// SCAN REPORT

Waypath

11 tools. 7 can modify or destroy data without limits.

7 write tools that can modify data. Rate limits recommended.

Last updated: 29 Jun 2026

7 can modify or destroy data

4 read-only

11 tools total

Community server · catalogue entry verified 29/06/2026

How to control Waypath ↓

TOOL MAP

What Waypath exposes to your agents

Read (4) Write / Execute (7) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Waypath tools

Execute · High waypath_review_queue Read-only snapshot of everything awaiting human attention: pending promotion candidates, stale knowledge pages past their refresh threshold, Execute · Medium waypath_session_start Read-only context pack builder for the beginning of a coding or planning session. Assembles a prioritized brief from recent decisions, activ Write · Medium waypath_promote WRITE: submit a candidate for promotion into the Waypath truth-kernel. Creates a new candidate row in the local SQLite review queue — it doe Write · Medium waypath_recall Read-only hybrid search over the local Waypath SQLite memory store. Runs FTS5 lexical search fused with graph-aware Reciprocal Rank Fusion (

7 of Waypath's 11 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Waypath

PolicyLayer is an MCP gateway — it sits between your AI agents and Waypath, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "waypath_promote": {
    "limits": [
      {
        "counter": "waypath_promote_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "waypath_graph_query": {
    "limits": [
      {
        "counter": "waypath_graph_query_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Waypath — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON WAYPATH →

Instant setup, no code required.

FULL CATALOGUE

All 11 Waypath tools

EXECUTE 2 tools

Execute waypath_review_queue Read-only snapshot of everything awaiting human attention: pending promotion candidates, stale knowledge pages Execute waypath_session_start Read-only context pack builder for the beginning of a coding or planning session. Assembles a prioritized brie

WRITE 5 tools

Write waypath_promote WRITE: submit a candidate for promotion into the Waypath truth-kernel. Creates a new candidate row in the loca Write waypath_recall Read-only hybrid search over the local Waypath SQLite memory store. Runs FTS5 lexical search fused with graph- Write waypath_refresh_page WRITE: rebuild an existing knowledge page against the current store state and update its cached summary/markdo Write waypath_resolve_contradiction WRITE: resolve a detected contradiction between two or more preferences sharing the same key by keeping exactl Write waypath_review WRITE: decide the fate of a pending promotion candidate. Setting status to

READ 4 tools

Read waypath_graph_query Read-only traversal of the Waypath knowledge graph from a specific entity id. Returns neighbors, edges, and re Read waypath_health Read-only end-to-end health check: SQLite connectivity and migration version, FTS5 index sync status, source a Read waypath_page Synthesize a human-readable knowledge page about a subject by aggregating and summarizing matching truth-kerne Read waypath_source_status Read-only probe of the local source adapters Waypath can ingest from (filesystem snapshots, git repos, JCP liv

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Waypath

How do I prevent bulk modifications through Waypath? +

The Waypath server has 5 write tools including waypath_promote, waypath_recall, waypath_refresh_page. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Waypath.

How many tools does the Waypath MCP server expose? +

11 tools across 3 categories: Execute, Read, Write. 4 are read-only. 7 can modify, create, or delete data.

How do I enforce a policy on Waypath? +

Register the Waypath MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Waypath tool call.

Deterministic rules across all 11 Waypath tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON WAYPATH →

Instant setup, no code required.

11 Waypath tools catalogued and risk-classified — across an index of 43,000+ MCP servers.