// SCAN REPORT

wafle MCP server

117 tools. 56 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

56 can modify or destroy data

61 read-only

117 tools total

Community server · catalogue entry verified 02/07/2026

How to control wafle MCP server ↓

TOOL MAP

What wafle MCP server exposes to your agents

Read (61) Write / Execute (49) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous wafle MCP server tools

Financial · Critical wafle_checkout_order_refund Refunding a paid order is a financial operation that moves funds back to the customer. Financial · High wafle_orders_refund Refunds involve irreversible transfer of funds via payment gateways. Destructive · High wafle_coupons_delete This tool falls into the Destructive category because it permanently deletes data (a coupon) that cannot be undone. Destructive · High wafle_gateways_delete This tool performs an irreversible deletion operation on a gateway resource.

56 of wafle MCP server's 117 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control wafle MCP server

PolicyLayer is an MCP gateway — it sits between your AI agents and wafle MCP server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "wafle_checkout_order_refund": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "wafle_coupons_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "wafle_abandoned_send_recovery": {
    "limits": [
      {
        "counter": "wafle_abandoned_send_recovery_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "wafle_abandoned_list": {
    "limits": [
      {
        "counter": "wafle_abandoned_list_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register wafle MCP server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON WAFLE →

Instant setup, no code required.

FULL CATALOGUE

All 117 wafle MCP server tools

FINANCIAL 2 tools

Financial wafle_checkout_order_refund Refund a paid order — full when Financial wafle_orders_refund Refund a paid order, fully or partially. The refund is sent through whichever gateway captured the payment (Me

DESTRUCTIVE 5 tools

Destructive wafle_coupons_delete Delete a coupon by id. Past usage history is preserved on orders. Destructive wafle_gateways_delete Delete a gateway. Fails if the gateway is currently the default for any store — switch the store first.\n\n Destructive wafle_orders_cancel Cancel an order. If the gateway supports auto-refund and the order was paid, wafle will trigger the refund.\n\ Destructive wafle_pricing_rules_delete Delete a pricing rule by id. Irreversible — confirm before calling. Destructive wafle_system_release_rollback Roll back a component to its previous deployed version. DESTRUCTIVE — confirm with the user.

EXECUTE 16 tools

Execute wafle_ads_bulk_pause Pause many Meta campaigns in a single tool call. Returns per-id success/failure so partial successes are visib Execute wafle_ads_campaign_pause Pause a Meta Ads campaign by id. Idempotent — pausing an already-paused campaign returns ok=true. Uses the ten Execute wafle_ads_campaign_resume Resume a paused Meta Ads campaign by id. Sets status to ACTIVE. Idempotent for already-active campaigns.\n\n Execute wafle_ads_recommendation_apply Apply a wafle ads recommendation by id — runs the underlying writer action (pause campaign, raise budget, etc. Execute wafle_ads_sync_full Run a full ads-platform catalog sync (Meta Catalog API or equivalent) AND wait until it finishes. Emits progre Execute wafle_agents_run Manually dispatch a run for an agent. Returns the Execute wafle_agents_runs_approve Approve a run that is Execute wafle_domains_verify Trigger immediate verification + SSL + nginx provisioning for a previously-added domain. Idempotent — safe to Execute wafle_gateways_test Run a live credential test against the gateway provider. For MP it calls Execute wafle_products_sync_trigger Trigger an asynchronous catalog sync for a store. Returns a job id; poll Execute wafle_products_sync_trigger_and_wait Trigger a catalog sync AND wait until it finishes (or 5min timeout). Emits MCP progress notifications during t Execute wafle_resources_invalidate Invalidate the in-memory MCP resource cache. Pass Execute wafle_shipping_carriers_status Run the carrier connection self-test for a store. Hits each configured carrier API once and reports Execute wafle_system_queue_retry Retry a failed queue job by id, or all failed jobs of a kind. Execute wafle_system_release_deploy Deploy a specific version of a component. Server-side this kicks off the deploy pipeline.\n\n Execute wafle_users_switch_tenant Set the session

WRITE 33 tools

Write wafle_abandoned_send_recovery Trigger a recovery email to the captured address of an abandoned-cart session. The email contains a one-click Write wafle_ads_campaign_update_budget Update a Meta campaign Write wafle_agents_activate Activate an agent — moves status to Write wafle_agents_create Create a new custom agent. Two paths:\n\n Write wafle_agents_runs_reject Reject a run that is Write wafle_agents_update Patch an existing agent — change system_prompt, tools_allowed, guardrails, trigger_config, model, status, etc. Write wafle_ai_jobs_edit Save user edits on an AI job Write wafle_ai_jobs_reject Mark an AI job Write wafle_ai_product_describe Generate a sales copy description for a product. Reads name + attributes + images from the catalog, runs the c Write wafle_auth_keys_create Create a new wafle API key with the given scopes. Returns the secret ONCE — store it immediately.\n\n Write wafle_checkout_cart_recover List abandoned carts (cart_token has items but no Write wafle_checkout_order_mark_paid Manually flip a transfer/cash order to paid (proof-of-deposit verified, cash collected at delivery). Returns 4 Write wafle_checkout_order_resend_email Resend a transactional email tied to an order. Default template: Write wafle_coupons_create Create a coupon. Codes are case-insensitive. Date fields are epoch seconds (0 = no bound).\n\n Write wafle_coupons_update Patch a coupon by id. Only sent fields change. Write wafle_csv_import Import a CSV product feed into a store with Write wafle_domains_add Attach a new custom domain (e.g. Write wafle_gateways_create Create a new gateway. Types:\n Write wafle_gateways_update Patch an existing gateway. Use to rotate credentials ( Write wafle_invitations_create Invite a teammate to a tenant by email. Sends an invitation email with a magic link.\n\n Write wafle_members_update_role Update a member Write wafle_orders_add_note Add an internal or customer-visible note to an order. Notes appear in the timeline and (if Write wafle_orders_create Manually create an order. Use only for migrations or telephone sales — normal orders flow from the storefront. Write wafle_orders_ship Mark an order as shipped. Records the carrier, tracking number, and updates status to Write wafle_pixels_set Set / update marketing pixel IDs of a store. Pass only the pixels you want to change; omit fields stay untouch Write wafle_pricing_rules_create Create a new pricing rule. Types:\n Write wafle_pricing_rules_update Patch an existing pricing rule by id. Write wafle_products_create_manual Manually create a product in a store whose Write wafle_products_override Set per-product overrides (price, name, description, images) that survive catalog syncs. Use on Write wafle_products_update Partial update of a product by numeric id. PATCH semantics — only the fields you pass change.\n\n Write wafle_stores_create Create a brand new wafle store. Required: slug, name, domain.\n\n Write wafle_stores_settings_update Update the store Write wafle_stores_update Update top-level store fields. Only the fields you pass are changed (PATCH semantics).\n\n

READ 61 tools

Read wafle_abandoned_list List abandoned cart sessions: last activity, items, optional email captured before exit.\n\n Read wafle_ads_anomalies_list List ads anomalies detected by the cron-driven detector (runs every 30 minutes). Each anomaly includes kind (c Read wafle_ads_audience_overlap_check Compute % overlap between custom audiences in the connected ad account. Read wafle_ads_breakdown_by_creative Per-creative performance breakdown for a campaign (or whole account if Read wafle_ads_compare_periods Compare two date ranges (e.g. Read wafle_ads_generate_report_monthly Generate a structured monthly ads report for a store. Returns total spend, total revenue, profit, Read wafle_ads_performance_summary Account-level cross-tabbed performance — joins Meta Marketing API spend/impressions/clicks with wafle CAPI ord Read wafle_ads_recommendations_list List ads recommendations generated by wafle Read wafle_agents_get Get one agent by its slug — full definition including system_prompt, tools_allowed, guardrails, trigger_config Read wafle_agents_list List custom agents defined for a store. Each agent has system_prompt + tools whitelist + guardrails + trigger. Read wafle_agents_pause Pause an active agent. Triggers stop firing; existing runs unaffected. Read wafle_agents_runs_get Get a specific run with its full conversation + audit log (steps: user_input, assistant_text, tool_call, tool_ Read wafle_agents_runs_list List runs for an agent — paginated, filterable by status. Each row: status, tokens, cost_cents, duration_ms. Read wafle_agents_stats Aggregated stats for an agent: total runs, success rate, total cost, top tool names called. Read wafle_agents_templates List the 5 pre-armed agent templates: customer-support-bot, content-writer-nightly, stock-watcher, abandoned-r Read wafle_agents_tool_catalog List the catalog of tools that can be added to an agent Read wafle_ai_jobs_accept Apply an AI job Read wafle_ai_jobs_get Fetch a single AI job by id. Includes input_payload, output_payload, tokens, cost, model, duration, and user r Read wafle_ai_jobs_list Paginated list of AI jobs for a store. Filter by job_type, status, or user_review. Use to surface a Read wafle_ai_review_summary Summarize the approved reviews of a product into 2–3 sentences plus sentiment + key points. Output goes into a Read wafle_ai_support_hint Customer-service co-pilot: classify an inbound message, gauge sentiment, decide if it needs escalation, and dr Read wafle_ai_usage Token + cost aggregate for a store since a date (defaults to last 30 days). Use for the AI dashboard chart and Read wafle_analytics_by_period Time-series breakdown of analytics: revenue + orders bucketed by day/week/month.\n\n Read wafle_analytics_summary High-level KPIs for a store over a window: orders, revenue, AOV, top products, conversion funnel, abandoned-ca Read wafle_auth_keys_list List API keys associated with the master account (or with a specific store, if the upstream key supports it).\ Read wafle_checkout_order_get Fetch one order from wafle_orders. Read wafle_checkout_orders_list List orders from the wafle_orders table for a store. Returns the new checkout pipeline (cart→MP/Stripe/transfe Read wafle_coupons_list List all coupons of a store. Each row: code, type, value, usage, validity dates, applies-to scope.\n\n Read wafle_customers_get Fetch a single customer profile by email. Returns aggregated stats: lifetime value, order count, last seen, to Read wafle_customers_list List customers of a store with pagination + filters: search by email/name, has-orders, segment.\n\n Read wafle_customers_orders List the orders of a single customer (by email). Read wafle_customers_segments_list List all customer segments configured for a store. Segments power the Read wafle_domains_list List the custom domains attached to a wafle store. Returns each domain Read wafle_domains_status Fetch the full status of a single attached domain — current status (pending/verifying/active/etc), SSL expiry, Read wafle_exports_customers Export the customer list of a store as CSV (default) or JSON. Includes email, name, phone, total spent, order Read wafle_exports_google_ads Export an audience formatted for Google Ads Customer Match: hashed email/phone with the column names Google ex Read wafle_exports_meta_audience Export an audience formatted for Meta (Facebook/Instagram) custom audiences: hashed email + phone per row, sch Read wafle_members_list List all members of a tenant — accepted memberships + pending invitations. Requires Read wafle_orders_get Fetch a single order by id. Returns customer, items, totals, gateway info, status, shipment data, timeline ref Read wafle_orders_list List orders for a store with pagination + filters. Filters: status, date range, customer email, search.\n\n Read wafle_orders_timeline Get the chronological timeline of an order: status changes, payment events, shipment, notes, refunds.\n\n Read wafle_pixels_get Fetch the current marketing pixel IDs configured for a store: Meta (Facebook), TikTok, GA4, Google Ads. Read wafle_pricing_compute_preview Compute the final price of a list of (sku, qty) pairs given the store Read wafle_pricing_rules_list List all dynamic pricing rules of a store: catalog-wide multipliers, category markups, sale discount tiers, fi Read wafle_products_get Fetch a single product by slug (the URL-friendly id). Returns full detail including variants, images, attribut Read wafle_products_list List products of a single store with pagination + optional search/filter. Returns id, slug, name, sku, price, Read wafle_products_search Lightweight search of products by name/sku. Equivalent to Read wafle_products_sync_status Get the status of a product-sync job (pending|running|done|failed). Pair with Read wafle_prompts_list List the server-defined prompts available on this MCP server. Returns name, description, and argument schema f Read wafle_shipping_rates_quote Quote shipping rates for a destination + cart. Returns one row per available carrier (andreani, oca, viacargo, Read wafle_stores_get Fetch the full configuration of a single store. Includes payment gateway IDs (mp/stripe/transfer), shipping me Read wafle_stores_list List all wafle stores the configured key can see. Each store includes id, slug, name, domain, brand color, pay Read wafle_stores_settings_get Alias of Read wafle_system_audit_query Query the audit log: who called what, when. Filter by store, actor type (master/store), endpoint, date range.\ Read wafle_system_health Health snapshot of the wafle backend: db / redis / upstream catalog / WooCommerce core. Returns latency per ch Read wafle_system_queue_failed List failed queue jobs with their last error. Pair with Read wafle_system_queue_stats Get the current background-queue stats: pending/running/done/failed counts, throughput, lag.\n\n Read wafle_system_stores_health Per-store health: products count, orders in last 24h, errors, gateway connectivity. Heavier than Read wafle_system_versions_list List the deployed versions of every wafle component (api, plugin, dashboard, themes). Use before deploying or Read wafle_users_me Return the currently-authenticated human Read wafle_users_memberships_list List the current human

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about wafle MCP server

Can an AI agent move money through the wafle MCP server MCP server? +

Yes. The wafle MCP server server exposes 2 financial tools including wafle_checkout_order_refund, wafle_orders_refund. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the wafle MCP server MCP server? +

Yes. The wafle MCP server server exposes 5 destructive tools including wafle_coupons_delete, wafle_gateways_delete, wafle_orders_cancel. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through wafle MCP server? +

The wafle MCP server server has 33 write tools including wafle_abandoned_send_recovery, wafle_ads_campaign_update_budget, wafle_agents_activate. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach wafle MCP server.

How many tools does the wafle MCP server MCP server expose? +

117 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 61 are read-only. 56 can modify, create, or delete data.

How do I enforce a policy on wafle MCP server? +

Register the wafle MCP server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every wafle MCP server tool call.

Deterministic rules across all 117 wafle MCP server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON WAFLE →

Instant setup, no code required.

117 wafle MCP server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.