// SCAN REPORT

Keynote MCP Server

70 tools. 46 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

46 can modify or destroy data

24 read-only

70 tools total

Community server · catalogue entry verified 02/07/2026

How to control Keynote MCP Server ↓

TOOL MAP

What Keynote MCP Server exposes to your agents

Read (24) Write / Execute (40) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Keynote MCP Server tools

Destructive · Medium delete_image Deleting an image from a slide is a destructive operation; once removed, the image is gone from the slide and cannot be recovered without an undo action or backup. Destructive · High delete_shape This tool irreversibly deletes data (a shape object) from a presentation slide. Destructive · High delete_slide This action destroys data (slide content) that cannot be automatically restored by the tool itself. Destructive · Medium delete_table This tool permanently deletes a table object from a Keynote presentation.

46 of Keynote MCP Server's 70 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Keynote MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Keynote MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_image": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_build_animation": {
    "limits": [
      {
        "counter": "add_build_animation_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_all_presenter_notes": {
    "limits": [
      {
        "counter": "get_all_presenter_notes_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Keynote MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON KEYNOTE →

Instant setup, no code required.

FULL CATALOGUE

All 70 Keynote MCP Server tools

DESTRUCTIVE 6 tools

Destructive delete_image Removes an image from a slide Destructive delete_shape Removes a shape from a slide Destructive delete_slide Removes a slide by its 1-based index from the frontmost presentation. Destructive delete_table Removes a table from a slide Destructive delete_text_item Removes a text item from a slide Destructive remove_build_animation Removes a build-in or build-out animation from an item on a slide.

EXECUTE 5 tools

Execute go_to_slide Jumps to a specific slide during an active Keynote slideshow. Execute next_slide Advances to the next slide or build during an active Keynote slideshow. Execute previous_slide Goes back to the previous slide or build during an active Keynote slideshow. Execute start_slideshow Starts the slideshow of the frontmost Keynote presentation. Optionally start from a specific slide. Execute stop_slideshow Stops the currently running Keynote slideshow.

WRITE 35 tools

Write add_build_animation Adds a build-in or build-out animation to an item on a slide. Build-in animations play when the item appears; Write add_chart Adds a chart to a slide. Note: Keynote Write add_image Adds an image file to a slide at a given position with optional width and height Write add_shape Adds a shape to a slide with specified type, position, size, and optional fill colour Write add_slide Adds a new slide to the frontmost presentation. Optionally specify position and master slide name. Write add_table Adds a table to a slide with the specified number of rows and columns Write add_text_item Adds a new text box to a slide at a specified position and size Write apply_theme Applies a theme to the current Keynote presentation. This changes the document theme, updating master slides a Write change_slide_master Changes the master slide (layout) of a slide. The master name must match one of the available master slides in Write close_presentation Closes the frontmost Keynote presentation. Write create_presentation Creates a new blank Keynote presentation. Optionally specify a theme name. Write design_deck Designs multiple slides at once with automatic layout variety and consistent branding Write design_from_template Creates a full presentation from a template, using the template Write design_slide Designs a complete slide with automatic layout, typography, and color based on content and optional brand sett Write duplicate_slide Duplicates a slide by its 1-based index in the frontmost presentation. Write export_slide_to_image Exports a single slide as an image file. Exports all slides to a temporary directory, Write export_to_images Exports all slides of the frontmost presentation as individual image files to a directory Write export_to_pdf Exports the frontmost Keynote presentation as a PDF file Write export_to_pptx Exports the frontmost Keynote presentation as a Microsoft PowerPoint (.pptx) file Write format_text Formats a text item with font, size, color, bold, italic, and alignment options Write move_slide Moves a slide from one position to another in the frontmost presentation. Write replace_image Replaces an existing image on a slide with a new image file Write save_presentation Saves the frontmost Keynote presentation. Optionally specify a file path for save-as. Write set_brand Sets brand configuration for subsequent design_slide and design_deck operations. Values persist until changed Write set_image_position Repositions and/or resizes an existing image on a slide Write set_presenter_notes Sets the presenter notes for a specific slide Write set_slide_background_color Sets a solid background color on a slide. Provide a hex color string like Write set_slide_background_image Sets an image file as the background of a slide. The image file must be accessible on the local filesystem. Write set_slide_body Sets the body text of a slide Write set_slide_title Sets the title text of a slide Write set_slide_transition Sets the transition effect for a slide. Common effects: Write set_table_cell Sets the value of a specific cell in a table on a slide Write set_table_data Bulk-sets table data from a 2D array of strings. Each inner array is a row. Write update_shape Modifies a shape Write update_text_item Updates the text content of an existing text item on a slide

READ 24 tools

Read get_all_presenter_notes Returns presenter notes for all slides as an array of {slideIndex, notes} Read get_brand Gets current brand configuration from the active Keynote theme, merged with any previously set brand overrides Read get_full_presentation_content Returns a structured summary of the entire presentation including name, slide count, theme, and per-slide summ Read get_presentation_info Returns slide count, theme name, dimensions, and file path for a presentation. Defaults to the frontmost prese Read get_presenter_notes Gets the presenter notes for a specific slide Read get_slide_content Returns all content on a specific slide including title, body, text items, images, shapes, tables, and present Read get_slide_count Returns the total number of slides in the frontmost presentation. Read get_slide_layout_names Lists all available master slide (layout) names for the current theme of the frontmost presentation. Read get_slide_master Gets the master slide (layout) name for a given slide. Read get_slide_transition Gets the current transition effect, duration, and delay for a slide. Read get_slideshow_status Returns whether a slideshow is currently playing and the current slide number. Read get_table_data Reads all data from a table and returns it as a 2D array of strings Read get_template Gets the full structure of a specific presentation template with slide-by-slide layout and content hints Read list_build_animations Lists all build-in and build-out animations for every item on a given slide. Read list_images Lists all images on a slide with position, size, and file name info Read list_layouts Lists all available slide layouts with descriptions, categories, and element details Read list_presentations Lists all currently open Keynote presentations with their names and file paths. Read list_shapes Lists all shapes on a slide with position and size information Read list_slides Returns an array of all slides in the frontmost presentation with index, title text, and layout name. Read list_templates Lists all available presentation templates with slide counts and descriptions Read list_text_items Lists all text items on a slide with their content, position, and size Read list_themes Lists available Keynote themes. Attempts to query Keynote directly; falls back to a curated list of standard t Read list_transition_types Returns a list of all available Keynote slide transition effect names. These can be used with the set_slide_tr Read open_presentation Opens a Keynote presentation (.key file) by file path.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Keynote MCP Server

Can an AI agent delete data through the Keynote MCP Server MCP server? +

Yes. The Keynote MCP Server server exposes 6 destructive tools including delete_image, delete_shape, delete_slide. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Keynote MCP Server? +

The Keynote MCP Server server has 35 write tools including add_build_animation, add_chart, add_image. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Keynote MCP Server.

How many tools does the Keynote MCP Server MCP server expose? +

70 tools across 4 categories: Destructive, Execute, Read, Write. 24 are read-only. 46 can modify, create, or delete data.

How do I enforce a policy on Keynote MCP Server? +

Register the Keynote MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Keynote MCP Server tool call.

Deterministic rules across all 70 Keynote MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON KEYNOTE →

Instant setup, no code required.

70 Keynote MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.