure (index.html, main.js, styles.css) Write project_set_root Set PROJECT_ROOT at runtime to target another folder (e.g., 8th Wall Desktop project) Write project_write_file Write text to a file under PROJECT_ROOT (creates dirs if needed) Write scene_add_animation Add a simple spin animation to meshes (Three) or an A-Frame animation entity Write scene_add_floor Add a simple floor plane (Three.js) Write scene_add_gltf_model Add a GLTF/GLB model to the scene (A-Frame or Three.js) Write scene_add_grid_helper Add a GridHelper to the scene (Three.js) Write scene_add_light Add a light to the scene Write scene_add_orbit_controls Add OrbitControls to Three.js scene Write scene_add_primitive Add a primitive shape to the scene Write scene_add_textured_plane Add a textured plane (e.g., for backgrounds/posters) Write scene_set_background_color Set scene background color Write scene_set_environment_hdr Set environment using an HDR/EXR URL

READ 26 tools

Read analyze_ar_description Analyze a natural language description to determine the type of AR experience and extract key entities Read app_get Get a single app by ID (mock unless API configured) Read app_list List 8th Wall apps (mock unless API configured) Read assets_polyhaven_categories List PolyHaven categories for an asset type (hdris/textures/models/all) Read assets_polyhaven_files Get PolyHaven file metadata for a specific asset id Read assets_search_polyhaven Search PolyHaven assets (hdris/textures/models) by keyword Read assets_status Report availability of PolyHaven integration Read desktop_list_components List all custom components in the project Read desktop_list_projects List candidate 8th Wall Desktop project folders under ~/Documents/8th-Wall (or 8th Wall) Read desktop_read_json Read .expanse.json with optional JSON Pointer path Read docs_get_page Fetch a docs page and return plain text Read docs_search Search a small list of docs pages for a keyword (naive) Read get_asset_download_info Get detailed download information for a specific asset from PolyHaven Read get_template_info Get detailed information about a specific template Read list_code_templates List all available pre-built code templates Read list_templates List all available AR experience templates with descriptions Read project_get_info Summarize project structure (files and folders) under PROJECT_ROOT Read project_get_root Return the current PROJECT_ROOT used by tools Read project_list_files List files under a subdirectory of PROJECT_ROOT Read project_read_file Read a text file under PROJECT_ROOT Read scene_detect_engine Detect whether the project uses A-Frame or Three.js Read search_ar_assets Search for AR assets across multiple sources (PolyHaven, local assets, Poly Pizza). Returns ranked results. Read validate_javascript Validate JavaScript code for common errors and security issues Read desktop_guess_scene Heuristically find scene/config JSON files used by 8th Wall Desktop Read health_ping Simple health check Read prompts_asset_strategy Guidance for choosing and importing assets/textures/HDRIs for web XR apps

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about 8th Wall MCP Server

Can an AI agent delete data through the 8th Wall MCP Server MCP server? +

Yes. The 8th Wall MCP Server server exposes 2 destructive tools including desktop_remove_component, project_delete_file. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through 8th Wall MCP Server? +

The 8th Wall MCP Server server has 33 write tools including assets_download_url, apply_experience_template, assets_unzip. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach 8th Wall MCP Server.

How many tools does the 8th Wall MCP Server MCP server expose? +

64 tools across 4 categories: Destructive, Execute, Read, Write. 26 are read-only. 38 can modify, create, or delete data.

How do I enforce a policy on 8th Wall MCP Server? +

Register the 8th Wall MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every 8th Wall MCP Server tool call.

Deterministic rules across all 64 8th Wall MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON 8TH WALL →

Free to start. No card required.

64 8th Wall MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.